Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FpoNY4eBcZdcgc3ZzBUaNac5J7k.roa
File:                     FpoNY4eBcZdcgc3ZzBUaNac5J7k.roa (raw, json)
Hash identifier:          6P7PRm4EaJOfRoIC7LBNOqmi6sQIpjdWqX880eiUb44=
Subject key identifier:   16:9A:0D:63:87:81:71:97:5C:81:CD:D9:CC:15:1A:35:A7:39:27:B9
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018DABAF3195A44426634713F2264A2B52AC
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FpoNY4eBcZdcgc3ZzBUaNac5J7k.roa
Signing time:             Thu 15 Feb 2024 07:33:21 +0000
ROA not before:           Thu 15 Feb 2024 07:33:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a12:7c00::/29 maxlen: 36

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 12:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ab:af:31:95:a4:44:26:63:47:13:f2:26:4a:2b:52:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Feb 15 07:33:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=169a0d63878171975c81cdd9cc151a35a73927b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:5e:8d:33:30:a3:ed:66:81:35:73:25:2f:
                    43:64:fe:e4:68:76:3e:50:99:31:61:c6:08:61:c6:
                    9f:7d:2d:01:b9:12:53:76:2d:25:16:20:54:94:5d:
                    b2:13:3f:cd:45:d1:f4:5c:b0:06:16:87:30:34:cf:
                    61:70:ca:25:e6:8c:a4:3f:cf:a1:3c:e6:55:92:5b:
                    f4:1f:5a:19:8e:4c:0c:ff:57:18:6e:46:b9:7f:70:
                    c3:4e:e4:62:99:88:1e:94:69:fc:8c:ba:e0:7d:60:
                    b5:99:ae:7d:9a:cd:b6:2d:f0:1a:d1:25:f6:fb:3d:
                    e1:eb:9f:bf:f3:37:49:cd:42:d9:74:7d:97:66:aa:
                    3e:0b:c4:11:23:1e:2f:dd:0a:f3:52:18:2f:7c:e6:
                    83:7d:c1:ef:b2:d1:5b:79:c4:d2:7a:b2:f6:30:76:
                    3d:0a:dc:38:8c:cb:57:f4:15:0e:62:78:b6:10:a6:
                    ee:ca:34:18:c1:1b:d4:0e:96:c6:4e:15:1f:26:db:
                    57:f8:60:0f:b7:f9:3f:e3:7b:af:7b:7c:ce:11:fa:
                    54:06:fc:db:7f:95:f4:19:6a:3f:7e:74:2f:75:86:
                    64:67:fa:4d:db:11:16:28:5c:1a:3d:0f:30:ac:4e:
                    a7:0d:7a:aa:09:95:60:aa:4f:df:1e:b6:85:00:d5:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:0D:63:87:81:71:97:5C:81:CD:D9:CC:15:1A:35:A7:39:27:B9
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FpoNY4eBcZdcgc3ZzBUaNac5J7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::/34
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:22:d6:ce:e1:e3:76:51:80:ba:40:e2:07:e6:f4:07:3f:bb:
         0d:d6:52:4d:2a:b4:73:0a:df:ee:21:8b:e4:a2:04:2e:4a:0b:
         7d:5d:5c:2a:6a:f6:d0:5c:d1:e3:cf:83:2b:fc:0d:10:e9:c1:
         b4:a2:ff:e1:b7:db:bd:8b:ff:68:b2:b7:34:29:c8:42:e8:65:
         c6:fa:80:5f:7b:5e:9a:0c:2e:1b:a6:f1:b4:4e:4a:44:73:54:
         f0:96:93:4d:ea:dd:5c:55:7e:64:f8:84:79:32:7b:3e:8e:2c:
         c2:66:2d:16:30:c8:77:d6:93:19:f4:b1:c3:c5:63:5d:52:f6:
         6f:af:e8:49:f3:8b:3b:6a:63:8f:ed:80:cd:9c:a1:dc:75:fe:
         11:91:de:47:92:2a:62:0a:ea:65:e1:2e:fa:b1:91:14:b5:b8:
         06:2e:ef:b1:26:92:9f:35:7a:26:ac:3f:2b:da:f5:08:cd:cb:
         0e:c3:66:73:26:08:ba:9c:e4:d1:ee:b5:65:cc:76:64:06:49:
         a7:a5:76:d7:b2:95:cf:c8:eb:f5:ef:6c:65:65:84:52:4d:e3:
         37:9b:d2:15:36:0f:6b:53:14:bc:7d:2c:82:d9:38:f1:96:d2:
         82:f7:ad:ba:7d:6e:0b:37:04:f7:ae:bb:16:7f:23:96:ea:50:
         30:8e:7e:ba
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgISAY2rrzGVpEQmY0cT8iZKK1KsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMjE1MDczMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjlhMGQ2Mzg3ODE3MTk3NWM4MWNkZDljYzE1MWEzNWE3MzkyN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC1ejTMwo+1mgTVzJS9DZP7kaHY+
UJkxYcYIYcaffS0BuRJTdi0lFiBUlF2yEz/NRdH0XLAGFocwNM9hcMol5oykP8+h
POZVklv0H1oZjkwM/1cYbka5f3DDTuRimYgelGn8jLrgfWC1ma59ms22LfAa0SX2
+z3h65+/8zdJzULZdH2XZqo+C8QRIx4v3QrzUhgvfOaDfcHvstFbecTSerL2MHY9
Ctw4jMtX9BUOYni2EKbuyjQYwRvUDpbGThUfJttX+GAPt/k/43uve3zOEfpUBvzb
f5X0GWo/fnQvdYZkZ/pN2xEWKFwaPQ8wrE6nDXqqCZVgqk/fHraFANUNywIDAQAB
o4IDyjCCA8YwHQYDVR0OBBYEFBaaDWOHgXGXXIHN2cwVGjWnOSe5MB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvRnBvTlk0ZUJjWmRjZ2MzWnpCVWFOYWM1SjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3gYIKwYBBQUHAQcBAf8EggHNMIIByTAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQCXbdQAwQAX9dtMIIBmQQCAAIwggGRAwUD
KgbZAAMGBCoJNQWQAwYEKgk1BbADBQAqCTUGMA0DBAMqCTgDBQAqCTgCMA8DBQIq
CTgEAwYEKgk4BGADBgYqCTgEgDAOAwUAKgk4BQMFAyoJOAADBQMqCTsAAwUDKgk9
ADAQAwYEKglOATADBgUqCU4BQDAQAwYEKglOAZADBgQqCU4BoAMFACoJTgMDBQAq
CW8AAwUDKgm2gAMFACoJvYADBQAqCkeEMA4DBQAqDCEDAwUAKgwhBAMFAyoM6MAD
BQMqDV7AMA4DBQAqDYsDAwUAKg2LBAMFACoNiwcDBQEqD8yAAwYEKg/MhwADBQMq
EMDAAwUDKhDDQAMGBCoRAgAAAwYFKhECAEAwEAMGBCoRAgBwAwYEKhECAKAwEAMG
BioRAgDAAwYEKhECAOAwDgMFACoRAgEDBQAqEQICAwUCKhECBAMFAyoRB4ADBQMq
EQmAAwUDKhEKgAMFAyoRC4ADBQAqEQ6CAwYEKhEOh2AwDgMFACoRrwEDBQAqEa8C
AwUAKhGvBAMFAyoSfAAwDQYJKoZIhvcNAQELBQADggEBAGYi1s7h43ZRgLpA4gfm
9Ac/uw3WUk0qtHMK3+4hi+SiBC5KC31dXCpq9tBc0ePPgyv8DRDpwbSi/+G3272L
/2iytzQpyELoZcb6gF97XpoMLhum8bROSkRzVPCWk03q3VxVfmT4hHkyez6OLMJm
LRYwyHfWkxn0scPFY11S9m+v6EnziztqY4/tgM2codx1/hGR3keSKmIK6mXhLvqx
kRS1uAYu77Emkp81eiasPyva9QjNyw7DZnMmCLqc5NHutWXMdmQGSaeldteylc/I
6/XvbGVlhFJN4zeb0hU2D2tTFLx9LILZOPGW0oL3rbp9bgs3BPeuuxZ/I5bqUDCO
fro=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org