Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JDjuKXi69P110umAs2A86Dzb2tc.roa
File:                     JDjuKXi69P110umAs2A86Dzb2tc.roa (raw, json)
Hash identifier:          4KLuvZo6Ssqff8FGbewld2jxw3cSH9RuLafVLxks5lA=
Subject key identifier:   24:38:EE:29:78:BA:F4:FD:75:D2:E9:80:B3:60:3C:E8:3C:DB:DA:D7
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018DC546EB1AD8B777DAC12DAC94FECB1B39
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JDjuKXi69P110umAs2A86Dzb2tc.roa
Signing time:             Tue 20 Feb 2024 06:49:35 +0000
ROA not before:           Tue 20 Feb 2024 06:49:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a12:7c00::/29 maxlen: 36

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c5:46:eb:1a:d8:b7:77:da:c1:2d:ac:94:fe:cb:1b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Feb 20 06:49:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2438ee2978baf4fd75d2e980b3603ce83cdbdad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:1a:28:6c:08:23:d3:2b:36:c3:21:0c:60:
                    e9:12:64:40:f8:21:22:8b:2e:c2:e3:80:9b:e8:4a:
                    ce:93:dc:41:6f:8c:2a:0e:b4:19:cc:3d:9f:a8:fb:
                    65:fa:8d:d0:62:b6:8a:82:4f:bb:13:97:a9:26:99:
                    d5:0c:21:47:11:28:7a:f7:34:ce:49:f4:38:53:a4:
                    a7:86:3f:7f:77:ea:b8:38:63:83:d4:91:e3:27:ca:
                    1f:72:a3:42:40:d8:d5:88:5e:a3:24:d1:f4:43:63:
                    5a:22:43:97:be:8c:19:57:b9:b5:02:7e:69:8f:4b:
                    8a:90:f8:91:a8:03:42:81:6a:ee:92:e8:9e:bd:f5:
                    d4:35:b1:10:24:aa:e3:dc:9d:4d:36:8a:de:f1:13:
                    2e:49:31:76:a8:de:e9:cf:a0:d8:3d:3a:87:44:67:
                    f7:13:55:2d:46:c3:c0:79:59:e8:a5:e4:70:9f:b5:
                    57:ec:27:0c:d8:62:35:2c:d0:eb:8a:53:f4:71:30:
                    24:ae:bd:37:ee:12:2e:33:70:a9:df:31:10:78:68:
                    e9:92:55:de:ce:75:9a:37:24:64:7d:02:ae:61:70:
                    eb:f2:5d:ef:da:f5:e6:bd:d5:05:28:09:79:d4:e9:
                    80:e9:c2:58:82:58:9d:c8:48:ea:42:2b:30:11:51:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:38:EE:29:78:BA:F4:FD:75:D2:E9:80:B3:60:3C:E8:3C:DB:DA:D7
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JDjuKXi69P110umAs2A86Dzb2tc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:cfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:b1:11:1b:3f:7c:0a:0c:b0:ab:50:ae:14:56:00:ef:de:
         2c:56:2b:c9:d6:97:2f:e1:d6:17:54:bf:2f:c9:e6:90:8b:d7:
         78:5c:e9:4b:04:5f:78:26:b0:1a:6f:82:4f:1c:e7:16:da:a0:
         31:6c:64:e0:a4:c6:04:70:ca:14:65:b7:7b:ca:a3:83:21:cd:
         d6:79:66:54:e6:52:3b:14:40:e2:3a:50:9b:de:49:0c:79:11:
         8c:2b:04:cd:8e:0b:f8:8a:44:94:61:a9:e6:fb:a4:7a:d6:9f:
         8f:03:44:48:51:6b:a5:0b:cb:16:45:ac:4a:7e:27:9a:73:f2:
         51:99:f5:8c:fe:e9:0e:29:c8:dd:aa:bf:a2:53:1e:9a:38:84:
         a5:61:08:40:c7:89:45:66:9c:e1:4d:50:06:2e:b3:b4:a7:09:
         09:e2:69:87:d3:03:8a:fb:f4:71:80:e2:3c:e2:45:5f:c8:12:
         22:d6:49:66:b3:0e:1e:fb:f5:62:cd:f1:a2:31:91:dc:08:ac:
         e0:54:00:47:21:5b:93:48:78:05:a6:47:1d:e7:75:c1:0c:01:
         79:2e:cc:4f:17:5c:a7:67:3e:48:29:46:9d:59:9c:ec:9b:b9:
         14:17:23:07:77:38:92:10:7f:e8:18:7c:3e:b2:2a:87:85:55:
         4a:87:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org