Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Kr02QEQLakiZa-Thbd5Im_jGdOU.roa
File:                     Kr02QEQLakiZa-Thbd5Im_jGdOU.roa (raw, json)
Hash identifier:          SBwMp9OPx8dJ/t3gIjJs/mlcJ9p4kKEHsCZET/piGGo=
Subject key identifier:   2A:BD:36:40:44:0B:6A:48:99:6B:E4:E1:6D:DE:48:9B:F8:C6:74:E5
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E3B5CDB81276C85A9405DDD7B1C557C44
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Kr02QEQLakiZa-Thbd5Im_jGdOU.roa
Signing time:             Thu 14 Mar 2024 05:08:45 +0000
ROA not before:           Thu 14 Mar 2024 05:08:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:401::/32 maxlen: 32
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107::/36 maxlen: 36
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 08:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:3b:5c:db:81:27:6c:85:a9:40:5d:dd:7b:1c:55:7c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 14 05:08:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2abd3640440b6a48996be4e16dde489bf8c674e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:fe:bb:e9:6d:ea:03:9a:46:26:53:b8:29:
                    7a:10:7a:2d:9d:7c:d5:57:1a:0c:da:73:c1:e9:84:
                    f2:6a:e7:4b:b3:23:40:78:a6:02:c9:03:94:9e:70:
                    23:e6:0e:fd:14:38:54:96:5f:43:77:bf:70:23:4e:
                    31:e4:b4:93:21:9b:d6:27:61:20:c9:1b:f4:1f:cd:
                    ad:80:51:32:f8:ee:ea:00:a5:73:e4:60:24:35:a2:
                    77:40:5e:cf:38:e2:b2:6c:32:f2:63:5c:5c:be:8d:
                    b3:eb:9a:37:a0:b9:1d:e3:d0:38:9b:58:68:90:d8:
                    a2:cd:9c:c7:6f:1d:b6:39:a6:de:20:a9:b3:20:37:
                    00:90:65:44:fc:e1:42:3f:4c:fa:83:6d:a8:0b:06:
                    22:fd:9f:17:b4:ab:b9:fa:8b:94:1a:94:fd:59:7e:
                    90:43:97:2d:66:b7:a0:4c:7a:e4:9f:b0:db:31:8a:
                    5e:46:f8:36:51:58:96:cb:82:3f:c7:ab:8e:33:f4:
                    e4:42:eb:8e:02:dc:39:23:e6:50:19:91:8b:6e:aa:
                    5b:76:9f:df:06:ac:94:f3:d9:3b:2c:6c:67:72:04:
                    ea:40:1e:1d:1f:d9:24:47:9d:59:f3:5c:61:08:d8:
                    d1:7d:e6:29:dd:d4:b0:5b:4d:a3:d6:b6:12:6a:07:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:36:40:44:0B:6A:48:99:6B:E4:E1:6D:DE:48:9B:F8:C6:74:E5
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Kr02QEQLakiZa-Thbd5Im_jGdOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:401::/32
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107::/36
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::-2a11:c80:2fff:ffff:ffff:ffff:ffff:ffff
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:90:35:34:4b:ce:f1:84:7e:43:07:93:e4:23:09:82:01:53:
         ea:7d:4f:2e:0a:1a:9c:6b:8e:2c:be:81:dd:b1:c6:c3:e8:80:
         40:9a:1a:a6:f1:d5:0f:cb:18:b8:a6:c8:7d:49:13:d9:a2:df:
         b2:de:4d:be:88:29:a3:93:b9:9b:60:44:69:3c:c8:a7:5e:49:
         9f:4b:ee:6c:f4:11:d2:b7:10:f2:f4:b0:55:77:44:f5:09:e5:
         d4:29:e6:c0:09:4b:93:9c:9b:c5:e5:b0:85:71:2d:ba:17:10:
         95:be:4a:74:cf:04:be:46:36:66:f6:d9:c4:a3:0e:8f:af:eb:
         0a:63:a4:b7:33:ad:eb:82:fd:04:02:a8:a5:a0:6b:16:a7:09:
         4f:7d:71:0c:ad:0f:cd:35:d9:3c:fb:ea:5e:3b:8d:e9:05:bb:
         8f:21:67:4e:e7:5c:72:55:13:c3:85:d6:ee:6b:71:83:5e:bd:
         a4:d9:d3:59:ea:95:c5:f2:3d:2e:71:b9:17:c6:f4:14:ae:d9:
         60:41:03:2f:ac:14:77:11:04:83:2f:4b:cb:87:98:88:bb:04:
         01:05:54:ea:c5:de:37:46:aa:22:b8:4a:72:8b:f7:e2:36:60:
         cf:fe:02:79:53:d4:0d:31:e7:1d:aa:15:90:33:ce:61:36:88:
         a6:06:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org