Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MB3z5GyCTcPixtvtMOU8ksR7WUc.roa
File:                     MB3z5GyCTcPixtvtMOU8ksR7WUc.roa (raw, json)
Hash identifier:          3c1x/eSXMFrg5uZ1ahWHXNboJTOBJ8SSRq/oBnN3kPI=
Subject key identifier:   30:1D:F3:E4:6C:82:4D:C3:E2:C6:DB:ED:30:E5:3C:92:C4:7B:59:47
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E673BA1F35CCBA20720A973A331C6FEAB
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MB3z5GyCTcPixtvtMOU8ksR7WUc.roa
Signing time:             Fri 22 Mar 2024 17:35:45 +0000
ROA not before:           Fri 22 Mar 2024 17:35:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:401::/32 maxlen: 32
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3804:e000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:6f01::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0b:b0c0::/32 maxlen: 32
                          2a0b:b0c1::/32 maxlen: 32
                          2a0b:b0c2::/32 maxlen: 32
                          2a0b:b0c3::/32 maxlen: 32
                          2a0b:b0c4::/32 maxlen: 32
                          2a0b:b0c5::/32 maxlen: 32
                          2a0b:b0c6::/32 maxlen: 32
                          2a0b:b0c7::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107::/36 maxlen: 36
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:c80:3000::/36 maxlen: 36
                          2a11:c80:4000::/36 maxlen: 36
                          2a11:c80:5000::/36 maxlen: 36
                          2a11:c80:6000::/36 maxlen: 36
                          2a11:c81::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 20:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:67:3b:a1:f3:5c:cb:a2:07:20:a9:73:a3:31:c6:fe:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 22 17:35:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=301df3e46c824dc3e2c6dbed30e53c92c47b5947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:b1:5b:ab:24:d6:04:2f:db:33:e1:d4:7c:
                    4a:c1:15:31:91:23:76:4d:d4:28:d1:86:19:a9:c2:
                    5f:96:c0:6a:a2:13:61:6c:b6:4e:41:67:7b:d7:d2:
                    8f:90:ac:83:80:65:06:39:fa:90:72:64:13:5e:cc:
                    99:fb:21:ae:03:52:9b:37:3d:ee:df:16:eb:1e:b5:
                    62:77:73:a0:71:f9:71:dd:07:d6:ac:e4:0e:37:2e:
                    a4:43:70:f3:d1:f4:d4:86:a9:07:cc:d7:48:c5:6c:
                    e6:4b:fe:62:6d:dd:b9:92:33:23:3a:20:34:20:95:
                    29:b0:06:91:72:41:8f:8b:a3:a6:64:36:85:8a:cb:
                    a5:10:a7:6c:da:fb:c9:60:ca:35:b7:54:c7:cd:7c:
                    a8:c6:fc:68:15:92:57:f0:4f:26:f1:be:91:69:33:
                    8e:86:f9:a0:50:95:d8:77:bb:45:c7:4e:b6:fa:78:
                    1e:6b:9a:77:cb:b3:e4:ea:9f:66:94:83:1b:39:f6:
                    16:51:43:f7:bb:ff:1c:f1:06:91:ca:5e:1e:0f:0b:
                    1f:c1:38:7b:ff:a6:3a:b1:4d:e7:72:9a:2d:26:ec:
                    44:51:b9:0d:70:cb:61:83:72:e4:38:74:f2:27:ef:
                    d6:23:9c:9a:4b:fe:d5:1b:b7:82:99:bd:a2:8a:cd:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1D:F3:E4:6C:82:4D:C3:E2:C6:DB:ED:30:E5:3C:92:C4:7B:59:47
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MB3z5GyCTcPixtvtMOU8ksR7WUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:401::/32
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:efff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/31
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0b:b0c0::/29
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107::/36
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::-2a11:c80:6fff:ffff:ffff:ffff:ffff:ffff
                  2a11:c81::/32
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         25:f9:00:0c:8b:38:13:2f:e8:af:a5:9e:61:1d:c1:c7:ec:42:
         9d:fc:9c:3e:f6:ad:0c:6c:39:cd:a9:2f:fb:b6:d9:0a:0d:bf:
         7d:9a:ad:51:e6:65:9b:3e:93:b6:92:c8:b0:e8:4c:2e:a5:9d:
         58:7d:76:1d:a4:17:9f:1b:f0:7b:5d:19:49:d9:7c:29:7e:66:
         89:a5:32:b2:1b:b8:c2:cd:4f:3c:25:ac:0a:0d:f5:76:4f:63:
         7e:c4:5d:ca:30:e9:24:7c:4d:af:26:8f:74:1a:86:06:69:09:
         e2:da:5f:95:ee:ce:0e:d7:36:91:cb:b0:3f:d4:b5:25:03:ab:
         db:c5:78:7a:64:69:4d:48:e5:f9:cf:06:7d:89:07:08:00:f2:
         ff:95:1b:db:df:2f:95:68:df:e6:2c:01:54:5a:6d:2f:3c:3c:
         a0:a2:39:2c:e1:18:73:0e:de:b2:b7:7b:99:6c:20:d3:2b:82:
         13:ed:15:5f:4f:10:c0:0d:a6:a3:bf:25:ea:81:de:1e:53:bf:
         bf:30:4e:03:96:99:dd:cd:a0:2c:86:29:82:a5:9b:da:7c:af:
         72:14:d6:46:0e:54:e2:49:71:09:0d:32:d1:8e:53:d5:27:a0:
         3c:fc:a1:4c:d5:7e:27:aa:5b:e9:cd:8a:f3:9e:b5:17:b2:31:
         b6:18:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org