Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TqT6s5gxE5O8lILYCF5ELsv8Yu8.roa
File:                     TqT6s5gxE5O8lILYCF5ELsv8Yu8.roa (raw, json)
Hash identifier:          UuBFGqjPiLNdw4H8sIueeyihgLgdD6e7FRZCAJi0jDg=
Subject key identifier:   4E:A4:FA:B3:98:31:13:93:BC:94:82:D8:08:5E:44:2E:CB:FC:62:EF
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018DC03F79DCC0D9AE6CADACC8DA553D45B7
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TqT6s5gxE5O8lILYCF5ELsv8Yu8.roa
Signing time:             Mon 19 Feb 2024 07:23:21 +0000
ROA not before:           Mon 19 Feb 2024 07:23:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a12:7c00::/29 maxlen: 36

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 06:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c0:3f:79:dc:c0:d9:ae:6c:ad:ac:c8:da:55:3d:45:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Feb 19 07:23:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4ea4fab398311393bc9482d8085e442ecbfc62ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:0e:a7:b9:1e:ed:33:c5:29:bf:c5:1e:72:
                    f4:43:8e:b4:0e:ed:de:a9:22:d1:be:a8:a6:e4:cf:
                    66:c8:cd:10:a8:8a:37:0f:31:29:b2:86:16:c1:21:
                    f3:f7:54:a9:d0:b3:3b:db:08:93:42:1e:cf:c9:e8:
                    1e:d1:c4:39:77:e1:70:dc:85:3a:d8:42:75:0e:fe:
                    99:bc:76:9c:c1:c8:c0:9e:dc:54:2e:20:bc:d3:e6:
                    27:12:12:c2:c1:ad:98:2d:8f:ca:78:b0:b0:19:20:
                    a6:c4:4b:8d:1d:42:93:56:a6:fa:4a:4f:45:9c:22:
                    c0:5c:ae:8f:bd:48:3f:56:d8:d2:00:16:92:cb:8a:
                    6c:f3:69:52:a2:d5:81:d5:4d:60:26:5c:12:2c:6c:
                    b9:c2:d9:3c:f0:c9:7a:7b:17:75:6a:75:6c:92:66:
                    a2:cc:66:1c:90:01:1a:c4:f4:e8:1c:f6:a1:ea:91:
                    d3:54:77:bb:6a:76:3e:44:30:40:46:47:2a:b5:b0:
                    05:ea:b9:8c:48:1a:b6:4f:11:88:3f:fe:26:d9:48:
                    ec:4f:a3:6e:3f:aa:33:f3:66:2d:f2:9f:5c:c3:72:
                    cc:80:28:07:95:ef:8a:50:1e:13:62:48:0d:5d:5c:
                    45:74:7f:e6:04:c9:d2:d2:e2:f8:3e:14:9b:77:e6:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:FA:B3:98:31:13:93:BC:94:82:D8:08:5E:44:2E:CB:FC:62:EF
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TqT6s5gxE5O8lILYCF5ELsv8Yu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:cfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:74:9f:46:be:d2:70:6d:1f:d1:9b:71:13:86:ec:28:17:
         ba:e7:f7:75:f1:7a:bf:43:5e:2c:73:4d:5b:1e:80:5d:d6:86:
         8d:99:b8:17:27:50:67:0d:cd:40:2c:cd:dc:6f:a2:40:59:2b:
         7a:89:39:e6:20:dd:64:f9:6c:e9:13:62:3e:df:7a:37:13:16:
         64:4c:a9:b2:9a:82:a4:5f:52:b5:d0:36:f4:cc:85:7e:8b:f0:
         32:70:5e:17:4b:93:b6:3a:db:22:24:68:2b:cc:f8:cf:b5:62:
         30:58:bb:17:cf:dc:83:41:d3:6c:33:1e:2e:32:54:d3:c9:7b:
         38:20:4a:82:ca:e0:0f:fc:e3:3a:1a:d8:1a:b1:43:bc:4b:ec:
         5f:3e:1f:98:f6:f2:64:e8:e0:4f:bb:22:4c:01:62:33:e4:64:
         35:07:cc:cc:6f:b5:d8:48:d1:8d:c3:a2:e1:ab:3c:84:88:95:
         ef:40:c4:37:47:cb:de:1a:99:f7:41:00:1c:43:10:70:7c:ca:
         21:65:88:3e:06:76:f8:55:84:7e:86:32:16:7b:71:6d:67:a7:
         e3:e3:32:f9:32:29:85:94:7d:8d:23:98:05:c7:45:6a:f9:4a:
         9e:6d:98:d7:1d:e8:fa:f6:3f:fc:2b:5f:a8:59:46:37:88:64:
         df:df:72:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org