Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Uasz4a1CcL-azJG8xnqYi-3ybjs.roa
File:                     Uasz4a1CcL-azJG8xnqYi-3ybjs.roa (raw, json)
Hash identifier:          Dio2xZVe4hkd1vqsI3tYlzcU1MEI56a/HN1OpTaYhdI=
Subject key identifier:   51:AB:33:E1:AD:42:70:BF:9A:CC:91:BC:C6:7A:98:8B:ED:F2:6E:3B
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018BEC75BF7E48D51F573DB55A82E3915FC6
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Uasz4a1CcL-azJG8xnqYi-3ybjs.roa
Signing time:             Mon 20 Nov 2023 11:20:21 +0000
ROA not before:           Mon 20 Nov 2023 11:20:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204916
IP address blocks:        95.215.109.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          194.113.105.0/24 maxlen: 24
                          45.142.210.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          83.171.240.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.243.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          2a09:3d00::/29 maxlen: 36
                          2a11:207::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c0::/29 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c0::/32 maxlen: 32
                          2a0d:5ec0::/29 maxlen: 36
                          2a06:d900::/29 maxlen: 29
                          2a09:4e03::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a10:c0c6::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a11:b80::/29 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:3800::/32 maxlen: 32
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:204::/32 maxlen: 32
                          2a10:c340::/29 maxlen: 36

Validation:               Failed, certificate revoked on Thu 23 Nov 2023 06:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ec:75:bf:7e:48:d5:1f:57:3d:b5:5a:82:e3:91:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Nov 20 11:20:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51ab33e1ad4270bf9acc91bcc67a988bedf26e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:15:ba:12:99:4a:79:89:47:bc:34:e7:50:
                    d2:7b:17:84:47:fa:1f:79:5b:80:d4:a6:98:4b:3a:
                    0a:8f:82:b9:86:29:01:b8:98:c7:1d:23:de:ab:8e:
                    54:6a:f0:be:9a:71:94:99:bf:ca:80:0c:2e:c0:d3:
                    10:7e:70:cd:6d:eb:4f:90:ef:68:6f:7f:67:a8:96:
                    e2:4b:c1:d6:cf:d0:35:b7:0b:96:44:d4:15:e2:9a:
                    2d:28:6b:eb:39:e5:ec:f2:f0:99:e3:ce:fb:f3:49:
                    08:67:10:7e:41:00:e4:63:2c:bc:51:81:ad:2c:e0:
                    26:b5:ad:d0:0d:b9:69:f3:83:e3:14:12:a8:5d:52:
                    4b:a1:35:19:ab:4d:4d:f3:de:9f:28:d2:97:d1:57:
                    76:88:72:d1:07:ba:1b:7e:75:02:47:86:9a:18:52:
                    a9:51:14:93:b9:d2:70:a0:1b:9b:89:ed:97:84:4e:
                    79:b0:65:03:71:71:8a:ef:3f:35:51:73:33:c0:24:
                    52:0a:ed:1f:24:ca:07:15:0e:cf:b8:20:a2:44:d2:
                    77:4d:69:13:5b:7c:84:c1:1e:54:4a:91:ac:bd:3b:
                    69:e1:86:ca:61:fb:a5:ed:9e:bc:fe:dd:1c:fc:90:
                    06:42:25:96:31:2b:d9:63:ca:6d:50:eb:70:7c:d4:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:33:E1:AD:42:70:BF:9A:CC:91:BC:C6:7A:98:8B:ED:F2:6E:3B
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Uasz4a1CcL-azJG8xnqYi-3ybjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  95.215.109.0/24
                  194.113.105.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:b680::/29
                  2a0c:2104::/32
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc81::/32
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:8fff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:a000::/36
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:b7:4a:fc:53:24:39:ac:4c:4f:37:38:84:c1:9b:49:61:
         90:e5:34:5c:08:57:77:7d:d4:c2:24:53:e4:43:b2:6f:79:f2:
         7b:c3:4d:dd:2e:6f:3d:3a:64:06:7f:79:98:65:8d:1c:42:e4:
         4a:d8:45:0b:02:7e:29:45:f7:58:c5:0b:c3:48:e1:29:3d:c3:
         c6:aa:47:95:a9:36:63:02:b9:ea:43:8b:9c:99:8c:46:f2:7b:
         f7:99:38:15:64:9d:d3:f0:ee:e0:d7:ae:c9:16:44:9f:6e:29:
         55:a4:88:36:cc:8d:1a:e9:a5:da:94:81:1f:23:39:ba:57:bb:
         9b:32:9a:77:a3:cd:ba:3b:ce:83:f6:d6:1d:91:e2:c0:11:84:
         7c:6d:31:b2:1f:19:29:99:1c:3e:00:1c:91:49:92:79:b8:fa:
         e8:a2:82:6a:a3:03:5c:65:04:c6:be:af:da:8d:9a:bf:be:f9:
         e8:9e:6b:2e:e9:5f:24:4c:e1:34:39:87:66:8e:23:f9:a9:a7:
         49:7e:93:64:2e:64:5f:cb:c9:96:79:bd:e7:11:46:b7:08:3b:
         e8:39:13:18:62:aa:77:4c:ee:db:a7:01:3d:54:36:29:30:aa:
         14:d6:33:0b:de:6a:3a:1c:46:6c:2e:01:98:21:6a:b5:02:f7:
         e4:d3:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org