Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UzTxjr5dCi--z9kIK6PIcd8CG3w.roa
File:                     UzTxjr5dCi--z9kIK6PIcd8CG3w.roa (raw, json)
Hash identifier:          Ru5v/QAFelthjtZemtGXPoTykAp+Mde5rQpmyAoNnk4=
Subject key identifier:   53:34:F1:8E:BE:5D:0A:2F:BE:CF:D9:08:2B:A3:C8:71:DF:02:1B:7C
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018C00790B08780F256D2CB45E003F42ED96
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UzTxjr5dCi--z9kIK6PIcd8CG3w.roa
Signing time:             Fri 24 Nov 2023 08:36:21 +0000
ROA not before:           Fri 24 Nov 2023 08:36:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204916
IP address blocks:        95.215.109.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          194.113.105.0/24 maxlen: 24
                          45.142.210.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          83.171.240.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.243.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          2a09:3d00::/29 maxlen: 36
                          2a11:207::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c0::/29 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c0c0::/32 maxlen: 32
                          2a0d:5ec0::/29 maxlen: 36
                          2a06:d900::/29 maxlen: 29
                          2a09:4e03::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a10:c0c6::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a11:b80::/29 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:3800::/32 maxlen: 32
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a0c:2104::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:204::/32 maxlen: 32
                          2a10:c340::/29 maxlen: 36

Validation:               Failed, certificate revoked on Tue 28 Nov 2023 04:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:00:79:0b:08:78:0f:25:6d:2c:b4:5e:00:3f:42:ed:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Nov 24 08:36:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5334f18ebe5d0a2fbecfd9082ba3c871df021b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:1f:56:1f:e2:e8:4a:3a:77:a0:af:f3:6a:
                    a5:d3:9f:fb:6c:9e:91:fa:e7:72:c5:f7:77:17:5b:
                    4c:87:f4:80:4c:7a:80:8d:37:0f:73:49:81:8a:ab:
                    30:95:1e:c3:c8:69:70:01:0e:d8:d8:9a:20:53:80:
                    12:7f:35:66:8f:eb:cb:08:ff:e2:3f:ff:7a:f8:08:
                    09:19:68:b3:47:31:98:87:c2:72:54:0f:1a:23:45:
                    25:e8:77:1e:75:ae:e7:c5:53:a8:b8:21:3a:10:39:
                    dc:ea:78:c8:c9:dc:8f:27:01:4f:09:ab:91:5c:b1:
                    ce:52:de:9a:dc:67:3f:a2:5d:2b:8c:13:96:12:e7:
                    cc:aa:ef:b1:55:bc:ce:68:e0:1f:a4:b3:b5:48:76:
                    40:f1:4a:1a:38:4c:46:b6:f2:b7:a2:9d:05:ce:e4:
                    14:fe:84:26:fb:e9:8d:73:e4:05:99:3e:4a:37:4f:
                    d0:9c:f9:86:24:94:d6:a9:13:9a:e3:21:1c:2c:65:
                    1b:5b:a0:94:63:d5:30:6a:58:35:19:57:60:b4:9c:
                    78:cb:a6:99:4f:fa:5c:63:43:84:8b:45:71:91:c0:
                    68:a0:ec:6c:fb:8b:6e:6e:b2:65:e8:d5:69:63:c2:
                    a0:a6:eb:e7:5e:3b:fb:5f:82:79:c8:5f:ed:f0:27:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:F1:8E:BE:5D:0A:2F:BE:CF:D9:08:2B:A3:C8:71:DF:02:1B:7C
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UzTxjr5dCi--z9kIK6PIcd8CG3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  95.215.109.0/24
                  194.113.105.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::/36
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:b680::/29
                  2a0c:2104::/32
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc81::/32
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::/36
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:c6:be:f0:84:62:33:58:97:a4:f4:4a:e3:01:8d:bd:b6:
         13:9d:1f:db:c7:78:df:3a:81:7f:7a:5d:a1:a6:6a:c1:9a:76:
         e6:3d:52:bf:a0:da:96:29:6a:17:71:f5:f5:a0:0c:e2:9b:47:
         2b:a7:13:41:fb:01:a2:78:be:7f:71:6f:aa:f6:2f:60:e2:3e:
         b2:50:2f:51:d0:bc:6c:03:a2:5a:c0:39:c8:45:98:1d:29:05:
         01:d4:fe:0f:0c:19:a9:df:3d:75:39:b8:4d:03:82:62:73:dc:
         9a:c4:58:8e:0b:ab:c6:14:8e:56:e5:40:3d:d4:e8:e8:5e:40:
         7b:ac:81:05:d5:71:ce:ed:d8:33:35:6b:35:79:8a:c7:51:ad:
         83:b0:76:8d:5f:d7:97:be:4f:00:f8:99:04:3d:ff:cb:9e:4a:
         46:19:d1:4b:10:c4:2c:9a:e9:57:87:40:a1:2f:48:a4:5f:f0:
         8a:63:63:4e:7e:6a:2a:11:0a:9e:6f:2c:35:c8:fa:e8:9a:d6:
         ce:c4:62:d9:d5:c9:e5:37:c2:7d:76:ec:cf:f7:93:7e:84:a4:
         39:37:3f:eb:55:a7:f1:93:b4:03:80:78:9a:6a:8e:4d:81:b5:
         7d:a6:74:d2:cb:68:80:e9:32:7d:b5:39:68:0d:54:95:db:08:
         38:45:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org