Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/X-0Aopwcch-rND3LCE3BssuazJQ.roa
File:                     X-0Aopwcch-rND3LCE3BssuazJQ.roa (raw, json)
Hash identifier:          MVhfG2BF5avKc/ioJmHD0KYk1VYzeSSJNvQe+PWsh9E=
Subject key identifier:   5F:ED:00:A2:9C:1C:72:1F:AB:34:3D:CB:08:4D:C1:B2:CB:9A:CC:94
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E3702A9967ED2805B43BA8DADE9B91D65
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/X-0Aopwcch-rND3LCE3BssuazJQ.roa
Signing time:             Wed 13 Mar 2024 08:51:45 +0000
ROA not before:           Wed 13 Mar 2024 08:51:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 11:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:37:02:a9:96:7e:d2:80:5b:43:ba:8d:ad:e9:b9:1d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 13 08:51:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5fed00a29c1c721fab343dcb084dc1b2cb9acc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:14:a7:1e:d6:82:89:bf:e1:d1:a5:87:f8:
                    36:12:e6:06:81:d4:55:08:4d:bc:02:52:a8:a6:a3:
                    43:ad:ad:7a:0d:10:eb:fb:a0:42:56:4f:7d:dc:cf:
                    e0:e8:a0:aa:fd:aa:2a:f0:c9:47:1b:e8:29:31:13:
                    f1:02:c1:e2:5a:b8:39:62:bd:b9:b0:71:c4:cc:d8:
                    83:45:b6:e5:10:31:87:90:df:0d:16:d9:71:12:aa:
                    b1:a7:40:98:be:bb:32:41:4f:fe:2d:bb:ec:c7:be:
                    f7:98:3f:e7:58:60:80:c8:91:c7:cf:4d:58:33:f2:
                    32:c0:1f:ce:47:29:66:66:15:99:1e:68:bf:6f:ee:
                    8a:b4:6d:95:3c:bb:6e:f9:53:ea:a7:df:a1:20:eb:
                    01:a4:a5:7b:86:2c:1a:e4:8f:31:3c:56:f7:9e:1e:
                    e9:9c:3f:46:23:8b:4d:61:10:b2:10:7b:58:a3:47:
                    ce:e5:60:39:e0:d8:75:58:0c:fb:67:10:96:a2:46:
                    ed:5f:f6:aa:89:5c:fd:05:60:5d:9d:c4:00:fb:83:
                    37:4c:49:14:fa:7f:8d:cf:3c:56:0b:63:45:4c:a1:
                    6b:ea:21:59:53:04:46:fe:30:a0:e4:d9:50:e8:bf:
                    ce:7b:ce:6d:66:c4:e2:a8:00:06:30:ae:9b:f6:dc:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:ED:00:A2:9C:1C:72:1F:AB:34:3D:CB:08:4D:C1:B2:CB:9A:CC:94
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/X-0Aopwcch-rND3LCE3BssuazJQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::-2a11:c80:2fff:ffff:ffff:ffff:ffff:ffff
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:ff:60:f9:7b:c2:42:7c:ea:a3:d3:b2:cb:e5:4c:2a:c0:77:
         9d:07:70:97:d6:f6:97:0e:48:6c:c4:89:e2:1e:7c:6f:2c:e0:
         8f:49:0d:8f:6b:6c:81:4c:12:24:50:7c:e9:52:e6:47:fe:08:
         bc:ef:c8:b7:15:40:70:41:58:04:40:45:0b:4d:3b:34:4e:dc:
         48:12:b1:72:62:75:24:78:cd:a8:50:92:fc:8b:14:ad:d0:1b:
         d9:94:df:c4:21:0d:01:90:ad:cc:f5:90:eb:48:3b:80:f0:9f:
         5b:ea:86:33:30:41:65:ee:ca:3e:c7:28:2c:25:db:a8:c4:dc:
         7d:4b:cb:35:71:37:ac:4b:70:9d:9c:0a:13:c3:08:e1:fe:62:
         99:80:57:23:3b:cd:8b:a2:f1:2d:ea:28:dd:3a:85:8d:c9:14:
         c3:31:f6:6e:2a:63:4d:c6:9a:8a:1b:5f:3d:61:0a:3f:07:3e:
         69:85:38:f5:af:ab:5f:30:8b:3a:b6:bc:54:23:ea:85:9b:c5:
         cc:ba:fa:86:09:9a:c8:b8:1d:94:2d:1c:1f:0f:49:7b:98:88:
         49:3d:1d:e4:d9:b0:b4:f8:75:43:ee:ec:5e:ad:f7:83:b4:f1:
         25:ae:4d:da:c6:62:a9:d0:d9:7b:ce:73:32:9d:3f:c1:b2:00:
         41:1b:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 16:50:37 2024 by rpki-client on console-fra.rpki-client.org