Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZHc2NKcvQ4yO4afMzpzq5CYIWGo.roa
File:                     ZHc2NKcvQ4yO4afMzpzq5CYIWGo.roa (raw, json)
Hash identifier:          yN7SiRas6QSo4Okyw7TOAbL3YiMmumhZF8yjEe9kDx0=
Subject key identifier:   64:77:36:34:A7:2F:43:8C:8E:E1:A7:CC:CE:9C:EA:E4:26:08:58:6A
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E64E974A5E2988F31C243A94ADBFED05D
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZHc2NKcvQ4yO4afMzpzq5CYIWGo.roa
Signing time:             Fri 22 Mar 2024 06:46:45 +0000
ROA not before:           Fri 22 Mar 2024 06:46:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:401::/32 maxlen: 32
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3804:e000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:6f01::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0b:b0c0::/32 maxlen: 32
                          2a0b:b0c1::/32 maxlen: 32
                          2a0b:b0c2::/32 maxlen: 32
                          2a0b:b0c3::/32 maxlen: 32
                          2a0b:b0c4::/32 maxlen: 32
                          2a0b:b0c5::/32 maxlen: 32
                          2a0b:b0c6::/32 maxlen: 32
                          2a0b:b0c7::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107::/36 maxlen: 36
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:c80:3000::/36 maxlen: 36
                          2a11:c80:4000::/36 maxlen: 36
                          2a11:c81::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 09:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:64:e9:74:a5:e2:98:8f:31:c2:43:a9:4a:db:fe:d0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 22 06:46:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=64773634a72f438c8ee1a7ccce9ceae42608586a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:67:5e:77:63:46:f4:a5:9a:07:0e:a2:1d:
                    3d:f4:f4:16:0c:eb:02:57:ce:4e:e3:6a:2f:2e:5d:
                    85:9e:9d:49:6f:4e:4c:97:6f:26:e6:90:74:0d:c3:
                    3d:48:cd:4c:4d:f3:f2:c7:b1:bc:e5:0c:fc:aa:e2:
                    b7:1b:cd:b5:ac:2f:86:73:7d:14:94:29:e6:63:8b:
                    0d:71:46:45:b9:6c:e2:1b:b0:93:84:d2:86:ae:df:
                    aa:e9:96:e4:ea:e7:e4:92:e7:ed:76:50:51:1b:ae:
                    6d:f5:a0:ea:a3:60:22:de:af:27:c4:91:ad:d3:47:
                    89:23:3f:22:00:3e:63:84:42:c6:6a:ae:7f:1f:cd:
                    e9:b7:24:ca:50:31:e1:3e:15:5d:7b:a8:43:43:2e:
                    93:7f:c0:c7:d8:c6:30:48:37:76:02:17:e6:c8:b4:
                    af:e1:e2:31:ec:f8:56:11:d4:ad:10:98:3b:1b:4e:
                    e0:77:e5:82:65:db:4c:dd:e0:78:54:d8:d3:72:3a:
                    c9:0c:53:a2:64:b8:35:13:c5:43:59:c3:d3:17:c0:
                    a8:80:8f:df:87:4c:d2:6b:b2:86:f4:52:db:5b:eb:
                    04:ce:79:a9:35:19:27:b1:eb:73:12:6b:93:48:c0:
                    61:c9:c9:c7:d9:25:37:4e:63:2b:75:53:ed:20:73:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:77:36:34:A7:2F:43:8C:8E:E1:A7:CC:CE:9C:EA:E4:26:08:58:6A
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZHc2NKcvQ4yO4afMzpzq5CYIWGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:401::/32
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:efff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/31
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0b:b0c0::/29
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107::/36
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::-2a11:c80:4fff:ffff:ffff:ffff:ffff:ffff
                  2a11:c81::/32
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:dc:04:17:f3:a5:81:cb:06:2c:3a:ad:63:20:e4:03:93:87:
         40:c8:57:37:b6:ea:89:0d:38:a5:f2:d4:8d:43:44:be:33:f2:
         75:96:a8:c9:1e:f4:4f:45:b0:af:f2:57:f8:72:62:b4:4c:a7:
         7f:0b:d5:a9:10:54:9e:7a:58:cc:d1:d4:de:6c:a7:e2:b3:cf:
         01:3b:52:47:bc:d5:93:09:d1:9a:7c:56:c8:13:ef:28:dc:62:
         82:ed:52:11:70:ab:49:39:3b:25:47:07:da:34:53:65:ed:68:
         0f:8d:93:4e:05:05:d2:a2:cb:cc:9f:d8:b1:b9:4e:4c:9f:44:
         44:fc:51:87:4e:da:34:77:b2:c3:a8:f9:8d:ff:52:6c:5f:78:
         49:83:34:6c:6b:bc:23:84:b2:d6:24:fa:4b:fa:77:f5:c3:94:
         3a:9a:2d:04:70:86:42:04:a6:af:c2:71:0f:91:ce:ea:ec:46:
         04:f3:cf:a8:f4:24:fa:fc:3b:6b:65:9d:cd:40:52:9c:aa:fd:
         81:19:15:91:b8:10:ac:78:ea:db:6c:0e:14:f8:3d:29:6b:a3:
         6b:4e:d7:93:5a:2a:36:47:06:dd:03:6c:0e:ed:e3:d0:c2:04:
         24:d5:a5:c3:9f:5a:27:76:ce:ef:50:4e:22:75:67:db:f3:42:
         f5:da:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org