Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/_jK6d_G-Q96SvCv1k968neA5ukk.roa
File:                     _jK6d_G-Q96SvCv1k968neA5ukk.roa (raw, json)
Hash identifier:          VzghNpXLmYP9lUPBFSnbisGhjSt5UTBuioodjBcuNNI=
Subject key identifier:   FE:32:BA:77:F1:BE:43:DE:92:BC:2B:F5:93:DE:BC:9D:E0:39:BA:49
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E3799B9E161CA7EC6A377EF16609209C1
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/_jK6d_G-Q96SvCv1k968neA5ukk.roa
Signing time:             Wed 13 Mar 2024 11:36:45 +0000
ROA not before:           Wed 13 Mar 2024 11:36:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:401::/32 maxlen: 32
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 05:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:37:99:b9:e1:61:ca:7e:c6:a3:77:ef:16:60:92:09:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 13 11:36:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fe32ba77f1be43de92bc2bf593debc9de039ba49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:e1:85:1f:df:69:42:84:e6:d7:08:fd:84:
                    2e:06:f6:88:76:fe:8d:3a:e5:e6:6a:d3:d3:8e:d3:
                    73:3b:81:ea:e3:c1:74:9a:1e:3d:57:59:0d:59:57:
                    7f:dd:49:cc:5b:f8:9a:33:7c:50:c7:b8:ad:d7:9a:
                    3a:a0:52:6c:fc:09:54:5a:0d:49:aa:d1:5a:23:ad:
                    75:95:a8:0c:e2:c9:d9:f7:fd:77:c3:c2:25:fb:d0:
                    0b:6a:9d:d9:cc:ce:40:99:98:b8:d0:db:d6:1a:4d:
                    fa:f0:c0:0e:bc:fe:7f:7a:cb:d3:30:5f:65:df:a3:
                    a2:3c:e6:6a:26:d6:20:b2:93:6a:36:ef:54:8e:eb:
                    4a:9a:2e:0d:22:1a:0c:b6:66:55:18:e2:f6:c1:56:
                    1c:96:62:33:ad:e0:aa:a4:01:65:a2:97:6c:85:e8:
                    61:9d:23:a0:09:7f:01:97:03:9c:f4:c1:99:73:b7:
                    31:fa:45:ac:f0:63:e4:86:a9:8d:c3:e1:f7:2f:b4:
                    20:2c:ff:56:ad:48:d4:1b:3a:d9:fe:4d:3e:d3:02:
                    e1:de:c8:ca:99:16:c6:f1:fc:3b:15:70:c9:6a:5c:
                    9b:d3:0b:27:82:a5:0a:9a:21:b1:bc:96:2a:10:58:
                    2e:0f:1f:4b:04:ed:6e:66:e7:92:f9:e7:20:4f:01:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:32:BA:77:F1:BE:43:DE:92:BC:2B:F5:93:DE:BC:9D:E0:39:BA:49
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/_jK6d_G-Q96SvCv1k968neA5ukk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:401::/32
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::-2a11:c80:2fff:ffff:ffff:ffff:ffff:ffff
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:96:35:2d:45:5e:a0:8e:01:eb:24:a6:d5:8b:07:18:b9:
         55:c0:71:63:1e:41:5a:70:30:38:66:80:d1:65:a6:1c:04:62:
         f8:af:87:9f:34:93:78:28:64:f2:32:0e:ca:46:ed:0c:2c:39:
         af:3e:d9:ad:f0:7c:7c:ec:f6:b1:5a:b7:24:a4:87:40:21:0d:
         0a:7a:89:23:3b:54:bd:47:8f:81:76:0d:2a:89:52:45:70:2a:
         cd:81:44:2a:88:67:2c:34:0d:01:dd:48:b2:e0:4b:05:c4:b7:
         9b:5c:e6:a1:9c:de:94:d2:5c:1e:f8:ff:01:d9:68:78:92:0e:
         a2:32:3e:c9:2a:41:9b:59:be:be:ab:ab:47:e2:92:83:73:1b:
         9f:b0:b5:27:3a:be:8c:f5:b9:c0:15:f7:5e:f0:8b:4b:0d:0d:
         a4:8d:44:97:36:98:d8:24:f1:cd:b5:e2:53:0c:10:3e:cd:24:
         75:85:02:bd:90:07:f5:25:38:60:eb:4a:b9:97:ae:04:54:3d:
         4b:cc:bb:af:6e:18:99:e5:e5:78:2e:7a:ae:63:24:f5:2a:eb:
         48:85:c8:e8:d4:88:63:02:48:61:fb:83:59:bc:37:cc:3a:40:
         76:48:0e:7b:c7:58:b4:99:77:55:94:fa:72:e0:2c:70:a4:49:
         82:e2:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org