Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eJfYmFr-xSvaS54NHeZV3BrXPyg.roa
File:                     eJfYmFr-xSvaS54NHeZV3BrXPyg.roa (raw, json)
Hash identifier:          1UgZfWZ8PvD521/GXssNyID/gq8sQSx+vpuNM3sUEs4=
Subject key identifier:   78:97:D8:98:5A:FE:C5:2B:DA:4B:9E:0D:1D:E6:55:DC:1A:D7:3F:28
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018D02AD7E198471C04C1042F4C33B7BCC9A
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eJfYmFr-xSvaS54NHeZV3BrXPyg.roa
Signing time:             Sat 13 Jan 2024 11:55:40 +0000
ROA not before:           Sat 13 Jan 2024 11:55:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        95.215.109.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          194.113.105.0/24 maxlen: 24
                          45.142.210.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          2a09:3d00::/29 maxlen: 36
                          2a11:207::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c0::/29 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a11:205::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a09:3805::/32 maxlen: 32
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c0::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0d:5ec0::/29 maxlen: 36
                          2a06:d900::/29 maxlen: 29
                          2a09:4e03::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a10:c0c6::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a11:b80::/29 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:782::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:3804::/36 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a0c:2104::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:204::/32 maxlen: 32
                          2a10:c340::/29 maxlen: 36

Validation:               Failed, certificate revoked on Wed 17 Jan 2024 07:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:02:ad:7e:19:84:71:c0:4c:10:42:f4:c3:3b:7b:cc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Jan 13 11:55:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7897d8985afec52bda4b9e0d1de655dc1ad73f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:24:2f:cc:fa:c1:ba:a0:6a:ef:5e:aa:26:
                    dc:79:68:31:72:96:36:c9:2a:29:74:f0:50:4d:69:
                    7a:aa:16:7b:e8:8a:de:23:ce:f5:25:fd:c6:39:8c:
                    ed:96:3a:83:a5:9c:f7:dc:51:46:3a:80:3f:f9:a0:
                    b2:c0:0f:5f:eb:ea:d2:3c:17:f2:b9:1a:a0:df:c1:
                    da:10:7c:c1:e1:42:1e:f8:4e:a0:2b:03:f8:18:90:
                    f5:b8:bb:87:94:47:a9:66:04:1d:5f:03:d8:25:23:
                    6c:6f:3f:2e:f7:d3:76:2c:e5:de:55:01:14:b3:73:
                    b7:9f:d8:38:70:e6:b2:c1:bc:70:8c:02:9c:6c:94:
                    2b:fe:01:87:62:fc:d7:ef:e6:5f:a8:b0:dd:57:9c:
                    43:5a:db:74:93:18:bb:2a:9f:58:e0:2a:da:86:8b:
                    7e:42:db:c0:cb:e3:29:19:81:09:63:c7:bb:8c:6e:
                    bd:a3:bb:97:19:62:9a:ad:76:ee:92:ee:a6:95:f2:
                    3a:dc:ef:2b:cf:79:12:fe:fa:ea:86:6f:36:a0:e4:
                    12:b3:a9:a9:df:8e:cf:97:4f:a7:7c:a9:f0:56:b9:
                    54:55:41:da:5f:6b:5b:cd:20:f1:ba:32:77:3b:5b:
                    6a:0d:df:df:48:e0:43:58:86:88:22:24:4f:e4:3e:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:97:D8:98:5A:FE:C5:2B:DA:4B:9E:0D:1D:E6:55:DC:1A:D7:3F:28
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eJfYmFr-xSvaS54NHeZV3BrXPyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  95.215.109.0/24
                  194.113.105.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:4fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc81::/32
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:0c:6e:c3:3b:fc:fb:49:15:3d:09:44:8a:f7:64:35:8b:
         ef:50:f5:ff:61:c2:bb:e0:76:43:92:f7:d4:7e:ea:c4:00:2a:
         39:47:74:3c:91:d9:20:e6:8a:4b:29:5d:66:9b:b0:b3:3e:98:
         88:fc:c9:9e:4d:29:07:e1:e9:3d:91:b1:b2:db:f0:84:f3:27:
         fc:c0:0e:3c:95:53:aa:cf:c8:13:6c:36:0d:a6:59:be:23:d7:
         a8:df:a0:0c:66:a1:c4:2e:42:53:5c:db:e1:ea:fa:3d:29:a1:
         02:82:57:94:22:ea:d2:dc:97:02:ef:db:f3:3b:88:b9:7b:e1:
         95:fb:e3:91:1f:0e:e2:c2:59:0c:7d:2d:60:87:85:68:d2:ce:
         47:35:7a:65:ca:21:b8:52:c2:0f:70:31:a8:ed:e5:3d:52:31:
         d6:55:ee:6d:12:95:6c:1a:63:9b:2c:72:bb:b3:b0:da:0a:3c:
         97:6d:3a:34:b3:ba:9f:b8:22:a0:b0:fe:00:22:aa:18:0f:02:
         77:0d:dc:6c:0b:48:20:3f:fb:e0:9f:b9:82:b5:d4:84:49:80:
         ad:5a:e1:74:cb:48:3b:12:b7:04:9b:62:b3:f8:88:f7:45:48:
         41:ad:bb:aa:54:2d:10:ea:41:b9:5c:76:22:d0:3e:6a:c1:43:
         80:1e:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org