Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fzjbuR1kzU0mVsOHsmTCYTJk06g.roa
File:                     fzjbuR1kzU0mVsOHsmTCYTJk06g.roa (raw, json)
Hash identifier:          O1MvayLyBtvcOAlEX3e4ir64FsknewrwbzaGPLgZ5sg=
Subject key identifier:   7F:38:DB:B9:1D:64:CD:4D:26:56:C3:87:B2:64:C2:61:32:64:D3:A8
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018CC26D55A6AEF04D002913100E0B5488DA
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fzjbuR1kzU0mVsOHsmTCYTJk06g.roa
Signing time:             Mon 01 Jan 2024 00:29:54 +0000
ROA not before:           Mon 01 Jan 2024 00:29:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        95.215.109.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          194.113.105.0/24 maxlen: 24
                          45.142.210.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          83.171.240.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.243.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          2a09:3d00::/29 maxlen: 36
                          2a11:207::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c0::/29 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a10:c0c1::/32 maxlen: 32
                          2a09:3805::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c0c0::/32 maxlen: 32
                          2a0d:5ec0::/29 maxlen: 36
                          2a06:d900::/29 maxlen: 29
                          2a09:4e03::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a10:c0c6::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a11:b80::/29 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:782::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a0c:2104::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:204::/32 maxlen: 32
                          2a10:c340::/29 maxlen: 36

Validation:               Failed, certificate revoked on Sat 06 Jan 2024 15:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:55:a6:ae:f0:4d:00:29:13:10:0e:0b:54:88:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Jan  1 00:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7f38dbb91d64cd4d2656c387b264c2613264d3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:f4:14:67:ce:d8:07:f3:50:ca:1a:5e:e2:
                    1b:2e:1e:48:5f:bb:e0:12:3c:32:66:26:08:14:40:
                    37:5a:46:26:1d:cb:4c:aa:6b:73:2e:7b:4c:7b:e2:
                    57:aa:b4:34:35:61:23:cb:b9:1c:d7:70:9c:b1:80:
                    97:e6:d9:cb:ab:e0:5c:01:09:68:d2:24:91:28:25:
                    4b:e9:05:87:be:7e:0a:ab:92:e1:3e:25:bd:21:45:
                    cc:cb:39:37:96:71:a1:15:a3:3d:02:27:f8:7a:a4:
                    20:20:21:8e:8e:ba:fe:14:c5:1f:99:d7:b2:c6:1f:
                    f0:f5:1c:07:6a:f6:85:98:96:f3:23:52:30:e7:20:
                    f1:72:21:c8:ee:e8:46:7c:ac:ae:35:92:6f:d3:ff:
                    62:97:7d:11:45:7a:e5:6f:fb:60:f0:b9:60:0a:71:
                    f5:28:8a:69:11:28:b5:66:dc:d2:2f:17:5a:da:55:
                    2e:1a:c8:2c:d7:79:33:af:0c:28:b9:1f:13:d0:08:
                    d8:1d:68:58:36:bc:d1:ed:71:6c:15:45:4d:e7:52:
                    5d:49:37:6c:ea:42:b9:83:48:d6:4a:26:17:cb:1e:
                    9f:67:1a:06:d4:4d:95:7d:35:4d:08:47:9d:a0:ea:
                    e2:1e:8b:33:43:ae:69:9b:3d:6a:b3:40:12:f2:3a:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:DB:B9:1D:64:CD:4D:26:56:C3:87:B2:64:C2:61:32:64:D3:A8
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fzjbuR1kzU0mVsOHsmTCYTJk06g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  95.215.109.0/24
                  194.113.105.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:2fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0c:2104::/32
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc81::/32
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:2a:7b:8f:ca:bf:72:53:a9:b3:39:d5:19:d9:40:2b:82:39:
         4f:06:cf:a3:2e:ba:4e:c4:f2:db:1c:4b:d2:bf:4c:03:e1:95:
         f5:bf:06:ac:08:73:ba:3a:05:0d:af:70:ed:aa:2e:a0:3b:28:
         2a:65:0d:6d:f9:70:b1:07:07:70:21:fb:0e:86:76:1a:ad:c8:
         87:9f:d3:4f:5a:92:fa:95:1d:79:42:57:e6:f2:97:5b:4c:d1:
         47:74:e1:24:e5:35:11:53:6f:91:98:b4:93:58:6c:d8:51:b0:
         60:a8:80:2c:c3:29:04:15:76:5d:9e:b3:2b:05:50:00:bb:70:
         1b:33:69:2e:3b:b0:5b:be:69:73:01:47:bb:74:e2:34:bc:7e:
         a7:41:f5:d9:8f:95:93:b6:22:73:33:5a:21:f4:58:fc:34:72:
         44:10:e8:ee:4f:32:13:4c:98:4d:a0:5b:47:a4:09:63:df:e5:
         e8:8a:cf:3c:68:71:33:e9:b7:6a:55:1e:cf:56:ce:1d:3b:6d:
         1f:3b:1b:01:9a:9d:9e:33:41:78:45:27:87:ee:1b:67:d9:df:
         1b:5d:25:f9:90:91:15:fd:a4:12:2f:e5:11:92:7d:c1:20:5f:
         6a:f6:1c:15:58:46:26:3b:3e:41:93:02:cf:25:45:74:dd:a0:
         5d:23:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org