Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/p193fUGAveD8TNq9SCKqF0L9pQA.roa
File:                     p193fUGAveD8TNq9SCKqF0L9pQA.roa (raw, json)
Hash identifier:          xCM6R8GZVbI42/vUwc9+HAuSAnebp2feP3Xin7uX5yY=
Subject key identifier:   A7:5F:77:7D:41:80:BD:E0:FC:4C:DA:BD:48:22:AA:17:42:FD:A5:00
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018DACAF8A855E6A323DB81646DF0DB4A6F0
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/p193fUGAveD8TNq9SCKqF0L9pQA.roa
Signing time:             Thu 15 Feb 2024 12:13:21 +0000
ROA not before:           Thu 15 Feb 2024 12:13:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a12:7c00::/29 maxlen: 36

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 06:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ac:af:8a:85:5e:6a:32:3d:b8:16:46:df:0d:b4:a6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Feb 15 12:13:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a75f777d4180bde0fc4cdabd4822aa1742fda500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a0:31:e8:90:5d:c7:16:61:bc:39:25:b2:4c:
                    09:1f:58:96:71:77:30:c5:55:8d:6a:84:22:9d:4e:
                    f5:f2:a7:0d:5c:b9:48:40:8f:4d:fc:15:13:86:b5:
                    51:1b:06:32:52:10:f0:37:1e:1f:64:3e:2f:fc:d7:
                    c3:06:f9:b8:ea:c8:53:da:b2:38:48:8c:3d:3a:d4:
                    9f:8d:ca:9b:10:36:54:d7:60:61:9f:38:a6:46:31:
                    b4:89:ed:3d:18:66:dd:63:ed:79:56:6f:9b:69:23:
                    4d:40:34:2e:76:dd:29:b0:a4:0d:1d:cf:39:7f:22:
                    b8:07:6b:3e:12:30:b2:88:60:2f:9c:69:51:6d:55:
                    31:e0:89:39:f6:7a:96:53:a3:ab:c6:f8:e8:77:35:
                    74:8c:67:85:83:7a:06:70:45:57:05:d7:c3:dd:a8:
                    ef:bc:28:b1:00:44:9d:d8:77:30:88:f7:81:38:92:
                    2d:14:67:21:a4:a7:ea:5b:68:c1:81:3a:3c:c2:9d:
                    b3:cf:b4:2f:b5:74:08:c9:54:80:72:8a:81:75:c1:
                    ee:c9:a7:7d:dc:81:b2:1a:86:7a:5c:7b:17:d3:c1:
                    bc:29:98:f0:eb:5f:d1:4a:23:a4:08:a6:d6:11:07:
                    11:2c:ba:72:20:98:1f:be:8a:24:74:f4:6d:d7:73:
                    46:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:77:7D:41:80:BD:E0:FC:4C:DA:BD:48:22:AA:17:42:FD:A5:00
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/p193fUGAveD8TNq9SCKqF0L9pQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::/34
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:00:f5:5e:ae:e6:0c:1c:a7:b0:24:6e:50:46:3d:87:9f:e4:
         b1:53:b7:be:59:3b:44:fd:82:dc:2b:cd:9e:4d:3c:37:72:05:
         b8:83:66:3f:94:c7:5d:4c:9c:e1:88:57:4d:2b:c0:de:a6:ca:
         ef:bf:49:55:81:a9:b0:88:37:f3:7e:b3:ba:38:cb:9f:da:cd:
         e0:6a:6a:81:8f:ce:b7:ef:39:dd:ef:af:b7:88:f2:d9:cd:89:
         f3:58:b8:3a:fc:ae:25:4e:f4:6f:b2:94:02:c1:53:67:de:6c:
         81:29:8b:da:1b:9c:66:76:a8:9b:3e:08:28:28:90:43:f4:2a:
         7e:6c:94:ee:c4:bb:48:98:5d:36:ba:c5:4d:78:75:a0:c1:e9:
         a4:5f:5d:5f:f5:c8:6d:89:73:3e:15:d8:0b:24:93:8a:9b:37:
         26:ee:9e:d7:9a:e4:c0:88:d4:67:bf:b3:ff:cb:a0:52:bc:c1:
         e3:fe:a7:04:5a:e3:1f:e9:de:03:49:24:e1:f6:91:3f:bc:6a:
         12:f5:2c:cd:5e:58:9e:13:c6:79:92:2c:13:9b:8a:7e:65:5f:
         0c:ac:2a:0a:9e:66:5f:59:7b:45:1e:7d:7e:d5:9e:d4:ea:73:
         86:82:40:2a:4e:f6:2d:e4:b6:36:10:fe:2a:4b:22:fd:fc:c2:
         17:b8:35:e1
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgISAY2sr4qFXmoyPbgWRt8NtKbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMjE1MTIxMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzVmNzc3ZDQxODBiZGUwZmM0Y2RhYmQ0ODIyYWExNzQyZmRhNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKAx6JBdxxZhvDklskwJH1iWcXcw
xVWNaoQinU718qcNXLlIQI9N/BUThrVRGwYyUhDwNx4fZD4v/NfDBvm46shT2rI4
SIw9OtSfjcqbEDZU12BhnzimRjG0ie09GGbdY+15Vm+baSNNQDQudt0psKQNHc85
fyK4B2s+EjCyiGAvnGlRbVUx4Ik59nqWU6OrxvjodzV0jGeFg3oGcEVXBdfD3ajv
vCixAESd2HcwiPeBOJItFGchpKfqW2jBgTo8wp2zz7QvtXQIyVSAcoqBdcHuyad9
3IGyGoZ6XHsX08G8KZjw61/RSiOkCKbWEQcRLLpyIJgfvookdPRt13NGywIDAQAB
o4IDyjCCA8YwHQYDVR0OBBYEFKdfd31BgL3g/EzavUgiqhdC/aUAMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvcDE5M2ZVR0F2ZUQ4VE5xOVNDS3FGMEw5cFFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3gYIKwYBBQUHAQcBAf8EggHNMIIByTAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQCXbdQAwQAX9dtMIIBmQQCAAIwggGRAwUD
KgbZAAMGBCoJNQWQAwYEKgk1BbADBQAqCTUGMA0DBAMqCTgDBQAqCTgCMA8DBQIq
CTgEAwYEKgk4BGADBgYqCTgEgDAOAwUAKgk4BQMFAyoJOAADBQMqCTsAAwUDKgk9
ADAQAwYEKglOATADBgUqCU4BQDAQAwYEKglOAZADBgQqCU4BoAMFACoJTgMDBQAq
CW8AAwUDKgm2gAMFACoJvYADBQAqCkeEMA4DBQAqDCEDAwUAKgwhBAMFAyoM6MAD
BQMqDV7AMA4DBQAqDYsDAwUAKg2LBAMFACoNiwcDBQEqD8yAAwYEKg/MhwADBQMq
EMDAAwUDKhDDQAMGBCoRAgAAAwYFKhECAEAwEAMGBCoRAgBwAwYEKhECAKAwEAMG
BioRAgDAAwYEKhECAOAwDgMFACoRAgEDBQAqEQICAwUCKhECBAMFAyoRB4ADBQMq
EQmAAwUDKhEKgAMFAyoRC4ADBQAqEQ6CAwYEKhEOh2AwDgMFACoRrwEDBQAqEa8C
AwUAKhGvBAMFAyoSfAAwDQYJKoZIhvcNAQELBQADggEBAAgA9V6u5gwcp7AkblBG
PYef5LFTt75ZO0T9gtwrzZ5NPDdyBbiDZj+Ux11MnOGIV00rwN6myu+/SVWBqbCI
N/N+s7o4y5/azeBqaoGPzrfvOd3vr7eI8tnNifNYuDr8riVO9G+ylALBU2febIEp
i9obnGZ2qJs+CCgokEP0Kn5slO7Eu0iYXTa6xU14daDB6aRfXV/1yG2Jcz4V2Ask
k4qbNybuntea5MCI1Ge/s//LoFK8weP+pwRa4x/p3gNJJOH2kT+8ahL1LM1eWJ4T
xnmSLBObin5lXwysKgqeZl9Ze0UefX7VntTqc4aCQCpO9i3ktjYQ/ipLIv38whe4
NeE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org