Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rUHzp8kt5t0hTBShip4Ayp0gJLE.roa
File:                     rUHzp8kt5t0hTBShip4Ayp0gJLE.roa (raw, json)
Hash identifier:          xnyKeUNw7MJebYCCnHU1q9OpBSFv+Mmp47E/NI5fMX8=
Subject key identifier:   AD:41:F3:A7:C9:2D:E6:DD:21:4C:14:A1:8A:9E:00:CA:9D:20:24:B1
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018D83727FB4D7FE7470CCAD579891AA9A00
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rUHzp8kt5t0hTBShip4Ayp0gJLE.roa
Signing time:             Wed 07 Feb 2024 12:02:15 +0000
ROA not before:           Wed 07 Feb 2024 12:02:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          194.113.105.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:b80::/29 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a12:7c00::/29 maxlen: 36

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 05:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:83:72:7f:b4:d7:fe:74:70:cc:ad:57:98:91:aa:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Feb  7 12:02:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ad41f3a7c92de6dd214c14a18a9e00ca9d2024b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d6:b9:18:a1:2e:c2:62:e0:de:67:4d:34:07:
                    28:fc:f2:ba:5a:c9:db:c9:e3:7e:61:e6:4a:a3:c1:
                    49:eb:41:92:ef:df:7b:4a:6a:56:4f:6e:2e:56:07:
                    6d:3f:cd:ee:88:6d:fb:42:b7:d9:94:f3:70:a9:66:
                    88:fa:1d:a2:6b:5e:51:e7:14:34:27:59:06:d8:49:
                    da:10:78:76:c0:93:fc:d7:c2:e7:b5:2e:b5:7b:31:
                    09:1e:9f:1c:5e:96:6c:25:89:8d:15:04:38:8c:a0:
                    ac:c9:3d:ff:e1:b3:66:97:40:68:5a:6e:e6:9b:a1:
                    8d:c7:d9:b8:d0:ba:03:62:44:b7:87:ad:b2:48:5b:
                    fb:d9:eb:56:cb:7a:df:71:1f:b4:0c:cd:21:c9:40:
                    4e:d3:45:70:31:2b:72:a6:2e:72:5e:19:77:04:43:
                    a1:23:39:42:81:61:79:63:08:6a:e9:06:89:4b:43:
                    61:42:16:a8:d3:8d:5e:38:21:6d:cb:d2:8c:c8:f7:
                    11:1f:df:55:2a:30:e1:41:4e:70:c6:5c:ae:ec:b8:
                    80:af:99:62:89:63:a5:98:1e:e2:3c:ec:e4:b2:7a:
                    00:d5:43:50:ab:69:c6:58:cf:eb:06:70:cb:9c:a4:
                    db:50:02:3c:a8:20:fc:b9:1f:da:f4:2d:f5:ff:05:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:41:F3:A7:C9:2D:E6:DD:21:4C:14:A1:8A:9E:00:CA:9D:20:24:B1
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rUHzp8kt5t0hTBShip4Ayp0gJLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                  194.113.105.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::/35
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:ef:87:6e:cd:db:10:7a:e2:24:16:db:77:38:69:8a:e0:
         9a:e7:0c:46:0d:a1:dc:1b:03:c8:f4:f0:ae:38:b1:4b:ee:7f:
         a3:c9:73:83:eb:1a:9e:77:f4:80:cd:4d:13:f5:4d:23:3b:b0:
         f8:b9:ec:dc:8c:5c:60:e8:16:f9:1c:bb:36:41:ed:ef:d3:7b:
         f1:3d:99:90:f7:65:0f:82:4c:a0:05:d5:96:19:a6:87:83:2a:
         6b:7b:9b:8f:ab:6c:0a:b7:5e:6a:dd:48:68:bb:27:df:6f:2f:
         c2:c8:82:f8:66:c9:0d:1d:7f:52:9e:31:b3:f5:e4:92:f6:95:
         f5:ff:ea:2e:07:60:b0:0a:6a:f8:81:4e:cb:e4:23:54:c5:fd:
         7a:51:bf:ab:7b:59:93:9e:68:e2:a5:75:cb:dc:fe:79:81:82:
         86:ab:bc:02:14:38:44:ec:e7:c2:97:62:05:ce:fa:c7:82:e4:
         6f:0e:96:78:ba:a2:fb:b7:58:4a:ac:be:4b:cd:5a:e8:5f:8f:
         58:d0:cf:df:5a:68:c7:b1:f5:b4:03:e6:d3:09:1e:04:7d:d2:
         a3:67:4c:37:f4:78:d1:a0:70:0e:a7:e3:13:ed:8c:12:af:48:
         64:3b:c3:f7:b6:a1:83:49:cf:4d:3a:af:34:55:9c:7d:6d:65:
         b5:52:9b:c1
-----BEGIN CERTIFICATE-----
MIIGvTCCBaWgAwIBAgISAY2Dcn+01/50cMytV5iRqpoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMjA3MTIwMjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDQxZjNhN2M5MmRlNmRkMjE0YzE0YTE4YTllMDBjYTlkMjAyNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhda5GKEuwmLg3mdNNAco/PK6Wsnb
yeN+YeZKo8FJ60GS7997SmpWT24uVgdtP83uiG37QrfZlPNwqWaI+h2ia15R5xQ0
J1kG2EnaEHh2wJP818LntS61ezEJHp8cXpZsJYmNFQQ4jKCsyT3/4bNml0BoWm7m
m6GNx9m40LoDYkS3h62ySFv72etWy3rfcR+0DM0hyUBO00VwMStypi5yXhl3BEOh
IzlCgWF5Ywhq6QaJS0NhQhao041eOCFty9KMyPcRH99VKjDhQU5wxlyu7LiAr5li
iWOlmB7iPOzksnoA1UNQq2nGWM/rBnDLnKTbUAI8qCD8uR/a9C31/wXf3wIDAQAB
o4IDyTCCA8UwHQYDVR0OBBYEFK1B86fJLebdIUwUoYqeAMqdICSxMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvclVIenA4a3Q1dDBoVEJTaGlwNEF5cDBnSkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3QYIKwYBBQUHAQcBAf8EggHMMIIByDAwBAIAATAqAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQCXbdQAwQAX9dtAwQAwnFpMIIBkgQCAAIw
ggGKAwUDKgbZAAMGBCoJNQWQAwYEKgk1BbADBQAqCTUGMA0DBAMqCTgDBQAqCTgC
MA8DBQIqCTgEAwYEKgk4BGADBgUqCTgEgDAOAwUAKgk4BQMFAyoJOAADBQMqCTsA
AwUDKgk9ADAQAwYEKglOATADBgUqCU4BQDAQAwYEKglOAZADBgQqCU4BoAMFACoJ
TgMDBQAqCW8AAwUDKgm2gAMFACoJvYADBQAqCkeEMA4DBQAqDCEDAwUAKgwhBAMF
AyoM6MADBQMqDV7AMA4DBQAqDYsDAwUAKg2LBAMFACoNiwcDBQEqD8yAAwYEKg/M
hwADBQMqEMDAAwUDKhDDQAMGBCoRAgAAAwYFKhECAEAwEAMGBCoRAgBwAwYEKhEC
AKAwEAMGBioRAgDAAwYEKhECAOAwDgMFACoRAgEDBQAqEQICAwUCKhECBAMFAyoR
B4ADBQMqEQmAAwUDKhELgAMFACoRDoIDBgQqEQ6HYDAOAwUAKhGvAQMFACoRrwID
BQAqEa8EAwUDKhJ8ADANBgkqhkiG9w0BAQsFAAOCAQEAdX/vh27N2xB64iQW23c4
aYrgmucMRg2h3BsDyPTwrjixS+5/o8lzg+sannf0gM1NE/VNIzuw+Lns3IxcYOgW
+Ry7NkHt79N78T2ZkPdlD4JMoAXVlhmmh4Mqa3ubj6tsCrdeat1IaLsn328vwsiC
+GbJDR1/Up4xs/XkkvaV9f/qLgdgsApq+IFOy+QjVMX9elG/q3tZk55o4qV1y9z+
eYGChqu8AhQ4ROznwpdiBc76x4Lkbw6WeLqi+7dYSqy+S81a6F+PWNDP31pox7H1
tAPm0wkeBH3So2dMN/R40aBwDqfjE+2MEq9IZDvD97ahg0nPTTqvNFWcfW1ltVKb
wQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:59 2024 by rpki-client on console-ams.rpki-client.org