Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/uT4xkas4xLUMV9caEF84QigSMbE.roa
File:                     uT4xkas4xLUMV9caEF84QigSMbE.roa (raw, json)
Hash identifier:          5des0jj0yI5egeNX8lKvZ8KEJ/LlyBqw2KueiEOV86Q=
Subject key identifier:   B9:3E:31:91:AB:38:C4:B5:0C:57:D7:1A:10:5F:38:42:28:12:31:B1
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E3279C5F47130E2DDCDD48A24B15B7108
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/uT4xkas4xLUMV9caEF84QigSMbE.roa
Signing time:             Tue 12 Mar 2024 11:43:45 +0000
ROA not before:           Tue 12 Mar 2024 11:43:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 08:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:32:79:c5:f4:71:30:e2:dd:cd:d4:8a:24:b1:5b:71:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 12 11:43:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b93e3191ab38c4b50c57d71a105f3842281231b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:8e:0c:7d:04:33:d4:d7:27:e3:cc:b3:94:
                    ae:2d:5f:f7:6f:90:bc:6a:1f:c2:dd:21:be:dd:df:
                    b4:cd:60:1a:6e:d5:92:ce:05:91:b7:76:49:0f:4a:
                    3a:46:76:92:09:a1:fa:68:3a:43:f2:b4:9f:eb:fa:
                    d3:e5:9f:f4:43:b6:f3:fe:5e:54:80:4a:67:4d:64:
                    10:8b:1b:d4:11:54:62:49:f5:30:44:7a:63:d9:2f:
                    de:0d:eb:88:74:31:f1:70:7f:8f:73:f3:21:c6:8a:
                    84:3f:f3:0c:d9:5b:6f:55:70:80:3b:4a:86:dd:5f:
                    d0:f1:00:bd:39:e4:b6:4b:37:41:24:2e:51:db:3f:
                    c7:e3:e2:78:12:e9:49:c1:bb:69:7b:57:90:a0:1a:
                    9a:cd:2c:e3:3a:0c:a4:46:b9:a4:e7:94:25:be:09:
                    5d:8e:c5:1d:23:e3:f1:4d:8e:f5:f7:79:f4:79:8e:
                    4b:c4:c4:91:4b:8d:ec:0d:f0:76:f0:cb:e8:0a:2a:
                    b9:22:e4:e2:28:e4:88:57:6a:e3:01:c0:e3:2d:68:
                    9d:26:50:dc:86:16:4a:d7:08:0d:9d:79:e3:90:43:
                    7c:88:7e:f2:a4:5b:03:75:45:05:ca:47:28:e4:2c:
                    dd:34:8b:79:3d:24:c7:d7:14:1d:20:10:0d:db:1c:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3E:31:91:AB:38:C4:B5:0C:57:D7:1A:10:5F:38:42:28:12:31:B1
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/uT4xkas4xLUMV9caEF84QigSMbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::/36
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:66:d4:49:3d:97:11:73:1e:66:7c:c0:a1:91:73:dd:4d:2e:
         53:1e:c9:f2:f3:38:2a:e2:f1:ad:7c:31:f4:53:11:e2:8f:0f:
         93:ed:0b:d2:54:1b:c2:4c:c1:8e:b7:0e:b0:c4:e7:0c:63:f7:
         8c:c2:a4:3f:2a:2b:4a:cf:5c:15:86:71:aa:9f:51:98:ca:6c:
         18:b7:e4:f8:40:10:b5:29:91:76:cd:24:04:51:3d:90:12:68:
         63:c3:a8:41:59:61:2c:11:23:f6:5c:09:c9:1e:61:03:22:53:
         b6:11:a6:bc:d3:2f:2d:6d:a8:00:e3:57:93:62:7e:80:51:60:
         0b:51:9e:6c:5e:95:92:73:cc:f2:f8:c8:10:40:a2:64:1f:9b:
         b5:6d:1e:9b:45:0e:7e:4c:bd:12:51:69:01:2c:56:ea:21:0b:
         32:56:e3:1f:cf:33:d3:56:90:2a:f5:d6:51:ef:79:17:e8:b9:
         36:5a:34:df:44:95:34:61:06:7e:c1:59:67:ea:b3:2a:29:6b:
         1a:9c:0a:32:27:ed:45:a7:fb:88:cd:81:2b:c5:2f:b5:e9:ee:
         13:64:8c:ec:12:ef:13:20:d0:69:56:e1:94:56:65:7d:34:c0:
         b6:b7:62:bb:0e:c4:78:93:57:66:28:98:97:e6:fb:e8:b1:16:
         9f:f2:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 10:56:36 2024 by rpki-client on console-fra.rpki-client.org