Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa
File:                     BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa (raw, json)
Hash identifier:          KhNw9q/S1s34oEWmbKfQd2IfJOrPG8XHP3qU/8kmkx8=
Subject key identifier:   05:FA:5F:89:64:3F:6F:45:47:C9:9A:71:FA:46:F4:8E:4F:12:29:8A
Certificate issuer:       /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial:       018B3D40EA84705FA86EF00A4732B3D47C09
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa
Signing time:             Tue 17 Oct 2023 10:49:06 +0000
ROA not before:           Tue 17 Oct 2023 10:49:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49121
IP address blocks:        185.232.166.0/24 maxlen: 24
                          194.61.10.0/23 maxlen: 23
                          37.221.71.0/24 maxlen: 24
                          37.221.68.0/24 maxlen: 24
                          37.221.69.0/24 maxlen: 24
                          37.221.70.0/24 maxlen: 24
                          45.87.118.0/24 maxlen: 24
                          45.87.117.0/24 maxlen: 24
                          45.87.119.0/24 maxlen: 24
                          185.186.0.0/24 maxlen: 24
                          5.57.209.0/24 maxlen: 24
                          2a09:e200::/48 maxlen: 48
                          2a09:e200:e200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3d:40:ea:84:70:5f:a8:6e:f0:0a:47:32:b3:d4:7c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
        Validity
            Not Before: Oct 17 10:49:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05fa5f89643f6f4547c99a71fa46f48e4f12298a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:54:da:57:b9:05:07:da:48:08:13:05:b6:
                    d2:0a:8a:fc:0f:ba:bb:cf:74:a4:1a:a9:f7:b4:90:
                    58:ee:ac:e8:fc:7c:da:82:f4:3f:ad:2a:34:33:96:
                    3b:67:26:34:89:09:c1:92:f9:c4:19:91:bc:b2:11:
                    61:6c:6a:73:3b:1a:22:f1:4d:96:00:4c:49:12:b8:
                    f9:03:41:8e:4c:8a:3b:c9:80:e1:83:12:9a:3c:e7:
                    c4:a2:de:9d:77:2c:cd:70:6f:4c:bb:2b:7a:01:81:
                    44:8e:42:2a:8d:bb:16:3f:99:70:7d:d9:00:40:c5:
                    23:cf:14:29:d9:20:c4:a6:cd:36:07:86:55:49:85:
                    e7:f3:48:0e:b1:f6:92:3a:d8:37:c8:c6:d4:1a:10:
                    0d:ca:c4:a5:79:bd:20:b4:c0:b1:78:fb:40:3c:29:
                    cf:b1:a4:52:c2:6e:4b:f7:05:99:70:6d:98:1d:14:
                    33:71:ed:f3:28:b3:12:6e:78:d3:f3:3c:95:3b:8a:
                    65:04:e8:a7:4e:22:d3:4b:52:0b:b9:41:01:65:91:
                    c1:fe:61:e9:ff:f2:e0:91:60:65:79:3a:0d:9a:4d:
                    0b:bd:5c:50:c4:c1:5c:d9:5e:b6:46:13:70:e0:be:
                    55:73:d7:a6:9f:bf:89:2e:77:26:b3:ea:41:6f:d0:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FA:5F:89:64:3F:6F:45:47:C9:9A:71:FA:46:F4:8E:4F:12:29:8A
            X509v3 Authority Key Identifier:
                keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.209.0/24
                  37.221.68.0/22
                  45.87.117.0-45.87.119.255
                  185.186.0.0/24
                  185.232.166.0/24
                  194.61.10.0/23
                IPv6:
                  2a09:e200::/48
                  2a09:e200:e200::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:01:4e:18:16:c2:3a:a2:50:1a:8e:0d:aa:e0:42:1a:86:
         49:63:4c:3f:86:d9:45:4f:7a:a6:dd:9f:a6:e8:7d:96:e1:9c:
         e8:01:80:a1:a7:36:64:08:ee:e4:f7:fc:32:b3:01:fb:8e:5a:
         db:c5:f1:36:91:75:30:ae:4c:1b:29:9b:0f:41:8a:5c:db:37:
         02:44:f8:79:81:9e:2d:5d:60:d4:e8:a7:35:24:59:3e:26:67:
         63:87:5c:aa:8e:bd:11:a7:8e:58:54:f9:b1:2c:72:57:fa:88:
         03:ba:28:3a:90:35:20:cf:e5:b7:08:cd:a5:0d:00:12:ec:ba:
         4a:da:08:a8:b8:72:6c:95:d2:b6:79:b3:82:b8:bc:de:ec:5f:
         4b:3c:59:bd:17:02:66:97:66:4c:43:e5:fa:9f:af:d7:92:a5:
         c1:d6:16:65:7a:51:b7:51:c2:dd:05:ad:43:2b:a3:55:ce:6f:
         26:25:f9:b4:60:be:d2:62:2e:76:92:8c:10:db:db:7b:94:de:
         56:80:e0:3c:5d:f5:77:8d:c9:2d:27:b2:7a:f4:8b:3f:1c:38:
         1a:93:a6:9b:2f:c5:74:be:ce:1e:9c:74:ba:be:27:1d:00:3b:
         9e:d2:2a:ba:fe:1d:13:6b:dc:0a:46:39:57:e3:03:e6:a0:44:
         36:71:23:6e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYs9QOqEcF+obvAKRzKz1HwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjMxMDE3MTA0OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWZhNWY4OTY0M2Y2ZjQ1NDdjOTlhNzFmYTQ2ZjQ4ZTRmMTIyOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSFU2le5BQfaSAgTBbbSCor8D7q7
z3SkGqn3tJBY7qzo/HzagvQ/rSo0M5Y7ZyY0iQnBkvnEGZG8shFhbGpzOxoi8U2W
AExJErj5A0GOTIo7yYDhgxKaPOfEot6ddyzNcG9Muyt6AYFEjkIqjbsWP5lwfdkA
QMUjzxQp2SDEps02B4ZVSYXn80gOsfaSOtg3yMbUGhANysSleb0gtMCxePtAPCnP
saRSwm5L9wWZcG2YHRQzce3zKLMSbnjT8zyVO4plBOinTiLTS1ILuUEBZZHB/mHp
//LgkWBleToNmk0LvVxQxMFc2V62RhNw4L5Vc9emn7+JLncms+pBb9AY+wIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFAX6X4lkP29FR8macfpG9I5PEimKMB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvQmZwZmlXUV9iMFZIeVpweC1rYjBqazhTS1lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAyBAIAATAsAwQABTnRAwQC
Jd1EMAwDBAAtV3UDBAMtV3ADBAC5ugADBAC56KYDBAHCPQowGAQCAAIwEgMHACoJ
4gAAAAMHACoJ4gDiADANBgkqhkiG9w0BAQsFAAOCAQEAGKcBThgWwjqiUBqODarg
QhqGSWNMP4bZRU96pt2fpuh9luGc6AGAoac2ZAju5Pf8MrMB+45a28XxNpF1MK5M
GymbD0GKXNs3AkT4eYGeLV1g1OinNSRZPiZnY4dcqo69EaeOWFT5sSxyV/qIA7oo
OpA1IM/ltwjNpQ0AEuy6StoIqLhybJXStnmzgri83uxfSzxZvRcCZpdmTEPl+p+v
15KlwdYWZXpRt1HC3QWtQyujVc5vJiX5tGC+0mIudpKMENvbe5TeVoDgPF31d43J
LSeyevSLPxw4GpOmmy/FdL7OHpx0ur4nHQA7ntIquv4dE2vcCkY5V+MD5qBENnEj
bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:19 2024 by rpki-client on console-fra.rpki-client.org