Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/xepzK0hJTB7DmTLHjujGUDUaCIo.roa
File:                     xepzK0hJTB7DmTLHjujGUDUaCIo.roa (raw, json)
Hash identifier:          xfGxcNOcMRm6EN6qTZW8BhlD0Jao0UTN1lrMEoQuvKY=
Subject key identifier:   C5:EA:73:2B:48:49:4C:1E:C3:99:32:C7:8E:E8:C6:50:35:1A:08:8A
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       018C6D138B5067A840C5B4E6E04D87B65E6A
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/xepzK0hJTB7DmTLHjujGUDUaCIo.roa
Signing time:             Fri 15 Dec 2023 10:44:06 +0000
ROA not before:           Fri 15 Dec 2023 10:44:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35470
IP address blocks:        213.187.240.0/21 maxlen: 24
                          89.31.98.0/23 maxlen: 24
                          89.31.96.0/21 maxlen: 24
                          81.4.84.0/22 maxlen: 24
                          178.18.80.0/20 maxlen: 24
                          31.3.96.0/21 maxlen: 24
                          85.10.188.0/22 maxlen: 22
                          141.138.192.0/20 maxlen: 24
                          193.138.204.0/22 maxlen: 24
                          141.138.207.0/24 maxlen: 24
                          185.3.208.0/22 maxlen: 24
                          85.10.176.0/22 maxlen: 24
                          85.10.184.0/22 maxlen: 22
                          185.110.172.0/22 maxlen: 24
                          93.191.128.0/21 maxlen: 24
                          93.191.134.0/24 maxlen: 24
                          83.96.216.0/22 maxlen: 24
                          83.96.220.0/22 maxlen: 24
                          83.96.236.0/22 maxlen: 24
                          83.96.240.0/22 maxlen: 24
                          83.96.244.0/22 maxlen: 24
                          83.96.252.0/22 maxlen: 24
                          185.110.200.0/22 maxlen: 24
                          79.170.88.0/21 maxlen: 24
                          185.96.4.0/22 maxlen: 24
                          83.96.204.0/22 maxlen: 24
                          83.96.200.0/22 maxlen: 24
                          83.96.212.0/22 maxlen: 24
                          185.21.188.0/22 maxlen: 24
                          37.230.96.0/21 maxlen: 24
                          194.60.207.0/24 maxlen: 24
                          37.34.48.0/21 maxlen: 24
                          85.222.224.0/21 maxlen: 24
                          85.222.224.0/22 maxlen: 24
                          2a02:348:59::/48 maxlen: 48
                          2a02:348:b4::/48 maxlen: 48
                          2a02:348:8f::/48 maxlen: 48
                          2a02:348:c8::/48 maxlen: 48
                          2a02:348:a3::/48 maxlen: 48
                          2a02:348:7e::/48 maxlen: 48
                          2a02:348:81::/48 maxlen: 48
                          2a02:348:1001::/48 maxlen: 48
                          2a02:348:37::/48 maxlen: 48
                          2a02:348:92::/48 maxlen: 48
                          2a02:348:95::/48 maxlen: 48
                          2a02:348:15::/48 maxlen: 48
                          2a02:348:70::/48 maxlen: 48
                          2a02:348:4b::/48 maxlen: 48
                          2a02:348:89::/48 maxlen: 48
                          2a02:348:9a::/48 maxlen: 48
                          2a02:348:78::/48 maxlen: 48
                          2a02:348:53::/48 maxlen: 48
                          2a02:348:b1::/48 maxlen: 48
                          2a02:348:8c::/48 maxlen: 48
                          2a02:348:a0::/48 maxlen: 48
                          2a02:348:7b::/48 maxlen: 48
                          2a02:348:56::/48 maxlen: 48
                          2a02:348:79::/48 maxlen: 48
                          2a02:348:54::/48 maxlen: 48
                          2a02:348:8a::/48 maxlen: 48
                          2a02:348:8d::/48 maxlen: 48
                          2a02:348:1e::/48 maxlen: 48
                          2a02:348:a1::/48 maxlen: 48
                          2a02:348:7c::/48 maxlen: 48
                          2a02:348:57::/48 maxlen: 48
                          2a02:348:32::/48 maxlen: 48
                          2a02:348:b2::/48 maxlen: 48
                          2a02:348:35::/48 maxlen: 48
                          2a02:348:90::/48 maxlen: 48
                          2a02:348:46::/48 maxlen: 48
                          2a02:348:29::/48 maxlen: 48
                          2a02:348:84::/48 maxlen: 48
                          2a02:348:5f::/48 maxlen: 48
                          2a02:348:ba::/48 maxlen: 48
                          2a02:348:3a::/48 maxlen: 48
                          2a02:348:98::/48 maxlen: 48
                          2a02:348:73::/48 maxlen: 48
                          2a02:348:ac::/48 maxlen: 48
                          2a02:348:87::/48 maxlen: 48
                          2a02:348:62::/48 maxlen: 48
                          2a02:348:9b::/48 maxlen: 48
                          2a02:348:76::/48 maxlen: 48
                          2a02:348:99::/48 maxlen: 48
                          2a02:348:74::/48 maxlen: 48
                          2a02:348:4f::/48 maxlen: 48
                          2a02:348:88::/48 maxlen: 48
                          2a02:348:63::/48 maxlen: 48
                          2a02:348:9c::/48 maxlen: 48
                          2a02:348:77::/48 maxlen: 48
                          2a02:348:55::/48 maxlen: 48
                          2a02:348:8b::/48 maxlen: 48
                          2a02:348:5e6::/48 maxlen: 48
                          2a02:348:7f::/48 maxlen: 48
                          2a02:348:5a::/48 maxlen: 48
                          2a02:348:5d::/48 maxlen: 48
                          2a02:348:38::/48 maxlen: 48
                          2a02:348:6e::/48 maxlen: 48
                          2a02:348:71::/48 maxlen: 48
                          2a02:348:4c::/48 maxlen: 48
                          2a02:348:82::/48 maxlen: 48
                          2a02:348:85::/48 maxlen: 48
                          2a02:348::/32 maxlen: 32
                          2a02:348:60::/48 maxlen: 48
                          2a02:348:bb::/48 maxlen: 48
                          2a02:348:3b::/48 maxlen: 48
                          2a02:348:96::/48 maxlen: 48
                          2a02:348:b9::/48 maxlen: 48
                          2a02:348:39::/48 maxlen: 48
                          2a02:348:94::/48 maxlen: 48
                          2a02:348:14::/48 maxlen: 48
                          2a02:348:6f::/48 maxlen: 48
                          2a02:348:28::/48 maxlen: 48
                          2a02:348:3::/48 maxlen: 48
                          2a02:348:83::/48 maxlen: 48
                          2a02:348:5e::/48 maxlen: 48
                          2a02:348:61::/48 maxlen: 48
                          2a02:348:bc::/48 maxlen: 48
                          2a02:348:3c::/48 maxlen: 48
                          2a02:348:97::/48 maxlen: 48
                          2a02:348:75::/48 maxlen: 48
                          2a02:348:50::/48 maxlen: 48
                          2a02:348:86::/48 maxlen: 48
                          2a02:348:7d::/48 maxlen: 48
                          2a02:348:58::/48 maxlen: 48
                          2a02:348:33::/48 maxlen: 48
                          2a02:348:b3::/48 maxlen: 48
                          2a02:348:8e::/48 maxlen: 48
                          2a02:348:91::/48 maxlen: 48
                          2a02:348:47::/48 maxlen: 48
                          2a02:348:a2::/48 maxlen: 48
                          2a02:348:80::/48 maxlen: 48
                          2a02:348:5b::/48 maxlen: 48
                          2a02:348:36::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:13:8b:50:67:a8:40:c5:b4:e6:e0:4d:87:b6:5e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Dec 15 10:44:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5ea732b48494c1ec39932c78ee8c650351a088a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:f7:43:8e:8b:f5:44:57:26:3d:b9:5d:67:
                    70:be:6c:d2:67:3e:3c:58:77:35:5c:d9:fe:43:91:
                    89:d0:86:3a:ef:ee:c5:8d:23:8d:ae:5a:fe:89:f1:
                    74:f1:b8:34:19:d2:89:92:a6:bd:46:42:97:62:e3:
                    a0:f1:fa:93:4a:ce:35:eb:c2:0c:0e:fa:d3:2d:b7:
                    b1:8e:0e:66:72:b0:39:00:ae:5f:4f:4a:19:15:ee:
                    c5:19:66:a6:5c:15:71:18:f5:ec:e8:7d:3a:c0:5b:
                    18:cc:d9:18:cd:6f:39:18:49:a4:3f:7a:99:40:ad:
                    0a:58:6b:e0:cf:f2:fb:b2:bd:66:55:59:10:a0:8a:
                    42:13:7d:b0:5f:bf:60:29:a4:ed:46:2e:1b:92:80:
                    9d:e2:3d:57:b2:9b:2b:e8:1c:38:e0:7b:e7:95:ee:
                    61:be:c5:bf:cd:08:a2:05:88:e4:ad:a9:78:92:4b:
                    cc:f0:e7:a6:be:32:7b:b0:f8:ab:17:e4:56:d4:81:
                    fc:f7:99:3b:09:54:c4:ef:68:fa:d7:39:91:78:d4:
                    28:a0:07:d8:09:f3:7a:bb:a5:16:9f:4a:12:6c:2f:
                    3e:e7:b4:71:79:d8:c6:4f:5d:93:6b:d4:ed:87:66:
                    6e:3b:31:29:0f:a1:a7:4e:b3:73:e2:37:cc:de:25:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EA:73:2B:48:49:4C:1E:C3:99:32:C7:8E:E8:C6:50:35:1A:08:8A
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/xepzK0hJTB7DmTLHjujGUDUaCIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.3.96.0/21
                  37.34.48.0/21
                  37.230.96.0/21
                  79.170.88.0/21
                  81.4.84.0/22
                  83.96.200.0/21
                  83.96.212.0-83.96.223.255
                  83.96.236.0-83.96.247.255
                  83.96.252.0/22
                  85.10.176.0/22
                  85.10.184.0/21
                  85.222.224.0/21
                  89.31.96.0/21
                  93.191.128.0/21
                  141.138.192.0/20
                  178.18.80.0/20
                  185.3.208.0/22
                  185.21.188.0/22
                  185.96.4.0/22
                  185.110.172.0/22
                  185.110.200.0/22
                  193.138.204.0/22
                  194.60.207.0/24
                  213.187.240.0/21
                IPv6:
                  2a02:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:56:42:37:f8:1c:e9:ac:42:13:8a:94:cd:54:06:f7:7c:15:
         64:2e:37:42:a6:10:55:7e:47:26:53:ab:f0:92:55:ad:73:44:
         07:13:19:e9:29:cb:0f:d4:86:22:df:23:9b:51:c3:e6:00:57:
         f1:a6:5e:ec:da:f7:d7:e8:ab:55:3c:f7:25:2b:4b:31:4c:e8:
         f9:97:20:93:29:ee:87:b7:36:68:9f:fa:64:96:95:ef:a5:ae:
         ee:22:d8:3f:06:08:d6:0f:bd:e9:e6:3a:b5:dd:8e:3d:f4:c4:
         76:6b:8d:ad:fd:87:39:a1:96:7e:81:e5:3d:36:3c:d0:e6:40:
         74:c5:d2:33:30:6c:0b:a5:4b:b6:1b:cd:a0:0e:d8:23:f5:5e:
         12:f9:ff:38:a8:1c:cc:53:dc:d2:a1:a1:0d:6a:21:e3:84:7a:
         e3:3e:2f:d6:bf:2b:b1:4a:54:ee:9c:ee:af:64:26:27:6a:69:
         ea:cf:15:c2:91:1f:c7:7b:21:3f:b1:22:cd:3a:0e:a4:2e:24:
         30:d5:34:65:c2:18:e4:76:56:f6:eb:9a:e0:2a:25:28:c7:76:
         4f:fd:f8:50:e8:f3:8a:d8:b0:c8:ad:32:f7:ba:46:1e:37:d1:
         69:4a:7c:c4:a4:c8:b1:f7:45:d8:f5:87:0c:4c:f8:f5:89:4c:
         98:cb:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org