Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/fyoo-fq6ePlMFnG4EmLNXMjdlbg.roa
File:                     fyoo-fq6ePlMFnG4EmLNXMjdlbg.roa (raw, json)
Hash identifier:          qOtq6Gd5qLIxty1aVZYkL5K8JpUnsrzp4GJWk7GxeMk=
Subject key identifier:   7F:2A:28:F9:FA:BA:78:F9:4C:16:71:B8:12:62:CD:5C:C8:DD:95:B8
Certificate issuer:       /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial:       01862670C24302642E02E757F0075FEA9245
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/fyoo-fq6ePlMFnG4EmLNXMjdlbg.roa
Signing time:             Mon 06 Feb 2023 11:16:09 +0000
ROA not before:           Mon 06 Feb 2023 11:16:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29084
IP address blocks:        109.160.98.0/24 maxlen: 24
                          109.160.4.0/22 maxlen: 22
                          109.160.4.0/24 maxlen: 24
                          109.160.5.0/24 maxlen: 24
                          109.160.6.0/24 maxlen: 24
                          109.160.7.0/24 maxlen: 24
                          109.160.13.0/24 maxlen: 24
                          109.160.43.0/24 maxlen: 24
                          109.160.42.0/24 maxlen: 24
                          109.160.42.0/23 maxlen: 23
                          217.174.48.0/24 maxlen: 24
                          217.174.50.0/24 maxlen: 24
                          217.174.51.0/24 maxlen: 24
                          217.174.48.0/20 maxlen: 20
                          217.174.49.0/24 maxlen: 24
                          217.174.57.0/24 maxlen: 24
                          217.174.58.0/24 maxlen: 24
                          217.174.56.0/24 maxlen: 24
                          217.174.54.0/24 maxlen: 24
                          217.174.55.0/24 maxlen: 24
                          217.174.52.0/24 maxlen: 24
                          217.174.53.0/24 maxlen: 24
                          217.174.61.0/24 maxlen: 24
                          217.174.62.0/24 maxlen: 24
                          217.174.59.0/24 maxlen: 24
                          217.174.60.0/24 maxlen: 24
                          217.174.63.0/24 maxlen: 24
                          87.246.35.0/24 maxlen: 24
                          79.132.1.0/24 maxlen: 24
                          79.132.3.0/24 maxlen: 24
                          79.132.0.0/19 maxlen: 19
                          79.132.2.0/24 maxlen: 24
                          79.132.4.0/24 maxlen: 24
                          79.132.0.0/24 maxlen: 24
                          79.132.9.0/24 maxlen: 24
                          79.132.5.0/24 maxlen: 24
                          79.132.6.0/24 maxlen: 24
                          79.132.7.0/24 maxlen: 24
                          185.78.36.0/22 maxlen: 22
                          79.132.10.0/24 maxlen: 24
                          185.78.37.0/24 maxlen: 24
                          185.78.38.0/24 maxlen: 24
                          79.132.8.0/24 maxlen: 24
                          79.132.11.0/24 maxlen: 24
                          185.78.36.0/24 maxlen: 24
                          79.132.17.0/24 maxlen: 24
                          79.132.15.0/24 maxlen: 24
                          79.132.16.0/24 maxlen: 24
                          79.132.13.0/24 maxlen: 24
                          79.132.14.0/24 maxlen: 24
                          79.132.12.0/24 maxlen: 24
                          185.78.39.0/24 maxlen: 24
                          79.132.20.0/24 maxlen: 24
                          79.132.21.0/24 maxlen: 24
                          79.132.18.0/24 maxlen: 24
                          79.132.19.0/24 maxlen: 24
                          79.132.24.0/24 maxlen: 24
                          79.132.22.0/24 maxlen: 24
                          79.132.23.0/24 maxlen: 24
                          79.132.30.0/24 maxlen: 24
                          79.132.31.0/24 maxlen: 24
                          79.132.29.0/24 maxlen: 24
                          79.132.27.0/24 maxlen: 24
                          79.132.28.0/24 maxlen: 24
                          79.132.25.0/24 maxlen: 24
                          79.132.26.0/24 maxlen: 24
                          212.70.150.0/24 maxlen: 24
                          212.70.157.0/24 maxlen: 24
                          78.108.242.0/24 maxlen: 24
                          84.54.187.0/24 maxlen: 24
                          37.209.173.0/24 maxlen: 24
                          84.54.190.0/24 maxlen: 24
                          84.54.188.0/24 maxlen: 24
                          84.54.189.0/24 maxlen: 24
                          83.222.168.0/24 maxlen: 24
                          83.222.175.0/24 maxlen: 24
                          83.222.182.0/24 maxlen: 24
                          84.54.137.0/24 maxlen: 24
                          84.54.138.0/24 maxlen: 24
                          84.54.136.0/24 maxlen: 24
                          84.54.139.0/24 maxlen: 24
                          84.54.134.0/24 maxlen: 24
                          84.54.135.0/24 maxlen: 24
                          84.54.133.0/24 maxlen: 24
                          84.54.141.0/24 maxlen: 24
                          84.54.142.0/24 maxlen: 24
                          84.54.144.0/24 maxlen: 24
                          84.54.145.0/24 maxlen: 24
                          84.54.143.0/24 maxlen: 24
                          84.54.151.0/24 maxlen: 24
                          84.54.152.0/24 maxlen: 24
                          84.54.149.0/24 maxlen: 24
                          84.54.146.0/24 maxlen: 24
                          84.54.147.0/24 maxlen: 24
                          84.54.158.0/24 maxlen: 24
                          84.54.159.0/24 maxlen: 24
                          84.54.157.0/24 maxlen: 24
                          84.54.156.0/24 maxlen: 24
                          84.54.153.0/24 maxlen: 24
                          84.54.154.0/24 maxlen: 24
                          84.54.160.0/24 maxlen: 24
                          84.54.161.0/24 maxlen: 24
                          84.54.166.0/24 maxlen: 24
                          84.54.165.0/24 maxlen: 24
                          84.54.163.0/24 maxlen: 24
                          84.54.164.0/24 maxlen: 24
                          84.54.162.0/24 maxlen: 24
                          84.54.169.0/24 maxlen: 24
                          84.54.167.0/24 maxlen: 24
                          84.54.168.0/24 maxlen: 24
                          84.54.172.0/24 maxlen: 24
                          84.54.170.0/24 maxlen: 24
                          84.54.171.0/24 maxlen: 24
                          84.54.179.0/24 maxlen: 24
                          84.54.177.0/24 maxlen: 24
                          84.54.178.0/24 maxlen: 24
                          84.54.173.0/24 maxlen: 24
                          84.54.176.0/24 maxlen: 24
                          84.54.174.0/24 maxlen: 24
                          84.54.175.0/24 maxlen: 24
                          37.209.170.0/24 maxlen: 24
                          84.54.180.0/24 maxlen: 24
                          37.209.169.0/24 maxlen: 24
                          84.54.183.0/24 maxlen: 24
                          84.54.181.0/24 maxlen: 24
                          84.54.182.0/24 maxlen: 24
                          37.209.168.0/24 maxlen: 24
                          37.209.168.0/21 maxlen: 24
                          37.209.171.0/24 maxlen: 24
                          37.209.172.0/24 maxlen: 24
                          84.54.186.0/24 maxlen: 24
                          84.54.185.0/24 maxlen: 24
                          84.54.128.0/24 maxlen: 24
                          84.54.130.0/24 maxlen: 24
                          84.54.128.0/18 maxlen: 18
                          84.54.131.0/24 maxlen: 24
                          84.54.129.0/24 maxlen: 24
                          84.54.132.0/24 maxlen: 24
                          2a02:1c0::/29 maxlen: 29
                          2a02:1c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:26:70:c2:43:02:64:2e:02:e7:57:f0:07:5f:ea:92:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
        Validity
            Not Before: Feb  6 11:16:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f2a28f9faba78f94c1671b81262cd5cc8dd95b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:97:74:4a:bf:da:70:d3:06:5d:da:ac:6a:
                    b5:47:54:73:83:8a:62:8e:01:81:c2:94:d0:83:ff:
                    bd:9b:ce:80:31:bf:31:94:1f:e3:a9:6d:c8:19:2b:
                    7b:5c:51:eb:0c:32:6e:7d:8c:3c:d2:52:0e:ea:c6:
                    92:93:47:58:1e:f6:ba:11:46:ce:79:eb:32:ac:2a:
                    5b:8c:27:d3:31:e3:92:f6:46:9f:e2:78:bc:db:0e:
                    cc:98:78:6f:da:31:1f:3d:0f:c1:db:61:5e:f8:e0:
                    23:7a:88:b7:16:3f:45:f2:51:67:68:e8:46:74:f7:
                    34:16:1d:d6:bf:b0:f7:26:30:b9:b1:50:3c:e4:05:
                    8e:d7:9b:dc:31:e3:13:1d:66:af:42:96:59:71:5b:
                    f7:eb:d9:72:27:d9:0c:da:7b:8f:33:ac:0a:e2:70:
                    86:97:bf:fc:95:2b:74:c9:8e:d7:ce:00:97:4f:23:
                    68:a0:f5:c1:38:22:38:80:b1:96:71:a5:45:e2:66:
                    1b:59:ee:26:ff:ee:08:31:a1:c5:7a:25:bf:ba:ac:
                    3e:00:e8:c3:61:91:b0:11:fe:1e:24:4b:70:d0:68:
                    51:e5:06:68:a4:16:a5:83:17:da:27:8d:90:fb:c0:
                    76:71:a9:e9:b5:05:5c:ca:e4:86:dc:af:69:ef:c3:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2A:28:F9:FA:BA:78:F9:4C:16:71:B8:12:62:CD:5C:C8:DD:95:B8
            X509v3 Authority Key Identifier:
                keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/fyoo-fq6ePlMFnG4EmLNXMjdlbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.168.0/21
                  78.108.242.0/24
                  79.132.0.0/19
                  83.222.168.0/24
                  83.222.175.0/24
                  83.222.182.0/24
                  84.54.128.0/18
                  87.246.35.0/24
                  109.160.4.0/22
                  109.160.13.0/24
                  109.160.42.0/23
                  109.160.98.0/24
                  185.78.36.0/22
                  212.70.150.0/24
                  212.70.157.0/24
                  217.174.48.0/20
                IPv6:
                  2a02:1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         78:01:74:87:43:d9:b7:12:01:6f:e7:49:a7:0f:a8:62:30:40:
         30:00:59:5a:5d:94:34:d6:41:a3:32:0a:87:d1:77:0b:54:2c:
         ca:a8:ca:bc:9f:60:26:91:6b:d1:2f:a9:d4:70:a0:40:d2:6b:
         d9:82:4b:1e:a0:4b:86:4c:48:b0:6b:8e:8b:ed:20:c7:88:d5:
         24:34:3a:d0:bb:44:a2:a5:b4:d5:fe:a7:74:78:b8:b1:22:46:
         40:b8:4e:87:8e:a8:26:8d:45:5f:90:a5:98:81:4d:30:b9:1e:
         0c:68:95:3e:53:56:05:5a:5e:e6:32:b1:a7:fc:7d:40:83:99:
         e0:0e:43:80:5d:2c:bc:45:ac:32:c5:c2:17:a8:fd:c6:e1:03:
         4d:4e:22:f5:35:a8:a1:af:d2:2d:28:25:7a:ee:fc:8e:73:6f:
         e4:d3:c0:e7:50:2d:ed:7b:ae:ba:8b:aa:60:7c:9b:88:2c:c0:
         4a:9e:51:70:e7:36:d7:a6:b7:22:1b:20:d3:12:d2:dc:21:8d:
         e5:17:e7:8d:c5:14:1a:17:2b:95:52:0e:c5:ce:ad:1c:55:42:
         c8:64:d5:ff:af:dd:11:23:fc:2d:cf:48:f5:5f:0d:99:ab:4d:
         01:00:22:3f:92:23:58:e5:db:2a:7d:4e:a3:c9:af:37:e6:22:
         61:24:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org