Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Pc4DHswfEhvBT3hXGbThmkNSjbg.roa
File:                     Pc4DHswfEhvBT3hXGbThmkNSjbg.roa (raw, json)
Hash identifier:          wnKh4U3tuQCtsSDswVIefwzBONmGLbtJMQyVwYXg4bw=
Subject key identifier:   3D:CE:03:1E:CC:1F:12:1B:C1:4F:78:57:19:B4:E1:9A:43:52:8D:B8
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       0190BA7084C3D670C75FC038A71C84E5D36B
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Pc4DHswfEhvBT3hXGbThmkNSjbg.roa
Signing time:             Tue 16 Jul 2024 07:27:34 +0000
ROA not before:           Tue 16 Jul 2024 07:27:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48728
IP address blocks:        31.11.48.0/21 maxlen: 21
                          37.186.32.0/19 maxlen: 19
                          37.186.32.0/24 maxlen: 24
                          37.186.33.0/24 maxlen: 24
                          37.186.34.0/24 maxlen: 24
                          37.186.35.0/24 maxlen: 24
                          37.186.36.0/24 maxlen: 24
                          37.186.37.0/24 maxlen: 24
                          37.186.38.0/24 maxlen: 24
                          37.186.39.0/24 maxlen: 24
                          37.186.40.0/24 maxlen: 24
                          37.186.41.0/24 maxlen: 24
                          37.186.42.0/24 maxlen: 24
                          37.186.43.0/24 maxlen: 24
                          37.186.44.0/24 maxlen: 24
                          37.186.45.0/24 maxlen: 24
                          37.186.46.0/24 maxlen: 24
                          37.186.47.0/24 maxlen: 24
                          37.186.48.0/24 maxlen: 24
                          37.186.49.0/24 maxlen: 24
                          37.186.50.0/24 maxlen: 24
                          37.186.51.0/24 maxlen: 24
                          37.186.52.0/24 maxlen: 24
                          37.186.53.0/24 maxlen: 24
                          37.186.54.0/24 maxlen: 24
                          37.186.55.0/24 maxlen: 24
                          37.186.56.0/24 maxlen: 24
                          37.186.57.0/24 maxlen: 24
                          37.186.58.0/24 maxlen: 24
                          37.186.59.0/24 maxlen: 24
                          37.186.60.0/24 maxlen: 24
                          37.186.61.0/24 maxlen: 24
                          37.186.62.0/24 maxlen: 24
                          37.186.63.0/24 maxlen: 24
                          80.76.160.0/20 maxlen: 20
                          80.76.160.0/21 maxlen: 21
                          80.76.160.0/24 maxlen: 24
                          80.76.161.0/24 maxlen: 24
                          80.76.162.0/24 maxlen: 24
                          80.76.163.0/24 maxlen: 24
                          80.76.164.0/24 maxlen: 24
                          80.76.165.0/24 maxlen: 24
                          80.76.168.0/21 maxlen: 21
                          80.76.170.0/24 maxlen: 24
                          80.76.171.0/24 maxlen: 24
                          80.76.172.0/24 maxlen: 24
                          80.76.173.0/24 maxlen: 24
                          80.76.174.0/24 maxlen: 24
                          80.76.175.0/24 maxlen: 24
                          103.17.0.0/22 maxlen: 22
                          103.17.0.0/24 maxlen: 24
                          103.17.1.0/24 maxlen: 24
                          103.17.2.0/24 maxlen: 24
                          103.17.3.0/24 maxlen: 24
                          103.23.124.0/22 maxlen: 22
                          103.23.124.0/24 maxlen: 24
                          103.23.125.0/24 maxlen: 24
                          103.23.126.0/24 maxlen: 24
                          103.23.127.0/24 maxlen: 24
                          103.199.88.0/22 maxlen: 22
                          103.199.88.0/24 maxlen: 24
                          103.199.89.0/24 maxlen: 24
                          103.199.90.0/24 maxlen: 24
                          103.199.91.0/24 maxlen: 24
                          103.225.72.0/22 maxlen: 22
                          103.225.72.0/24 maxlen: 24
                          103.225.73.0/24 maxlen: 24
                          103.225.74.0/24 maxlen: 24
                          103.225.75.0/24 maxlen: 24
                          185.247.88.0/22 maxlen: 22
                          212.70.96.0/19 maxlen: 19
                          212.70.96.0/24 maxlen: 24
                          212.70.97.0/24 maxlen: 24
                          212.70.98.0/24 maxlen: 24
                          212.70.99.0/24 maxlen: 24
                          212.70.102.0/24 maxlen: 24
                          212.70.104.0/24 maxlen: 24
                          212.70.106.0/24 maxlen: 24
                          212.70.107.0/24 maxlen: 24
                          212.70.108.0/24 maxlen: 24
                          212.70.109.0/24 maxlen: 24
                          212.70.110.0/24 maxlen: 24
                          212.70.111.0/24 maxlen: 24
                          212.70.112.0/24 maxlen: 24
                          212.70.113.0/24 maxlen: 24
                          212.70.114.0/24 maxlen: 24
                          212.70.115.0/24 maxlen: 24
                          212.70.116.0/24 maxlen: 24
                          212.70.117.0/24 maxlen: 24
                          212.70.118.0/24 maxlen: 24
                          212.70.119.0/24 maxlen: 24
                          212.70.121.0/24 maxlen: 24
                          212.70.122.0/24 maxlen: 24
                          212.70.125.0/24 maxlen: 24
                          212.70.126.0/24 maxlen: 24
                          212.70.127.0/24 maxlen: 24
                          2a04:7f80::/29 maxlen: 29
                          2a04:7f80::/48 maxlen: 48
                          2a04:7f80:0:a::/64 maxlen: 64
                          2a04:7f80:2::/48 maxlen: 48
                          2a04:7f80:3::/48 maxlen: 48
                          2a04:7f80:4::/48 maxlen: 48
                          2a04:7f80:5::/48 maxlen: 48
                          2a04:7f80:10::/48 maxlen: 48
                          2a04:7f80:11::/48 maxlen: 48
                          2a04:7f80:12::/48 maxlen: 48
                          2a04:7f80:13::/48 maxlen: 48
                          2a04:7f80:14::/48 maxlen: 48
                          2a04:7f80:15::/48 maxlen: 48
                          2a04:7f80:16::/48 maxlen: 48
                          2a04:7f80:17::/48 maxlen: 48
                          2a04:7f80:19::/48 maxlen: 48
                          2a04:7f80:1a::/48 maxlen: 48
                          2a04:7f80:1b::/48 maxlen: 48
                          2a04:7f80:1c::/48 maxlen: 48
                          2a04:7f80:1d::/48 maxlen: 48
                          2a04:7f80:1e::/48 maxlen: 48
                          2a04:7f80:1f::/48 maxlen: 48
                          2a04:7f80:50::/48 maxlen: 48
                          2a04:7f80:51::/48 maxlen: 48
                          2a04:7f80:52::/48 maxlen: 48
                          2a04:7f80:53::/48 maxlen: 48
                          2a04:7f80:54::/48 maxlen: 48
                          2a04:7f80:55::/48 maxlen: 48
                          2a04:7f80:56::/48 maxlen: 48
                          2a04:7f80:57::/48 maxlen: 48
                          2a04:7f80:58::/48 maxlen: 48
                          2a04:7f80:5a::/48 maxlen: 48
                          2a04:7f80:5b::/48 maxlen: 48
                          2a04:7f80:5c::/48 maxlen: 48
                          2a04:7f80:5d::/48 maxlen: 48
                          2a04:7f80:5e::/48 maxlen: 48
                          2a04:7f80:5f::/48 maxlen: 48
                          2a04:7f80:84::/48 maxlen: 48
                          2a04:7f80:85::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 16 Jul 2024 08:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ba:70:84:c3:d6:70:c7:5f:c0:38:a7:1c:84:e5:d3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: Jul 16 07:27:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3dce031ecc1f121bc14f785719b4e19a43528db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:8f:4b:f8:b2:19:61:7a:27:20:fa:6c:a7:
                    77:bf:0e:d0:af:e7:39:9b:26:35:80:56:36:b8:ab:
                    54:39:f3:fc:16:68:5c:05:3e:e6:8c:0b:46:4d:6f:
                    37:ec:2c:7c:62:42:ae:67:cb:88:f4:34:18:0d:45:
                    d6:f7:74:1b:b5:c8:fa:fb:33:89:b4:44:c7:d1:e3:
                    b9:09:63:82:80:0e:02:5e:1f:e3:5f:92:cd:4e:01:
                    88:3f:2d:72:f3:7f:69:44:27:71:44:0c:c5:7e:cf:
                    df:84:b9:a5:93:34:51:c7:b6:21:f7:02:10:a5:11:
                    2c:87:a7:2c:d6:dd:09:df:57:68:cc:c1:7c:f3:47:
                    c1:95:44:88:76:58:c5:4d:4c:1c:ee:65:8b:7d:da:
                    1a:0f:b7:d1:61:f5:25:37:45:10:14:f3:30:0d:f6:
                    c6:9c:3a:32:c1:2a:63:c0:95:f1:e6:e7:68:29:b5:
                    f4:81:88:a0:4d:20:36:da:5a:0c:c0:44:09:3f:ec:
                    55:56:5f:16:5b:64:d9:70:37:40:6a:72:1e:19:ac:
                    51:bd:5b:ec:a1:96:b2:ab:e5:49:fb:c8:50:29:72:
                    de:70:57:e1:76:d0:4f:a4:48:a8:be:15:d0:6b:ca:
                    40:bf:0d:ed:45:a8:00:82:3a:5e:f9:81:02:6f:8c:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CE:03:1E:CC:1F:12:1B:C1:4F:78:57:19:B4:E1:9A:43:52:8D:B8
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Pc4DHswfEhvBT3hXGbThmkNSjbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.48.0/21
                  37.186.32.0/19
                  80.76.160.0/20
                  103.17.0.0/22
                  103.23.124.0/22
                  103.199.88.0/22
                  103.225.72.0/22
                  185.247.88.0/22
                  212.70.96.0/19
                IPv6:
                  2a04:7f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         98:ae:a0:dd:fe:e9:ed:06:64:c6:0f:6a:93:54:8d:78:6e:f0:
         1a:55:c0:5b:ad:b4:78:b8:76:35:af:46:b8:a6:98:e5:6a:af:
         fb:02:4f:96:82:f9:ce:f6:bb:7b:26:1e:5e:91:37:22:aa:74:
         93:4a:aa:57:bf:9e:5a:08:b2:ae:6c:49:8a:20:70:cd:b3:88:
         bf:ea:6f:a5:16:57:fe:19:f7:a8:ea:d0:1d:e1:52:31:dc:3a:
         88:93:72:a8:da:46:1b:07:69:9b:a9:79:81:fb:d4:89:98:b1:
         c3:c6:84:95:d8:fd:e4:ea:82:8d:50:83:1f:8d:3e:b0:98:ad:
         fb:ba:0d:2b:ea:c8:35:f4:7e:d3:82:68:88:23:1e:7a:63:78:
         da:66:91:74:f4:47:fe:1d:57:c2:00:dc:01:46:45:38:94:da:
         f9:75:a9:b0:32:d1:20:b8:61:f1:52:c3:1b:e0:af:63:93:58:
         65:79:7d:78:d1:ae:97:49:de:67:09:56:bd:9a:90:99:37:c5:
         e9:d6:e3:de:38:4f:31:5a:04:62:5e:e2:39:64:f7:73:87:a0:
         50:ee:27:06:06:0f:02:70:54:82:69:f4:91:9b:c5:18:4a:68:
         d7:65:5d:fd:00:6c:3b:7c:34:29:72:f9:97:a5:7d:4e:a2:61:
         b0:ed:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:45:02 2025 by rpki-client