Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/8hSeq4pW2yddS0rfT1DV75hmQSw.roa
File:                     8hSeq4pW2yddS0rfT1DV75hmQSw.roa (raw, json)
Hash identifier:          ZcmOU8cHGwTGLCw4mNnSKPbZIYS8cz9IN7T5tC7KGT8=
Subject key identifier:   F2:14:9E:AB:8A:56:DB:27:5D:4B:4A:DF:4F:50:D5:EF:98:66:41:2C
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       01882FC49BE12D12916794C5809BA3E9C053
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/8hSeq4pW2yddS0rfT1DV75hmQSw.roa
Signing time:             Thu 18 May 2023 16:49:54 +0000
ROA not before:           Thu 18 May 2023 16:49:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198610
IP address blocks:        45.80.68.0/22 maxlen: 24
                          45.80.68.0/24 maxlen: 24
                          45.80.69.0/24 maxlen: 24
                          45.80.70.0/24 maxlen: 24
                          45.80.71.0/24 maxlen: 24
                          45.12.236.0/24 maxlen: 24
                          45.12.236.0/22 maxlen: 24
                          45.12.237.0/24 maxlen: 24
                          45.12.238.0/24 maxlen: 24
                          45.12.239.0/24 maxlen: 24
                          45.147.176.0/24 maxlen: 24
                          45.147.176.0/22 maxlen: 24
                          45.147.177.0/24 maxlen: 24
                          45.147.178.0/24 maxlen: 24
                          45.147.179.0/24 maxlen: 24
                          5.181.109.0/24 maxlen: 24
                          5.181.110.0/24 maxlen: 24
                          5.181.111.0/24 maxlen: 24
                          5.181.108.0/22 maxlen: 24
                          5.181.108.0/24 maxlen: 24
                          45.141.77.0/24 maxlen: 24
                          45.141.78.0/24 maxlen: 24
                          45.141.76.0/24 maxlen: 24
                          45.141.76.0/22 maxlen: 24
                          45.67.57.0/24 maxlen: 24
                          45.67.58.0/24 maxlen: 24
                          45.141.79.0/24 maxlen: 24
                          45.67.56.0/24 maxlen: 24
                          45.67.56.0/22 maxlen: 24
                          45.67.59.0/24 maxlen: 24
                          185.19.204.0/22 maxlen: 24
                          185.19.204.0/24 maxlen: 24
                          185.19.205.0/24 maxlen: 24
                          185.19.206.0/24 maxlen: 24
                          185.19.207.0/24 maxlen: 24
                          193.168.46.0/24 maxlen: 24
                          193.168.46.0/23 maxlen: 24
                          193.168.47.0/24 maxlen: 24
                          193.168.48.0/23 maxlen: 24
                          193.168.48.0/24 maxlen: 24
                          193.168.49.0/24 maxlen: 24
                          45.12.16.0/24 maxlen: 24
                          45.12.16.0/22 maxlen: 24
                          45.12.17.0/24 maxlen: 24
                          45.12.18.0/24 maxlen: 24
                          45.12.19.0/24 maxlen: 24
                          95.214.61.0/24 maxlen: 24
                          95.214.62.0/24 maxlen: 24
                          95.214.63.0/24 maxlen: 24
                          95.214.60.0/24 maxlen: 24
                          95.214.60.0/22 maxlen: 24
                          81.200.112.0/24 maxlen: 24
                          81.200.113.0/24 maxlen: 24
                          81.200.112.0/21 maxlen: 24
                          213.139.208.0/22 maxlen: 24
                          213.139.208.0/24 maxlen: 24
                          81.200.114.0/24 maxlen: 24
                          213.139.209.0/24 maxlen: 24
                          81.200.115.0/24 maxlen: 24
                          81.200.116.0/24 maxlen: 24
                          81.200.118.0/24 maxlen: 24
                          81.200.117.0/24 maxlen: 24
                          213.139.210.0/24 maxlen: 24
                          213.139.211.0/24 maxlen: 24
                          81.200.119.0/24 maxlen: 24
                          45.146.164.0/24 maxlen: 24
                          45.146.164.0/22 maxlen: 24
                          45.146.165.0/24 maxlen: 24
                          45.146.166.0/24 maxlen: 24
                          45.146.167.0/24 maxlen: 24
                          91.106.206.0/24 maxlen: 24
                          91.106.200.0/21 maxlen: 24
                          91.106.200.0/24 maxlen: 24
                          91.106.201.0/24 maxlen: 24
                          91.106.202.0/24 maxlen: 24
                          91.106.203.0/24 maxlen: 24
                          91.106.204.0/24 maxlen: 24
                          91.106.205.0/24 maxlen: 24
                          91.106.207.0/24 maxlen: 24
                          45.12.72.0/22 maxlen: 24
                          62.113.96.0/20 maxlen: 24
                          62.113.97.0/24 maxlen: 24
                          62.113.98.0/24 maxlen: 24
                          62.113.96.0/24 maxlen: 24
                          62.113.104.0/24 maxlen: 24
                          62.113.105.0/24 maxlen: 24
                          62.113.99.0/24 maxlen: 24
                          62.113.100.0/24 maxlen: 24
                          62.113.101.0/24 maxlen: 24
                          62.113.102.0/24 maxlen: 24
                          62.113.103.0/24 maxlen: 24
                          62.113.110.0/24 maxlen: 24
                          62.113.111.0/24 maxlen: 24
                          62.113.106.0/24 maxlen: 24
                          62.113.107.0/24 maxlen: 24
                          62.113.108.0/24 maxlen: 24
                          62.113.109.0/24 maxlen: 24
                          193.200.72.0/24 maxlen: 24
                          193.200.72.0/22 maxlen: 24
                          193.200.73.0/24 maxlen: 24
                          193.200.74.0/24 maxlen: 24
                          193.200.75.0/24 maxlen: 24
                          217.172.24.0/24 maxlen: 24
                          217.172.24.0/22 maxlen: 24
                          217.172.27.0/24 maxlen: 24
                          217.172.25.0/24 maxlen: 24
                          217.172.26.0/24 maxlen: 24
                          185.78.30.0/24 maxlen: 24
                          185.78.31.0/24 maxlen: 24
                          185.78.28.0/22 maxlen: 24
                          185.78.28.0/24 maxlen: 24
                          185.78.29.0/24 maxlen: 24
                          45.84.224.0/22 maxlen: 24
                          45.84.224.0/24 maxlen: 24
                          45.84.225.0/24 maxlen: 24
                          45.84.226.0/24 maxlen: 24
                          45.84.227.0/24 maxlen: 24
                          185.225.34.0/24 maxlen: 24
                          185.225.35.0/24 maxlen: 24
                          185.225.32.0/22 maxlen: 24
                          185.225.32.0/24 maxlen: 24
                          185.225.33.0/24 maxlen: 24
                          185.50.24.0/24 maxlen: 24
                          185.50.24.0/22 maxlen: 24
                          45.90.32.0/24 maxlen: 24
                          45.90.32.0/22 maxlen: 24
                          45.90.33.0/24 maxlen: 24
                          45.90.34.0/24 maxlen: 24
                          45.90.35.0/24 maxlen: 24
                          5.101.153.244/32 maxlen: 32
                          87.236.17.122/32 maxlen: 32
                          5.101.153.242/32 maxlen: 32
                          185.50.25.0/24 maxlen: 24
                          185.50.26.0/24 maxlen: 24
                          185.50.27.0/24 maxlen: 24
                          45.9.40.0/24 maxlen: 24
                          45.9.40.0/22 maxlen: 24
                          45.9.41.0/24 maxlen: 24
                          45.9.42.0/24 maxlen: 24
                          45.9.43.0/24 maxlen: 24
                          62.217.176.0/21 maxlen: 24
                          62.217.177.0/24 maxlen: 24
                          62.217.178.0/24 maxlen: 24
                          62.217.179.0/24 maxlen: 24
                          62.217.176.0/24 maxlen: 24
                          62.217.183.0/24 maxlen: 24
                          62.217.180.0/24 maxlen: 24
                          62.217.181.0/24 maxlen: 24
                          62.217.182.0/24 maxlen: 24
                          45.130.42.0/24 maxlen: 24
                          45.130.43.0/24 maxlen: 24
                          45.130.40.0/22 maxlen: 24
                          45.130.40.0/24 maxlen: 24
                          45.130.41.0/24 maxlen: 24
                          193.176.76.0/24 maxlen: 24
                          193.176.76.0/22 maxlen: 24
                          193.176.77.0/24 maxlen: 24
                          193.176.78.0/24 maxlen: 24
                          193.176.79.0/24 maxlen: 24
                          5.101.154.191/32 maxlen: 32
                          31.129.96.0/20 maxlen: 24
                          31.129.98.0/24 maxlen: 24
                          31.129.96.0/24 maxlen: 24
                          87.236.16.0/24 maxlen: 24
                          87.236.16.0/21 maxlen: 24
                          87.236.17.0/24 maxlen: 24
                          87.236.21.0/24 maxlen: 24
                          87.236.22.0/24 maxlen: 24
                          87.236.23.0/24 maxlen: 24
                          87.236.18.0/24 maxlen: 24
                          87.236.19.0/24 maxlen: 24
                          87.236.20.0/24 maxlen: 24
                          185.155.118.0/24 maxlen: 24
                          5.101.152.0/24 maxlen: 24
                          5.101.152.0/21 maxlen: 24
                          5.101.153.0/24 maxlen: 24
                          5.101.154.0/24 maxlen: 24
                          5.101.155.0/24 maxlen: 24
                          5.101.156.0/24 maxlen: 24
                          5.101.157.0/24 maxlen: 24
                          5.101.158.0/24 maxlen: 24
                          5.101.159.0/24 maxlen: 24
                          2a04:bac0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 03 Aug 2023 16:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2f:c4:9b:e1:2d:12:91:67:94:c5:80:9b:a3:e9:c0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: May 18 16:49:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f2149eab8a56db275d4b4adf4f50d5ef9866412c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:d5:41:45:f0:3a:26:92:d6:ff:3c:98:bd:
                    d9:2d:ba:cb:68:a9:e2:43:d9:1d:06:d4:5c:86:f1:
                    e0:1f:15:2e:b1:d4:8e:97:ac:b7:d4:73:1f:f1:08:
                    d3:28:70:33:60:93:db:47:5a:6d:63:2b:20:0f:7c:
                    bf:bf:6c:97:16:9e:b6:ed:27:ac:c0:2f:7b:de:64:
                    e1:aa:a0:a4:a1:39:05:af:a2:53:22:04:7e:09:e8:
                    58:02:4d:be:b3:4a:04:4f:ec:8d:f1:07:06:a9:ae:
                    71:ef:bc:d9:7c:08:53:ee:42:51:89:59:db:54:70:
                    e6:83:59:14:0d:81:fb:ae:e9:53:76:22:9e:20:a2:
                    10:59:2c:46:e4:bb:c3:f2:6b:66:e2:ce:b5:5c:08:
                    fc:94:3b:44:58:48:c0:b3:c7:61:73:55:12:a5:32:
                    bb:72:03:fa:60:1c:7f:af:2c:92:9b:e7:5c:92:2e:
                    ba:5b:59:ff:be:21:27:cb:c8:21:12:51:41:4a:43:
                    14:73:b4:dc:14:32:5a:02:19:5f:3e:4b:b2:38:40:
                    9b:44:72:05:e6:00:ba:67:be:0b:8e:d4:54:f0:75:
                    32:5f:a9:ab:a5:95:0d:a1:da:55:19:02:93:a6:67:
                    db:e8:d0:d5:7c:f1:4d:d4:96:51:7a:ac:39:b5:60:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:14:9E:AB:8A:56:DB:27:5D:4B:4A:DF:4F:50:D5:EF:98:66:41:2C
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/8hSeq4pW2yddS0rfT1DV75hmQSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.101.152.0/21
                  5.181.108.0/22
                  31.129.96.0/20
                  45.9.40.0/22
                  45.12.16.0/22
                  45.12.72.0/22
                  45.12.236.0/22
                  45.67.56.0/22
                  45.80.68.0/22
                  45.84.224.0/22
                  45.90.32.0/22
                  45.130.40.0/22
                  45.141.76.0/22
                  45.146.164.0/22
                  45.147.176.0/22
                  62.113.96.0/20
                  62.217.176.0/21
                  81.200.112.0/21
                  87.236.16.0/21
                  91.106.200.0/21
                  95.214.60.0/22
                  185.19.204.0/22
                  185.50.24.0/22
                  185.78.28.0/22
                  185.155.118.0/24
                  185.225.32.0/22
                  193.168.46.0-193.168.49.255
                  193.176.76.0/22
                  193.200.72.0/22
                  213.139.208.0/22
                  217.172.24.0/22
                IPv6:
                  2a04:bac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:03:89:56:a2:15:92:fc:b5:1c:e5:1d:10:21:66:92:ea:
         a5:8c:86:f5:a1:ec:95:15:31:65:dd:f8:b2:5c:f4:60:df:e8:
         71:ec:10:91:ae:fd:51:49:ec:4e:f5:ff:b8:43:8d:e9:fd:13:
         0e:33:b0:3a:19:2d:b3:a2:14:42:2e:0c:91:19:b4:d7:96:e8:
         4a:40:8e:d1:21:7f:95:a1:b9:26:d0:84:b3:c9:99:2b:33:fe:
         83:2e:47:4e:43:a1:f8:17:94:12:ba:64:c8:93:d2:cb:92:a7:
         80:de:e7:28:f5:d1:2d:e2:8c:9e:7c:bd:e3:71:86:78:57:9b:
         bf:f2:97:88:e6:9a:b5:f4:dd:a1:16:c4:6e:a1:7e:45:14:32:
         9a:ff:89:81:16:17:18:fe:85:57:f5:f3:dd:65:34:70:9b:73:
         5c:f8:64:4e:a0:f3:d5:c0:9d:ce:64:f6:1c:b8:34:8e:e0:25:
         9b:d7:b1:e0:2a:f7:15:f3:f6:d6:d7:83:d8:29:d4:4b:03:ef:
         8b:5a:73:e8:18:82:0c:06:13:34:68:61:fe:2b:cb:6a:db:25:
         5a:c6:d8:18:48:ee:e7:13:ca:ec:85:4e:c5:05:f5:38:10:05:
         28:82:1a:b8:db:d7:6f:45:ad:70:2f:c2:0d:07:2a:c6:60:9e:
         6c:7e:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org