Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/PHFdRQwQGizRIMSSZY7T8qoojBg.roa
File:                     PHFdRQwQGizRIMSSZY7T8qoojBg.roa (raw, json)
Hash identifier:          LC3E4KJo+o2vT7yhmGZ598DipqBmA4BMJFt7ctRfTyA=
Subject key identifier:   3C:71:5D:45:0C:10:1A:2C:D1:20:C4:92:65:8E:D3:F2:AA:28:8C:18
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       018CC94E5E320212A389658DDE3C18757F01
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/PHFdRQwQGizRIMSSZY7T8qoojBg.roa
Signing time:             Tue 02 Jan 2024 08:33:25 +0000
ROA not before:           Tue 02 Jan 2024 08:33:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198610
IP address blocks:        45.80.68.0/22 maxlen: 24
                          45.80.68.0/24 maxlen: 24
                          45.80.69.0/24 maxlen: 24
                          45.80.70.0/24 maxlen: 24
                          45.80.71.0/24 maxlen: 24
                          45.12.236.0/24 maxlen: 24
                          45.12.236.0/22 maxlen: 24
                          45.12.237.0/24 maxlen: 24
                          45.12.238.0/24 maxlen: 24
                          45.12.239.0/24 maxlen: 24
                          45.147.176.0/24 maxlen: 24
                          45.147.176.0/22 maxlen: 24
                          45.147.177.0/24 maxlen: 24
                          45.147.178.0/24 maxlen: 24
                          45.147.179.0/24 maxlen: 24
                          5.181.109.0/24 maxlen: 24
                          5.181.110.0/24 maxlen: 24
                          5.181.111.0/24 maxlen: 24
                          5.181.108.0/22 maxlen: 24
                          5.181.108.0/24 maxlen: 24
                          45.141.77.0/24 maxlen: 24
                          45.141.78.0/24 maxlen: 24
                          45.141.76.0/24 maxlen: 24
                          45.141.76.0/22 maxlen: 24
                          45.67.57.0/24 maxlen: 24
                          45.67.58.0/24 maxlen: 24
                          45.141.79.0/24 maxlen: 24
                          45.67.56.0/24 maxlen: 24
                          45.67.56.0/22 maxlen: 24
                          45.67.59.0/24 maxlen: 24
                          185.19.204.0/22 maxlen: 24
                          185.19.204.0/24 maxlen: 24
                          185.19.205.0/24 maxlen: 24
                          185.19.206.0/24 maxlen: 24
                          185.19.207.0/24 maxlen: 24
                          193.168.46.0/24 maxlen: 24
                          193.168.46.0/23 maxlen: 24
                          193.168.47.0/24 maxlen: 24
                          193.168.48.0/23 maxlen: 24
                          193.168.48.0/24 maxlen: 24
                          193.168.49.0/24 maxlen: 24
                          45.12.16.0/24 maxlen: 24
                          45.12.16.0/22 maxlen: 24
                          45.12.17.0/24 maxlen: 24
                          45.12.18.0/24 maxlen: 24
                          45.12.19.0/24 maxlen: 24
                          95.214.61.0/24 maxlen: 24
                          95.214.62.0/24 maxlen: 24
                          95.214.63.0/24 maxlen: 24
                          95.214.60.0/24 maxlen: 24
                          95.214.60.0/22 maxlen: 24
                          81.200.112.0/24 maxlen: 24
                          81.200.113.0/24 maxlen: 24
                          81.200.112.0/21 maxlen: 24
                          213.139.208.0/22 maxlen: 24
                          213.139.208.0/24 maxlen: 24
                          81.200.114.0/24 maxlen: 24
                          213.139.209.0/24 maxlen: 24
                          81.200.115.0/24 maxlen: 24
                          81.200.116.0/24 maxlen: 24
                          81.200.118.0/24 maxlen: 24
                          81.200.117.0/24 maxlen: 24
                          213.139.210.0/24 maxlen: 24
                          213.139.211.0/24 maxlen: 24
                          81.200.119.0/24 maxlen: 24
                          45.146.164.0/24 maxlen: 24
                          45.146.164.0/22 maxlen: 24
                          45.146.165.0/24 maxlen: 24
                          45.146.166.0/24 maxlen: 24
                          45.146.167.0/24 maxlen: 24
                          91.106.206.0/24 maxlen: 24
                          91.106.200.0/21 maxlen: 24
                          91.106.200.0/24 maxlen: 24
                          91.106.201.0/24 maxlen: 24
                          91.106.202.0/24 maxlen: 24
                          91.106.203.0/24 maxlen: 24
                          91.106.204.0/24 maxlen: 24
                          91.106.205.0/24 maxlen: 24
                          91.106.207.0/24 maxlen: 24
                          45.12.72.0/22 maxlen: 24
                          62.113.96.0/20 maxlen: 24
                          62.113.97.0/24 maxlen: 24
                          62.113.98.0/24 maxlen: 24
                          62.113.96.0/24 maxlen: 24
                          62.113.104.0/24 maxlen: 24
                          62.113.105.0/24 maxlen: 24
                          62.113.99.0/24 maxlen: 24
                          62.113.100.0/24 maxlen: 24
                          62.113.101.0/24 maxlen: 24
                          62.113.102.0/24 maxlen: 24
                          62.113.103.0/24 maxlen: 24
                          62.113.110.0/24 maxlen: 24
                          62.113.111.0/24 maxlen: 24
                          62.113.106.0/24 maxlen: 24
                          62.113.107.0/24 maxlen: 24
                          62.113.108.0/24 maxlen: 24
                          62.113.109.0/24 maxlen: 24
                          193.200.72.0/24 maxlen: 24
                          193.200.72.0/22 maxlen: 24
                          193.200.73.0/24 maxlen: 24
                          193.200.74.0/24 maxlen: 24
                          193.200.75.0/24 maxlen: 24
                          217.172.24.0/24 maxlen: 24
                          217.172.24.0/22 maxlen: 24
                          217.172.27.0/24 maxlen: 24
                          217.172.25.0/24 maxlen: 24
                          217.172.26.0/24 maxlen: 24
                          185.78.30.0/24 maxlen: 24
                          185.78.31.0/24 maxlen: 24
                          185.78.28.0/22 maxlen: 24
                          185.78.28.0/24 maxlen: 24
                          185.78.29.0/24 maxlen: 24
                          45.84.224.0/22 maxlen: 24
                          45.84.224.0/24 maxlen: 24
                          45.84.225.0/24 maxlen: 24
                          45.84.226.0/24 maxlen: 24
                          45.84.227.0/24 maxlen: 24
                          185.225.34.0/24 maxlen: 24
                          185.225.35.0/24 maxlen: 24
                          185.225.32.0/22 maxlen: 24
                          185.225.32.0/24 maxlen: 24
                          185.225.33.0/24 maxlen: 24
                          185.50.24.0/24 maxlen: 24
                          185.50.24.0/22 maxlen: 24
                          45.90.32.0/24 maxlen: 24
                          45.90.32.0/22 maxlen: 24
                          45.90.33.0/24 maxlen: 24
                          45.90.34.0/24 maxlen: 24
                          45.90.35.0/24 maxlen: 24
                          5.101.153.244/32 maxlen: 32
                          87.236.17.122/32 maxlen: 32
                          5.101.153.242/32 maxlen: 32
                          185.50.25.0/24 maxlen: 24
                          185.50.26.0/24 maxlen: 24
                          185.50.27.0/24 maxlen: 24
                          45.9.40.0/24 maxlen: 24
                          45.9.40.0/22 maxlen: 24
                          45.9.41.0/24 maxlen: 24
                          45.9.42.0/24 maxlen: 24
                          45.9.43.0/24 maxlen: 24
                          62.217.176.0/21 maxlen: 24
                          62.217.177.0/24 maxlen: 24
                          62.217.178.0/24 maxlen: 24
                          62.217.179.0/24 maxlen: 24
                          62.217.176.0/24 maxlen: 24
                          62.217.183.0/24 maxlen: 24
                          62.217.180.0/24 maxlen: 24
                          62.217.181.0/24 maxlen: 24
                          62.217.182.0/24 maxlen: 24
                          45.130.42.0/24 maxlen: 24
                          45.130.43.0/24 maxlen: 24
                          45.130.40.0/22 maxlen: 24
                          45.130.40.0/24 maxlen: 24
                          45.130.41.0/24 maxlen: 24
                          193.176.76.0/24 maxlen: 24
                          193.176.76.0/22 maxlen: 24
                          193.176.77.0/24 maxlen: 24
                          193.176.78.0/24 maxlen: 24
                          193.176.79.0/24 maxlen: 24
                          5.35.80.0/20 maxlen: 24
                          5.101.154.191/32 maxlen: 32
                          31.129.96.0/20 maxlen: 24
                          31.129.98.0/24 maxlen: 24
                          31.129.96.0/24 maxlen: 24
                          87.236.16.0/24 maxlen: 24
                          87.236.16.0/21 maxlen: 24
                          87.236.17.0/24 maxlen: 24
                          87.236.21.0/24 maxlen: 24
                          87.236.22.0/24 maxlen: 24
                          87.236.23.0/24 maxlen: 24
                          87.236.18.0/24 maxlen: 24
                          87.236.19.0/24 maxlen: 24
                          87.236.20.0/24 maxlen: 24
                          185.155.118.0/24 maxlen: 24
                          5.101.152.0/24 maxlen: 24
                          5.101.152.0/21 maxlen: 24
                          5.101.153.0/24 maxlen: 24
                          5.101.154.0/24 maxlen: 24
                          5.101.155.0/24 maxlen: 24
                          5.101.156.0/24 maxlen: 24
                          5.101.157.0/24 maxlen: 24
                          5.101.158.0/24 maxlen: 24
                          5.101.159.0/24 maxlen: 24
                          2a04:bac0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 07:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:5e:32:02:12:a3:89:65:8d:de:3c:18:75:7f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Jan  2 08:33:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3c715d450c101a2cd120c492658ed3f2aa288c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:4b:3f:31:0b:3c:54:1d:71:ca:93:b4:46:
                    90:b6:11:57:b6:2f:a5:cb:38:f2:00:ac:4c:b1:c9:
                    bb:05:d2:30:be:9b:54:42:05:47:71:5f:b1:a4:89:
                    6b:67:ca:b0:27:ae:65:4c:1c:c2:14:88:34:c6:27:
                    05:5e:e4:2d:68:eb:4f:be:b0:97:63:ee:2b:75:7a:
                    0f:64:6c:00:93:56:d6:99:31:5f:01:bb:dd:a8:2b:
                    ff:bc:f4:40:1d:a3:a1:1b:a7:e5:7d:b6:00:e2:0b:
                    fa:4f:73:d4:9c:20:13:83:59:f9:9c:21:20:71:d4:
                    c4:8f:04:75:ac:28:af:b3:d4:7a:8b:10:3c:0d:2d:
                    25:51:62:b3:d1:02:33:f5:c5:4b:91:99:2f:d5:ab:
                    b6:2c:f3:63:22:c7:55:0f:89:a1:17:c6:bf:64:05:
                    f8:88:6c:06:5b:b8:62:c4:3d:85:78:26:17:00:84:
                    db:16:aa:09:a0:29:2e:bf:8e:83:34:fb:8b:03:e4:
                    7a:0a:27:05:0f:b8:6a:2f:50:19:24:00:65:af:4e:
                    ef:9a:f1:ae:6c:96:e5:40:68:f7:1f:12:68:c9:76:
                    4f:9f:4f:9b:30:82:31:66:7b:19:3e:ad:8c:69:b4:
                    ec:de:c9:d1:01:b8:15:9b:57:6a:31:5b:24:24:f0:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:71:5D:45:0C:10:1A:2C:D1:20:C4:92:65:8E:D3:F2:AA:28:8C:18
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/PHFdRQwQGizRIMSSZY7T8qoojBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.35.80.0/20
                  5.101.152.0/21
                  5.181.108.0/22
                  31.129.96.0/20
                  45.9.40.0/22
                  45.12.16.0/22
                  45.12.72.0/22
                  45.12.236.0/22
                  45.67.56.0/22
                  45.80.68.0/22
                  45.84.224.0/22
                  45.90.32.0/22
                  45.130.40.0/22
                  45.141.76.0/22
                  45.146.164.0/22
                  45.147.176.0/22
                  62.113.96.0/20
                  62.217.176.0/21
                  81.200.112.0/21
                  87.236.16.0/21
                  91.106.200.0/21
                  95.214.60.0/22
                  185.19.204.0/22
                  185.50.24.0/22
                  185.78.28.0/22
                  185.155.118.0/24
                  185.225.32.0/22
                  193.168.46.0-193.168.49.255
                  193.176.76.0/22
                  193.200.72.0/22
                  213.139.208.0/22
                  217.172.24.0/22
                IPv6:
                  2a04:bac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:0c:91:d4:c9:af:0b:fd:33:09:3a:a9:a5:4d:18:64:13:
         af:7b:cf:f2:b6:4f:c9:18:38:42:ae:d0:47:e3:09:84:c8:e2:
         70:25:8c:b9:e9:72:a8:77:43:0b:54:7c:7c:59:b5:a4:4e:a4:
         ce:e3:97:88:c1:7c:8a:fe:5f:eb:d0:9a:71:6f:c8:1f:52:9d:
         a0:82:22:99:5e:bd:a2:70:ca:d2:b4:eb:bb:00:e3:0f:f4:a3:
         bf:44:31:d1:c6:58:88:d5:6f:74:e9:38:21:ae:77:04:ad:8c:
         2b:f7:8b:c5:e3:58:ba:fd:b2:3c:35:13:24:98:c9:04:31:2d:
         f2:e0:02:8c:d2:07:5e:0b:35:66:0a:71:c2:94:ed:89:a4:a6:
         ea:c4:68:78:3d:e2:ae:19:30:38:fa:43:8b:8b:aa:5c:a6:a3:
         68:fc:30:09:66:af:f2:aa:f2:e3:8a:d5:4d:49:b0:77:3d:7d:
         88:c4:e1:c6:91:2e:bd:5d:d5:58:ef:6d:f4:99:61:cf:51:9c:
         91:13:04:ba:0d:c3:54:93:0e:b2:48:fe:58:d8:18:d0:40:13:
         ec:ab:1d:77:70:f2:fc:f6:a1:31:c5:41:e1:1f:66:1b:bf:8c:
         a9:e1:f1:c7:39:ad:e5:0f:76:8b:e8:08:b0:5e:80:d2:f7:70:
         42:bf:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org