Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/VzH59PsEmXv0e5yhB0wMRS4mMaE.roa
File:                     VzH59PsEmXv0e5yhB0wMRS4mMaE.roa (raw, json)
Hash identifier:          FKScNQHPdKd3Qsj+l5WhDULNrjyyKF1BJgu3btRVl3k=
Subject key identifier:   57:31:F9:F4:FB:04:99:7B:F4:7B:9C:A1:07:4C:0C:45:2E:26:31:A1
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       0195966E5C91217B0BCDFB2A06D2E9BCF9B8
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/VzH59PsEmXv0e5yhB0wMRS4mMaE.roa
Signing time:             Fri 14 Mar 2025 20:52:49 +0000
ROA not before:           Fri 14 Mar 2025 20:52:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198610
IP address blocks:        5.35.80.0/20 maxlen: 24
                          5.35.80.0/24 maxlen: 24
                          5.101.152.0/21 maxlen: 24
                          5.101.152.0/24 maxlen: 24
                          5.101.153.0/24 maxlen: 24
                          5.101.153.242/32 maxlen: 32
                          5.101.153.244/32 maxlen: 32
                          5.101.154.0/24 maxlen: 24
                          5.101.154.191/32 maxlen: 32
                          5.101.155.0/24 maxlen: 24
                          5.101.156.0/24 maxlen: 24
                          5.101.157.0/24 maxlen: 24
                          5.101.158.0/24 maxlen: 24
                          5.101.159.0/24 maxlen: 24
                          5.181.108.0/22 maxlen: 24
                          5.181.108.0/24 maxlen: 24
                          5.181.109.0/24 maxlen: 24
                          5.181.110.0/24 maxlen: 24
                          5.181.111.0/24 maxlen: 24
                          31.128.32.0/20 maxlen: 24
                          31.128.32.0/22 maxlen: 24
                          31.128.36.0/22 maxlen: 24
                          31.129.96.0/20 maxlen: 24
                          31.129.96.0/24 maxlen: 24
                          31.129.98.0/24 maxlen: 24
                          45.9.40.0/22 maxlen: 24
                          45.9.40.0/24 maxlen: 24
                          45.9.41.0/24 maxlen: 24
                          45.9.42.0/24 maxlen: 24
                          45.9.43.0/24 maxlen: 24
                          45.12.16.0/22 maxlen: 24
                          45.12.16.0/24 maxlen: 24
                          45.12.17.0/24 maxlen: 24
                          45.12.18.0/24 maxlen: 24
                          45.12.19.0/24 maxlen: 24
                          45.12.72.0/22 maxlen: 24
                          45.12.236.0/22 maxlen: 24
                          45.12.236.0/24 maxlen: 24
                          45.12.237.0/24 maxlen: 24
                          45.12.238.0/24 maxlen: 24
                          45.12.239.0/24 maxlen: 24
                          45.67.56.0/22 maxlen: 24
                          45.67.56.0/24 maxlen: 24
                          45.67.57.0/24 maxlen: 24
                          45.67.58.0/24 maxlen: 24
                          45.67.59.0/24 maxlen: 24
                          45.80.68.0/22 maxlen: 24
                          45.80.68.0/24 maxlen: 24
                          45.80.69.0/24 maxlen: 24
                          45.80.70.0/24 maxlen: 24
                          45.80.71.0/24 maxlen: 24
                          45.84.224.0/22 maxlen: 24
                          45.84.224.0/24 maxlen: 24
                          45.84.225.0/24 maxlen: 24
                          45.84.226.0/24 maxlen: 24
                          45.84.227.0/24 maxlen: 24
                          45.90.32.0/22 maxlen: 24
                          45.90.32.0/24 maxlen: 24
                          45.90.33.0/24 maxlen: 24
                          45.90.34.0/24 maxlen: 24
                          45.90.35.0/24 maxlen: 24
                          45.130.40.0/22 maxlen: 24
                          45.130.40.0/24 maxlen: 24
                          45.130.41.0/24 maxlen: 24
                          45.130.42.0/24 maxlen: 24
                          45.130.43.0/24 maxlen: 24
                          45.141.76.0/22 maxlen: 24
                          45.141.76.0/24 maxlen: 24
                          45.141.77.0/24 maxlen: 24
                          45.141.78.0/24 maxlen: 24
                          45.141.79.0/24 maxlen: 24
                          45.146.164.0/22 maxlen: 24
                          45.146.164.0/24 maxlen: 24
                          45.146.165.0/24 maxlen: 24
                          45.146.166.0/24 maxlen: 24
                          45.146.167.0/24 maxlen: 24
                          45.147.176.0/22 maxlen: 24
                          45.147.176.0/24 maxlen: 24
                          45.147.177.0/24 maxlen: 24
                          45.147.178.0/24 maxlen: 24
                          45.147.179.0/24 maxlen: 24
                          45.153.188.0/22 maxlen: 24
                          62.113.96.0/20 maxlen: 24
                          62.113.96.0/24 maxlen: 24
                          62.113.97.0/24 maxlen: 24
                          62.113.98.0/24 maxlen: 24
                          62.113.99.0/24 maxlen: 24
                          62.113.100.0/24 maxlen: 24
                          62.113.101.0/24 maxlen: 24
                          62.113.102.0/24 maxlen: 24
                          62.113.103.0/24 maxlen: 24
                          62.113.104.0/24 maxlen: 24
                          62.113.105.0/24 maxlen: 24
                          62.113.106.0/24 maxlen: 24
                          62.113.107.0/24 maxlen: 24
                          62.113.108.0/24 maxlen: 24
                          62.113.109.0/24 maxlen: 24
                          62.113.110.0/24 maxlen: 24
                          62.113.111.0/24 maxlen: 24
                          62.217.176.0/21 maxlen: 24
                          62.217.176.0/24 maxlen: 24
                          62.217.177.0/24 maxlen: 24
                          62.217.178.0/24 maxlen: 24
                          62.217.179.0/24 maxlen: 24
                          62.217.180.0/24 maxlen: 24
                          62.217.181.0/24 maxlen: 24
                          62.217.182.0/24 maxlen: 24
                          62.217.183.0/24 maxlen: 24
                          81.200.112.0/21 maxlen: 24
                          81.200.112.0/24 maxlen: 24
                          81.200.113.0/24 maxlen: 24
                          81.200.114.0/24 maxlen: 24
                          81.200.115.0/24 maxlen: 24
                          81.200.116.0/24 maxlen: 24
                          81.200.117.0/24 maxlen: 24
                          81.200.118.0/24 maxlen: 24
                          81.200.119.0/24 maxlen: 24
                          82.202.128.0/22 maxlen: 24
                          83.222.24.0/22 maxlen: 24
                          87.236.16.0/21 maxlen: 24
                          87.236.16.0/24 maxlen: 24
                          87.236.17.0/24 maxlen: 24
                          87.236.17.122/32 maxlen: 32
                          87.236.18.0/24 maxlen: 24
                          87.236.19.0/24 maxlen: 24
                          87.236.20.0/24 maxlen: 24
                          87.236.21.0/24 maxlen: 24
                          87.236.22.0/24 maxlen: 24
                          87.236.23.0/24 maxlen: 24
                          89.169.38.0/23 maxlen: 24
                          90.156.168.0/22 maxlen: 24
                          91.106.200.0/21 maxlen: 24
                          91.106.200.0/24 maxlen: 24
                          91.106.201.0/24 maxlen: 24
                          91.106.202.0/24 maxlen: 24
                          91.106.203.0/24 maxlen: 24
                          91.106.204.0/24 maxlen: 24
                          91.106.205.0/24 maxlen: 24
                          91.106.206.0/24 maxlen: 24
                          91.106.207.0/24 maxlen: 24
                          95.214.60.0/22 maxlen: 24
                          95.214.60.0/24 maxlen: 24
                          95.214.61.0/24 maxlen: 24
                          95.214.62.0/24 maxlen: 24
                          95.214.63.0/24 maxlen: 24
                          185.19.204.0/22 maxlen: 24
                          185.19.204.0/24 maxlen: 24
                          185.19.205.0/24 maxlen: 24
                          185.19.206.0/24 maxlen: 24
                          185.19.207.0/24 maxlen: 24
                          185.50.24.0/22 maxlen: 24
                          185.50.24.0/24 maxlen: 24
                          185.50.25.0/24 maxlen: 24
                          185.50.26.0/24 maxlen: 24
                          185.50.27.0/24 maxlen: 24
                          185.78.28.0/22 maxlen: 24
                          185.78.28.0/24 maxlen: 24
                          185.78.29.0/24 maxlen: 24
                          185.78.30.0/24 maxlen: 24
                          185.78.31.0/24 maxlen: 24
                          185.155.118.0/24 maxlen: 24
                          185.207.0.0/23 maxlen: 24
                          185.225.32.0/22 maxlen: 24
                          185.225.32.0/24 maxlen: 24
                          185.225.33.0/24 maxlen: 24
                          185.225.34.0/24 maxlen: 24
                          185.225.35.0/24 maxlen: 24
                          193.168.46.0/23 maxlen: 24
                          193.168.46.0/24 maxlen: 24
                          193.168.47.0/24 maxlen: 24
                          193.168.48.0/23 maxlen: 24
                          193.168.48.0/24 maxlen: 24
                          193.168.49.0/24 maxlen: 24
                          193.176.76.0/22 maxlen: 24
                          193.176.76.0/24 maxlen: 24
                          193.176.77.0/24 maxlen: 24
                          193.176.78.0/24 maxlen: 24
                          193.176.79.0/24 maxlen: 24
                          193.200.72.0/22 maxlen: 24
                          193.200.72.0/24 maxlen: 24
                          193.200.73.0/24 maxlen: 24
                          193.200.74.0/24 maxlen: 24
                          193.200.75.0/24 maxlen: 24
                          212.67.8.0/21 maxlen: 24
                          213.139.208.0/22 maxlen: 24
                          213.139.208.0/24 maxlen: 24
                          213.139.209.0/24 maxlen: 24
                          213.139.210.0/24 maxlen: 24
                          213.139.211.0/24 maxlen: 24
                          217.12.37.0/24 maxlen: 24
                          217.12.38.0/24 maxlen: 24
                          217.12.40.0/24 maxlen: 24
                          217.114.0.0/21 maxlen: 24
                          217.114.8.0/21 maxlen: 24
                          217.172.24.0/22 maxlen: 24
                          217.172.24.0/24 maxlen: 24
                          217.172.25.0/24 maxlen: 24
                          217.172.26.0/24 maxlen: 24
                          217.172.27.0/24 maxlen: 24
                          2a04:bac0::/29 maxlen: 29
Validation:               Failed, certificate revoked on Wed 26 Mar 2025 08:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:96:6e:5c:91:21:7b:0b:cd:fb:2a:06:d2:e9:bc:f9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Mar 14 20:52:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5731f9f4fb04997bf47b9ca1074c0c452e2631a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:22:a5:13:75:3d:5a:74:81:44:64:5e:95:
                    f4:68:3e:d9:a4:54:77:23:34:21:4e:75:34:30:c2:
                    b3:c2:7c:c7:48:74:55:2c:c3:d6:17:01:fe:62:64:
                    fe:ac:a0:99:e7:16:4f:02:89:1f:7f:43:2b:a3:71:
                    c0:82:f5:6a:a0:e6:b7:53:3d:73:99:20:c6:61:c1:
                    04:43:08:3a:54:1d:6b:14:93:28:78:0b:b4:22:0c:
                    fc:c1:e0:95:49:d8:26:27:3f:a2:37:80:eb:38:ef:
                    b5:38:44:09:5a:73:b5:7d:f3:82:b8:8e:c3:a4:ae:
                    11:92:1b:2a:93:fd:8e:00:3a:f9:c7:58:19:6c:77:
                    46:9b:93:13:89:1d:30:6a:5d:99:04:c0:23:d4:50:
                    b7:d8:c1:fe:d0:66:8c:ae:97:e7:13:fa:9d:1d:8a:
                    9e:f7:ef:cc:7e:aa:2b:e6:64:6d:92:80:89:7f:8c:
                    f6:66:e5:5b:b6:bf:0f:7a:8d:67:db:50:68:d5:bd:
                    73:c3:be:24:39:f4:59:7e:fe:6b:2d:36:a1:b2:78:
                    5d:ce:e0:42:9e:3a:c9:4d:aa:a5:f2:21:5c:12:ca:
                    94:ac:bb:0e:18:73:9f:1e:66:ad:65:3d:bc:0b:7f:
                    e2:0c:26:df:1d:77:5f:7a:d6:19:6d:46:cc:e7:18:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:F9:F4:FB:04:99:7B:F4:7B:9C:A1:07:4C:0C:45:2E:26:31:A1
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/VzH59PsEmXv0e5yhB0wMRS4mMaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.35.80.0/20
                  5.101.152.0/21
                  5.181.108.0/22
                  31.128.32.0/20
                  31.129.96.0/20
                  45.9.40.0/22
                  45.12.16.0/22
                  45.12.72.0/22
                  45.12.236.0/22
                  45.67.56.0/22
                  45.80.68.0/22
                  45.84.224.0/22
                  45.90.32.0/22
                  45.130.40.0/22
                  45.141.76.0/22
                  45.146.164.0/22
                  45.147.176.0/22
                  45.153.188.0/22
                  62.113.96.0/20
                  62.217.176.0/21
                  81.200.112.0/21
                  82.202.128.0/22
                  83.222.24.0/22
                  87.236.16.0/21
                  89.169.38.0/23
                  90.156.168.0/22
                  91.106.200.0/21
                  95.214.60.0/22
                  185.19.204.0/22
                  185.50.24.0/22
                  185.78.28.0/22
                  185.155.118.0/24
                  185.207.0.0/23
                  185.225.32.0/22
                  193.168.46.0-193.168.49.255
                  193.176.76.0/22
                  193.200.72.0/22
                  212.67.8.0/21
                  213.139.208.0/22
                  217.12.37.0-217.12.38.255
                  217.12.40.0/24
                  217.114.0.0/20
                  217.172.24.0/22
                IPv6:
                  2a04:bac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         b3:3b:37:5a:df:c2:d3:0f:3e:47:c0:80:48:5f:e7:41:25:93:
         66:e2:3b:ed:68:7b:82:24:8a:0b:80:4d:ca:d5:c5:b3:06:af:
         dc:24:cf:05:f2:df:11:82:48:a2:54:59:a8:96:bb:22:23:99:
         fc:d3:08:69:a5:b9:2a:6a:f2:71:8d:16:f5:85:c7:f1:c0:0c:
         08:21:24:76:e6:96:38:cc:8e:73:f8:06:fd:d9:b4:b4:5c:9f:
         d7:2b:27:41:82:e4:86:c3:b8:1d:ef:dc:0b:21:de:34:1a:8a:
         84:9d:46:1b:2d:18:a3:3e:3e:3b:a0:1a:df:70:e0:72:fd:ae:
         3d:8d:85:67:3c:3e:9c:36:b8:d6:87:2b:a5:74:13:ee:19:1d:
         d6:d9:31:68:f1:33:48:ad:3a:f0:be:47:8b:42:50:e9:89:fe:
         75:7f:32:e6:37:85:3e:49:42:ad:e7:93:8b:6e:fb:a8:c4:0b:
         06:f4:dc:24:e5:8a:ca:bb:fe:ae:c7:f4:e4:f6:82:46:a7:2b:
         8c:62:7a:37:32:cf:76:b0:ef:85:6b:16:82:76:5d:96:23:9c:
         73:5b:3e:ea:cc:a0:6c:99:b6:f9:78:7f:d0:c8:df:a8:a5:68:
         c5:c5:21:0f:d6:00:68:48:5e:39:85:f5:f5:09:7c:2d:f8:37:
         2e:ae:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:31 2025 by rpki-client