Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Azjcav4xHVqy_BqtfPAsdJWElvI.roa
File:                     Azjcav4xHVqy_BqtfPAsdJWElvI.roa (raw, json)
Hash identifier:          LM2MxMd04pcyQf73lzW7Yoq5kT78pGl1bgSKk3zSNPw=
Subject key identifier:   03:38:DC:6A:FE:31:1D:5A:B2:FC:1A:AD:7C:F0:2C:74:95:84:96:F2
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       018C44995A26ED22502095BEA22395D2ABAF
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Azjcav4xHVqy_BqtfPAsdJWElvI.roa
Signing time:             Thu 07 Dec 2023 14:05:49 +0000
ROA not before:           Thu 07 Dec 2023 14:05:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44252
IP address blocks:        93.113.250.0/24 maxlen: 24
                          188.215.30.0/24 maxlen: 24
                          89.46.127.0/24 maxlen: 24
                          94.228.233.0/24 maxlen: 24
                          94.228.231.0/24 maxlen: 24
                          94.228.229.0/24 maxlen: 24
                          94.228.230.0/24 maxlen: 24
                          94.228.227.0/24 maxlen: 24
                          94.228.238.0/24 maxlen: 24
                          94.228.237.0/24 maxlen: 24
                          94.228.234.0/24 maxlen: 24
                          185.36.255.0/24 maxlen: 24
                          89.39.144.0/24 maxlen: 24
                          89.39.145.0/24 maxlen: 24
                          37.153.174.0/24 maxlen: 24
                          213.196.97.0/24 maxlen: 24
                          188.240.200.0/24 maxlen: 24
                          188.240.201.0/24 maxlen: 24
                          178.17.19.0/24 maxlen: 24
                          178.17.23.0/24 maxlen: 24
                          178.17.24.0/24 maxlen: 24
                          178.17.22.0/24 maxlen: 24
                          92.60.226.0/24 maxlen: 24
                          92.60.224.0/24 maxlen: 24
                          92.60.225.0/24 maxlen: 24
                          92.60.229.0/24 maxlen: 24
                          178.17.27.0/24 maxlen: 24
                          178.17.28.0/24 maxlen: 24
                          178.17.26.0/24 maxlen: 24
                          178.17.30.0/24 maxlen: 24
                          92.60.230.0/24 maxlen: 24
                          92.60.227.0/24 maxlen: 24
                          92.60.228.0/24 maxlen: 24
                          92.60.232.0/24 maxlen: 24
                          92.60.233.0/24 maxlen: 24
                          92.60.231.0/24 maxlen: 24
                          92.60.237.0/24 maxlen: 24
                          92.60.235.0/24 maxlen: 24
                          92.60.239.0/24 maxlen: 24
                          92.60.238.0/24 maxlen: 24
                          176.67.192.0/24 maxlen: 24
                          176.67.196.0/24 maxlen: 24
                          176.67.198.0/24 maxlen: 24
                          176.67.193.0/24 maxlen: 24
                          176.67.194.0/24 maxlen: 24
                          89.47.40.0/24 maxlen: 24
                          89.47.41.0/24 maxlen: 24
                          176.67.200.0/23 maxlen: 24
                          176.67.204.0/24 maxlen: 24
                          176.67.202.0/23 maxlen: 24
                          176.67.205.0/24 maxlen: 24
                          176.67.206.0/23 maxlen: 23
                          176.67.210.0/24 maxlen: 24
                          176.67.211.0/24 maxlen: 24
                          62.101.130.0/24 maxlen: 24
                          176.67.212.0/24 maxlen: 24
                          176.67.208.0/24 maxlen: 24
                          176.67.217.0/24 maxlen: 24
                          176.67.218.0/24 maxlen: 24
                          176.67.219.0/24 maxlen: 24
                          176.67.214.0/24 maxlen: 24
                          176.67.223.0/24 maxlen: 24
                          176.67.221.0/24 maxlen: 24
                          176.67.220.0/24 maxlen: 24
                          185.27.131.0/24 maxlen: 24
                          185.27.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:44:99:5a:26:ed:22:50:20:95:be:a2:23:95:d2:ab:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Dec  7 14:05:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0338dc6afe311d5ab2fc1aad7cf02c74958496f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:28:33:23:04:36:1e:6f:7d:cc:05:9a:fb:
                    88:70:57:3b:f6:cf:bd:f2:8a:65:ef:f5:21:a0:70:
                    ff:67:40:e6:9b:c4:eb:83:02:c3:8c:15:54:c9:02:
                    2d:83:85:43:a9:60:73:10:4c:65:35:80:d1:a8:b1:
                    81:a5:1b:fe:f3:9e:e0:fc:3f:0a:f5:dd:02:8b:5f:
                    62:14:78:1e:22:b0:37:13:42:9a:32:4d:23:2b:06:
                    af:31:87:42:6c:65:db:33:ba:4e:b8:cc:00:e0:b9:
                    aa:01:2d:9e:20:a7:0b:a3:78:a6:1d:f9:04:a2:60:
                    fe:4a:48:b5:9a:d1:f5:30:27:a3:51:4c:b0:7f:2a:
                    82:ec:21:58:25:1e:ac:67:48:16:a9:36:9f:6d:d6:
                    81:d8:c3:05:53:cc:35:c2:40:27:56:ee:af:14:25:
                    44:89:7d:2f:5e:a9:5e:7e:f7:52:08:5b:44:ac:f5:
                    58:90:a5:99:e6:21:1d:55:2c:73:d3:58:f6:e3:33:
                    32:e0:62:af:68:19:ca:2e:36:1a:d4:eb:f6:70:68:
                    91:56:ad:48:6b:6d:78:ea:64:3d:cf:e6:04:ee:ef:
                    db:2c:d0:31:f8:2e:e5:e7:b0:49:f8:3a:d1:6f:cd:
                    b4:fe:ae:45:91:1b:f0:ef:80:70:fa:37:df:27:00:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:38:DC:6A:FE:31:1D:5A:B2:FC:1A:AD:7C:F0:2C:74:95:84:96:F2
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Azjcav4xHVqy_BqtfPAsdJWElvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.153.174.0/24
                  62.101.130.0/24
                  89.39.144.0/23
                  89.46.127.0/24
                  89.47.40.0/23
                  92.60.224.0-92.60.233.255
                  92.60.235.0/24
                  92.60.237.0-92.60.239.255
                  93.113.250.0/24
                  94.228.227.0/24
                  94.228.229.0-94.228.231.255
                  94.228.233.0-94.228.234.255
                  94.228.237.0-94.228.238.255
                  176.67.192.0-176.67.194.255
                  176.67.196.0/24
                  176.67.198.0/24
                  176.67.200.0-176.67.208.255
                  176.67.210.0-176.67.212.255
                  176.67.214.0/24
                  176.67.217.0-176.67.221.255
                  176.67.223.0/24
                  178.17.19.0/24
                  178.17.22.0-178.17.24.255
                  178.17.26.0-178.17.28.255
                  178.17.30.0/24
                  185.27.128.0/24
                  185.27.131.0/24
                  185.36.255.0/24
                  188.215.30.0/24
                  188.240.200.0/23
                  213.196.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:fc:52:9e:18:84:4f:b9:88:32:62:4f:f3:b1:f1:09:3c:a6:
         87:d1:7a:b2:ec:5c:c8:40:f9:2d:66:47:a8:35:1a:4c:0b:d6:
         a7:c9:bb:85:2b:94:38:4f:94:35:df:d1:e1:3e:e5:86:8f:54:
         c5:1c:66:69:76:c3:a2:2f:4b:f2:b6:74:43:3c:49:71:d1:00:
         af:6d:da:19:d1:6b:d3:fe:47:c4:2d:21:c7:0c:a9:fd:1a:50:
         a5:7a:32:d9:45:62:c2:be:38:5a:60:c8:88:c7:2e:bb:8a:73:
         53:30:17:2a:d9:63:75:71:9d:53:69:e4:20:77:98:c2:6d:3c:
         2b:0d:c8:e4:e5:b3:45:5d:51:ab:41:19:8e:c2:2c:eb:2b:0e:
         7b:91:4b:cc:c3:af:4f:a1:f6:16:64:34:ce:2a:b8:00:3a:37:
         c4:de:e9:e6:4c:e6:a4:e2:43:eb:80:0d:50:16:f4:72:61:65:
         39:97:c0:2a:64:0b:84:b8:27:4e:92:66:82:15:4b:4a:1a:be:
         06:1f:09:95:e4:1a:c5:85:7d:b5:b9:22:2f:9b:08:f5:52:e5:
         fc:e2:36:14:eb:69:5f:04:33:64:60:38:c5:3e:c7:2f:75:ea:
         d6:76:34:54:1d:c9:8f:30:97:91:2f:df:ff:fa:0b:85:75:a6:
         14:a2:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org