Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/w2sWOFGtaLWSsC6RmLTzQc6-mBc.roa
File:                     w2sWOFGtaLWSsC6RmLTzQc6-mBc.roa (raw, json)
Hash identifier:          EA9XuoTOIGc/tDusUiWlSVhEVOtm1NmCRDxRsfxMReo=
Subject key identifier:   C3:6B:16:38:51:AD:68:B5:92:B0:2E:91:98:B4:F3:41:CE:BE:98:17
Certificate issuer:       /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial:       018570671C5190AFF75B6EB8C224DD0CF275
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/w2sWOFGtaLWSsC6RmLTzQc6-mBc.roa
Signing time:             Mon 02 Jan 2023 02:54:43 +0000
ROA not before:           Mon 02 Jan 2023 02:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21246
IP address blocks:        80.80.162.0/24 maxlen: 24
                          80.80.161.0/24 maxlen: 24
                          80.80.160.0/20 maxlen: 20
                          80.80.160.0/24 maxlen: 24
                          80.80.166.0/24 maxlen: 24
                          80.80.164.0/23 maxlen: 23
                          80.80.163.0/24 maxlen: 24
                          80.80.169.0/24 maxlen: 24
                          80.80.168.0/24 maxlen: 24
                          80.80.167.0/24 maxlen: 24
                          80.80.172.0/24 maxlen: 24
                          80.80.171.0/24 maxlen: 24
                          80.80.170.0/24 maxlen: 24
                          80.80.173.0/24 maxlen: 24
                          80.80.175.0/24 maxlen: 24
                          80.80.174.0/24 maxlen: 24
                          46.99.149.0/24 maxlen: 24
                          46.99.148.0/24 maxlen: 24
                          46.99.147.0/24 maxlen: 24
                          46.99.146.0/24 maxlen: 24
                          46.99.152.0/22 maxlen: 22
                          46.99.151.0/24 maxlen: 24
                          46.99.150.0/24 maxlen: 24
                          46.99.156.0/23 maxlen: 23
                          46.99.159.0/24 maxlen: 24
                          46.99.158.0/24 maxlen: 24
                          46.99.163.0/24 maxlen: 24
                          46.99.162.0/24 maxlen: 24
                          46.99.161.0/24 maxlen: 24
                          46.99.160.0/24 maxlen: 24
                          46.99.166.0/24 maxlen: 24
                          46.99.165.0/24 maxlen: 24
                          46.99.164.0/24 maxlen: 24
                          46.99.170.0/24 maxlen: 24
                          46.99.169.0/24 maxlen: 24
                          46.99.168.0/24 maxlen: 24
                          46.99.167.0/24 maxlen: 24
                          46.99.171.0/24 maxlen: 24
                          46.99.179.0/24 maxlen: 24
                          46.99.178.0/24 maxlen: 24
                          46.99.173.0/24 maxlen: 24
                          46.99.177.0/24 maxlen: 24
                          46.99.176.0/24 maxlen: 24
                          46.99.175.0/24 maxlen: 24
                          46.99.174.0/24 maxlen: 24
                          46.99.180.0/24 maxlen: 24
                          46.99.184.0/24 maxlen: 24
                          46.99.183.0/24 maxlen: 24
                          46.99.182.0/24 maxlen: 24
                          46.99.181.0/24 maxlen: 24
                          46.99.186.0/24 maxlen: 24
                          46.99.185.0/24 maxlen: 24
                          46.99.187.0/24 maxlen: 24
                          46.99.190.0/24 maxlen: 24
                          46.99.189.0/24 maxlen: 24
                          46.99.188.0/24 maxlen: 24
                          46.99.192.0/24 maxlen: 24
                          46.99.199.0/24 maxlen: 24
                          46.99.128.0/24 maxlen: 24
                          46.99.131.0/24 maxlen: 24
                          46.99.130.0/24 maxlen: 24
                          46.99.129.0/24 maxlen: 24
                          46.99.132.0/24 maxlen: 24
                          46.99.135.0/24 maxlen: 24
                          46.99.134.0/24 maxlen: 24
                          46.99.133.0/24 maxlen: 24
                          46.99.138.0/24 maxlen: 24
                          46.99.137.0/24 maxlen: 24
                          46.99.136.0/24 maxlen: 24
                          46.99.139.0/24 maxlen: 24
                          46.99.142.0/24 maxlen: 24
                          46.99.141.0/24 maxlen: 24
                          46.99.140.0/24 maxlen: 24
                          46.99.145.0/24 maxlen: 24
                          46.99.144.0/24 maxlen: 24
                          46.99.143.0/24 maxlen: 24
                          46.99.254.0/23 maxlen: 23
                          91.187.97.0/24 maxlen: 24
                          91.187.96.0/19 maxlen: 19
                          91.187.96.0/24 maxlen: 24
                          46.99.203.0/24 maxlen: 24
                          46.99.202.0/23 maxlen: 23
                          46.99.202.0/24 maxlen: 24
                          91.187.98.0/24 maxlen: 24
                          91.187.100.0/24 maxlen: 24
                          91.187.99.0/24 maxlen: 24
                          91.187.104.0/24 maxlen: 24
                          91.187.104.0/23 maxlen: 23
                          91.187.103.0/24 maxlen: 24
                          91.187.102.0/24 maxlen: 24
                          91.187.101.0/24 maxlen: 24
                          91.187.107.0/24 maxlen: 24
                          91.187.106.0/24 maxlen: 24
                          91.187.111.0/24 maxlen: 24
                          91.187.110.0/24 maxlen: 24
                          91.187.109.0/24 maxlen: 24
                          91.187.108.0/24 maxlen: 24
                          91.187.112.0/24 maxlen: 24
                          91.187.114.0/24 maxlen: 24
                          91.187.113.0/24 maxlen: 24
                          46.99.224.0/20 maxlen: 20
                          91.187.117.0/24 maxlen: 24
                          91.187.116.0/24 maxlen: 24
                          91.187.115.0/24 maxlen: 24
                          91.187.118.0/24 maxlen: 24
                          91.187.125.0/24 maxlen: 24
                          91.187.121.0/24 maxlen: 24
                          91.187.120.0/24 maxlen: 24
                          91.187.119.0/24 maxlen: 24
                          91.187.124.0/24 maxlen: 24
                          91.187.123.0/24 maxlen: 24
                          91.187.122.0/24 maxlen: 24
                          91.187.127.0/24 maxlen: 24
                          91.187.126.0/24 maxlen: 24
                          46.99.250.0/24 maxlen: 24
                          46.99.249.0/24 maxlen: 24
                          46.99.252.0/23 maxlen: 23
                          46.99.251.0/24 maxlen: 24
                          46.99.64.0/19 maxlen: 19
                          46.99.64.0/18 maxlen: 18
                          46.99.0.0/18 maxlen: 18
                          46.99.0.0/16 maxlen: 16
                          185.78.224.0/22 maxlen: 22
                          46.99.32.0/19 maxlen: 19
                          2a03:4b80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 22 May 2023 07:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:1c:51:90:af:f7:5b:6e:b8:c2:24:dd:0c:f2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
        Validity
            Not Before: Jan  2 02:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c36b163851ad68b592b02e9198b4f341cebe9817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:eb:71:46:3a:36:9c:a4:3c:7a:4b:f9:1a:
                    0b:51:dd:5c:ea:5f:ee:ee:dd:a7:9d:5e:e5:21:70:
                    ab:6a:9f:10:85:ec:93:45:00:4f:af:49:4e:53:e1:
                    41:f4:44:a2:65:7f:1c:28:39:62:e5:1d:96:4e:c3:
                    d5:32:26:03:24:c4:c7:a8:db:32:30:72:32:ed:34:
                    34:04:d3:8f:da:29:8a:d2:24:1e:5e:e3:ab:ad:f6:
                    44:ee:b9:b8:8a:4c:43:81:11:b6:63:89:d1:5a:6e:
                    25:9d:f0:72:5e:6d:a8:0e:a0:03:21:d0:a0:5d:c0:
                    78:5c:63:22:9e:e8:15:45:03:34:3a:96:47:c7:9e:
                    ad:b4:48:d4:e9:a6:61:a3:6f:a7:ac:e8:20:be:b8:
                    b4:72:06:36:eb:18:7d:3a:1d:61:48:80:f6:a9:b3:
                    4d:61:35:0a:24:13:16:6e:3c:40:d4:83:bc:cd:b2:
                    48:11:4c:d4:eb:38:bc:89:09:8e:85:19:f8:43:2b:
                    1d:b3:39:db:27:98:0d:bf:31:cb:cb:e2:b1:cf:7f:
                    04:9a:1b:f9:67:65:66:c0:18:ee:a8:b9:24:cb:0c:
                    26:8e:78:82:db:75:e5:88:c3:ba:1d:0f:40:0d:10:
                    ee:1e:2b:51:7b:ea:93:9e:bc:b6:11:aa:f2:93:0a:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:16:38:51:AD:68:B5:92:B0:2E:91:98:B4:F3:41:CE:BE:98:17
            X509v3 Authority Key Identifier:
                keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/w2sWOFGtaLWSsC6RmLTzQc6-mBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.99.0.0/16
                  80.80.160.0/20
                  91.187.96.0/19
                  185.78.224.0/22
                IPv6:
                  2a03:4b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:15:10:f5:7f:01:19:b6:15:b9:f0:18:da:b8:56:c6:0d:
         e8:1d:07:de:be:29:5f:b7:93:1e:3c:5b:4b:17:d9:31:34:15:
         5f:d7:8a:b3:49:0f:e4:2f:03:b9:a3:69:96:df:10:ea:76:43:
         8b:ea:56:a9:cb:97:71:0d:65:80:00:56:bb:46:2c:63:4a:00:
         35:74:d1:bd:eb:85:ea:1c:91:06:13:dc:1a:10:a5:12:03:5c:
         6a:9d:aa:3e:33:25:bf:55:c9:73:87:7d:6f:b4:b7:a8:16:d7:
         ae:7b:4b:36:74:c1:b5:cd:d7:6d:71:e9:8f:5a:e7:50:fb:59:
         30:5d:2c:24:37:ca:ce:46:99:4f:b5:d7:03:10:7b:b6:8b:7a:
         d0:3a:74:1e:4a:7f:45:4c:6d:a1:06:e8:eb:6f:24:ec:43:70:
         54:b8:50:08:ab:8c:ea:b7:a2:e8:00:7f:0f:8a:f3:cf:af:f0:
         13:51:2f:07:97:e3:dd:95:14:d7:96:63:a7:6a:eb:53:51:88:
         53:06:da:83:08:28:91:de:67:58:bd:05:b2:49:8d:ae:66:08:
         50:42:f5:63:b5:16:39:86:e0:ad:8c:aa:ec:f6:f4:9c:ec:a7:
         46:40:f2:0d:31:26:8e:21:6f:78:48:79:bc:18:34:c4:e7:c7:
         1c:3f:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org