Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/d24COE9sI3ido74S2DH3eoqwMvY.roa
File:                     d24COE9sI3ido74S2DH3eoqwMvY.roa (raw, json)
Hash identifier:          26w50cjri+13RnYWib8z+T3n7sR1A48l3BLXf8MCPHY=
Subject key identifier:   77:6E:02:38:4F:6C:23:78:9D:A3:BE:12:D8:31:F7:7A:8A:B0:32:F6
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       01924C1049A220106676279C0EFAFFA97AD0
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/d24COE9sI3ido74S2DH3eoqwMvY.roa
Signing time:             Wed 02 Oct 2024 07:09:48 +0000
ROA not before:           Wed 02 Oct 2024 07:09:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216071
IP address blocks:        77.238.224.0/24 maxlen: 24
                          77.238.225.0/24 maxlen: 24
                          77.238.226.0/24 maxlen: 24
                          77.238.227.0/24 maxlen: 24
                          77.238.228.0/24 maxlen: 24
                          77.238.229.0/24 maxlen: 24
                          77.238.230.0/24 maxlen: 24
                          77.238.231.0/24 maxlen: 24
                          77.238.232.0/24 maxlen: 24
                          77.238.233.0/24 maxlen: 24
                          77.238.234.0/24 maxlen: 24
                          77.238.235.0/24 maxlen: 24
                          77.238.236.0/24 maxlen: 24
                          77.238.237.0/24 maxlen: 24
                          77.238.238.0/24 maxlen: 24
                          77.238.239.0/24 maxlen: 24
                          77.238.240.0/24 maxlen: 24
                          77.238.241.0/24 maxlen: 24
                          77.238.242.0/24 maxlen: 24
                          77.238.243.0/24 maxlen: 24
                          77.238.244.0/24 maxlen: 24
                          77.238.245.0/24 maxlen: 24
                          77.238.246.0/24 maxlen: 24
                          77.238.247.0/24 maxlen: 24
                          77.238.248.0/24 maxlen: 24
                          77.238.249.0/24 maxlen: 24
                          77.238.250.0/24 maxlen: 24
                          77.238.251.0/24 maxlen: 24
                          77.238.252.0/24 maxlen: 24
                          77.238.253.0/24 maxlen: 24
                          77.238.254.0/24 maxlen: 24
                          77.238.255.0/24 maxlen: 24
                          80.85.244.0/24 maxlen: 24
                          80.85.245.0/24 maxlen: 24
                          80.85.246.0/24 maxlen: 24
                          80.85.247.0/24 maxlen: 24
                          88.210.3.0/24 maxlen: 24
                          88.210.6.0/24 maxlen: 24
                          88.210.9.0/24 maxlen: 24
                          88.210.10.0/24 maxlen: 24
                          88.210.11.0/24 maxlen: 24
                          88.210.12.0/24 maxlen: 24
                          88.210.13.0/24 maxlen: 24
                          88.210.14.0/24 maxlen: 24
                          91.246.41.0/24 maxlen: 24
                          93.183.124.0/24 maxlen: 24
                          93.183.125.0/24 maxlen: 24
                          93.183.126.0/24 maxlen: 24
                          93.183.127.0/24 maxlen: 24
                          94.103.80.0/24 maxlen: 24
                          94.103.81.0/24 maxlen: 24
                          94.103.82.0/24 maxlen: 24
                          94.103.94.0/24 maxlen: 24
                          94.103.95.0/24 maxlen: 24
                          109.234.33.0/24 maxlen: 24
                          109.234.34.0/24 maxlen: 24
                          109.234.35.0/24 maxlen: 24
                          109.234.36.0/24 maxlen: 24
                          109.234.37.0/24 maxlen: 24
                          109.234.38.0/24 maxlen: 24
                          109.234.39.0/24 maxlen: 24
                          185.245.104.0/24 maxlen: 24
                          185.245.105.0/24 maxlen: 24
                          185.245.106.0/24 maxlen: 24
                          185.245.107.0/24 maxlen: 24
                          193.33.194.0/24 maxlen: 24
                          193.33.195.0/24 maxlen: 24
                          193.178.169.0/24 maxlen: 24
                          193.178.172.0/24 maxlen: 24
                          193.178.174.0/24 maxlen: 24
                          194.164.32.0/24 maxlen: 24
                          194.164.33.0/24 maxlen: 24
                          194.164.34.0/24 maxlen: 24
                          194.164.35.0/24 maxlen: 24
                          195.2.86.0/24 maxlen: 24
                          195.2.92.0/24 maxlen: 24
                          195.2.93.0/24 maxlen: 24
                          195.200.16.0/24 maxlen: 24
                          195.200.17.0/24 maxlen: 24
                          195.200.18.0/24 maxlen: 24
                          195.200.19.0/24 maxlen: 24
                          195.200.26.0/24 maxlen: 24
                          195.200.28.0/24 maxlen: 24
                          195.200.29.0/24 maxlen: 24
                          195.200.30.0/24 maxlen: 24
                          195.200.31.0/24 maxlen: 24
                          212.34.144.0/24 maxlen: 24
                          212.34.145.0/24 maxlen: 24
                          212.34.146.0/24 maxlen: 24
                          212.34.147.0/24 maxlen: 24
                          212.34.148.0/24 maxlen: 24
                          212.34.149.0/24 maxlen: 24
                          212.34.150.0/24 maxlen: 24
                          212.34.151.0/24 maxlen: 24
                          212.34.152.0/24 maxlen: 24
                          212.34.153.0/24 maxlen: 24
                          212.34.154.0/24 maxlen: 24
                          212.34.155.0/24 maxlen: 24
                          212.118.36.0/24 maxlen: 24
                          212.118.37.0/24 maxlen: 24
                          212.118.38.0/24 maxlen: 24
                          212.118.39.0/24 maxlen: 24
                          212.118.40.0/24 maxlen: 24
                          212.118.41.0/24 maxlen: 24
                          212.118.42.0/24 maxlen: 24
                          212.118.43.0/24 maxlen: 24
                          2a06:7740::/48 maxlen: 48
                          2a0d:8480:1::/48 maxlen: 48
                          2a0d:8480:3::/48 maxlen: 48
                          2a14:1e00:1::/48 maxlen: 48
                          2a14:1e00:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 07:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:4c:10:49:a2:20:10:66:76:27:9c:0e:fa:ff:a9:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Oct  2 07:09:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=776e02384f6c23789da3be12d831f77a8ab032f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ef:e9:3e:88:16:2f:da:cf:49:bc:7b:80:cf:
                    c2:cd:a9:89:28:f6:c2:83:d1:0a:29:55:34:82:9e:
                    60:14:74:03:d0:8a:97:78:88:6c:11:f3:34:8c:7a:
                    9a:a9:32:5b:e7:1d:c8:c5:6b:a4:56:c7:d5:78:34:
                    e3:e6:82:70:8d:5a:f5:b6:ef:fb:25:3f:da:a5:bd:
                    cb:d8:4f:d6:7d:3b:73:ab:95:90:a6:c6:2f:66:02:
                    e5:65:60:be:ae:21:59:67:7c:06:ac:07:08:22:c1:
                    4c:c7:2f:33:cf:47:2c:79:7e:9b:b4:56:64:35:55:
                    8e:6c:67:7b:98:0e:b8:5c:c1:64:88:0e:64:09:76:
                    96:23:1d:83:c3:c8:e5:5d:1d:35:0b:99:98:28:b7:
                    54:f5:85:bb:b8:39:48:6f:04:81:02:d3:38:7f:27:
                    90:4d:8f:64:7e:28:d9:28:33:af:98:f6:07:6e:62:
                    b6:45:96:9d:97:ad:f8:9d:dc:f5:10:0d:25:f3:a3:
                    8a:01:04:df:2b:eb:2d:b0:2a:b0:bd:5e:24:04:c4:
                    c2:4d:74:b3:e0:3e:13:be:5b:6e:38:24:8c:de:a8:
                    ee:bf:d5:59:1c:45:22:b0:73:48:84:80:3e:fb:db:
                    91:47:2a:69:be:23:9c:b2:93:b3:df:22:e5:9f:75:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6E:02:38:4F:6C:23:78:9D:A3:BE:12:D8:31:F7:7A:8A:B0:32:F6
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/d24COE9sI3ido74S2DH3eoqwMvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.238.224.0/19
                  80.85.244.0/22
                  88.210.3.0/24
                  88.210.6.0/24
                  88.210.9.0-88.210.14.255
                  91.246.41.0/24
                  93.183.124.0/22
                  94.103.80.0-94.103.82.255
                  94.103.94.0/23
                  109.234.33.0-109.234.39.255
                  185.245.104.0/22
                  193.33.194.0/23
                  193.178.169.0/24
                  193.178.172.0/24
                  193.178.174.0/24
                  194.164.32.0/22
                  195.2.86.0/24
                  195.2.92.0/23
                  195.200.16.0/22
                  195.200.26.0/24
                  195.200.28.0/22
                  212.34.144.0-212.34.155.255
                  212.118.36.0-212.118.43.255
                IPv6:
                  2a06:7740::/48
                  2a0d:8480:1::/48
                  2a0d:8480:3::/48
                  2a14:1e00:1::-2a14:1e00:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:d8:71:e8:43:3a:00:00:ee:6b:72:97:2d:0e:b1:d9:22:
         9b:65:b0:fe:0b:98:69:d8:8b:f2:30:c4:93:cc:65:56:73:58:
         9c:65:62:0c:c8:2b:9d:39:dd:34:35:7f:63:10:a5:be:4a:3d:
         7a:05:05:fd:20:d6:8b:e9:5c:ee:84:43:3d:ab:3a:5d:97:bd:
         42:9e:22:d5:eb:5a:76:85:8c:b9:3b:9f:b8:c0:06:f5:e1:6c:
         8f:2e:d7:bc:7a:12:16:7f:9d:02:0d:5f:a3:9a:29:f2:94:f7:
         07:70:fc:03:73:65:0e:9b:9f:6c:5d:c1:62:0f:24:c1:f0:5f:
         a1:66:99:1a:fe:b3:6d:7f:63:26:ce:35:6b:be:63:9a:d9:1c:
         cb:16:41:2c:ec:77:39:f7:9a:5d:fd:16:35:b5:33:d5:db:74:
         0f:0b:a9:27:c5:a9:38:53:6a:50:a8:63:63:3f:19:3c:79:a1:
         ac:62:b6:d2:ec:25:60:6a:7e:8d:d0:6f:2e:eb:56:15:9d:75:
         d1:00:bd:d6:c4:5a:53:7b:e4:02:6b:4c:4a:ee:9e:82:00:14:
         3e:99:25:ff:1e:ad:46:ce:69:5e:f9:6b:2b:02:2d:52:6d:2e:
         cb:c3:31:66:8d:18:1b:f0:ba:18:0d:7c:c1:a0:b9:04:3c:79:
         45:96:99:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 09:16:10 2024 by rpki-client on console-fra.rpki-client.org