Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/4EGCHy9hhh7-K4SJltfkNTm3U8Q.roa
File:                     4EGCHy9hhh7-K4SJltfkNTm3U8Q.roa (raw, json)
Hash identifier:          YHwsQMvq6xhiUxUcARYs9h0bbXdudUDpRI1sNE2WIAI=
Subject key identifier:   E0:41:82:1F:2F:61:86:1E:FE:2B:84:89:96:D7:E4:35:39:B7:53:C4
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       01947CF435AD0C8891DED1CBE9C5487DEAFF
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/4EGCHy9hhh7-K4SJltfkNTm3U8Q.roa
Signing time:             Sun 19 Jan 2025 05:06:06 +0000
ROA not before:           Sun 19 Jan 2025 05:06:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8895
IP address blocks:        45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/22 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.19.20/30 maxlen: 30
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.32.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 25
                          212.26.37.0/24 maxlen: 25
                          212.26.38.0/24 maxlen: 25
                          212.26.39.0/24 maxlen: 25
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/23 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/23 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 25
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 24
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.42.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/21 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 24
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.132.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.147.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 24
                          212.138.153.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 25
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.180.0/24 maxlen: 24
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.190.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.202.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.210.0/24 maxlen: 24
                          212.138.210.0/28 maxlen: 28
                          212.138.250.0/24 maxlen: 24
                          2001:1490::/32 maxlen: 32
                          2001:1490::/48 maxlen: 48
                          2001:1490:0:800::/64 maxlen: 64
                          2001:1490:0:a00::/64 maxlen: 64
                          2001:1490:0:c00::/64 maxlen: 64
                          2001:1490:0:1000::/64 maxlen: 64
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:1:800::/64 maxlen: 64
                          2001:1490:1:a00::/64 maxlen: 64
                          2001:1490:1:c00::/64 maxlen: 64
                          2001:1490:1:e00::/64 maxlen: 64
                          2001:1490:1:1000::/64 maxlen: 64
                          2001:1490:1:1200::/64 maxlen: 64
                          2001:1490:1:1600::/64 maxlen: 64
                          2001:1490:1:1a00::/64 maxlen: 64
                          2001:1490:1:2000::/64 maxlen: 64
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:112::/48 maxlen: 48
                          2001:1490:113::/48 maxlen: 48
                          2001:1490:114::/48 maxlen: 48
                          2001:1490:115::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sun 02 Feb 2025 08:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:7c:f4:35:ad:0c:88:91:de:d1:cb:e9:c5:48:7d:ea:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jan 19 05:06:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e041821f2f61861efe2b848996d7e43539b753c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:48:3b:ba:0e:cc:2f:62:40:c1:e8:3e:bb:
                    73:b8:98:66:6d:95:b5:59:0d:be:3e:db:c6:10:d6:
                    35:b8:1e:61:3c:ee:cd:55:b4:f4:d7:05:df:88:fd:
                    e3:9d:d6:09:05:9f:c1:b2:ee:4a:b5:90:8f:c2:8b:
                    42:f9:6d:52:63:b3:87:56:1f:01:89:0a:55:f0:60:
                    5a:0a:ca:3b:c2:f0:b8:e2:48:aa:4f:f4:1f:dc:df:
                    cd:92:e2:20:1b:09:82:91:58:11:0b:18:b7:11:22:
                    c2:e2:2c:c9:04:05:9e:fd:4b:ec:9c:5c:b4:4f:44:
                    b8:76:99:f0:bc:b4:b5:67:62:8e:a8:0f:f9:d6:49:
                    b4:65:fc:4d:6f:17:a9:4a:ad:be:ef:f8:c8:f7:47:
                    24:ad:62:00:f9:53:9e:24:dc:f1:3d:4f:7f:d3:04:
                    12:f3:96:ec:88:dd:83:ee:a4:ab:69:1b:c3:cc:50:
                    a0:a5:3f:0b:40:7b:54:1d:44:5f:38:ee:f6:d3:7c:
                    56:87:ea:62:74:a1:0a:14:cf:d4:9c:eb:aa:bf:53:
                    4a:87:a7:1c:53:5a:e0:36:9a:21:ea:a3:a5:41:7b:
                    67:20:14:f3:63:c5:e8:2a:c9:c4:8b:1d:e0:c3:df:
                    a2:23:a9:c6:f9:61:73:ab:ff:c8:85:0c:80:4e:fb:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:41:82:1F:2F:61:86:1E:FE:2B:84:89:96:D7:E4:35:39:B7:53:C4
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/4EGCHy9hhh7-K4SJltfkNTm3U8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.15.0/24
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:16:fe:9e:cc:86:c1:63:53:71:9f:88:04:bb:d9:00:92:
         a2:b4:98:81:c5:5e:92:3d:35:8b:7c:56:0a:ac:fa:77:5e:a8:
         0f:4b:87:52:96:9f:9c:ec:b7:6b:f6:50:85:7a:51:92:75:01:
         f0:dc:84:22:b5:c8:6d:8d:78:86:fd:b5:b5:2a:3a:8e:c6:f2:
         95:d7:c1:eb:67:a8:11:fa:a3:b1:a6:4a:3f:2f:2d:0e:98:db:
         3a:dc:50:e3:97:b5:1d:bb:67:d8:d5:5f:38:fc:d1:65:20:32:
         7a:fc:0f:bd:4b:b7:41:7d:50:2e:0c:95:d7:a2:12:19:49:78:
         c5:80:b5:b3:9c:10:29:d0:c6:27:22:c1:6f:3d:7d:37:cb:c1:
         9c:2e:c5:8f:a9:1f:c3:05:c1:3b:7c:22:db:66:84:f1:27:fa:
         00:d6:53:3c:6b:11:17:ce:3e:fa:82:f7:d0:f2:fc:d3:cf:83:
         7a:c7:39:5d:fd:b8:98:eb:14:2e:60:f7:99:cd:b6:2a:86:7e:
         85:5d:6f:e8:f9:e6:85:e8:af:34:0e:ea:b1:8b:3f:03:51:62:
         04:7d:fe:63:21:1e:f5:a1:e9:d1:69:76:68:ee:e3:05:01:f0:
         4c:77:13:34:70:27:92:7c:54:a9:e9:6f:0c:f4:da:6e:9f:ce:
         59:6d:28:74
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZR89DWtDIiR3tHL6cVIfer/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjUwMTE5MDUwNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDQxODIxZjJmNjE4NjFlZmUyYjg0ODk5NmQ3ZTQzNTM5Yjc1M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSdIO7oOzC9iQMHoPrtzuJhmbZW1
WQ2+PtvGENY1uB5hPO7NVbT01wXfiP3jndYJBZ/Bsu5KtZCPwotC+W1SY7OHVh8B
iQpV8GBaCso7wvC44kiqT/Qf3N/NkuIgGwmCkVgRCxi3ESLC4izJBAWe/UvsnFy0
T0S4dpnwvLS1Z2KOqA/51km0ZfxNbxepSq2+7/jI90ckrWIA+VOeJNzxPU9/0wQS
85bsiN2D7qSraRvDzFCgpT8LQHtUHURfOO7203xWh+pidKEKFM/UnOuqv1NKh6cc
U1rgNpoh6qOlQXtnIBTzY8XoKsnEix3gw9+iI6nG+WFzq//IhQyATvunRwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOBBgh8vYYYe/iuEiZbX5DU5t1PEMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvNEVHQ0h5OWhoaDctSzRTSmx0ZmtOVG0zVThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQALV4PAwQC
W+U0AwQH1BoAAwMA1IowDQQCAAIwBwMFACABFJAwDQYJKoZIhvcNAQELBQADggEB
AGwVFv6ezIbBY1Nxn4gEu9kAkqK0mIHFXpI9NYt8Vgqs+ndeqA9Lh1KWn5zst2v2
UIV6UZJ1AfDchCK1yG2NeIb9tbUqOo7G8pXXwetnqBH6o7GmSj8vLQ6Y2zrcUOOX
tR27Z9jVXzj80WUgMnr8D71Lt0F9UC4MldeiEhlJeMWAtbOcECnQxiciwW89fTfL
wZwuxY+pH8MFwTt8IttmhPEn+gDWUzxrERfOPvqC99Dy/NPPg3rHOV39uJjrFC5g
95nNtiqGfoVdb+j55oXorzQO6rGLPwNRYgR9/mMhHvWh6dFpdmju4wUB8Ex3EzRw
J5J8VKnpbwz02m6fzlltKHQ=
-----END CERTIFICATE-----
Generated at Sun Apr 13 17:08:32 2025 by rpki-client