Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/627aRwpW_XPQiy7MfA8N1JjbIfM.roa
File:                     627aRwpW_XPQiy7MfA8N1JjbIfM.roa (raw, json)
Hash identifier:          ZlKn6rUKvAjHo4EcjkEPs7GBuvBDxCterDGvSDBvyHQ=
Subject key identifier:   EB:6E:DA:47:0A:56:FD:73:D0:8B:2E:CC:7C:0F:0D:D4:98:DB:21:F3
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       018D58B91165D0841906D3AB1489464167C1
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/627aRwpW_XPQiy7MfA8N1JjbIfM.roa
Signing time:             Tue 30 Jan 2024 04:55:39 +0000
ROA not before:           Tue 30 Jan 2024 04:55:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8895
IP address blocks:        45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/24 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.36.0/24 maxlen: 24
                          212.26.37.0/24 maxlen: 24
                          212.26.38.0/24 maxlen: 25
                          212.26.39.0/24 maxlen: 25
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/24 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/24 maxlen: 24
                          212.26.51.0/24 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 24
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 24
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.42.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/24 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 25
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 24
                          212.138.153.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 25
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.190.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          2001:1490::/32 maxlen: 32
                          2001:1490::/48 maxlen: 48
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:112::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 05:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:58:b9:11:65:d0:84:19:06:d3:ab:14:89:46:41:67:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jan 30 04:55:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb6eda470a56fd73d08b2ecc7c0f0dd498db21f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:88:5b:e2:e9:ff:16:7b:c1:26:16:f1:0c:
                    93:68:a1:14:6b:59:73:5f:b7:35:8a:06:96:83:5a:
                    f6:4c:29:2f:07:cc:fb:0d:41:39:54:1f:03:81:c5:
                    90:37:a7:89:e3:a0:45:4f:46:a8:f6:91:fe:2f:4e:
                    40:e1:ab:c1:d8:29:cc:28:2e:78:76:e4:7c:b8:30:
                    69:a5:7e:8b:9e:43:9b:e3:79:5b:10:05:bb:22:84:
                    19:20:ed:63:db:bb:41:6f:fa:9b:93:a9:da:84:42:
                    10:2a:72:52:86:6a:7a:e6:63:46:15:0a:b8:d5:e7:
                    15:37:f0:13:53:8a:75:5b:b7:57:a4:73:fe:c3:ad:
                    5a:0e:7b:20:0a:3e:d1:df:13:f4:3f:4c:f1:3c:8a:
                    89:da:e9:94:62:0a:13:38:0e:9a:12:56:a9:b4:7c:
                    38:6a:83:c9:9b:2d:62:7e:6b:27:ee:c7:f6:93:69:
                    f4:72:75:2f:5b:96:a6:3e:b6:59:f9:1a:b4:84:c5:
                    fb:9b:3e:99:a8:3e:0a:31:f9:98:0d:86:1f:b1:e3:
                    8d:2e:b5:cb:28:04:28:c7:bd:cf:6e:1f:6e:15:74:
                    b7:db:5c:82:7c:75:7d:f0:92:13:3b:38:56:8f:e4:
                    42:cc:1b:7e:04:6a:fa:e1:dd:72:04:e5:3d:69:a7:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6E:DA:47:0A:56:FD:73:D0:8B:2E:CC:7C:0F:0D:D4:98:DB:21:F3
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/627aRwpW_XPQiy7MfA8N1JjbIfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.15.0/24
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:e3:3b:61:a9:89:27:93:e5:cd:54:a4:91:a8:bd:27:ea:d0:
         76:3c:ae:02:16:9a:25:82:8e:01:47:e6:24:6d:74:1e:b6:1d:
         77:57:ec:be:46:f3:33:80:29:3b:bf:f6:9d:b7:cd:4b:e4:51:
         e8:53:a0:56:c8:3d:5c:82:ab:62:8b:3b:45:ba:23:b6:a9:1d:
         87:2f:fe:7c:4f:14:82:5d:69:01:fe:74:78:ba:bc:d0:09:ac:
         b6:47:c1:b6:ab:7d:94:96:b7:fe:62:95:e7:7f:75:b1:82:e9:
         38:a4:4e:61:a0:c7:93:0c:c7:2a:11:a7:ee:3a:5c:7b:78:b2:
         65:16:9f:b3:93:48:38:15:c0:b7:0f:00:09:12:08:aa:64:f1:
         4d:b0:c5:4b:c4:95:d6:d7:28:52:2c:d7:22:5a:e2:46:9e:5e:
         63:76:7a:7d:8f:25:bf:ad:7c:01:4e:dc:a7:d4:27:80:36:ad:
         a5:63:01:a3:38:2b:73:e0:4d:44:e8:87:c1:5b:5e:5f:0e:08:
         95:47:d0:0d:b2:38:30:0b:e7:ff:12:50:6a:a9:c0:06:e5:48:
         c7:b9:a5:1b:52:f2:36:27:a8:e4:09:a4:cb:55:17:02:98:76:
         3a:9a:47:78:41:bd:00:12:cf:db:6e:5a:52:cb:c6:c9:c5:6e:
         03:0c:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org