Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/DOUcnFE7_cexkkyieXid8cHjJd4.roa
File:                     DOUcnFE7_cexkkyieXid8cHjJd4.roa (raw, json)
Hash identifier:          rTwStpwMToME7jCZdbsRWcSv5X91r7vBD4xqYMxNO9I=
Subject key identifier:   0C:E5:1C:9C:51:3B:FD:C7:B1:92:4C:A2:79:78:9D:F1:C1:E3:25:DE
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       01901346F0463EBB713F963D571C33C5C542
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/DOUcnFE7_cexkkyieXid8cHjJd4.roa
Signing time:             Thu 13 Jun 2024 20:25:34 +0000
ROA not before:           Thu 13 Jun 2024 20:25:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203
IP address blocks:        45.94.14.0/24 maxlen: 24
                          45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/22 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.32.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 25
                          212.26.37.0/24 maxlen: 25
                          212.26.38.0/24 maxlen: 24
                          212.26.39.0/24 maxlen: 24
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/23 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/23 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 25
                          212.26.76.0/24 maxlen: 24
                          212.26.78.0/24 maxlen: 27
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.42.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/21 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 25
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 24
                          212.138.153.0/24 maxlen: 25
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 24
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.180.0/24 maxlen: 25
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.190.0/24 maxlen: 24
                          212.138.192.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.202.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.207.0/24 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          2001:1490::/48 maxlen: 48
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:113::/48 maxlen: 48
                          2001:1497:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 21:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:13:46:f0:46:3e:bb:71:3f:96:3d:57:1c:33:c5:c5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jun 13 20:25:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ce51c9c513bfdc7b1924ca279789df1c1e325de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:a5:f8:61:ca:dc:f0:39:f8:c2:a4:9d:53:
                    34:44:b5:8a:66:6d:15:04:2a:39:7f:bd:2c:13:c3:
                    f1:b7:c4:86:b4:28:b0:15:29:9c:8b:0c:93:7d:29:
                    e0:59:1a:e4:79:ed:e9:5f:92:9d:33:1d:2a:b0:a1:
                    ea:11:43:1c:c7:3e:6b:d5:76:dc:da:c0:75:8b:0f:
                    35:30:3e:08:9e:4f:5a:7f:a2:31:32:1b:fe:21:8e:
                    a2:f5:06:dc:e8:a8:65:cd:43:9b:57:df:61:c5:fa:
                    01:28:ab:0d:f4:a1:01:71:21:96:71:2b:b5:5d:6c:
                    5e:c6:7b:f3:91:bf:40:3d:a1:60:86:2f:cd:6d:ac:
                    a8:e2:2e:db:3a:da:34:1b:06:0a:57:02:09:36:31:
                    11:36:18:5b:cb:25:47:b4:63:f2:4e:7c:26:fb:5a:
                    84:56:e1:0b:75:62:74:86:1c:a2:21:da:e8:d7:13:
                    63:af:e2:ef:e1:cf:7e:20:b1:2e:d9:2f:ef:92:4b:
                    58:0f:2c:8f:1f:0d:a0:d0:3a:1e:52:cc:00:26:54:
                    b6:f6:b4:bb:38:b4:4d:32:1e:67:01:e0:85:9c:f3:
                    19:36:88:d7:a0:40:1c:ca:77:6a:1c:55:43:19:56:
                    f0:af:7d:09:f3:42:75:30:60:51:3e:41:b4:58:a7:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E5:1C:9C:51:3B:FD:C7:B1:92:4C:A2:79:78:9D:F1:C1:E3:25:DE
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/DOUcnFE7_cexkkyieXid8cHjJd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.14.0/23
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/47
                  2001:1490:103::/48
                  2001:1490:106::/47
                  2001:1490:110::/47
                  2001:1490:113::/48
                  2001:1497:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:36:1e:c8:4e:71:f9:4e:39:a0:e7:5b:e9:3e:a4:d8:04:94:
         2f:a9:7a:25:76:b3:4b:ab:2e:77:23:ee:d0:f9:bb:3a:71:39:
         21:2d:df:fc:92:e8:6c:da:18:41:76:0b:92:37:7a:5d:fe:d9:
         0e:f5:6a:cc:ed:08:f2:22:f3:a2:c0:ef:ba:eb:9e:1e:b1:d6:
         3b:11:ff:08:7d:3f:13:17:c8:32:1f:58:58:3c:2d:e2:96:40:
         26:03:e1:e7:b3:6c:1b:77:2b:91:15:45:cd:b8:c4:d5:cf:97:
         e3:aa:d1:53:66:98:f3:78:7c:06:9f:5c:d3:e9:ee:3e:e3:70:
         b7:b5:e0:c9:88:18:bb:a9:d4:8d:cb:f2:06:6a:ae:06:6a:22:
         c2:c9:76:2f:af:4e:c6:c4:54:75:37:9b:dd:a7:28:24:99:c2:
         c6:fb:1a:35:49:a0:18:e8:5a:53:bf:df:f4:45:b4:d4:20:f4:
         e4:bf:38:42:70:31:14:c8:4b:6a:81:3e:17:b7:4e:8b:26:7f:
         a5:e2:86:d2:57:ee:57:bd:54:41:7a:30:42:3f:ea:33:70:25:
         f8:dd:03:4b:64:be:7b:2c:b8:82:f2:00:38:5e:1f:09:db:40:
         32:6c:9b:f0:b7:78:51:65:76:7b:dc:e8:d2:ad:63:b6:45:17:
         1f:95:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:36:48 2024 by rpki-client on console-ams.rpki-client.org