Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/bI13hmnRk4-utJkMXhU8ByFtdxI.roa
File:                     bI13hmnRk4-utJkMXhU8ByFtdxI.roa (raw, json)
Hash identifier:          ryUke3pYVKmDL1ev06kSxBZCq7zOTUIL/T47UnAf9bo=
Subject key identifier:   6C:8D:77:86:69:D1:93:8F:AE:B4:99:0C:5E:15:3C:07:21:6D:77:12
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       01922235DFFF3E31CA327637C7C75D5EF9B0
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/bI13hmnRk4-utJkMXhU8ByFtdxI.roa
Signing time:             Tue 24 Sep 2024 04:06:48 +0000
ROA not before:           Tue 24 Sep 2024 04:06:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8895
IP address blocks:        45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/22 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.32.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 25
                          212.26.37.0/24 maxlen: 25
                          212.26.38.0/24 maxlen: 25
                          212.26.39.0/24 maxlen: 25
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/23 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/23 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 25
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 24
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.42.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/21 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 24
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.132.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.147.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 24
                          212.138.153.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 25
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.180.0/24 maxlen: 24
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.190.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.202.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.207.0/24 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          2001:1490::/32 maxlen: 32
                          2001:1490::/48 maxlen: 48
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:112::/48 maxlen: 48
                          2001:1490:113::/48 maxlen: 48
                          2001:1490:114::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 10:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:22:35:df:ff:3e:31:ca:32:76:37:c7:c7:5d:5e:f9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Sep 24 04:06:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6c8d778669d1938faeb4990c5e153c07216d7712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:04:47:d0:0f:2a:52:5f:08:27:eb:89:4a:
                    69:94:ac:4f:21:0b:5f:a9:3d:2e:a0:33:16:bd:45:
                    9a:13:d7:2d:a1:c4:2d:d0:72:09:2e:a2:3d:8d:cb:
                    52:97:08:e0:6d:93:f4:12:30:a5:a4:18:ce:33:bf:
                    ce:3b:09:1b:9a:43:b2:ea:00:95:43:e5:f0:b3:9a:
                    f8:ed:18:f6:09:13:31:80:97:7a:a4:37:1f:b1:8f:
                    f0:b8:ab:91:f5:a5:56:fa:0d:9b:5e:b0:b5:5a:95:
                    cf:d0:66:ea:3a:ad:4d:bf:86:95:45:57:f0:a5:ba:
                    48:a9:f9:e0:e5:69:72:f5:5e:42:9b:97:a5:80:92:
                    60:d1:2c:83:45:f8:1e:3b:78:64:11:02:ca:dc:21:
                    41:df:b1:84:85:b8:de:0f:45:b1:95:29:b0:4a:b0:
                    5e:63:65:3c:2d:3c:a1:e6:d4:d1:68:e8:cd:7c:1c:
                    e9:0c:6e:85:42:94:47:08:ab:31:da:0c:77:56:eb:
                    fa:52:9b:29:10:f9:8e:34:7d:6e:4f:cb:6e:41:b4:
                    20:41:b2:cd:ef:e6:4f:c0:20:b9:22:a1:db:c6:24:
                    15:13:83:d7:7b:83:56:ff:40:2d:c5:5f:77:38:38:
                    c7:14:41:6e:82:1d:55:47:65:5b:d9:2c:44:54:7f:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:77:86:69:D1:93:8F:AE:B4:99:0C:5E:15:3C:07:21:6D:77:12
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/bI13hmnRk4-utJkMXhU8ByFtdxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.15.0/24
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:c1:16:6d:3e:79:0d:0b:8a:71:ee:f9:48:5d:86:83:42:f8:
         1d:fb:fb:67:54:49:2f:ee:fd:a9:c3:b7:95:d7:eb:9e:23:d6:
         71:c9:7b:04:b4:8c:fa:45:30:0e:b2:53:52:e5:d0:b8:dc:41:
         39:dd:93:41:aa:48:c4:5f:39:64:d4:be:eb:ad:cf:a8:fd:ae:
         b4:01:25:23:b9:06:69:1b:e5:77:d8:96:b9:93:3c:79:3a:4d:
         36:3e:88:60:a0:ea:7e:e5:fa:83:ad:12:1c:aa:96:b5:c7:fa:
         a0:e6:f1:b8:1d:cf:78:aa:8f:a5:4e:42:76:47:c3:d8:f4:91:
         5d:79:24:85:b4:a7:7f:4a:3e:91:5e:33:69:a9:14:56:31:a8:
         0d:6b:a3:99:3b:7c:3e:e7:59:a4:39:54:08:3c:23:74:0d:80:
         4f:77:db:45:5b:47:b0:5e:62:29:07:d5:b9:8b:b2:34:36:d5:
         f0:69:4e:8f:b0:f2:6b:9f:9b:36:92:00:f3:46:5b:ff:be:97:
         28:9a:cb:dc:6e:9a:1d:a6:f3:b2:62:4e:b3:40:c8:88:ff:af:
         43:96:aa:01:36:8b:01:24:4b:64:25:71:fa:fe:d9:6d:5f:dc:
         7f:af:1d:4e:6c:f4:43:ab:0a:f2:c2:aa:19:3b:a1:15:51:f0:
         e6:f9:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:42:17 2024 by rpki-client on console-fra.rpki-client.org