Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/hRa9LOyr4r3d6soLuUE2tDjxNeM.roa
File:                     hRa9LOyr4r3d6soLuUE2tDjxNeM.roa (raw, json)
Hash identifier:          DozBuIYh0RVJwAdEwkQuVDgjbNLEFTrVEXP/w4zHcP4=
Subject key identifier:   85:16:BD:2C:EC:AB:E2:BD:DD:EA:CA:0B:B9:41:36:B4:38:F1:35:E3
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       0190138448365D1514FADE3C642335501934
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/hRa9LOyr4r3d6soLuUE2tDjxNeM.roa
Signing time:             Thu 13 Jun 2024 21:32:34 +0000
ROA not before:           Thu 13 Jun 2024 21:32:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8895
IP address blocks:        45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/22 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.32.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 25
                          212.26.37.0/24 maxlen: 25
                          212.26.38.0/24 maxlen: 25
                          212.26.39.0/24 maxlen: 25
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/23 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/23 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 25
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 27
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.42.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 27
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 26
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/21 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 25
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 26
                          212.138.153.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 25
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.180.0/24 maxlen: 26
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.190.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 27
                          212.138.201.0/24 maxlen: 24
                          212.138.202.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.207.0/24 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          2001:1490::/32 maxlen: 32
                          2001:1490::/48 maxlen: 48
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:112::/48 maxlen: 48
                          2001:1490:113::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 07:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:13:84:48:36:5d:15:14:fa:de:3c:64:23:35:50:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jun 13 21:32:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8516bd2cecabe2bdddeaca0bb94136b438f135e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:fc:ad:47:95:b3:f9:77:20:51:19:b9:77:
                    62:a1:5a:b6:bd:1e:77:5e:d8:46:d5:3b:53:fa:6f:
                    ab:7b:7d:1b:75:18:5f:2e:f3:c2:3f:68:f1:e2:41:
                    15:aa:70:4f:23:13:58:2b:86:2d:3e:5d:91:29:85:
                    42:99:66:69:b6:7a:08:6d:d6:52:22:21:c6:34:77:
                    07:27:60:c7:42:02:98:7b:fc:15:6f:33:f1:2c:f0:
                    9f:72:ad:00:f6:dc:eb:8d:55:43:0f:85:77:ae:07:
                    df:3e:49:d1:cf:32:73:3a:c5:8d:12:1e:9d:8a:eb:
                    9d:fb:52:33:1f:3a:c7:8b:53:1f:3f:4b:2e:42:ab:
                    86:44:8c:ca:e2:e7:28:3e:1b:8b:ed:98:3a:ad:7c:
                    67:49:33:cd:5b:34:8c:fc:cc:dc:8b:b8:1a:5b:50:
                    0f:22:0e:1d:9a:f8:36:34:64:2c:42:89:b7:4a:54:
                    6e:14:aa:e3:ba:57:8b:5c:25:7e:c1:03:a0:92:62:
                    22:2d:fb:5f:03:42:f4:d8:dc:ba:82:3b:94:9e:72:
                    c3:e2:df:f8:06:04:44:2d:5a:c3:67:1f:9a:15:4a:
                    72:c2:de:52:fd:04:e8:4d:4a:86:41:b0:42:5a:57:
                    4a:d4:5a:95:e7:f5:c9:15:51:0d:7f:fd:6f:d3:33:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:BD:2C:EC:AB:E2:BD:DD:EA:CA:0B:B9:41:36:B4:38:F1:35:E3
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/hRa9LOyr4r3d6soLuUE2tDjxNeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.15.0/24
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:d1:4b:d7:aa:58:2a:af:27:cf:76:82:c6:e1:f0:28:27:
         76:4a:1e:f8:bc:7b:75:62:d5:92:d4:87:c0:69:21:12:db:13:
         f7:48:28:55:10:a6:d5:90:cc:7e:c7:b2:88:2e:d8:93:66:ba:
         29:19:d1:3e:32:4b:bb:33:53:6b:b1:2b:78:94:cd:67:76:ec:
         1a:d9:e3:1d:6f:d1:96:1b:64:61:5c:80:3c:bc:5b:8c:a9:22:
         8c:14:97:73:00:4a:c4:b1:df:39:09:6f:c8:e8:03:5a:c5:7b:
         dd:d6:a3:50:59:37:ee:98:9b:ee:98:e2:4b:0c:c1:cf:15:29:
         ea:9e:ac:58:20:34:f0:fe:94:8f:2c:ec:e2:da:69:db:f5:9d:
         ad:b9:dc:fe:cb:bf:c2:0a:72:20:bd:04:89:f2:3e:af:59:47:
         f6:4a:e6:f2:b0:b9:78:4e:b2:85:b1:62:6e:19:c0:56:0c:94:
         1a:dd:5b:a1:c7:09:2b:e1:b8:52:d5:9f:4a:a9:ed:07:f1:95:
         50:b2:9e:c1:9d:04:d7:fb:80:10:6f:2e:72:56:0a:73:ff:36:
         31:55:70:78:48:ad:ee:a5:58:b4:0a:b4:c3:16:91:58:a0:f9:
         3e:78:ba:4d:a8:27:53:8e:89:58:06:b2:f2:02:1c:e6:57:98:
         98:6d:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:44:45 2024 by rpki-client on console-fra.rpki-client.org