Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/jNYBbDEj-WMbYJSOH3hcsA4sWTQ.roa
File:                     jNYBbDEj-WMbYJSOH3hcsA4sWTQ.roa (raw, json)
Hash identifier:          GNBHtqMzTu/f2J6xRuoyGZBH2BE/uvzhJzrzSI++z9k=
Subject key identifier:   8C:D6:01:6C:31:23:F9:63:1B:60:94:8E:1F:78:5C:B0:0E:2C:59:34
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       018DC4E200C9642394B0C774757D87DBDA56
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/jNYBbDEj-WMbYJSOH3hcsA4sWTQ.roa
Signing time:             Tue 20 Feb 2024 04:59:22 +0000
ROA not before:           Tue 20 Feb 2024 04:59:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8895
IP address blocks:        45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/24 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.32.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 24
                          212.26.37.0/24 maxlen: 24
                          212.26.38.0/24 maxlen: 25
                          212.26.39.0/24 maxlen: 25
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/24 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/24 maxlen: 24
                          212.26.51.0/24 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 24
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 24
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.42.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/24 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 25
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 24
                          212.138.153.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 25
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.190.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.202.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          2001:1490::/32 maxlen: 32
                          2001:1490::/48 maxlen: 48
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:112::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 05:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c4:e2:00:c9:64:23:94:b0:c7:74:75:7d:87:db:da:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Feb 20 04:59:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8cd6016c3123f9631b60948e1f785cb00e2c5934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:a2:20:ae:91:3c:3e:8e:d3:05:9c:ba:fb:
                    31:f6:a8:bc:d2:fb:b0:a1:69:07:d4:9a:00:8a:99:
                    98:38:1e:8c:28:f3:f9:72:ab:60:fd:e7:4b:a5:20:
                    b1:f7:f4:32:cc:9d:a9:a8:6e:66:eb:75:76:35:db:
                    f6:6c:2f:86:f6:46:13:57:7c:da:36:1f:2c:e7:33:
                    6b:ce:b2:35:65:80:24:32:66:03:d6:b0:f1:05:85:
                    12:8c:c9:81:7f:19:0a:bc:04:43:06:59:00:a4:25:
                    28:4f:80:a1:06:6f:36:de:82:67:fb:63:a1:57:e6:
                    49:ac:de:7b:6c:3a:14:22:93:bd:4c:10:3b:7e:a2:
                    8a:8d:55:12:82:30:96:e7:e6:2d:11:3a:a1:91:3e:
                    ce:71:ab:11:08:af:e7:0c:45:59:37:87:ae:de:83:
                    59:d5:e4:48:0a:f9:d6:fb:21:ec:4c:6d:fd:e2:68:
                    c5:0f:4c:ae:93:63:ac:78:7d:07:d5:08:c3:45:81:
                    13:6e:67:74:f1:40:42:82:38:41:aa:29:68:32:72:
                    02:d3:b0:91:34:d1:da:68:57:48:78:e3:90:b1:8b:
                    72:21:7a:3d:2d:75:86:70:38:8d:d3:d9:4a:ce:e0:
                    90:9c:15:28:85:01:f5:65:56:57:a9:dd:71:65:dc:
                    63:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:01:6C:31:23:F9:63:1B:60:94:8E:1F:78:5C:B0:0E:2C:59:34
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/jNYBbDEj-WMbYJSOH3hcsA4sWTQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.15.0/24
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:fd:f7:9c:6a:c9:80:ef:d7:ba:33:fb:19:39:26:63:1b:d9:
         c1:68:88:c8:01:fc:57:4d:50:24:95:b0:2d:82:a3:b7:4b:d7:
         7f:b8:f0:e5:3d:42:fb:70:d0:15:fc:52:f0:26:23:49:99:d3:
         84:cc:a7:db:78:78:84:07:b9:a1:22:a5:1d:31:a1:d0:78:28:
         90:fe:e3:fa:8d:11:2c:97:69:2a:28:ab:cf:ef:f9:6d:ee:cb:
         24:7a:d2:bf:4e:c4:9a:b5:49:23:d6:05:8c:cd:1a:66:e8:7a:
         85:53:c2:5a:fa:e2:23:bc:04:56:72:7e:67:a9:13:53:a9:c0:
         0a:b6:93:af:b6:38:11:6d:70:c9:b5:9d:00:76:e9:85:12:1c:
         9f:b8:64:06:7b:e2:33:5f:25:49:05:2f:6a:69:e6:2a:7a:e1:
         d7:66:7e:47:87:34:e7:46:70:80:41:3c:d7:0d:5c:2a:2f:46:
         24:b5:ad:9a:7d:c4:bc:a3:83:24:30:67:87:72:e7:e2:cf:7c:
         78:4e:23:91:03:3c:28:48:7a:a6:42:05:bb:f8:16:f1:41:ff:
         ff:42:91:00:1b:02:30:38:10:6f:a7:60:d6:b8:4d:e1:2d:d8:
         5b:f2:74:02:5e:15:f3:8a:f1:4a:19:6c:ab:0d:1c:37:cb:ff:
         5b:d8:01:53
-----BEGIN CERTIFICATE-----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Generated at Tue Feb 20 06:47:48 2024 by rpki-client on console-fra.rpki-client.org