Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/TI5DVBZ7uvK5edhdfR0hqp-mTCM.roa
File:                     TI5DVBZ7uvK5edhdfR0hqp-mTCM.roa (raw, json)
Hash identifier:          5PW9++IxF9Gr5UblXMw5nl9zs+G9VwGY4iJXpkJKUuM=
Subject key identifier:   4C:8E:43:54:16:7B:BA:F2:B9:79:D8:5D:7D:1D:21:AA:9F:A6:4C:23
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       018CC871031670A64D60400C89D371F34E37
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/TI5DVBZ7uvK5edhdfR0hqp-mTCM.roa
Signing time:             Tue 02 Jan 2024 04:31:38 +0000
ROA not before:           Tue 02 Jan 2024 04:31:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8492
IP address blocks:        37.221.206.0/24 maxlen: 24
                          37.221.203.0/24 maxlen: 24
                          37.221.204.0/23 maxlen: 23
                          37.221.200.0/23 maxlen: 23
                          85.114.0.0/19 maxlen: 19
                          92.255.44.0/24 maxlen: 24
                          92.255.41.0/24 maxlen: 24
                          185.241.176.0/22 maxlen: 22
                          92.255.40.0/24 maxlen: 24
                          92.255.45.0/24 maxlen: 24
                          92.255.51.0/24 maxlen: 24
                          92.255.46.0/24 maxlen: 24
                          92.255.47.0/24 maxlen: 24
                          95.161.144.0/21 maxlen: 21
                          145.255.232.0/24 maxlen: 24
                          145.255.233.0/24 maxlen: 24
                          95.161.152.0/22 maxlen: 24
                          95.161.156.0/22 maxlen: 22
                          145.255.236.0/22 maxlen: 22
                          145.255.234.0/23 maxlen: 23
                          95.161.164.0/22 maxlen: 22
                          95.161.160.0/20 maxlen: 20
                          87.249.55.0/24 maxlen: 24
                          62.32.64.0/24 maxlen: 24
                          62.32.66.0/23 maxlen: 23
                          62.32.70.0/24 maxlen: 24
                          62.32.68.0/23 maxlen: 23
                          62.32.75.0/24 maxlen: 24
                          62.32.76.0/24 maxlen: 24
                          62.32.73.0/24 maxlen: 24
                          62.32.74.0/24 maxlen: 24
                          62.32.83.0/24 maxlen: 24
                          62.32.91.0/24 maxlen: 24
                          62.32.89.0/24 maxlen: 24
                          62.32.90.0/24 maxlen: 24
                          62.32.88.0/24 maxlen: 24
                          62.32.94.0/24 maxlen: 24
                          80.79.64.0/21 maxlen: 21
                          80.79.76.0/24 maxlen: 24
                          80.79.72.0/22 maxlen: 22
                          80.79.79.0/24 maxlen: 24
                          185.119.0.0/22 maxlen: 22
                          217.79.4.0/23 maxlen: 23
                          217.79.0.0/22 maxlen: 22
                          217.79.10.0/23 maxlen: 23
                          217.79.8.0/24 maxlen: 24
                          217.79.9.0/24 maxlen: 24
                          217.79.6.0/23 maxlen: 23
                          217.79.15.0/24 maxlen: 24
                          217.79.14.0/24 maxlen: 24
                          217.79.12.0/23 maxlen: 23
                          149.126.16.0/22 maxlen: 22
                          149.126.22.0/24 maxlen: 24
                          149.126.23.0/24 maxlen: 24
                          149.126.20.0/23 maxlen: 23
                          37.77.132.0/24 maxlen: 24
                          37.77.130.0/23 maxlen: 23
                          89.104.118.0/24 maxlen: 24
                          89.104.115.0/24 maxlen: 24
                          37.77.129.0/24 maxlen: 24
                          37.77.133.0/24 maxlen: 24
                          37.77.134.0/23 maxlen: 23
                          185.17.84.0/23 maxlen: 23
                          46.231.208.0/24 maxlen: 24
                          46.231.209.0/24 maxlen: 24
                          46.231.212.0/23 maxlen: 23
                          46.231.210.0/23 maxlen: 23
                          46.231.215.0/24 maxlen: 24
                          46.231.214.0/23 maxlen: 23
                          46.231.214.0/24 maxlen: 24
                          93.191.58.0/24 maxlen: 24
                          93.191.63.0/24 maxlen: 24
                          93.191.60.0/24 maxlen: 24
                          185.171.192.0/22 maxlen: 22
                          89.104.97.0/24 maxlen: 24
                          178.16.144.0/22 maxlen: 22
                          178.16.152.0/22 maxlen: 22
                          178.16.150.0/24 maxlen: 24
                          178.16.151.0/24 maxlen: 24
                          178.16.148.0/23 maxlen: 23
                          178.16.158.0/23 maxlen: 23
                          178.16.156.0/24 maxlen: 24
                          80.250.80.0/24 maxlen: 24
                          80.250.88.0/21 maxlen: 21
                          80.250.87.0/24 maxlen: 24
                          185.7.232.0/22 maxlen: 22
                          46.34.136.0/21 maxlen: 21
                          79.142.80.0/21 maxlen: 21
                          46.34.134.0/24 maxlen: 24
                          79.142.88.0/22 maxlen: 22
                          46.34.148.0/22 maxlen: 22
                          79.142.92.0/24 maxlen: 24
                          185.102.10.0/24 maxlen: 24
                          185.102.8.0/22 maxlen: 22
                          185.81.220.0/22 maxlen: 22
                          95.161.232.0/22 maxlen: 22
                          95.161.228.0/22 maxlen: 22
                          95.161.236.0/22 maxlen: 22
                          79.134.192.0/24 maxlen: 24
                          95.161.176.0/22 maxlen: 22
                          79.134.196.0/23 maxlen: 23
                          79.134.198.0/23 maxlen: 23
                          79.134.194.0/23 maxlen: 23
                          79.134.193.0/24 maxlen: 24
                          95.161.180.0/22 maxlen: 22
                          79.134.200.0/21 maxlen: 21
                          95.161.192.0/22 maxlen: 22
                          95.161.188.0/22 maxlen: 22
                          79.134.213.0/24 maxlen: 24
                          79.134.212.0/24 maxlen: 24
                          79.134.208.0/22 maxlen: 22
                          95.161.200.0/21 maxlen: 21
                          79.134.214.0/23 maxlen: 23
                          79.134.216.0/22 maxlen: 22
                          95.161.212.0/24 maxlen: 24
                          95.161.213.0/24 maxlen: 24
                          79.134.222.0/23 maxlen: 23
                          79.134.220.0/23 maxlen: 23
                          95.161.208.0/22 maxlen: 22
                          95.161.214.0/23 maxlen: 23
                          95.161.218.0/23 maxlen: 23
                          95.161.216.0/23 maxlen: 23
                          95.161.221.0/24 maxlen: 24
                          95.161.222.0/23 maxlen: 23
                          95.161.220.0/24 maxlen: 24
                          89.223.1.0/24 maxlen: 24
                          89.223.12.0/24 maxlen: 24
                          46.229.210.0/23 maxlen: 23
                          46.229.210.0/24 maxlen: 24
                          46.229.211.0/24 maxlen: 24
                          46.229.208.0/23 maxlen: 23
                          46.229.208.0/22 maxlen: 22
                          2a05:a407::/32 maxlen: 32
                          2a05:a406::/32 maxlen: 32
                          2a01:590::/32 maxlen: 32
                          2a05:a400::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 06:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:71:03:16:70:a6:4d:60:40:0c:89:d3:71:f3:4e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jan  2 04:31:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4c8e4354167bbaf2b979d85d7d1d21aa9fa64c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:be:b8:7d:6d:b0:e8:f4:1f:f0:c8:e7:14:
                    2e:d4:de:85:76:a0:9e:99:a6:30:1b:e9:5f:49:5e:
                    b0:b4:26:df:39:46:01:4b:40:53:a7:ac:a4:b0:95:
                    4a:b5:6a:aa:01:fa:a0:d4:83:86:34:86:4b:ef:29:
                    97:e0:e4:6a:a9:8f:58:04:20:1d:7b:b4:96:04:6d:
                    1d:a5:72:35:3c:2b:30:46:ec:2d:37:84:1a:84:27:
                    62:86:89:65:9b:24:3b:e7:9c:7e:37:a3:1e:13:87:
                    33:d0:ae:1b:60:45:84:32:ca:bf:7d:53:ea:b2:99:
                    9d:61:61:ea:0e:a5:cd:26:1d:11:cb:7a:90:7e:20:
                    06:cb:3d:2e:9f:23:57:3b:ed:ee:34:1e:4b:2c:74:
                    91:32:14:aa:64:84:4f:d3:4d:7f:4c:b0:92:23:b4:
                    66:1d:28:ec:62:1e:51:f2:a8:99:f3:97:e7:2f:94:
                    d4:5a:b8:30:5d:15:da:90:0f:5e:bf:a7:fa:64:a9:
                    9b:02:30:70:22:d1:d2:24:62:dc:e2:1f:e4:a9:45:
                    cc:f9:3d:fd:8e:de:f0:ca:81:bd:45:36:2a:75:4e:
                    0b:cd:b6:00:76:29:9f:ac:fe:2f:83:92:63:33:2b:
                    b2:d2:6c:3b:33:9e:23:06:39:5d:55:2a:6c:2c:5d:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:43:54:16:7B:BA:F2:B9:79:D8:5D:7D:1D:21:AA:9F:A6:4C:23
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/TI5DVBZ7uvK5edhdfR0hqp-mTCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.129.0-37.77.135.255
                  37.221.200.0/23
                  37.221.203.0-37.221.206.255
                  46.34.134.0/24
                  46.34.136.0/21
                  46.34.148.0/22
                  46.229.208.0/22
                  46.231.208.0/21
                  62.32.64.0/24
                  62.32.66.0-62.32.70.255
                  62.32.73.0-62.32.76.255
                  62.32.83.0/24
                  62.32.88.0/22
                  62.32.94.0/24
                  79.134.192.0/19
                  79.142.80.0-79.142.92.255
                  80.79.64.0-80.79.76.255
                  80.79.79.0/24
                  80.250.80.0/24
                  80.250.87.0-80.250.95.255
                  85.114.0.0/19
                  87.249.55.0/24
                  89.104.97.0/24
                  89.104.115.0/24
                  89.104.118.0/24
                  89.223.1.0/24
                  89.223.12.0/24
                  92.255.40.0/23
                  92.255.44.0/22
                  92.255.51.0/24
                  93.191.58.0/24
                  93.191.60.0/24
                  93.191.63.0/24
                  95.161.144.0-95.161.183.255
                  95.161.188.0-95.161.195.255
                  95.161.200.0-95.161.223.255
                  95.161.228.0-95.161.239.255
                  145.255.232.0/21
                  149.126.16.0/21
                  178.16.144.0-178.16.156.255
                  178.16.158.0/23
                  185.7.232.0/22
                  185.17.84.0/23
                  185.81.220.0/22
                  185.102.8.0/22
                  185.119.0.0/22
                  185.171.192.0/22
                  185.241.176.0/22
                  217.79.0.0/20
                IPv6:
                  2a01:590::/32
                  2a05:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:25:0c:45:91:9f:12:9c:61:1e:b9:af:3c:b9:55:12:d8:
         19:3a:bb:bf:0f:d9:b5:ef:63:5a:71:22:47:83:24:b1:11:29:
         ab:e8:7d:90:af:93:29:74:e8:a0:25:a3:35:01:52:7a:1f:f4:
         0b:33:d3:4f:92:77:ed:fd:b4:05:37:da:2a:f2:8f:57:e7:34:
         51:c1:c3:0c:74:54:60:56:1b:45:54:6a:de:72:42:c8:45:63:
         8c:49:86:b6:3c:44:9a:66:5e:5f:01:68:9e:c7:e2:47:4f:fc:
         4c:cf:87:41:ce:95:19:c5:5e:7a:99:72:21:83:80:ff:a9:6c:
         04:8d:dd:f8:f8:43:7f:5c:99:e9:4a:92:1b:37:9d:2d:9d:71:
         d0:30:e9:08:56:86:0d:2f:34:63:43:8d:c6:43:56:85:8d:c7:
         3f:7e:5f:74:1e:42:30:bf:26:78:e2:22:f6:46:15:8b:ac:ef:
         3d:a0:79:8c:f0:f4:db:80:a3:8c:04:3f:a6:d5:3f:75:6a:33:
         50:8e:90:e2:70:72:7f:b5:0d:21:ba:3e:63:df:f8:c0:d9:68:
         7f:a9:fd:2f:51:36:a5:6a:2e:bb:39:1c:83:df:d0:9a:9b:72:
         ae:30:ed:72:e1:0c:ce:ef:7c:0c:7e:e1:7e:f3:64:da:9d:fe:
         ca:79:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org