Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/_dTf2tumsuSBr7gqWazWb9swd_Q.roa
File:                     _dTf2tumsuSBr7gqWazWb9swd_Q.roa (raw, json)
Hash identifier:          UVOO8WsOjb2yz8qPvCX7u3EQ6qYe5k9G+WdOlvvq4/g=
Subject key identifier:   FD:D4:DF:DA:DB:A6:B2:E4:81:AF:B8:2A:59:AC:D6:6F:DB:30:77:F4
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       018A6AE59764D7F186599D55C3751ABC06CF
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/_dTf2tumsuSBr7gqWazWb9swd_Q.roa
Signing time:             Wed 06 Sep 2023 14:29:05 +0000
ROA not before:           Wed 06 Sep 2023 14:29:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8492
IP address blocks:        37.221.206.0/24 maxlen: 24
                          37.221.203.0/24 maxlen: 24
                          37.221.204.0/23 maxlen: 23
                          37.221.200.0/23 maxlen: 23
                          85.114.0.0/19 maxlen: 19
                          92.255.44.0/24 maxlen: 24
                          92.255.41.0/24 maxlen: 24
                          185.241.176.0/22 maxlen: 22
                          92.255.40.0/24 maxlen: 24
                          92.255.45.0/24 maxlen: 24
                          92.255.51.0/24 maxlen: 24
                          92.255.46.0/24 maxlen: 24
                          92.255.47.0/24 maxlen: 24
                          95.161.144.0/21 maxlen: 21
                          145.255.232.0/24 maxlen: 24
                          145.255.233.0/24 maxlen: 24
                          95.161.152.0/22 maxlen: 24
                          95.161.156.0/22 maxlen: 22
                          145.255.236.0/22 maxlen: 22
                          145.255.234.0/23 maxlen: 23
                          95.161.164.0/22 maxlen: 22
                          95.161.160.0/20 maxlen: 20
                          87.249.55.0/24 maxlen: 24
                          62.32.64.0/24 maxlen: 24
                          62.32.66.0/23 maxlen: 23
                          62.32.70.0/24 maxlen: 24
                          62.32.68.0/23 maxlen: 23
                          62.32.75.0/24 maxlen: 24
                          62.32.76.0/24 maxlen: 24
                          62.32.73.0/24 maxlen: 24
                          62.32.74.0/24 maxlen: 24
                          62.32.83.0/24 maxlen: 24
                          62.32.91.0/24 maxlen: 24
                          62.32.89.0/24 maxlen: 24
                          62.32.90.0/24 maxlen: 24
                          62.32.88.0/24 maxlen: 24
                          62.32.94.0/24 maxlen: 24
                          80.79.64.0/21 maxlen: 21
                          80.79.76.0/24 maxlen: 24
                          80.79.72.0/22 maxlen: 22
                          80.79.79.0/24 maxlen: 24
                          185.119.0.0/22 maxlen: 22
                          217.79.4.0/23 maxlen: 23
                          217.79.0.0/22 maxlen: 22
                          217.79.10.0/23 maxlen: 23
                          217.79.8.0/24 maxlen: 24
                          217.79.9.0/24 maxlen: 24
                          217.79.6.0/23 maxlen: 23
                          217.79.15.0/24 maxlen: 24
                          217.79.14.0/24 maxlen: 24
                          217.79.12.0/23 maxlen: 23
                          149.126.16.0/22 maxlen: 22
                          149.126.22.0/24 maxlen: 24
                          149.126.23.0/24 maxlen: 24
                          149.126.20.0/23 maxlen: 23
                          37.77.132.0/24 maxlen: 24
                          37.77.130.0/23 maxlen: 23
                          89.104.118.0/24 maxlen: 24
                          89.104.115.0/24 maxlen: 24
                          37.77.129.0/24 maxlen: 24
                          37.77.133.0/24 maxlen: 24
                          37.77.134.0/23 maxlen: 23
                          185.17.84.0/23 maxlen: 23
                          46.231.208.0/24 maxlen: 24
                          46.231.209.0/24 maxlen: 24
                          46.231.212.0/23 maxlen: 23
                          46.231.210.0/23 maxlen: 23
                          46.231.215.0/24 maxlen: 24
                          46.231.214.0/23 maxlen: 23
                          46.231.214.0/24 maxlen: 24
                          93.191.58.0/24 maxlen: 24
                          93.191.63.0/24 maxlen: 24
                          93.191.60.0/24 maxlen: 24
                          185.171.192.0/22 maxlen: 22
                          89.104.97.0/24 maxlen: 24
                          178.16.144.0/22 maxlen: 22
                          178.16.152.0/22 maxlen: 22
                          178.16.150.0/24 maxlen: 24
                          178.16.151.0/24 maxlen: 24
                          178.16.148.0/23 maxlen: 23
                          178.16.158.0/23 maxlen: 23
                          178.16.156.0/24 maxlen: 24
                          80.250.80.0/24 maxlen: 24
                          80.250.88.0/21 maxlen: 21
                          80.250.87.0/24 maxlen: 24
                          185.7.232.0/22 maxlen: 22
                          46.34.136.0/21 maxlen: 21
                          79.142.80.0/21 maxlen: 21
                          46.34.134.0/24 maxlen: 24
                          79.142.88.0/22 maxlen: 22
                          46.34.148.0/22 maxlen: 22
                          79.142.92.0/24 maxlen: 24
                          185.102.10.0/24 maxlen: 24
                          185.102.8.0/22 maxlen: 22
                          185.81.220.0/22 maxlen: 22
                          95.161.232.0/22 maxlen: 22
                          95.161.228.0/22 maxlen: 22
                          95.161.236.0/22 maxlen: 22
                          79.134.192.0/24 maxlen: 24
                          95.161.176.0/22 maxlen: 22
                          79.134.196.0/23 maxlen: 23
                          79.134.198.0/23 maxlen: 23
                          79.134.194.0/23 maxlen: 23
                          79.134.193.0/24 maxlen: 24
                          95.161.180.0/22 maxlen: 22
                          79.134.200.0/21 maxlen: 21
                          95.161.192.0/22 maxlen: 22
                          95.161.188.0/22 maxlen: 22
                          79.134.213.0/24 maxlen: 24
                          79.134.212.0/24 maxlen: 24
                          79.134.208.0/22 maxlen: 22
                          95.161.200.0/21 maxlen: 21
                          79.134.214.0/23 maxlen: 23
                          79.134.216.0/22 maxlen: 22
                          95.161.212.0/24 maxlen: 24
                          95.161.213.0/24 maxlen: 24
                          79.134.222.0/23 maxlen: 23
                          79.134.220.0/23 maxlen: 23
                          95.161.208.0/22 maxlen: 22
                          95.161.214.0/23 maxlen: 23
                          95.161.218.0/23 maxlen: 23
                          95.161.216.0/23 maxlen: 23
                          95.161.221.0/24 maxlen: 24
                          95.161.222.0/23 maxlen: 23
                          95.161.220.0/24 maxlen: 24
                          89.223.1.0/24 maxlen: 24
                          89.223.12.0/24 maxlen: 24
                          46.229.210.0/23 maxlen: 23
                          46.229.210.0/24 maxlen: 24
                          46.229.211.0/24 maxlen: 24
                          46.229.208.0/23 maxlen: 23
                          46.229.208.0/22 maxlen: 22
                          2a05:a407::/32 maxlen: 32
                          2a05:a406::/32 maxlen: 32
                          2a01:590::/32 maxlen: 32
                          2a05:a400::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6a:e5:97:64:d7:f1:86:59:9d:55:c3:75:1a:bc:06:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Sep  6 14:29:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdd4dfdadba6b2e481afb82a59acd66fdb3077f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:f2:7f:31:8c:4f:2b:61:e1:87:96:ce:b3:
                    5f:7d:f9:d2:eb:45:e7:e1:c1:2a:c5:94:d9:2d:7a:
                    1b:24:27:8c:6d:0f:2a:ec:ac:59:cf:42:77:2b:ff:
                    a3:59:d9:74:4b:89:17:fb:3e:c9:b9:37:89:ae:aa:
                    77:1a:25:d8:bf:bc:80:c4:f0:ad:3d:7a:6c:41:1e:
                    a1:2d:2b:63:6c:99:93:1a:79:78:bb:f5:ad:45:7a:
                    cd:b5:d6:54:b9:63:b8:cc:46:21:49:7b:de:91:5d:
                    7e:66:bd:c5:d6:86:c9:1f:f6:6c:a2:12:51:ca:7b:
                    9b:3c:79:16:df:f0:1e:4c:a1:22:50:f7:0a:56:46:
                    66:ed:0e:e0:cf:d6:8e:0a:7e:d8:0a:a6:b2:03:42:
                    65:ca:18:f5:1a:06:73:d6:29:44:c7:d5:41:de:36:
                    38:ed:db:59:42:ca:63:39:05:6e:e3:54:c8:ab:3a:
                    b5:2e:81:76:4a:a2:80:96:f8:82:f1:d0:3b:c6:ed:
                    3c:0a:f0:53:82:df:a9:39:47:d5:9d:13:b3:26:f0:
                    8d:74:c2:e3:39:62:1e:3d:6a:88:d4:c0:60:38:08:
                    8e:16:4a:d4:58:b6:1d:da:0e:3b:f3:1f:85:13:89:
                    fd:48:34:da:9b:f2:74:57:f2:90:1f:59:49:8d:79:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D4:DF:DA:DB:A6:B2:E4:81:AF:B8:2A:59:AC:D6:6F:DB:30:77:F4
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/_dTf2tumsuSBr7gqWazWb9swd_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.129.0-37.77.135.255
                  37.221.200.0/23
                  37.221.203.0-37.221.206.255
                  46.34.134.0/24
                  46.34.136.0/21
                  46.34.148.0/22
                  46.229.208.0/22
                  46.231.208.0/21
                  62.32.64.0/24
                  62.32.66.0-62.32.70.255
                  62.32.73.0-62.32.76.255
                  62.32.83.0/24
                  62.32.88.0/22
                  62.32.94.0/24
                  79.134.192.0/19
                  79.142.80.0-79.142.92.255
                  80.79.64.0-80.79.76.255
                  80.79.79.0/24
                  80.250.80.0/24
                  80.250.87.0-80.250.95.255
                  85.114.0.0/19
                  87.249.55.0/24
                  89.104.97.0/24
                  89.104.115.0/24
                  89.104.118.0/24
                  89.223.1.0/24
                  89.223.12.0/24
                  92.255.40.0/23
                  92.255.44.0/22
                  92.255.51.0/24
                  93.191.58.0/24
                  93.191.60.0/24
                  93.191.63.0/24
                  95.161.144.0-95.161.183.255
                  95.161.188.0-95.161.195.255
                  95.161.200.0-95.161.223.255
                  95.161.228.0-95.161.239.255
                  145.255.232.0/21
                  149.126.16.0/21
                  178.16.144.0-178.16.156.255
                  178.16.158.0/23
                  185.7.232.0/22
                  185.17.84.0/23
                  185.81.220.0/22
                  185.102.8.0/22
                  185.119.0.0/22
                  185.171.192.0/22
                  185.241.176.0/22
                  217.79.0.0/20
                IPv6:
                  2a01:590::/32
                  2a05:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         34:47:5a:b9:c6:4c:ec:c9:25:ae:8e:9d:db:f6:12:bc:78:e2:
         d8:1b:b8:12:39:a9:63:31:f3:e4:b5:22:d8:33:b5:ca:d4:99:
         52:5e:6b:2d:64:9c:17:fa:a8:a6:41:2d:f5:c2:b7:d1:b9:d8:
         4b:25:0d:ff:08:4c:1b:cb:83:39:82:c6:f9:0b:d1:bc:54:90:
         73:24:a0:54:67:04:db:97:13:e6:ea:c9:ef:09:58:2b:ea:c3:
         32:c6:3c:a5:4c:01:03:a9:f6:18:ce:05:e5:08:72:b8:15:9c:
         d5:10:3f:d5:a9:4e:4f:8c:29:cf:61:29:e0:8d:72:4d:75:a8:
         13:e7:7f:fd:52:ba:3a:11:1d:59:d0:a4:67:04:10:03:39:18:
         89:1b:f3:76:a5:43:02:61:7a:95:e8:ee:08:8c:46:66:26:36:
         05:b5:7d:9b:f4:74:a0:63:fb:75:5d:ba:db:63:11:7c:71:e4:
         ae:75:60:7b:ca:65:96:8b:62:e7:aa:56:43:b5:0a:c6:9a:e8:
         f9:2a:35:3c:d5:8a:d9:c6:53:96:34:9c:a8:fc:2d:89:4c:f0:
         65:c8:e4:b4:1f:02:f6:8d:8e:e9:a7:a4:5c:11:3b:66:f8:04:
         3e:8a:f3:c1:3a:5d:bf:04:f7:ff:00:d1:0f:f7:28:14:f0:6d:
         7f:e5:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org