Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/2jDvdwkwgvXrt12AYysAW_OrCJg.roa
File:                     2jDvdwkwgvXrt12AYysAW_OrCJg.roa (raw, json)
Hash identifier:          357FovUNMYDFmm2O1188lFQPqE1L8CiKpdRO2GkurcY=
Subject key identifier:   DA:30:EF:77:09:30:82:F5:EB:B7:5D:80:63:2B:00:5B:F3:AB:08:98
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018834345455ED7BB10520A68A0F7AC0D8DD
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/2jDvdwkwgvXrt12AYysAW_OrCJg.roa
Signing time:             Fri 19 May 2023 13:30:24 +0000
ROA not before:           Fri 19 May 2023 13:30:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          89.34.96.0/22 maxlen: 22
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 02 Jun 2023 23:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:34:34:54:55:ed:7b:b1:05:20:a6:8a:0f:7a:c0:d8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: May 19 13:30:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da30ef77093082f5ebb75d80632b005bf3ab0898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2e:a9:34:bc:56:be:42:21:3d:33:cc:e6:79:
                    b7:c0:57:65:e8:e9:f0:95:3d:1d:d9:f9:c3:11:aa:
                    77:17:2e:f6:62:a0:ca:52:e7:f3:9f:58:b8:63:f6:
                    b7:14:54:98:66:33:fa:db:f6:79:0e:1f:03:df:00:
                    0f:c1:f1:7a:02:80:ea:b6:04:b1:9c:0f:a2:94:8c:
                    2e:4c:b3:25:67:41:b1:17:2f:39:9a:e5:bf:75:09:
                    d5:6a:2e:46:31:02:c4:b2:f8:29:8d:ec:ed:64:ee:
                    b9:9d:02:77:04:4b:2c:3e:89:97:23:4b:0a:08:e3:
                    9d:81:1d:2e:56:16:04:20:f4:66:e0:71:45:f1:fb:
                    76:64:1d:87:94:41:74:39:6c:c8:7c:4e:4b:4f:b5:
                    ca:43:81:7d:31:7d:32:41:ff:8e:ad:ab:00:57:f3:
                    05:3e:c0:16:ac:e4:79:56:4f:01:f1:75:ec:cc:73:
                    ed:a3:74:41:52:99:d8:ed:8e:7d:b4:65:74:98:5a:
                    48:7e:8b:b2:0c:d7:39:f6:7c:a3:35:e0:e3:fc:c7:
                    cf:c8:2c:64:4d:a1:ca:62:d1:7a:b5:7f:79:31:72:
                    33:ff:e9:ca:ef:fa:67:56:d1:dc:40:3b:c8:51:7b:
                    93:75:d9:a2:c7:6e:4a:b9:90:fa:a3:c5:f0:dd:0b:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:30:EF:77:09:30:82:F5:EB:B7:5D:80:63:2B:00:5B:F3:AB:08:98
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/2jDvdwkwgvXrt12AYysAW_OrCJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  37.10.113.0-37.10.114.255
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         b7:bf:60:36:c8:4c:47:7a:d0:e7:3f:f4:71:d2:2e:13:58:9d:
         fe:32:76:fc:c7:3f:5b:82:b7:94:59:c9:ae:4f:ef:ec:2f:bc:
         96:be:ce:41:9f:95:46:49:da:cd:bb:6f:58:5c:ea:cc:a1:f2:
         07:fe:77:05:9f:53:16:f2:24:e2:54:c7:12:c1:9a:58:76:6f:
         1f:52:1b:9c:00:6e:27:c1:4d:21:00:a9:1e:73:07:50:d9:1b:
         54:4a:0e:de:1d:c5:85:38:c9:4f:67:c0:22:17:a6:79:5f:2a:
         fd:e3:98:cb:c2:c2:ad:ce:17:85:f7:b8:72:c3:33:2b:b6:d5:
         74:23:1b:42:b7:89:78:49:8d:1b:5e:fd:8b:56:2d:a1:f3:3c:
         6c:f6:e4:39:f3:e2:d6:ab:7b:80:d6:4c:ef:17:26:f5:ef:8a:
         31:87:b2:e2:89:40:43:a6:32:dc:68:97:11:60:72:8b:1a:80:
         e2:f0:fc:e1:5c:b4:99:f5:97:30:7b:01:59:bb:81:8b:70:57:
         3e:d2:69:9a:e7:20:76:d8:76:d2:d8:c3:03:ed:b0:1d:90:f7:
         20:98:96:60:25:40:5f:18:83:f1:04:13:6a:2c:76:c9:40:db:
         f1:06:05:72:0b:b4:76:a3:4c:91:18:1e:f1:db:52:fe:1d:a7:
         d2:62:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org