Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/4CLK1rQ4HLH6cybnIrzrUQvtqrA.roa
File:                     4CLK1rQ4HLH6cybnIrzrUQvtqrA.roa (raw, json)
Hash identifier:          C2IS9Iyzbcj5lmgY2T/YJaFLgNLPQz5LS1h+4acfBNk=
Subject key identifier:   E0:22:CA:D6:B4:38:1C:B1:FA:73:26:E7:22:BC:EB:51:0B:ED:AA:B0
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018A4224389367B6EE56E9DB0E20C04C8586
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/4CLK1rQ4HLH6cybnIrzrUQvtqrA.roa
Signing time:             Tue 29 Aug 2023 16:33:04 +0000
ROA not before:           Tue 29 Aug 2023 16:33:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          77.81.102.0/24 maxlen: 24
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Wed 06 Sep 2023 15:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:42:24:38:93:67:b6:ee:56:e9:db:0e:20:c0:4c:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Aug 29 16:33:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e022cad6b4381cb1fa7326e722bceb510bedaab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:f1:32:1d:1d:84:2f:fa:8d:89:1a:f6:32:
                    a5:b0:5b:1f:a5:84:7a:4b:0b:84:c7:10:63:6d:b7:
                    79:00:5f:5e:ea:85:83:dd:86:50:40:a0:f7:8f:73:
                    1a:c7:b7:d8:78:96:5b:98:44:18:00:be:22:bd:cf:
                    8f:0b:e8:72:e2:28:97:0c:c8:7f:76:a3:46:6d:10:
                    0c:0f:66:55:fb:bc:10:a1:2b:4e:77:40:09:e2:70:
                    d2:dd:b1:43:90:0a:f3:9f:ea:36:31:bb:57:91:c4:
                    c0:0f:91:43:a4:5b:e4:cf:f8:b0:07:39:e0:89:35:
                    c9:55:27:3b:8c:a3:82:fc:b9:b5:4b:fa:ea:a6:62:
                    f6:2d:4d:90:b9:40:b3:6a:f7:e6:db:f5:06:ac:89:
                    0f:af:6a:b0:c6:02:c8:b6:43:59:ba:64:bb:25:d2:
                    fc:6e:7b:c3:52:3b:d1:da:ae:46:ce:43:fe:c9:58:
                    2b:75:1a:84:f8:33:77:d2:f4:6a:68:26:99:0a:70:
                    40:ae:a2:38:c4:c4:e0:11:54:57:38:18:15:53:54:
                    0f:75:78:bd:90:30:ad:34:ad:55:bc:9d:5f:99:47:
                    85:6e:d6:7f:d1:b8:4a:3b:9f:4e:42:02:89:d3:99:
                    3a:88:28:9c:6d:47:ae:75:fa:a2:d9:04:eb:86:8a:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:22:CA:D6:B4:38:1C:B1:FA:73:26:E7:22:BC:EB:51:0B:ED:AA:B0
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/4CLK1rQ4HLH6cybnIrzrUQvtqrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.102.0/24
                  77.81.124.0/22
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         c6:c0:3c:2d:4c:6c:23:7c:73:b4:fe:9a:b4:50:57:58:ff:1c:
         72:0d:3d:ef:b6:43:42:88:2b:61:10:ce:27:18:8c:a8:e2:5f:
         ba:37:0f:83:f7:01:06:c6:30:0d:86:bd:09:38:d7:1b:d0:c2:
         50:6c:36:6e:94:50:4b:4a:3b:6f:7e:4f:f3:9d:8c:17:fc:c7:
         fa:9f:f5:29:ea:ab:c9:f0:3c:e5:0f:8c:99:01:94:c4:1f:e3:
         a3:30:f2:87:09:f2:e2:cf:17:cc:57:e8:7e:c0:a9:69:92:aa:
         5b:40:e4:9a:32:b6:44:b0:52:44:a4:98:78:1d:d9:fa:89:ef:
         d6:3b:3a:dd:4e:63:08:7e:2c:c7:4b:73:bc:cb:21:67:fd:25:
         75:fc:db:4e:06:c9:16:b4:70:08:4c:4f:88:38:f6:72:2f:bc:
         88:9a:0c:87:9f:91:61:33:7f:29:4e:b4:de:b1:ac:16:c8:19:
         e0:5c:e3:46:af:ff:88:5e:46:64:86:3a:5a:dc:f1:0c:77:3e:
         5a:de:4c:0c:d8:6c:88:fc:73:b6:e7:6f:d9:ff:60:a0:ed:39:
         12:79:e4:ce:78:6a:f3:10:68:ad:31:53:86:f6:ab:55:e9:b9:
         31:73:c0:9c:b5:f7:ab:69:07:9b:02:16:27:e5:cc:01:38:6c:
         1f:67:7e:19
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgISAYpCJDiTZ7buVunbDiDATIWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjMwODI5MTYzMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDIyY2FkNmI0MzgxY2IxZmE3MzI2ZTcyMmJjZWI1MTBiZWRhYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjATxMh0dhC/6jYka9jKlsFsfpYR6
SwuExxBjbbd5AF9e6oWD3YZQQKD3j3Max7fYeJZbmEQYAL4ivc+PC+hy4iiXDMh/
dqNGbRAMD2ZV+7wQoStOd0AJ4nDS3bFDkArzn+o2MbtXkcTAD5FDpFvkz/iwBzng
iTXJVSc7jKOC/Lm1S/rqpmL2LU2QuUCzavfm2/UGrIkPr2qwxgLItkNZumS7JdL8
bnvDUjvR2q5GzkP+yVgrdRqE+DN30vRqaCaZCnBArqI4xMTgEVRXOBgVU1QPdXi9
kDCtNK1VvJ1fmUeFbtZ/0bhKO59OQgKJ05k6iCicbUeudfqi2QTrhoot0QIDAQAB
o4IEKjCCBCYwHQYDVR0OBBYEFOAiyta0OByx+nMm5yK861EL7aqwMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvNENMSzFyUTRITEg2Y3libklyenJVUXZ0cXJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICPgYIKwYBBQUHAQcBAf8EggItMIICKTCCAggEAgABMIIC
AAMEAwXiiAMEAB8OZgMEAB8O/jAMAwQAJQpxAwQAJQpyAwQALmabAwQBLveOAwQC
QO/sAwQATVFmAwQCTVF8AwQATVG/AwQEURPQAwQAVPcAAwQCVPcoAwQAVcxGAwQC
VmgUAwQCVmj4AwQAVmpZAwQAVmpwAwQAVmqHMAwDBABWap0DBABWap4DBABWa/ED
BAJZFUADBABZIH8DBAJZImADBABZIxkDBAJZIxwDBAJZJUADBAJZJawDBAFZJkQD
BABZKNQDBAFZLt4DBABdca8DBABdclMDBABdcoEDBABesREDBANtRWgDBANtRpAD
BABt5ssDBABt5tEDBABt5tcDBABt5toDBABt5twDBAKAf5QDBACG//MDBAKw36wD
BASy76ADBAK5A+wDBAK5EMwDBAK5JpQDBAK5LEwDBAK5PZwDBAC5cuADBAK5eYgD
BAK5fcwDBAK5hhQDBAK5iSQDBAK5nvADBAK5yMwDBAK52JADBAK53+gDBAC81JoD
BAO88DgDBAC88EcDBAC88XgDBAC88ZADBAG88ZwDBAC88fYDBALBINADBALBsBwD
BAHCMuoDBAHDFGwDBALDjNQwDAMEAMPOpQMEA8POoDAMAwQAw86pAwQCw86oAwQC
w860AwQBw+p8AwQAw+p/AwQC1O3gAwQC1aZUAwQE2ZJQMBsEAgACMBUDBQAqABow
AwUAKgFAIAMFAyoLuEAwDQYJKoZIhvcNAQELBQADggEBAMbAPC1MbCN8c7T+mrRQ
V1j/HHINPe+2Q0KIK2EQzicYjKjiX7o3D4P3AQbGMA2GvQk41xvQwlBsNm6UUEtK
O29+T/OdjBf8x/qf9Snqq8nwPOUPjJkBlMQf46Mw8ocJ8uLPF8xX6H7AqWmSqltA
5JoytkSwUkSkmHgd2fqJ79Y7Ot1OYwh+LMdLc7zLIWf9JXX8204GyRa0cAhMT4g4
9nIvvIiaDIefkWEzfylOtN6xrBbIGeBc40av/4heRmSGOlrc8Qx3PlreTAzYbIj8
c7bnb9n/YKDtORJ55M54avMQaK0xU4b2q1XpuTFzwJy196tpB5sCFiflzAE4bB9n
fhk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org