Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/BNNwoZdoctAM0JTyAkSViH3qra4.roa
File:                     BNNwoZdoctAM0JTyAkSViH3qra4.roa (raw, json)
Hash identifier:          eif3i+5GJSeRx2U4yWKkDfYImYQoSYA1/W2YvNW8ag8=
Subject key identifier:   04:D3:70:A1:97:68:72:D0:0C:D0:94:F2:02:44:95:88:7D:EA:AD:AE
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       0191511867980A5DBA9E51173F44B2FDCC91
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/BNNwoZdoctAM0JTyAkSViH3qra4.roa
Signing time:             Wed 14 Aug 2024 13:33:59 +0000
ROA not before:           Wed 14 Aug 2024 13:33:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25369
IP address blocks:        5.226.136.0/21 maxlen: 21
                          31.14.102.0/24 maxlen: 24
                          31.14.254.0/24 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          77.81.124.0/22 maxlen: 22
                          77.81.191.0/24 maxlen: 24
                          79.139.84.0/22 maxlen: 22
                          80.240.108.0/23 maxlen: 23
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          82.97.192.0/23 maxlen: 23
                          84.247.0.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          85.204.70.0/24 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.22.0/23 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          86.106.135.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          89.34.96.0/22 maxlen: 22
                          89.34.96.0/24 maxlen: 24
                          89.34.97.0/24 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.37.64.0/22 maxlen: 22
                          89.37.172.0/22 maxlen: 22
                          89.37.173.0/24 maxlen: 24
                          89.38.68.0/23 maxlen: 23
                          89.40.212.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          89.46.223.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          93.118.40.0/22 maxlen: 22
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.172.0/23 maxlen: 24
                          176.223.174.0/23 maxlen: 24
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.16.204.0/22 maxlen: 22
                          185.38.148.0/22 maxlen: 22
                          185.44.76.0/22 maxlen: 22
                          185.61.156.0/22 maxlen: 22
                          185.61.156.0/24 maxlen: 24
                          185.61.157.0/24 maxlen: 24
                          185.114.224.0/24 maxlen: 24
                          185.121.136.0/22 maxlen: 22
                          185.125.204.0/22 maxlen: 22
                          185.134.20.0/22 maxlen: 22
                          185.137.36.0/22 maxlen: 24
                          185.158.240.0/22 maxlen: 24
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          188.241.246.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          193.32.208.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          195.20.108.0/23 maxlen: 23
                          195.20.108.0/24 maxlen: 24
                          195.140.212.0/22 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.127.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          213.166.84.0/22 maxlen: 24
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          217.146.92.0/24 maxlen: 24
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:35::/48 maxlen: 48
                          2a01:4020:100::/40 maxlen: 40
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 17:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:51:18:67:98:0a:5d:ba:9e:51:17:3f:44:b2:fd:cc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Aug 14 13:33:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=04d370a1976872d00cd094f2024495887deaadae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:f3:e6:1f:59:64:a7:7c:b6:64:0a:7e:47:
                    29:f6:a2:fc:69:18:4c:d3:11:fa:ed:4a:94:41:0c:
                    f6:95:a4:de:89:39:6b:e8:e0:97:44:53:38:f6:34:
                    8d:6f:af:ab:f6:3e:74:6d:1d:e3:17:37:67:54:b2:
                    93:e1:1c:b0:14:52:b4:40:5f:89:28:4c:42:09:b5:
                    14:09:b6:7f:bd:8b:7b:04:21:76:d6:20:15:71:f6:
                    e6:f1:32:14:e8:f0:f7:d6:1f:50:3c:4d:92:06:e5:
                    69:d0:17:18:ad:10:f5:c6:da:0b:f1:7c:19:f0:5f:
                    36:36:b8:0e:4e:73:1a:01:c3:0e:01:f9:75:3d:52:
                    31:41:ab:d6:e3:28:17:f1:36:cb:2f:32:6d:af:29:
                    d3:50:39:1e:5b:0f:a3:11:70:86:7b:cc:08:f0:61:
                    17:3e:13:f7:e1:79:17:15:c4:1c:05:b5:48:53:8f:
                    c2:e7:bb:0d:c0:8d:18:e3:f9:74:81:c8:50:5a:57:
                    68:68:56:02:2c:8d:dd:80:4f:d3:ff:aa:56:83:90:
                    04:72:26:79:21:2c:e4:ed:c3:b9:5a:5a:fc:e2:46:
                    05:fb:f5:ee:16:28:00:5b:b3:f8:ae:ad:66:68:99:
                    32:29:b6:a6:f9:cb:6f:f6:6c:c5:3f:06:d5:5f:9d:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:70:A1:97:68:72:D0:0C:D0:94:F2:02:44:95:88:7D:EA:AD:AE
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/BNNwoZdoctAM0JTyAkSViH3qra4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  80.240.108.0/23
                  81.19.208.0/20
                  82.97.192.0/23
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.114.83.0/24
                  93.114.129.0/24
                  93.118.40.0/22
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         e5:63:73:56:fb:e2:61:0b:7e:9a:be:d1:9e:df:b4:04:ca:a4:
         62:7e:0f:72:9c:65:06:85:ae:d1:74:d9:70:12:6a:87:66:69:
         fd:10:a3:10:cc:38:91:c9:59:df:cc:30:af:d4:16:e4:53:79:
         10:f6:56:0c:0c:97:fa:9b:a0:77:3b:09:4b:ab:d0:f9:56:f2:
         f3:f7:67:7d:c2:4e:cf:da:e4:24:b0:f3:c0:64:d9:ca:b9:8c:
         48:e3:45:a4:27:1a:bd:df:7c:a6:84:78:b7:36:a8:d2:f8:2c:
         ab:3f:40:18:7d:33:8a:4c:24:36:2a:72:b5:12:f9:cd:f3:45:
         69:56:ae:05:ed:3f:1d:e8:c4:3e:47:6a:5b:7e:5a:2f:b5:6b:
         75:37:10:bf:48:3a:bd:c7:32:c6:1e:72:80:b6:9d:cd:d6:a1:
         25:8f:b6:b6:35:33:07:27:c0:22:58:f1:d3:f7:d0:6e:13:b4:
         bc:15:2c:ce:40:c7:72:30:49:c9:e6:82:08:a4:9b:23:81:34:
         07:0b:1b:f4:34:5f:2d:7e:da:19:2d:91:2f:1c:3f:89:30:a7:
         a1:61:a3:54:7a:78:58:34:c7:f5:b4:fb:48:ce:fd:8e:41:7f:
         52:95:61:ae:83:ec:ee:87:ec:bf:ab:b5:a8:3e:af:9e:4b:27:
         22:70:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 19:24:22 2024 by rpki-client on console-fra.rpki-client.org