Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/PfB_2-Tm8fdmplQvAycfSI7iPjA.roa
File:                     PfB_2-Tm8fdmplQvAycfSI7iPjA.roa (raw, json)
Hash identifier:          s2b/Sb+exXuOv+MsycoIbYCk8+z3iEm1KujNf3ayYZY=
Subject key identifier:   3D:F0:7F:DB:E4:E6:F1:F7:66:A6:54:2F:03:27:1F:48:8E:E2:3E:30
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019087A6DED835CE21BAE3F5B2A16CB1E3E3
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/PfB_2-Tm8fdmplQvAycfSI7iPjA.roa
Signing time:             Sat 06 Jul 2024 10:46:18 +0000
ROA not before:           Sat 06 Jul 2024 10:46:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25369
IP address blocks:        5.226.136.0/21 maxlen: 21
                          31.14.102.0/24 maxlen: 24
                          31.14.254.0/24 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          77.81.124.0/22 maxlen: 22
                          77.81.191.0/24 maxlen: 24
                          79.139.84.0/22 maxlen: 22
                          80.240.108.0/23 maxlen: 23
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          82.97.192.0/23 maxlen: 23
                          84.247.0.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          85.204.70.0/24 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.22.0/23 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          86.106.135.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          89.34.96.0/22 maxlen: 22
                          89.34.96.0/24 maxlen: 24
                          89.34.97.0/24 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.37.64.0/22 maxlen: 22
                          89.37.172.0/22 maxlen: 22
                          89.37.173.0/24 maxlen: 24
                          89.38.68.0/23 maxlen: 23
                          89.40.212.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          89.46.223.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          93.118.40.0/22 maxlen: 22
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.172.0/23 maxlen: 24
                          176.223.174.0/23 maxlen: 24
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.16.204.0/22 maxlen: 22
                          185.38.148.0/22 maxlen: 22
                          185.44.76.0/22 maxlen: 22
                          185.61.156.0/22 maxlen: 22
                          185.61.156.0/24 maxlen: 24
                          185.61.157.0/24 maxlen: 24
                          185.114.224.0/24 maxlen: 24
                          185.121.136.0/22 maxlen: 22
                          185.125.204.0/22 maxlen: 22
                          185.134.20.0/22 maxlen: 22
                          185.137.36.0/22 maxlen: 22
                          185.137.36.0/24 maxlen: 24
                          185.158.240.0/22 maxlen: 24
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          188.241.246.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          193.32.208.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          195.20.108.0/23 maxlen: 23
                          195.20.108.0/24 maxlen: 24
                          195.140.212.0/22 maxlen: 22
                          195.206.165.0/24 maxlen: 24
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.127.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          213.166.84.0/22 maxlen: 24
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          217.146.92.0/24 maxlen: 24
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:100::/40 maxlen: 40
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 00:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:87:a6:de:d8:35:ce:21:ba:e3:f5:b2:a1:6c:b1:e3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jul  6 10:46:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3df07fdbe4e6f1f766a6542f03271f488ee23e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:f0:a0:89:3e:d1:3f:5f:4a:59:3c:01:3d:
                    65:ac:f0:37:a5:70:ee:fb:97:d9:ff:4a:16:5c:a5:
                    b8:14:ad:94:62:4a:4a:8c:1f:3e:75:99:14:a9:e6:
                    99:55:63:4c:ff:89:16:f7:bb:3c:f6:61:9c:98:dd:
                    24:86:6c:cf:9c:0c:7d:bc:d5:a5:eb:3f:ec:a0:38:
                    53:3f:3d:83:31:2d:07:81:de:49:97:5a:59:5b:26:
                    d9:bd:99:62:2d:c0:b0:05:b2:a1:ca:7a:ca:1a:e6:
                    1a:3b:60:f7:68:c4:b9:21:40:c4:6d:7d:31:81:08:
                    69:c4:a8:9f:2e:5e:92:35:83:df:dc:c3:cd:05:a8:
                    74:1a:bf:66:00:a0:19:9e:96:2b:44:f2:eb:4f:b9:
                    0d:69:ce:c7:ca:80:f6:74:7c:54:e4:26:4c:ca:96:
                    f8:95:ec:7e:fe:33:7b:6e:c4:26:02:5f:42:c9:0c:
                    35:c7:f3:01:df:0f:00:58:67:0d:ab:7e:d7:33:3d:
                    00:05:5b:7b:02:96:57:1f:85:ee:f4:07:62:a2:3a:
                    10:f0:a8:d5:8f:b3:12:a4:35:43:28:e4:01:10:23:
                    cc:38:4f:ae:4a:0a:d4:29:c9:22:98:b2:d4:78:7e:
                    62:53:4b:f8:bc:bc:67:07:91:88:94:a9:1a:ff:87:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:7F:DB:E4:E6:F1:F7:66:A6:54:2F:03:27:1F:48:8E:E2:3E:30
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/PfB_2-Tm8fdmplQvAycfSI7iPjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  80.240.108.0/23
                  81.19.208.0/20
                  82.97.192.0/23
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.114.83.0/24
                  93.114.129.0/24
                  93.118.40.0/22
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:3c:44:a8:08:22:1a:5f:58:51:b2:7b:e2:03:6f:da:69:b1:
         23:03:b6:e0:55:ce:f3:db:79:26:b5:d8:e6:53:1e:18:47:e9:
         0f:cc:60:2e:51:d4:24:3f:8e:59:04:c7:6c:f7:1f:98:43:63:
         ba:b0:a8:fc:db:65:00:e2:97:4b:51:a9:a4:1b:ce:f8:57:6a:
         de:f3:84:04:27:77:7b:5a:33:33:c1:4d:0e:5e:5a:25:c8:53:
         72:14:75:4b:40:50:6d:42:67:fc:db:68:7f:93:97:55:15:d3:
         2e:0e:8f:9a:ed:38:64:8a:f8:8f:97:ee:c7:4a:3a:09:7f:56:
         57:7d:38:f6:cf:6d:86:61:df:f3:40:b0:b5:8a:47:b3:fd:54:
         45:fa:f6:e9:45:a4:c0:99:dd:ad:8b:18:f6:14:ba:20:36:e9:
         d2:05:e6:9c:4c:35:e4:39:b1:13:08:8a:c7:cf:ad:bb:91:7e:
         ad:54:7e:cc:62:4c:0e:35:4a:cc:82:4f:a7:22:fd:96:f1:ae:
         0e:e2:1c:8d:c8:d3:eb:d2:c4:79:0f:cb:a6:06:f2:a1:4f:59:
         b4:46:dd:e8:92:5b:07:6e:1f:6a:09:b5:4e:16:10:af:30:d2:
         84:d2:44:ae:fa:54:98:3d:b5:ce:2f:b8:b3:f8:8a:b9:e9:3d:
         af:93:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 03:36:52 2024 by rpki-client on console-fra.rpki-client.org