Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XDVogI1XDZU_vjTYf_RLCi4C86o.roa
File:                     XDVogI1XDZU_vjTYf_RLCi4C86o.roa (raw, json)
Hash identifier:          pEvfEqBvosZkxF+BnILpsFqph/RaA/Tvf7K/lfeZNKs=
Subject key identifier:   5C:35:68:80:8D:57:0D:95:3F:BE:34:D8:7F:F4:4B:0A:2E:02:F3:AA
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018992FE9D75595B2A5144B6BAD6BE87DBAC
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XDVogI1XDZU_vjTYf_RLCi4C86o.roa
Signing time:             Wed 26 Jul 2023 16:18:27 +0000
ROA not before:           Wed 26 Jul 2023 16:18:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 16:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:92:fe:9d:75:59:5b:2a:51:44:b6:ba:d6:be:87:db:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jul 26 16:18:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c3568808d570d953fbe34d87ff44b0a2e02f3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:bb:d6:ee:9b:53:b7:9e:95:d9:8c:15:03:
                    f3:31:26:4c:bd:52:c3:cd:8f:8d:e8:3b:04:75:e6:
                    43:2b:e3:5d:24:09:4a:81:4f:4e:b3:ef:d6:f7:85:
                    94:52:f8:12:1e:05:50:3f:fa:7b:74:93:7e:e1:f5:
                    3a:f1:a8:ef:b5:5c:02:81:88:10:99:2c:6f:c8:e1:
                    a8:21:f9:24:07:89:e1:80:7f:23:ac:61:4b:73:de:
                    3f:14:73:b6:13:18:6c:e1:d4:74:2c:fd:1f:9b:f9:
                    75:3f:b9:ae:05:cb:df:3f:bb:2a:7a:ae:98:a6:61:
                    aa:ff:0a:f6:fd:d6:17:70:70:69:28:c5:08:8d:4d:
                    b4:85:f7:ba:57:17:26:56:b4:85:30:db:ff:65:d2:
                    3f:f2:74:29:26:b0:79:be:49:3a:9a:37:5c:a6:46:
                    96:32:de:63:d3:85:cd:48:34:85:63:c7:9e:af:2e:
                    77:e6:be:ba:27:b6:ec:cd:42:8a:7b:3a:88:db:82:
                    8d:b7:b0:03:c1:fc:eb:85:5f:36:4b:c8:8f:7d:94:
                    38:7d:59:cf:81:45:d9:34:19:91:c8:d1:fa:59:cf:
                    80:3d:50:47:a7:03:39:bc:05:c6:4a:4b:2c:91:9c:
                    2b:cb:b5:50:58:29:34:34:af:3d:93:06:91:09:94:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:35:68:80:8D:57:0D:95:3F:BE:34:D8:7F:F4:4B:0A:2E:02:F3:AA
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XDVogI1XDZU_vjTYf_RLCi4C86o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:72:59:1a:58:88:d8:5e:c0:c5:c8:f6:64:b3:63:11:03:83:
         0b:82:7b:35:c3:6c:1c:07:9e:d3:86:4c:91:f5:cb:be:41:3b:
         48:fb:16:d6:49:85:db:76:47:57:72:91:10:b2:1e:63:7d:cd:
         fb:05:c1:a5:1e:76:c3:db:0f:bc:a5:a3:4c:dd:e6:c9:9b:fc:
         87:52:33:dc:34:d2:bf:7e:b2:5c:e2:c6:9c:36:7a:5e:70:75:
         cb:0c:a0:c8:3a:93:c1:08:27:96:3f:0f:2d:6e:ec:3c:f2:2d:
         f7:a3:6e:c5:bc:7c:e8:27:f0:3e:c4:bf:d3:1f:1a:32:22:db:
         6a:ea:63:5a:bf:58:70:31:75:0a:b3:b9:bb:e4:17:c4:d3:a6:
         1f:32:3c:d6:5b:29:9b:92:aa:48:ca:d0:3e:fc:e8:f2:25:46:
         78:51:39:56:11:d7:0e:66:55:c9:35:69:96:09:39:9c:9b:ef:
         d1:f4:79:a4:4c:ed:12:89:1f:28:d8:4f:4a:bd:10:8d:a6:39:
         f2:26:1e:fa:5c:cc:81:16:d9:ef:1f:63:e0:5a:f9:21:03:c2:
         e0:7a:27:94:d0:46:38:39:2c:70:55:b0:02:83:4a:96:d4:5d:
         bb:88:e4:14:83:e6:5c:0a:1b:b9:d0:a3:a4:4c:7a:40:9a:ba:
         a9:b0:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org