Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_XmD4hHaEYBtkeSBeD_XdaS6vL4.roa
File:                     _XmD4hHaEYBtkeSBeD_XdaS6vL4.roa (raw, json)
Hash identifier:          ZHi4jzLVJiH1a5GpIziVYly4gNOeVSvNk66pNaM9Gm4=
Subject key identifier:   FD:79:83:E2:11:DA:11:80:6D:91:E4:81:78:3F:D7:75:A4:BA:BC:BE
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018C660AB27388A66EC018E9A119A918B367
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_XmD4hHaEYBtkeSBeD_XdaS6vL4.roa
Signing time:             Thu 14 Dec 2023 01:57:06 +0000
ROA not before:           Thu 14 Dec 2023 01:57:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          79.139.84.0/22 maxlen: 22
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          93.118.40.0/22 maxlen: 22
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:0a:b2:73:88:a6:6e:c0:18:e9:a1:19:a9:18:b3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Dec 14 01:57:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd7983e211da11806d91e481783fd775a4babcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:eb:93:fb:d7:83:dc:28:46:cc:86:21:a9:
                    1d:3c:3b:70:ed:b4:e1:4a:be:ed:59:6f:4b:84:ba:
                    d1:37:14:06:ba:f6:53:af:31:db:f7:9e:2b:8d:85:
                    7a:6d:ee:e0:6e:40:95:c9:2f:1a:47:0a:80:48:a8:
                    e0:08:41:7c:13:ce:64:4f:eb:3d:53:bf:a9:ae:2e:
                    e2:95:42:ad:24:4e:87:7c:9d:ab:2a:77:31:a9:92:
                    fd:2c:b4:4d:e4:7a:ff:f5:10:e9:38:37:0d:92:ed:
                    c8:e9:2c:f9:9e:74:e3:b7:98:43:b2:1f:23:83:cf:
                    e4:aa:98:10:b6:88:e0:f0:e5:03:42:c3:fa:ac:1f:
                    a9:b6:3d:f1:04:b7:9f:ba:19:3b:58:ea:0b:e0:de:
                    ae:dc:b8:2a:c1:0c:f7:75:d3:b5:f2:2a:b6:45:c6:
                    32:8c:92:41:a2:1d:a6:9b:1b:59:47:7a:70:da:fb:
                    be:d6:04:e2:5e:ea:cc:42:ff:dd:ec:ca:39:7a:27:
                    e2:f8:5e:39:64:a5:6f:d2:a1:3c:82:ff:c3:62:2c:
                    c9:f8:0e:74:31:fe:af:4a:2d:9c:ec:9f:7c:5f:4b:
                    6f:5e:b8:5b:77:8d:3d:c2:a1:8d:42:c9:9f:0a:2e:
                    70:bf:71:0d:7d:d5:85:55:7b:42:e1:80:d1:1a:ab:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:79:83:E2:11:DA:11:80:6D:91:E4:81:78:3F:D7:75:A4:BA:BC:BE
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_XmD4hHaEYBtkeSBeD_XdaS6vL4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  93.118.40.0/22
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         18:85:10:7b:f6:f1:45:e0:fc:f2:4b:ad:aa:02:78:93:02:20:
         26:d3:07:7f:0b:7e:c9:bd:2a:5b:15:c3:0b:07:c8:6c:5a:49:
         b5:ba:f8:5d:0c:8d:dc:11:56:c2:28:4b:71:a0:9c:b6:59:99:
         9f:cc:61:ea:32:25:42:52:53:57:cd:b7:a2:ce:1b:14:d4:b8:
         d5:2c:28:4a:9a:52:d1:db:05:73:45:54:52:3e:81:6e:ba:93:
         8a:3c:ae:a3:65:60:67:76:e1:f5:eb:b5:dc:3a:01:89:de:88:
         5b:e5:d3:eb:7b:2e:cb:70:6a:a8:2d:d4:99:85:b3:79:86:d3:
         20:0d:2a:d3:0b:49:ac:4d:1e:b5:1a:18:7c:b8:3e:35:d1:8c:
         65:9f:dd:40:d7:a5:ac:d7:b9:4d:cb:4d:f0:06:df:c7:bb:b2:
         99:28:6b:65:18:dd:21:57:7c:33:6f:07:8e:a2:fd:ed:2e:47:
         b9:7d:59:49:b6:8f:21:35:f9:64:57:df:bb:ab:cd:05:43:43:
         3d:bc:8c:ee:8c:db:c2:ef:84:64:e5:f5:39:21:97:61:2a:1e:
         c1:18:56:cc:1e:7b:73:27:c0:e8:52:b1:0d:0b:11:00:2b:79:
         c1:53:df:f4:29:8d:13:be:e2:de:66:97:9e:58:48:a1:00:75:
         54:cc:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org