Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/diOgza7Wn13fsjBatVlMS0wdZGM.roa
File:                     diOgza7Wn13fsjBatVlMS0wdZGM.roa (raw, json)
Hash identifier:          pzbKxZGYoA3VHOECEICyN1cYN0kHP9V+Ku3yXhlQivo=
Subject key identifier:   76:23:A0:CD:AE:D6:9F:5D:DF:B2:30:5A:B5:59:4C:4B:4C:1D:64:63
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018AB9021A566257C96362618348537BAB31
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/diOgza7Wn13fsjBatVlMS0wdZGM.roa
Signing time:             Thu 21 Sep 2023 18:30:37 +0000
ROA not before:           Thu 21 Sep 2023 18:30:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          79.139.84.0/22 maxlen: 22
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.31.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.35.25.0/24 maxlen: 24
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          77.81.102.0/24 maxlen: 24
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 16:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b9:02:1a:56:62:57:c9:63:62:61:83:48:53:7b:ab:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Sep 21 18:30:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7623a0cdaed69f5ddfb2305ab5594c4b4c1d6463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:e8:56:86:03:ae:de:28:10:11:36:6f:46:
                    e1:4f:0b:09:5b:48:36:8e:38:ed:6a:62:b7:98:be:
                    1b:73:46:b9:4c:17:94:fc:e0:99:96:14:d8:80:d2:
                    fd:9a:0a:2e:ac:e8:68:ee:7a:19:f4:1e:d1:57:76:
                    7f:11:a8:72:15:a2:93:57:71:9e:a0:d0:f5:9e:b0:
                    c3:00:d9:b8:89:28:1e:00:42:99:16:01:91:6d:83:
                    be:36:e6:02:58:f9:dc:57:6d:c7:6f:73:00:67:b9:
                    08:73:9e:f3:f3:d6:a4:56:a0:f7:c1:96:0c:ae:4f:
                    54:bd:c7:bc:d1:f3:82:96:9c:2a:38:cb:c1:1f:c1:
                    32:aa:e3:e5:a7:04:ba:77:9d:19:99:ac:5f:0e:34:
                    46:38:53:b5:dd:04:25:a2:cb:08:9b:45:9a:50:2a:
                    c2:99:3d:c7:72:92:23:0a:01:7c:5d:76:9f:aa:f8:
                    3d:01:68:2b:68:b7:4f:0c:23:82:89:92:ef:bc:91:
                    62:37:62:dd:3c:0d:e8:e3:51:5f:b1:3d:a4:c4:80:
                    72:b1:bf:4f:43:29:98:93:c6:89:b7:d7:59:c9:9e:
                    30:3d:53:0d:16:b5:ab:95:ff:d5:27:3f:5d:02:ba:
                    33:16:cf:c5:f3:29:15:04:18:31:da:fe:cb:c4:60:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:23:A0:CD:AE:D6:9F:5D:DF:B2:30:5A:B5:59:4C:4B:4C:1D:64:63
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/diOgza7Wn13fsjBatVlMS0wdZGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.102.0/24
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:f0:90:de:43:6e:60:3f:23:29:bf:df:2f:16:66:00:07:
         0e:e9:aa:10:f2:c7:e0:cc:09:d7:34:73:a6:09:24:54:ad:69:
         f3:a0:4e:0b:e9:61:51:d4:13:7a:0d:cd:16:a4:5a:53:55:58:
         95:87:04:a1:c5:c4:ab:a1:e3:f0:5b:90:f0:aa:16:2f:14:eb:
         f0:b1:2f:b8:8d:bd:3f:30:88:1d:34:ec:df:21:43:50:99:ec:
         10:42:1d:d7:aa:23:25:d3:a2:5a:67:fc:2c:cd:18:8d:d6:81:
         f0:16:b3:50:8c:48:34:fe:88:d7:f0:15:58:f8:3e:0a:63:db:
         49:43:5c:ec:d5:49:3e:e9:34:2c:79:e6:9d:16:5a:07:2d:1a:
         fa:c2:a5:1f:ba:bc:0e:cd:fb:44:f4:c5:44:2b:91:c3:32:42:
         f6:85:04:00:8d:97:e4:82:27:61:c8:8d:c1:57:ce:53:9a:e8:
         53:87:9a:a3:bf:3a:50:01:0f:94:f7:9d:22:d8:f3:89:13:8c:
         66:e4:8b:38:47:7e:47:ab:af:0f:10:4c:31:0c:b1:46:77:c0:
         1d:e8:b9:ab:6d:5c:2d:df:b4:10:3d:1b:42:25:b3:7a:f8:b8:
         d6:23:fe:c9:26:a1:da:83:d1:6a:f3:a4:52:f8:f8:82:57:0d:
         5f:9e:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org