Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/nKFh6Mfn24upAGgOZrNfEGZk4oI.roa
File:                     nKFh6Mfn24upAGgOZrNfEGZk4oI.roa (raw, json)
Hash identifier:          26blorxJyh3HG4x14HnBg7omi12V8lRzus833CKBwLE=
Subject key identifier:   9C:A1:61:E8:C7:E7:DB:8B:A9:00:68:0E:66:B3:5F:10:66:64:E2:82
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018B6CE6A1C6B89CFB6396202E267D57EC9B
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/nKFh6Mfn24upAGgOZrNfEGZk4oI.roa
Signing time:             Thu 26 Oct 2023 16:52:15 +0000
ROA not before:           Thu 26 Oct 2023 16:52:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          79.139.84.0/22 maxlen: 22
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 01:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6c:e6:a1:c6:b8:9c:fb:63:96:20:2e:26:7d:57:ec:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Oct 26 16:52:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ca161e8c7e7db8ba900680e66b35f106664e282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:32:fd:bd:4f:ab:40:81:bd:c2:f9:08:72:
                    50:39:cf:bc:a9:d0:d9:90:f6:1c:63:b3:1c:c3:bc:
                    55:ef:e4:a3:78:7c:38:9e:f7:1d:ac:16:bd:49:cc:
                    6d:cf:74:d2:7f:31:84:77:f2:37:9e:fb:bc:95:8b:
                    1e:f4:53:9c:10:8a:a2:8b:80:ef:01:e0:fe:e2:32:
                    99:3f:8d:4a:20:da:c5:35:27:82:9d:09:01:65:87:
                    04:81:af:91:c0:7b:0b:b9:3a:f0:e3:97:6c:82:21:
                    e3:bf:ee:df:c4:a6:ae:26:7b:a3:c9:70:e7:ba:67:
                    f4:08:8f:5d:52:00:55:57:2d:1b:b5:b9:2c:ae:7d:
                    dc:0b:5b:29:28:b5:85:18:50:1c:14:ea:23:8b:27:
                    0c:cf:d5:04:a4:42:87:6e:e1:32:53:1b:e6:a5:08:
                    a8:32:22:ab:66:5a:a0:d7:c7:91:b9:41:36:24:a1:
                    42:03:fe:01:21:94:0d:6b:db:4f:bf:74:b5:75:5c:
                    d4:61:27:f4:16:7d:91:b6:7a:8e:ec:e1:94:8c:55:
                    f4:f5:cf:12:4d:75:01:82:d4:63:de:27:e0:24:a5:
                    13:20:06:74:37:ba:49:34:be:39:69:5e:0d:c7:a2:
                    e7:28:cc:bd:ee:25:f2:b9:4e:17:f6:e5:92:cc:d7:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:61:E8:C7:E7:DB:8B:A9:00:68:0E:66:B3:5F:10:66:64:E2:82
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/nKFh6Mfn24upAGgOZrNfEGZk4oI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:40:32:83:94:a7:f3:a9:d9:35:19:b8:da:64:df:50:79:bb:
         3a:d0:10:68:9c:9d:51:a0:b6:8f:4a:c0:8a:16:d5:04:f1:26:
         f3:22:9b:ab:5b:2b:5c:00:27:9d:9d:09:36:d8:fc:88:47:59:
         71:d9:90:34:73:ff:4f:39:50:6e:67:c3:43:65:1c:77:3b:d9:
         fd:e8:f7:b8:02:91:54:a6:62:7c:7e:f7:0e:78:71:13:38:e0:
         df:04:4e:18:a5:ff:7f:f4:5d:11:31:c4:ac:19:91:8b:56:7c:
         db:2a:09:97:9c:09:ad:c7:0e:e2:6d:c3:df:e4:8f:00:5f:a1:
         52:2f:e5:a5:ce:0c:79:e8:1b:fe:e4:3e:1e:d2:0a:f8:0c:d0:
         0b:d9:25:e6:0c:36:e3:54:7b:04:e5:e3:4c:1a:57:82:83:5f:
         2d:84:27:20:f3:a8:65:8d:b0:1b:bc:b2:55:67:45:1c:f2:e7:
         d6:b6:bb:5f:4f:1d:1f:27:f4:a9:c7:02:0a:1d:59:69:c5:11:
         9c:b2:c2:95:4d:90:82:15:36:76:19:e5:4c:92:e7:a6:88:17:
         bb:b6:f2:34:eb:1a:87:f3:e2:3d:e4:92:50:27:07:01:56:af:
         e0:fb:bd:91:e4:67:c0:4b:f7:46:b5:59:d6:22:3e:53:70:3f:
         30:41:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org