Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/qHskZ5XmoI_TsFXbCeHz7naGRtw.roa
File:                     qHskZ5XmoI_TsFXbCeHz7naGRtw.roa (raw, json)
Hash identifier:          GYuMyPzW82pjovw/DXLNolEbhca7VN2Y2H3tBAOsBe4=
Subject key identifier:   A8:7B:24:67:95:E6:A0:8F:D3:B0:55:DB:09:E1:F3:EE:76:86:46:DC
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01913A4E21D2265646AEFFE1CDF385C83357
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/qHskZ5XmoI_TsFXbCeHz7naGRtw.roa
Signing time:             Sat 10 Aug 2024 03:21:24 +0000
ROA not before:           Sat 10 Aug 2024 03:21:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25369
IP address blocks:        5.226.136.0/21 maxlen: 21
                          31.14.102.0/24 maxlen: 24
                          31.14.254.0/24 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          77.81.124.0/22 maxlen: 22
                          77.81.191.0/24 maxlen: 24
                          79.139.84.0/22 maxlen: 22
                          80.240.108.0/23 maxlen: 23
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          82.97.192.0/23 maxlen: 23
                          84.247.0.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          85.204.70.0/24 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.22.0/23 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          86.106.135.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          89.34.96.0/22 maxlen: 22
                          89.34.96.0/24 maxlen: 24
                          89.34.97.0/24 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.37.64.0/22 maxlen: 22
                          89.37.172.0/22 maxlen: 22
                          89.37.173.0/24 maxlen: 24
                          89.38.68.0/23 maxlen: 23
                          89.40.212.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          89.46.223.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          93.118.40.0/22 maxlen: 22
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.172.0/23 maxlen: 24
                          176.223.174.0/23 maxlen: 24
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.16.204.0/22 maxlen: 22
                          185.38.148.0/22 maxlen: 22
                          185.44.76.0/22 maxlen: 22
                          185.61.156.0/22 maxlen: 22
                          185.61.156.0/24 maxlen: 24
                          185.61.157.0/24 maxlen: 24
                          185.114.224.0/24 maxlen: 24
                          185.121.136.0/22 maxlen: 22
                          185.125.204.0/22 maxlen: 22
                          185.134.20.0/22 maxlen: 22
                          185.137.36.0/22 maxlen: 24
                          185.158.240.0/22 maxlen: 24
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          188.241.246.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          193.32.208.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          195.20.108.0/23 maxlen: 23
                          195.20.108.0/24 maxlen: 24
                          195.140.212.0/22 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.127.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          213.166.84.0/22 maxlen: 24
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          217.146.92.0/24 maxlen: 24
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:100::/40 maxlen: 40
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 13:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:3a:4e:21:d2:26:56:46:ae:ff:e1:cd:f3:85:c8:33:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Aug 10 03:21:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a87b246795e6a08fd3b055db09e1f3ee768646dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:50:81:5c:33:e2:95:3b:1b:9d:2d:96:86:
                    d6:5b:71:b2:f4:3b:e6:ec:ae:05:15:93:96:20:1e:
                    98:d4:9f:3c:bd:84:87:1b:0e:f2:3a:60:8c:52:05:
                    df:7e:d8:37:83:9b:00:6b:ba:9e:0d:53:46:95:b5:
                    8b:01:94:34:2d:66:10:4c:64:66:6d:36:29:08:14:
                    80:2b:d1:52:53:82:59:02:86:c4:ef:7d:85:d3:ab:
                    ee:62:9f:a8:87:3c:d1:7f:49:4c:b7:fd:ec:f6:35:
                    f7:89:f6:ec:e5:b1:9a:4e:d0:c0:d5:93:27:cd:3b:
                    cb:7f:3d:d6:83:a6:a8:8b:ae:e8:2a:14:18:6d:1c:
                    46:14:c0:4c:bd:92:ae:5b:d8:e4:bf:7f:09:5b:c8:
                    3f:49:9b:52:b9:29:b1:fa:d4:0c:a5:a6:bb:34:20:
                    7a:17:8c:c6:92:0b:78:67:b1:e1:15:dd:72:e7:f9:
                    62:21:8c:bb:5c:db:15:cf:1f:50:dc:22:45:73:59:
                    37:7d:53:03:5a:5d:15:d8:7a:95:70:c2:de:25:8a:
                    5f:8f:96:e0:34:44:40:f8:c8:03:ba:a1:ad:b6:ad:
                    9a:ba:29:a4:46:98:c3:41:24:11:7a:36:98:40:c2:
                    6e:b2:2b:1b:d7:2e:5d:d8:76:74:bf:c5:af:7e:ca:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:24:67:95:E6:A0:8F:D3:B0:55:DB:09:E1:F3:EE:76:86:46:DC
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/qHskZ5XmoI_TsFXbCeHz7naGRtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  80.240.108.0/23
                  81.19.208.0/20
                  82.97.192.0/23
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.114.83.0/24
                  93.114.129.0/24
                  93.118.40.0/22
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:3d:e4:34:63:ee:63:6c:66:36:6b:9b:4e:4a:4b:2b:cf:42:
         41:f2:96:d2:8d:18:b7:20:2a:ed:55:0c:33:0c:58:47:41:64:
         26:3c:65:f4:80:1d:4f:0f:05:33:f0:26:cc:00:08:d3:7d:d2:
         8e:f5:7c:be:5e:b1:1c:d8:44:0a:54:78:2a:aa:9e:57:28:30:
         51:c0:da:bf:18:e1:e0:4c:c4:89:33:e3:b0:da:fb:84:e7:8a:
         38:0f:7c:b1:81:05:45:76:84:0f:ac:c4:77:e6:ce:28:92:ad:
         7d:c6:81:f6:c6:22:41:bc:7c:87:9f:b7:cc:4c:2c:9b:3f:fc:
         7c:61:72:8f:09:98:9e:de:06:37:45:07:5a:85:14:b7:70:93:
         f5:a0:8e:3f:3d:64:b6:2b:1c:a8:fa:0e:d6:bb:d4:18:b3:2c:
         81:51:1d:5d:d0:5f:25:7e:58:cd:4f:df:8d:39:d9:5e:44:94:
         0e:43:71:1e:e7:70:ec:a5:8f:7f:84:ce:b3:35:20:18:f0:b8:
         3a:31:34:85:d6:ce:06:90:57:8e:ab:cb:2a:14:a1:07:e6:08:
         eb:ff:43:48:93:d1:7c:0c:13:09:ea:2a:31:3a:7d:c6:30:53:
         86:ab:f6:31:d8:c8:31:11:dd:5e:0a:b3:02:19:27:a8:1d:5d:
         e2:68:63:9c
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgISAZE6TiHSJlZGrv/hzfOFyDNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjQwODEwMDMyMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODdiMjQ2Nzk1ZTZhMDhmZDNiMDU1ZGIwOWUxZjNlZTc2ODY0NmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCxQgVwz4pU7G50tlobWW3Gy9Dvm
7K4FFZOWIB6Y1J88vYSHGw7yOmCMUgXfftg3g5sAa7qeDVNGlbWLAZQ0LWYQTGRm
bTYpCBSAK9FSU4JZAobE732F06vuYp+ohzzRf0lMt/3s9jX3ifbs5bGaTtDA1ZMn
zTvLfz3Wg6aoi67oKhQYbRxGFMBMvZKuW9jkv38JW8g/SZtSuSmx+tQMpaa7NCB6
F4zGkgt4Z7HhFd1y5/liIYy7XNsVzx9Q3CJFc1k3fVMDWl0V2HqVcMLeJYpfj5bg
NERA+MgDuqGttq2auimkRpjDQSQRejaYQMJusisb1y5d2HZ0v8WvfspTXQIDAQAB
o4IENjCCBDIwHQYDVR0OBBYEFKh7JGeV5qCP07BV2wnh8+52hkbcMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvcUhza1o1WG1vSV9Uc0ZYYkNlSHo3bmFHUnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICSgYIKwYBBQUHAQcBAf8EggI5MIICNTCCAhQEAgABMIIC
DAMEAwXiiAMEAB8OZgMEAB8O/jAMAwQAJQpxAwQAJQpyAwQALmabAwQBLveOAwQC
QO/sAwQCTVF8AwQATVG/AwQCT4tUAwQBUPBsAwQEURPQAwQBUmHAAwQAVPcAAwQC
VPcoAwQAVcxGAwQCVmgUAwQCVmj4AwQAVmpZAwQAVmpwAwQAVmqHMAwDBABWap0D
BABWap4DBABWa/EDBAJZFUADBABZIH8DBAJZImADBABZIxkDBAJZIxwDBAJZJUAD
BAJZJawDBAFZJkQDBABZKNQDBAFZLt4DBAJZLvgDBABdclMDBABdcoEDBAJddigD
BANtRWgDBANtRpADBABt5ssDBABt5tEDBABt5tcDBABt5toDBABt5twDBAKAf5QD
BACG//MDBAKw36wDBASy76ADBAK5A+wDBAK5EMwDBAK5JpQDBAK5LEwDBAK5PZwD
BAC5cuADBAK5eYgDBAK5fcwDBAK5hhQDBAK5iSQDBAK5nvADBAK5yMwDBAK52JAD
BAK53+gDBAC81JoDBAO88DgDBAC88EcDBAC88XgDBAC88ZADBAG88ZwDBAC88fYD
BALBINADBALBsBwDBAHCMuoDBAHDFGwDBALDjNQwDAMEAMPOpQMEA8POoDAMAwQA
w86pAwQCw86oAwQCw860AwQBw+p8AwQAw+p/AwQC1O3gAwQC1aZUAwQE2ZJQMBsE
AgACMBUDBQAqABowAwUAKgFAIAMFAyoLuEAwDQYJKoZIhvcNAQELBQADggEBABY9
5DRj7mNsZjZrm05KSyvPQkHyltKNGLcgKu1VDDMMWEdBZCY8ZfSAHU8PBTPwJswA
CNN90o71fL5esRzYRApUeCqqnlcoMFHA2r8Y4eBMxIkz47Da+4TnijgPfLGBBUV2
hA+sxHfmziiSrX3GgfbGIkG8fIeft8xMLJs//Hxhco8JmJ7eBjdFB1qFFLdwk/Wg
jj89ZLYrHKj6Dta71BizLIFRHV3QXyV+WM1P34052V5ElA5DcR7ncOylj3+EzrM1
IBjwuDoxNIXWzgaQV46ryyoUoQfmCOv/Q0iT0XwMEwnqKjE6fcYwU4ar9jHYyDER
3V4KswIZJ6gdXeJoY5w=
-----END CERTIFICATE-----
Generated at Wed Aug 14 19:04:16 2024 by rpki-client on console-ams.rpki-client.org