Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/sk2PGiiljrdxuOeQ5xZpYnONLUE.roa
File:                     sk2PGiiljrdxuOeQ5xZpYnONLUE.roa (raw, json)
Hash identifier:          v2lewVYzHnfaSxT0PK1Z6lurBjqEcwbH8/jvXOX2P6E=
Subject key identifier:   B2:4D:8F:1A:28:A5:8E:B7:71:B8:E7:90:E7:16:69:62:73:8D:2D:41
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01894CE5BCC3F75DC67E616A4F2FEF3384AB
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/sk2PGiiljrdxuOeQ5xZpYnONLUE.roa
Signing time:             Thu 13 Jul 2023 01:37:51 +0000
ROA not before:           Thu 13 Jul 2023 01:37:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 25 Jul 2023 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4c:e5:bc:c3:f7:5d:c6:7e:61:6a:4f:2f:ef:33:84:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jul 13 01:37:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b24d8f1a28a58eb771b8e790e7166962738d2d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:f5:dc:7a:3c:9c:e6:f7:bb:15:49:29:b3:
                    1d:77:4e:7c:c4:c4:04:62:14:b0:20:fc:22:53:35:
                    5d:a3:c8:7c:42:6c:f5:93:93:8a:b6:52:70:38:3c:
                    5f:bf:e4:f6:5a:fa:61:1e:67:ad:76:6b:ae:96:68:
                    55:29:33:ae:36:68:1e:57:7c:fa:28:64:2d:2e:1f:
                    25:77:a0:6a:0c:3d:cc:0d:92:99:fa:75:69:0b:b7:
                    4c:48:14:9f:d0:4f:1e:81:5d:55:dc:53:af:de:f2:
                    d0:41:b8:8c:f2:60:98:95:78:de:30:b6:0c:50:1d:
                    4d:e2:d6:15:88:b3:a9:5f:f4:29:af:51:07:53:bf:
                    d9:11:25:60:d9:00:47:9e:92:4e:1f:55:25:3f:29:
                    e2:6c:48:e2:2c:45:4f:a0:bc:cb:9f:df:2e:18:54:
                    48:78:e0:4e:df:05:5d:fb:94:5a:38:8e:eb:97:2c:
                    70:6a:7f:1b:b5:15:2a:96:62:36:a5:c1:fc:ea:d6:
                    c7:1d:55:9c:d1:43:f5:e2:42:ce:35:3d:ab:04:42:
                    cb:31:c3:10:9b:84:7d:4f:17:fb:6b:03:ea:03:da:
                    6c:23:5f:8b:2f:11:43:8b:1f:16:5b:cb:cf:88:6a:
                    69:77:b6:b9:f2:87:7b:f4:cc:0d:97:d6:b5:1b:20:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4D:8F:1A:28:A5:8E:B7:71:B8:E7:90:E7:16:69:62:73:8D:2D:41
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/sk2PGiiljrdxuOeQ5xZpYnONLUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  37.10.113.0-37.10.114.255
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:41:d1:26:83:65:80:c9:71:b3:1b:ac:ef:33:c8:4b:51:4d:
         05:88:21:1d:1f:87:08:9f:86:30:e1:3e:17:98:16:07:75:3b:
         8a:33:0b:cf:c2:93:78:22:06:0e:86:61:dd:de:09:bf:96:91:
         4d:86:6f:25:2b:7a:a2:ea:07:2d:74:84:21:92:e6:70:87:5f:
         ec:8c:dd:b5:02:45:20:87:a9:8c:65:9b:f6:8f:64:81:e4:c3:
         f3:c9:ed:43:34:7f:70:df:df:70:19:8f:b0:78:b6:6c:49:da:
         f1:71:2a:07:5a:26:f2:43:3e:11:3d:49:5a:03:de:85:16:c8:
         14:93:d7:be:15:da:20:30:83:ed:f5:3d:cd:6a:02:9c:3e:3f:
         b3:4b:eb:5f:9c:66:b7:64:0d:a1:06:98:45:6a:9c:c9:45:c5:
         76:fb:aa:dd:77:4a:a0:b2:69:66:47:94:20:be:09:fb:9b:f0:
         95:a4:db:17:d6:cb:e6:af:d7:43:51:cb:68:0c:42:9e:00:cd:
         1d:c0:cc:22:04:69:68:69:b8:8f:f2:0a:41:30:aa:6a:30:76:
         78:ef:42:f1:66:23:6f:2e:74:8a:0f:59:c0:1b:f0:6e:c7:98:
         27:89:9b:e6:15:ce:d5:c8:23:18:fe:1a:c6:83:9f:0a:6f:98:
         78:76:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org