Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/hFzyvPWJ3GGd83bTDl0k6JJKAcs.roa
File:                     hFzyvPWJ3GGd83bTDl0k6JJKAcs.roa (raw, json)
Hash identifier:          ewAHyxqBFYqWaZ+fZymkBTA2qGtIHEXm5YLfBOJD+90=
Subject key identifier:   84:5C:F2:BC:F5:89:DC:61:9D:F3:76:D3:0E:5D:24:E8:92:4A:01:CB
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       018D36CF9A9714C54A11BB1A6E16CA983B85
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/hFzyvPWJ3GGd83bTDl0k6JJKAcs.roa
Signing time:             Tue 23 Jan 2024 14:53:11 +0000
ROA not before:           Tue 23 Jan 2024 14:53:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8881
IP address blocks:        24.40.128.0/18 maxlen: 18
                          46.142.0.0/16 maxlen: 16
                          46.142.0.0/18 maxlen: 20
                          46.142.64.0/19 maxlen: 20
                          46.142.96.0/19 maxlen: 19
                          46.142.96.0/20 maxlen: 20
                          46.142.128.0/19 maxlen: 19
                          46.142.160.0/19 maxlen: 19
                          46.142.214.0/24 maxlen: 24
                          46.142.224.0/19 maxlen: 19
                          46.189.0.0/17 maxlen: 17
                          61.8.128.0/19 maxlen: 19
                          62.72.64.0/19 maxlen: 19
                          62.214.0.0/16 maxlen: 16
                          62.214.224.0/19 maxlen: 19
                          62.217.32.0/19 maxlen: 19
                          62.220.0.0/19 maxlen: 19
                          80.241.192.0/20 maxlen: 20
                          80.242.160.0/19 maxlen: 19
                          82.119.160.0/19 maxlen: 19
                          82.140.0.0/18 maxlen: 18
                          82.140.48.0/20 maxlen: 20
                          82.144.32.0/19 maxlen: 19
                          82.145.0.0/19 maxlen: 19
                          82.194.96.0/19 maxlen: 19
                          82.207.128.0/17 maxlen: 17
                          82.207.192.0/19 maxlen: 19
                          82.207.240.0/20 maxlen: 20
                          83.135.0.0/16 maxlen: 16
                          83.135.0.0/20 maxlen: 20
                          83.135.64.0/19 maxlen: 19
                          83.135.96.0/20 maxlen: 20
                          83.135.112.0/20 maxlen: 20
                          83.135.128.0/19 maxlen: 20
                          83.135.160.0/21 maxlen: 21
                          83.135.168.0/21 maxlen: 21
                          83.135.176.0/22 maxlen: 22
                          83.135.184.0/21 maxlen: 21
                          83.135.192.0/20 maxlen: 20
                          83.135.208.0/20 maxlen: 20
                          83.135.224.0/22 maxlen: 22
                          83.135.232.0/21 maxlen: 21
                          83.135.240.0/22 maxlen: 22
                          84.19.192.0/19 maxlen: 19
                          87.122.0.0/15 maxlen: 15
                          87.122.0.0/20 maxlen: 20
                          87.122.16.0/20 maxlen: 20
                          87.122.32.0/19 maxlen: 19
                          87.122.64.0/19 maxlen: 20
                          87.122.96.0/19 maxlen: 19
                          87.122.128.0/21 maxlen: 21
                          87.122.138.0/23 maxlen: 23
                          87.122.144.0/20 maxlen: 20
                          87.122.160.0/20 maxlen: 20
                          87.122.176.0/21 maxlen: 21
                          87.122.192.0/19 maxlen: 19
                          87.122.224.0/19 maxlen: 20
                          87.123.0.0/19 maxlen: 20
                          87.123.32.0/19 maxlen: 19
                          87.123.64.0/20 maxlen: 20
                          87.123.80.0/20 maxlen: 20
                          87.123.96.0/19 maxlen: 19
                          87.123.128.0/19 maxlen: 19
                          87.123.160.0/20 maxlen: 20
                          87.123.176.0/20 maxlen: 20
                          87.123.194.0/24 maxlen: 24
                          87.123.196.0/24 maxlen: 24
                          87.123.197.0/24 maxlen: 24
                          87.123.201.0/24 maxlen: 24
                          87.123.202.0/24 maxlen: 24
                          87.123.203.0/24 maxlen: 24
                          87.123.206.0/24 maxlen: 24
                          87.123.207.0/24 maxlen: 24
                          87.123.208.0/23 maxlen: 23
                          87.123.216.0/21 maxlen: 21
                          87.123.224.0/20 maxlen: 20
                          87.123.240.0/21 maxlen: 21
                          88.130.0.0/16 maxlen: 16
                          88.130.0.0/19 maxlen: 19
                          88.130.32.0/20 maxlen: 20
                          88.130.48.0/24 maxlen: 24
                          88.130.49.0/24 maxlen: 24
                          88.130.50.0/24 maxlen: 24
                          88.130.52.0/24 maxlen: 24
                          88.130.53.0/24 maxlen: 24
                          88.130.54.0/23 maxlen: 23
                          88.130.57.0/24 maxlen: 24
                          88.130.58.0/24 maxlen: 24
                          88.130.59.0/24 maxlen: 24
                          88.130.61.0/24 maxlen: 24
                          88.130.63.0/24 maxlen: 24
                          88.130.64.0/19 maxlen: 19
                          88.130.96.0/19 maxlen: 19
                          88.130.136.0/21 maxlen: 21
                          88.130.144.0/21 maxlen: 21
                          88.130.160.0/22 maxlen: 22
                          88.130.176.0/21 maxlen: 21
                          88.130.192.0/23 maxlen: 23
                          88.130.194.0/23 maxlen: 23
                          88.130.216.0/21 maxlen: 21
                          89.27.128.0/17 maxlen: 17
                          89.207.200.0/21 maxlen: 21
                          89.244.0.0/14 maxlen: 14
                          89.244.76.0/24 maxlen: 24
                          89.244.78.0/23 maxlen: 23
                          89.244.80.0/20 maxlen: 20
                          89.244.96.0/22 maxlen: 22
                          89.244.120.0/21 maxlen: 21
                          89.244.160.0/21 maxlen: 21
                          89.244.176.0/20 maxlen: 20
                          89.244.192.0/19 maxlen: 20
                          89.244.224.0/20 maxlen: 20
                          89.245.0.0/20 maxlen: 20
                          89.245.16.0/20 maxlen: 20
                          89.245.32.0/19 maxlen: 19
                          89.245.64.0/20 maxlen: 20
                          89.245.80.0/20 maxlen: 20
                          89.245.96.0/20 maxlen: 20
                          89.245.112.0/20 maxlen: 20
                          89.245.160.0/20 maxlen: 20
                          89.245.176.0/21 maxlen: 21
                          89.245.192.0/19 maxlen: 19
                          89.245.224.0/19 maxlen: 20
                          89.246.0.0/19 maxlen: 20
                          89.246.32.0/19 maxlen: 19
                          89.246.96.0/21 maxlen: 21
                          89.246.112.0/22 maxlen: 22
                          89.246.116.0/22 maxlen: 22
                          89.246.120.0/24 maxlen: 24
                          89.246.122.0/24 maxlen: 24
                          89.246.124.0/22 maxlen: 22
                          89.246.160.0/21 maxlen: 21
                          89.246.184.0/21 maxlen: 21
                          89.246.192.0/19 maxlen: 19
                          89.247.0.0/19 maxlen: 19
                          89.247.32.0/19 maxlen: 19
                          89.247.32.0/20 maxlen: 20
                          89.247.64.0/20 maxlen: 20
                          89.247.80.0/20 maxlen: 20
                          89.247.96.0/20 maxlen: 20
                          89.247.112.0/21 maxlen: 21
                          89.247.120.0/22 maxlen: 22
                          89.247.124.0/24 maxlen: 24
                          89.247.144.0/20 maxlen: 20
                          89.247.160.0/20 maxlen: 20
                          89.247.192.0/20 maxlen: 20
                          89.247.216.0/22 maxlen: 22
                          89.247.228.0/22 maxlen: 22
                          89.247.236.0/22 maxlen: 22
                          89.247.254.0/23 maxlen: 23
                          94.134.0.0/15 maxlen: 15
                          94.134.0.0/18 maxlen: 18
                          94.134.64.0/19 maxlen: 23
                          94.134.64.0/22 maxlen: 22
                          94.134.64.0/23 maxlen: 23
                          94.134.68.0/22 maxlen: 22
                          94.134.68.0/23 maxlen: 23
                          94.134.94.0/23 maxlen: 23
                          94.134.96.0/20 maxlen: 21
                          94.134.112.0/22 maxlen: 22
                          94.134.144.0/20 maxlen: 20
                          94.134.160.0/21 maxlen: 21
                          94.134.168.0/22 maxlen: 22
                          94.134.172.0/22 maxlen: 23
                          94.134.176.0/21 maxlen: 21
                          94.134.176.0/24 maxlen: 24
                          94.134.178.0/24 maxlen: 24
                          94.134.180.0/24 maxlen: 24
                          94.134.192.0/22 maxlen: 22
                          94.134.196.0/24 maxlen: 24
                          94.134.216.0/21 maxlen: 21
                          104.151.0.0/17 maxlen: 17
                          143.58.64.0/18 maxlen: 18
                          185.128.68.0/22 maxlen: 22
                          193.219.15.0/24 maxlen: 24
                          195.167.208.0/20 maxlen: 20
                          195.202.32.0/19 maxlen: 19
                          195.226.96.0/19 maxlen: 19
                          195.226.160.0/19 maxlen: 19
                          202.71.128.0/20 maxlen: 20
                          212.7.128.0/19 maxlen: 19
                          212.80.224.0/19 maxlen: 19
                          212.93.0.0/19 maxlen: 19
                          212.204.0.0/19 maxlen: 19
                          213.30.192.0/18 maxlen: 18
                          213.138.32.0/19 maxlen: 19
                          213.139.128.0/19 maxlen: 19
                          213.182.128.0/19 maxlen: 19
                          217.9.32.0/19 maxlen: 19
                          217.9.96.0/19 maxlen: 19
                          217.27.192.0/20 maxlen: 20
                          217.65.16.0/20 maxlen: 20
                          217.78.128.0/20 maxlen: 20
                          217.199.64.0/20 maxlen: 20
                          2001:7b0::/32 maxlen: 32
                          2001:9e8::/32 maxlen: 32
                          2001:9e8::/35 maxlen: 35
                          2001:9e8:2000::/35 maxlen: 35
                          2001:9e8:4000::/35 maxlen: 35
                          2001:9e8:6000::/35 maxlen: 35
                          2001:9e8:8000::/35 maxlen: 35
                          2001:9e8:a000::/35 maxlen: 35
                          2001:9e8:c000::/35 maxlen: 35
                          2001:9e8:e000::/35 maxlen: 36
                          2001:1438::/32 maxlen: 32
                          2001:1438::/34 maxlen: 36
                          2001:16b8::/32 maxlen: 40
                          2a00:fb8::/29 maxlen: 29
                          2a00:fb8::/35 maxlen: 35
                          2a00:fb8:2000::/35 maxlen: 35
                          2a00:fb8:4000::/35 maxlen: 35
                          2a00:fb8:6000::/35 maxlen: 35
Validation:               Failed, certificate revoked on Tue 30 Jan 2024 08:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:36:cf:9a:97:14:c5:4a:11:bb:1a:6e:16:ca:98:3b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Jan 23 14:53:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=845cf2bcf589dc619df376d30e5d24e8924a01cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:d0:fb:b8:b9:6c:1e:d2:62:b4:1c:74:5d:
                    cb:c4:68:9b:d3:9a:45:b1:5b:59:0e:74:75:8e:04:
                    3f:10:32:cd:67:86:2e:0c:87:00:a4:e0:3a:8e:bb:
                    89:42:ca:e0:5f:ba:6d:0e:f0:a6:ac:07:f9:71:9a:
                    04:90:f5:1a:32:4f:7c:63:94:80:9a:5a:4c:34:2e:
                    ca:cf:d8:20:3c:d9:66:d5:42:bf:ef:e3:0e:d4:e6:
                    36:23:e6:2a:8a:66:90:c9:a0:9b:95:2d:d0:fd:bb:
                    fb:a9:93:2e:6c:7c:a3:51:f9:61:be:77:b2:fc:ff:
                    7f:a5:c3:a0:fe:8f:22:14:61:0a:e5:31:4b:80:15:
                    6b:56:80:84:dc:d2:2f:ac:1e:81:31:c8:7c:cf:d2:
                    19:99:98:ba:95:b3:af:6c:ee:e2:8c:0b:51:c3:60:
                    95:f3:00:56:66:02:de:2c:f5:94:4b:87:b9:a7:cd:
                    aa:45:95:32:9b:88:35:77:e6:78:40:a1:42:56:56:
                    85:a8:97:28:a7:15:aa:59:59:85:ab:82:c5:bc:d3:
                    eb:17:fd:0f:ec:20:5c:87:0e:54:d3:87:0a:e8:7d:
                    6f:7c:5e:b8:23:52:e9:96:1f:43:df:1e:f2:68:e3:
                    25:72:e0:e8:63:b0:c4:1f:53:01:53:df:78:3b:32:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:F2:BC:F5:89:DC:61:9D:F3:76:D3:0E:5D:24:E8:92:4A:01:CB
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/hFzyvPWJ3GGd83bTDl0k6JJKAcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.128.0/18
                  46.142.0.0/16
                  46.189.0.0/17
                  61.8.128.0/19
                  62.72.64.0/19
                  62.214.0.0/16
                  62.217.32.0/19
                  62.220.0.0/19
                  80.241.192.0/20
                  80.242.160.0/19
                  82.119.160.0/19
                  82.140.0.0/18
                  82.144.32.0/19
                  82.145.0.0/19
                  82.194.96.0/19
                  82.207.128.0/17
                  83.135.0.0/16
                  84.19.192.0/19
                  87.122.0.0/15
                  88.130.0.0/16
                  89.27.128.0/17
                  89.207.200.0/21
                  89.244.0.0/14
                  94.134.0.0/15
                  104.151.0.0/17
                  143.58.64.0/18
                  185.128.68.0/22
                  193.219.15.0/24
                  195.167.208.0/20
                  195.202.32.0/19
                  195.226.96.0/19
                  195.226.160.0/19
                  202.71.128.0/20
                  212.7.128.0/19
                  212.80.224.0/19
                  212.93.0.0/19
                  212.204.0.0/19
                  213.30.192.0/18
                  213.138.32.0/19
                  213.139.128.0/19
                  213.182.128.0/19
                  217.9.32.0/19
                  217.9.96.0/19
                  217.27.192.0/20
                  217.65.16.0/20
                  217.78.128.0/20
                  217.199.64.0/20
                IPv6:
                  2001:7b0::/32
                  2001:9e8::/32
                  2001:1438::/32
                  2001:16b8::/32
                  2a00:fb8::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:60:36:73:57:4f:11:cf:c5:a0:ec:4c:05:e5:92:34:3a:7e:
         bc:33:46:ff:1a:ea:53:05:a2:c9:06:e7:df:70:81:34:91:11:
         40:8d:73:87:3a:f9:81:92:b9:f6:8a:33:16:9f:16:54:57:f2:
         a3:9c:23:b0:43:51:f8:5a:73:b0:d2:1b:bd:e3:34:ce:5d:d5:
         42:7c:29:b8:8e:f3:85:9e:94:d1:44:a8:dc:67:ff:40:60:9e:
         de:19:b3:33:80:6a:10:11:9c:c8:16:6a:46:11:1d:92:23:9e:
         a6:78:74:a1:fb:59:cd:b5:ed:f9:b1:cf:3a:7d:43:ac:8e:fd:
         ea:a5:60:0f:82:7c:2a:6a:f6:02:64:3c:c5:4b:ea:56:01:4b:
         aa:03:b1:ca:2d:f9:d8:d9:76:5c:5b:2f:4d:ba:10:30:ff:04:
         0b:34:c4:7e:30:1f:9d:40:85:5c:68:c1:51:7e:5f:e5:35:f9:
         31:e1:cc:d2:6f:0f:27:c9:e9:1e:9a:e6:a4:4f:30:f9:1f:17:
         d4:6b:b4:ed:4b:e0:f7:87:49:8f:b7:23:e3:9c:9d:fa:da:a8:
         44:a1:bc:b8:51:0a:a3:c1:89:a5:cf:f5:08:e3:a8:23:21:c0:
         25:67:c0:38:ea:70:5c:ab:43:32:0a:ab:1c:c8:da:3b:4f:97:
         ca:2e:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:35:41 2025 by rpki-client