Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/91F6gsKfRkkyzG79zr2Wf14cq54.roa
File:                     91F6gsKfRkkyzG79zr2Wf14cq54.roa (raw, json)
Hash identifier:          OCwMB10ILsbbZgb3vxJeOUnNlQIqD51UlzCKqid/NZ4=
Subject key identifier:   F7:51:7A:82:C2:9F:46:49:32:CC:6E:FD:CE:BD:96:7F:5E:1C:AB:9E
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       01969D080462DC39ED6DBFC76E1380525FA0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/91F6gsKfRkkyzG79zr2Wf14cq54.roa
Signing time:             Sun 04 May 2025 20:41:10 +0000
ROA not before:           Sun 04 May 2025 20:41:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13194
IP address blocks:        82.140.129.0/24 maxlen: 24
                          84.15.0.0/16 maxlen: 24
                          84.15.12.0/24 maxlen: 32
                          84.15.223.0/24 maxlen: 24
                          84.46.139.0/24 maxlen: 24
                          84.46.204.0/24 maxlen: 24
                          84.46.207.0/24 maxlen: 24
                          86.38.1.0/24 maxlen: 24
                          86.38.41.0/24 maxlen: 24
                          86.38.52.0/24 maxlen: 24
                          86.38.62.0/24 maxlen: 24
                          86.38.72.0/24 maxlen: 24
                          86.38.73.0/24 maxlen: 24
                          86.38.74.0/24 maxlen: 24
                          86.38.75.0/24 maxlen: 24
                          86.38.81.0/24 maxlen: 24
                          86.38.84.0/24 maxlen: 24
                          86.38.97.0/24 maxlen: 24
                          86.38.152.0/24 maxlen: 24
                          86.38.153.0/24 maxlen: 24
                          86.38.215.0/24 maxlen: 24
                          86.38.228.0/24 maxlen: 24
                          86.38.230.0/24 maxlen: 24
                          86.38.245.0/24 maxlen: 24
                          89.116.124.0/24 maxlen: 24
                          89.116.129.0/24 maxlen: 24
                          89.116.143.0/24 maxlen: 24
                          89.116.151.0/24 maxlen: 24
                          89.116.155.0/24 maxlen: 24
                          89.116.160.0/24 maxlen: 24
                          89.116.162.0/24 maxlen: 24
                          89.116.174.0/24 maxlen: 24
                          89.116.176.0/24 maxlen: 24
                          89.116.178.0/24 maxlen: 24
                          89.116.232.0/24 maxlen: 24
                          89.116.235.0/24 maxlen: 24
                          89.116.238.0/24 maxlen: 24
                          89.116.240.0/24 maxlen: 24
                          89.116.245.0/24 maxlen: 24
                          89.116.249.0/24 maxlen: 24
                          89.117.10.0/24 maxlen: 24
                          89.117.14.0/24 maxlen: 24
                          89.117.69.0/24 maxlen: 24
                          89.117.92.0/24 maxlen: 24
                          89.117.93.0/24 maxlen: 24
                          89.117.125.0/24 maxlen: 24
                          89.117.127.0/24 maxlen: 24
                          89.117.138.0/24 maxlen: 24
                          89.117.141.0/24 maxlen: 24
                          89.117.156.0/24 maxlen: 24
                          89.117.165.0/24 maxlen: 24
                          89.117.220.0/24 maxlen: 24
                          89.117.221.0/24 maxlen: 24
                          89.117.223.0/24 maxlen: 24
                          89.117.225.0/24 maxlen: 24
                          89.117.243.0/24 maxlen: 24
                          89.117.247.0/24 maxlen: 24
                          89.117.249.0/24 maxlen: 24
                          89.117.255.0/24 maxlen: 24
                          185.189.154.0/24 maxlen: 24
                          213.226.128.0/18 maxlen: 24
                          213.226.161.0/24 maxlen: 24
                          213.252.192.0/20 maxlen: 20
                          213.252.194.0/24 maxlen: 24
                          213.252.220.0/24 maxlen: 24
                          213.252.223.0/24 maxlen: 24
                          213.252.224.0/22 maxlen: 22
                          213.252.234.0/23 maxlen: 23
                          213.252.236.0/23 maxlen: 23
                          213.252.252.0/24 maxlen: 24
                          213.252.254.0/24 maxlen: 24
                          217.9.248.0/23 maxlen: 23
                          2a00:f500::/29 maxlen: 29
                          2a00:f502:150::/44 maxlen: 44
                          2a00:f502:160::/44 maxlen: 44
                          2a00:f502:170::/47 maxlen: 47
                          2a00:f502:172::/47 maxlen: 47
                          2a00:f502:174::/47 maxlen: 47
                          2a00:f502:176::/47 maxlen: 47
                          2a00:f502:178::/47 maxlen: 47
                          2a00:f502:17a::/47 maxlen: 47
                          2a00:f502:17c::/47 maxlen: 47
                          2a00:f502:17e::/47 maxlen: 47
                          2a00:f502:180::/47 maxlen: 47
                          2a00:f502:250::/44 maxlen: 44
                          2a00:f502:260::/44 maxlen: 44
                          2a00:f502:270::/47 maxlen: 47
                          2a00:f502:272::/47 maxlen: 47
                          2a00:f502:274::/47 maxlen: 47
                          2a00:f502:276::/47 maxlen: 47
                          2a00:f502:278::/47 maxlen: 47
                          2a00:f502:27a::/47 maxlen: 47
                          2a00:f502:27c::/47 maxlen: 47
                          2a00:f502:27e::/47 maxlen: 47
                          2a00:f502:280::/47 maxlen: 47
                          2a00:f503:150::/45 maxlen: 45
                          2a00:f503:158::/45 maxlen: 45
                          2a00:f503:160::/45 maxlen: 45
                          2a00:f503:168::/45 maxlen: 45
                          2a00:f503:170::/47 maxlen: 47
                          2a00:f503:172::/47 maxlen: 47
                          2a00:f503:174::/47 maxlen: 47
                          2a00:f503:176::/47 maxlen: 47
                          2a00:f503:178::/47 maxlen: 47
                          2a00:f503:17a::/47 maxlen: 47
                          2a00:f503:17c::/47 maxlen: 47
                          2a00:f503:17e::/47 maxlen: 47
                          2a00:f503:180::/47 maxlen: 47
                          2a00:f503:250::/45 maxlen: 45
                          2a00:f503:258::/45 maxlen: 45
                          2a00:f503:260::/45 maxlen: 45
                          2a00:f503:268::/45 maxlen: 45
                          2a00:f503:270::/47 maxlen: 47
                          2a00:f503:272::/47 maxlen: 47
                          2a00:f503:274::/47 maxlen: 47
                          2a00:f503:276::/47 maxlen: 47
                          2a00:f503:278::/47 maxlen: 47
                          2a00:f503:27a::/47 maxlen: 47
                          2a00:f503:27c::/47 maxlen: 47
                          2a00:f503:27e::/47 maxlen: 47
                          2a00:f503:280::/47 maxlen: 47
Validation:               Failed, certificate revoked on Mon 05 May 2025 10:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:08:04:62:dc:39:ed:6d:bf:c7:6e:13:80:52:5f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: May  4 20:41:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7517a82c29f464932cc6efdcebd967f5e1cab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:cb:7e:0c:04:34:09:59:46:bd:8f:62:30:
                    5c:80:5f:94:07:f4:ea:88:ab:83:11:14:90:dd:a1:
                    b8:91:6d:44:99:94:f7:27:65:f1:f9:90:13:0e:e6:
                    69:99:71:87:29:5e:3d:5e:98:94:99:48:a1:9e:7b:
                    3c:0b:54:cb:2d:f5:f2:cf:df:4f:ee:25:1f:83:1b:
                    18:68:fe:6c:f1:5f:8c:19:71:59:29:25:dc:c1:60:
                    7c:e6:07:fa:91:33:86:e3:18:38:60:ff:b5:d6:c5:
                    80:29:22:a6:cc:1c:a2:7b:bc:4c:47:3a:27:f3:9b:
                    14:6a:a7:27:cf:55:20:a9:11:60:69:01:0a:cb:bb:
                    d4:df:60:af:a0:30:c3:0b:81:61:50:9b:a2:dd:95:
                    52:d3:7a:cc:75:6e:95:a7:22:de:df:61:e0:2f:81:
                    9d:6b:74:9c:06:01:63:70:f4:d9:42:02:67:4f:96:
                    91:ea:46:37:09:43:e8:4a:6a:eb:4c:96:42:98:fc:
                    65:65:4f:d7:9d:1a:20:32:b7:04:ba:22:7f:53:0a:
                    6a:d3:bd:f6:91:97:30:fe:4d:db:4a:91:80:58:9e:
                    68:c0:66:dc:3a:1f:d9:5f:0e:e1:79:ac:19:f3:57:
                    50:4d:b6:5b:71:86:57:4d:1f:cb:ce:2b:ab:d3:88:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:51:7A:82:C2:9F:46:49:32:CC:6E:FD:CE:BD:96:7F:5E:1C:AB:9E
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/91F6gsKfRkkyzG79zr2Wf14cq54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.129.0/24
                  84.15.0.0/16
                  84.46.139.0/24
                  84.46.204.0/24
                  84.46.207.0/24
                  86.38.1.0/24
                  86.38.41.0/24
                  86.38.52.0/24
                  86.38.62.0/24
                  86.38.72.0/22
                  86.38.81.0/24
                  86.38.84.0/24
                  86.38.97.0/24
                  86.38.152.0/23
                  86.38.215.0/24
                  86.38.228.0/24
                  86.38.230.0/24
                  86.38.245.0/24
                  89.116.124.0/24
                  89.116.129.0/24
                  89.116.143.0/24
                  89.116.151.0/24
                  89.116.155.0/24
                  89.116.160.0/24
                  89.116.162.0/24
                  89.116.174.0/24
                  89.116.176.0/24
                  89.116.178.0/24
                  89.116.232.0/24
                  89.116.235.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.117.10.0/24
                  89.117.14.0/24
                  89.117.69.0/24
                  89.117.92.0/23
                  89.117.125.0/24
                  89.117.127.0/24
                  89.117.138.0/24
                  89.117.141.0/24
                  89.117.156.0/24
                  89.117.165.0/24
                  89.117.220.0/23
                  89.117.223.0/24
                  89.117.225.0/24
                  89.117.243.0/24
                  89.117.247.0/24
                  89.117.249.0/24
                  89.117.255.0/24
                  185.189.154.0/24
                  213.226.128.0/18
                  213.252.192.0/20
                  213.252.220.0/24
                  213.252.223.0-213.252.227.255
                  213.252.234.0-213.252.237.255
                  213.252.252.0/24
                  213.252.254.0/24
                  217.9.248.0/23
                IPv6:
                  2a00:f500::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:91:5b:e5:e5:74:43:85:5d:32:6a:32:b8:d7:04:af:ed:23:
         09:59:fe:0f:48:ac:98:a7:2f:d9:c7:72:d3:c5:a2:cc:cb:2c:
         22:db:74:fe:8e:d5:b8:9b:c1:20:99:10:cb:7c:43:49:7a:49:
         45:b8:00:a0:62:09:b9:f2:10:c3:b0:62:39:7e:4a:8f:1c:03:
         5d:41:80:3b:ed:86:92:a2:94:7b:f3:dd:37:d8:1f:df:31:ec:
         e6:53:ab:8c:88:21:c0:c7:b0:3b:27:b1:70:a0:b1:7f:93:5d:
         30:fb:78:42:41:c5:29:e2:c6:7c:cc:48:f4:b6:a1:a7:07:f4:
         48:65:0e:bb:dc:b0:ed:98:99:33:17:a4:d9:c6:f2:8e:bd:9d:
         df:93:31:85:f2:90:cc:ae:9d:1f:fc:08:9c:93:19:95:74:3e:
         39:04:da:ea:88:8e:03:4b:36:51:20:85:e8:36:57:47:5f:ba:
         30:69:87:58:ef:15:43:58:0c:60:4e:af:79:2f:69:ef:94:fb:
         d3:16:5b:f2:b4:23:07:8a:3f:d2:6f:9e:1c:56:4e:48:4a:a5:
         5d:1a:a0:1e:12:d2:1a:46:a7:e3:03:5f:1b:19:1e:24:ea:4a:
         54:f6:ce:85:53:74:fe:78:42:d9:96:e7:a7:c1:7d:97:26:f3:
         98:1a:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:18:44 2025 by rpki-client