Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/LvzosKUjQl--VlqXR9WIslJ7hb0.roa
File:                     LvzosKUjQl--VlqXR9WIslJ7hb0.roa (raw, json)
Hash identifier:          ZRJt1pacOBlLiPGaCRN0mgqwOv8lMS4Vjoy7yeqDqCw=
Subject key identifier:   2E:FC:E8:B0:A5:23:42:5F:BE:56:5A:97:47:D5:88:B2:52:7B:85:BD
Certificate issuer:       /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial:       019396B78652CA2CF544A28B773DF1878B2E
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/LvzosKUjQl--VlqXR9WIslJ7hb0.roa
Signing time:             Thu 05 Dec 2024 12:07:10 +0000
ROA not before:           Thu 05 Dec 2024 12:07:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6412
IP address blocks:        80.184.0.0/16 maxlen: 16
                          80.184.0.0/17 maxlen: 17
                          80.184.0.0/18 maxlen: 18
                          80.184.0.0/19 maxlen: 19
                          80.184.0.0/20 maxlen: 20
                          80.184.0.0/21 maxlen: 21
                          80.184.0.0/24 maxlen: 24
                          80.184.8.0/21 maxlen: 21
                          80.184.16.0/20 maxlen: 20
                          80.184.16.0/21 maxlen: 21
                          80.184.24.0/21 maxlen: 21
                          80.184.32.0/19 maxlen: 19
                          80.184.32.0/20 maxlen: 20
                          80.184.32.0/21 maxlen: 21
                          80.184.40.0/21 maxlen: 21
                          80.184.48.0/20 maxlen: 20
                          80.184.48.0/21 maxlen: 21
                          80.184.56.0/21 maxlen: 21
                          80.184.64.0/18 maxlen: 18
                          80.184.64.0/19 maxlen: 19
                          80.184.64.0/20 maxlen: 20
                          80.184.64.0/21 maxlen: 21
                          80.184.71.0/24 maxlen: 24
                          80.184.72.0/21 maxlen: 21
                          80.184.80.0/20 maxlen: 20
                          80.184.80.0/21 maxlen: 21
                          80.184.88.0/21 maxlen: 21
                          80.184.96.0/19 maxlen: 19
                          80.184.96.0/20 maxlen: 20
                          80.184.96.0/21 maxlen: 21
                          80.184.104.0/21 maxlen: 21
                          80.184.112.0/20 maxlen: 20
                          80.184.112.0/21 maxlen: 21
                          80.184.120.0/21 maxlen: 21
                          80.184.128.0/17 maxlen: 17
                          80.184.128.0/18 maxlen: 18
                          80.184.128.0/19 maxlen: 19
                          80.184.128.0/20 maxlen: 20
                          80.184.128.0/21 maxlen: 21
                          80.184.136.0/21 maxlen: 21
                          80.184.144.0/20 maxlen: 20
                          80.184.144.0/21 maxlen: 21
                          80.184.152.0/21 maxlen: 21
                          80.184.160.0/19 maxlen: 19
                          80.184.160.0/20 maxlen: 20
                          80.184.160.0/21 maxlen: 21
                          80.184.160.0/23 maxlen: 23
                          80.184.168.0/21 maxlen: 21
                          80.184.176.0/20 maxlen: 20
                          80.184.176.0/21 maxlen: 21
                          80.184.184.0/21 maxlen: 21
                          80.184.192.0/18 maxlen: 18
                          80.184.192.0/19 maxlen: 19
                          80.184.192.0/20 maxlen: 20
                          80.184.192.0/21 maxlen: 21
                          80.184.200.0/21 maxlen: 21
                          80.184.208.0/20 maxlen: 20
                          80.184.208.0/21 maxlen: 21
                          80.184.216.0/21 maxlen: 21
                          80.184.224.0/19 maxlen: 19
                          80.184.224.0/20 maxlen: 20
                          80.184.224.0/21 maxlen: 21
                          80.184.232.0/21 maxlen: 21
                          80.184.240.0/20 maxlen: 20
                          80.184.240.0/21 maxlen: 21
                          80.184.240.0/24 maxlen: 24
                          80.184.241.0/24 maxlen: 24
                          80.184.242.0/24 maxlen: 24
                          80.184.248.0/21 maxlen: 21
                          80.184.248.0/24 maxlen: 24
                          80.184.252.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 16 Dec 2024 09:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:96:b7:86:52:ca:2c:f5:44:a2:8b:77:3d:f1:87:8b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
        Validity
            Not Before: Dec  5 12:07:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2efce8b0a523425fbe565a9747d588b2527b85bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:cc:3e:74:b3:12:4e:28:e2:63:cd:27:b6:
                    d3:14:95:86:73:d5:11:e5:99:b2:59:22:d5:01:da:
                    d7:0b:52:47:ae:1b:9b:c1:c1:21:d3:78:99:e8:85:
                    47:ee:f3:36:30:1d:54:ad:72:14:93:ed:8e:23:a2:
                    20:bd:37:06:cb:d1:17:fe:42:60:6a:f9:9b:38:ca:
                    4f:7f:89:bb:2a:7f:1b:e2:53:2d:3b:f9:e3:ba:08:
                    18:be:c4:9e:69:df:ce:70:2a:a1:b0:43:f6:35:77:
                    d3:9f:10:7a:f5:b6:b1:cc:d4:8e:c7:f3:c9:03:f2:
                    6f:f4:dc:e0:84:c5:06:a6:db:38:a4:5c:80:fb:81:
                    89:1a:e0:66:c4:33:04:d1:2c:e9:ce:9d:a2:59:f5:
                    d7:bc:15:e6:72:3a:bb:22:45:64:38:28:64:d9:d1:
                    1c:37:f6:c9:63:f9:2a:c2:1e:c9:fe:5d:fe:ed:42:
                    a9:d3:d0:98:de:39:f1:42:b6:22:81:d8:c0:61:9e:
                    51:02:1f:20:50:37:c6:c6:16:60:a8:0e:31:2d:c5:
                    5c:e9:4b:69:56:71:d3:18:d2:0e:24:1e:eb:ac:6b:
                    ac:81:17:94:3f:41:de:4f:81:f0:9e:d5:f6:e4:d6:
                    2d:25:44:39:71:d9:b1:4d:23:40:08:4d:bd:06:68:
                    12:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FC:E8:B0:A5:23:42:5F:BE:56:5A:97:47:D5:88:B2:52:7B:85:BD
            X509v3 Authority Key Identifier:
                keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/LvzosKUjQl--VlqXR9WIslJ7hb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:1b:24:fb:db:98:4a:d2:4c:3e:b0:75:3e:d6:cf:47:ea:
         d5:e9:91:0f:f3:c9:c6:1d:0b:1a:28:0e:67:e9:c6:29:1f:29:
         b3:a0:a3:08:ce:4a:eb:e5:8e:6e:b0:e6:f7:67:92:33:18:42:
         a3:ed:bc:5d:cf:a3:4d:03:af:15:9d:be:5f:64:4d:ac:42:c1:
         b1:15:af:5d:0b:90:a2:14:1b:5a:10:62:cd:54:90:5b:17:c0:
         e4:97:fa:2a:0a:7a:58:69:fc:ea:7d:6a:d2:9a:d0:bf:c3:f1:
         ea:73:2d:eb:1e:7a:81:c4:66:47:89:ad:a7:14:1c:7c:70:66:
         f7:fc:13:47:90:6a:f6:b5:a9:e3:54:75:87:5a:de:69:60:2e:
         bb:45:ae:1f:13:9a:97:b4:bf:23:66:b2:e4:31:16:8c:93:5f:
         05:de:1e:18:b8:8c:8f:9d:b0:19:84:0d:a5:c2:6e:0e:46:91:
         49:c4:a9:f1:0b:bb:af:ac:81:7e:99:17:5d:2e:2b:27:4c:d4:
         dd:98:d8:cd:c6:58:37:4f:2c:d1:f1:f3:2d:4c:2d:9b:f4:e1:
         d3:93:89:9a:1b:23:c4:d5:3a:a3:a5:5d:69:8d:fd:34:e1:fe:
         8a:34:f4:bd:3a:8e:e6:e4:cf:0f:e0:0e:e9:61:bb:e4:92:b4:
         eb:63:ab:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:32:21 2025 by rpki-client