Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sSXJOaPch7Eub1JAEVOu3j-ZrZI.roa
File:                     sSXJOaPch7Eub1JAEVOu3j-ZrZI.roa (raw, json)
Hash identifier:          9ZbXnu69G3wRScsgLvka5QI2FL8KM2TFJZDSES046zQ=
Subject key identifier:   B1:25:C9:39:A3:DC:87:B1:2E:6F:52:40:11:53:AE:DE:3F:99:AD:92
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01969C3BDB68DB5BCF4E6C3F104C5F680A31
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sSXJOaPch7Eub1JAEVOu3j-ZrZI.roa
Signing time:             Sun 04 May 2025 16:58:10 +0000
ROA not before:           Sun 04 May 2025 16:58:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     28753
IP address blocks:        45.9.116.0/24 maxlen: 24
                          45.9.122.0/24 maxlen: 24
                          45.128.76.0/24 maxlen: 24
                          45.154.58.0/24 maxlen: 24
                          93.190.244.0/24 maxlen: 24
                          2a04:9f40::/29 maxlen: 29
                          2a06:1184:101::/48 maxlen: 48
                          2a06:3bc0::/29 maxlen: 29
                          2a07:8a40::/29 maxlen: 29
                          2a09:17c1:66::/48 maxlen: 48
                          2a09:17c1:77::/48 maxlen: 48
                          2a0a:2d06:102::/48 maxlen: 48
                          2a0a:2d06:103::/48 maxlen: 48
                          2a0c:7886:99::/48 maxlen: 48
                          2a0c:7886:100::/48 maxlen: 48
                          2a0e:15c7:88::/48 maxlen: 48
                          2a0e:15c7:99::/48 maxlen: 48
                          2a0e:1a83:77::/48 maxlen: 48
                          2a0e:f603:66::/48 maxlen: 48
                          2a0f:140::/29 maxlen: 29
                          2a0f:1206:55::/48 maxlen: 48
                          2a0f:1206:66::/48 maxlen: 48
                          2a0f:2500::/29 maxlen: 29
                          2a0f:3d86:88::/48 maxlen: 48
                          2a0f:3d86:99::/48 maxlen: 48
                          2a0f:7d06:88::/48 maxlen: 48
                          2a0f:7d06:99::/48 maxlen: 48
                          2a0f:cc00::/29 maxlen: 29
                          2a0f:d200::/29 maxlen: 29
                          2a0f:da40::/29 maxlen: 29
                          2a0f:db40::/29 maxlen: 29
                          2a0f:dfc0::/29 maxlen: 29
                          2a0f:e040::/29 maxlen: 29
                          2a0f:e1c1:22::/48 maxlen: 48
                          2a0f:e202:44::/48 maxlen: 48
                          2a0f:e202:55::/48 maxlen: 48
                          2a0f:e4c0::/29 maxlen: 29
                          2a0f:e6c6:100::/48 maxlen: 48
                          2a0f:e6c6:101::/48 maxlen: 48
                          2a0f:e7c6:66::/48 maxlen: 48
                          2a0f:e7c6:77::/48 maxlen: 48
                          2a0f:e7c6:88::/48 maxlen: 48
                          2a0f:e844:22::/48 maxlen: 48
                          2a0f:ea44:66::/48 maxlen: 48
                          2a0f:ea44:77::/48 maxlen: 48
                          2a0f:fc00::/29 maxlen: 29
                          2a12:ac46:77::/48 maxlen: 48
                          2a12:ecc0:168::/48 maxlen: 48
                          2a12:ecc0:178::/48 maxlen: 48
                          2a13:18c6:77::/48 maxlen: 48
                          2a13:18c6:88::/48 maxlen: 48
                          2a13:7d80::/29 maxlen: 29
                          2a13:8c86:10a::/48 maxlen: 48
                          2a13:8c86:130::/48 maxlen: 48
                          2a13:c900:88::/48 maxlen: 48
                          2a13:c900:99::/48 maxlen: 48
                          2a13:e107:99::/48 maxlen: 48
                          2a13:e107:9c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 07 May 2025 17:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:3b:db:68:db:5b:cf:4e:6c:3f:10:4c:5f:68:0a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May  4 16:58:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b125c939a3dc87b12e6f52401153aede3f99ad92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:9f:1c:1c:39:90:bf:61:ae:3c:c6:4e:75:
                    6e:6c:1b:41:5c:81:f9:b1:ea:e5:32:4e:42:d6:0a:
                    2b:5e:af:b2:1b:74:91:21:20:ee:00:2a:30:54:06:
                    dd:44:a1:55:60:f6:a6:67:d8:08:28:0e:3a:fe:d6:
                    15:c6:95:22:64:3d:cf:51:99:fb:d4:45:1b:50:04:
                    0e:e3:ce:7c:08:c0:48:7b:75:f8:eb:c5:b7:1e:da:
                    23:26:4e:4f:65:83:48:6a:cd:fa:56:7c:32:a9:3f:
                    98:cd:35:1e:9c:22:da:c2:e2:18:59:eb:28:74:93:
                    5a:35:30:13:54:35:1d:86:20:ec:bc:f0:c2:e4:a7:
                    c0:e3:43:97:dd:2a:bc:de:b3:79:df:d4:78:b7:15:
                    8a:74:03:2a:32:4d:c3:e7:f9:2c:15:f2:f1:8a:76:
                    1d:80:52:d2:f5:16:ca:0d:a1:e6:bd:5d:52:35:fd:
                    60:96:04:73:75:ca:a3:ae:1b:2d:18:1c:a0:25:2e:
                    58:21:f5:65:46:d6:90:98:e2:8c:7d:2a:ce:15:2b:
                    9c:47:0a:59:3b:5a:e1:a7:7a:55:33:cf:a9:d8:db:
                    4e:31:ba:8d:f6:ff:c0:fa:c5:b7:ab:1d:04:9c:42:
                    74:ea:2b:fa:ac:e0:56:e3:f6:28:1d:f7:1d:bd:6e:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:25:C9:39:A3:DC:87:B1:2E:6F:52:40:11:53:AE:DE:3F:99:AD:92
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sSXJOaPch7Eub1JAEVOu3j-ZrZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.116.0/24
                  45.9.122.0/24
                  45.128.76.0/24
                  45.154.58.0/24
                  93.190.244.0/24
                IPv6:
                  2a04:9f40::/29
                  2a06:1184:101::/48
                  2a06:3bc0::/29
                  2a07:8a40::/29
                  2a09:17c1:66::/48
                  2a09:17c1:77::/48
                  2a0a:2d06:102::/47
                  2a0c:7886:99::/48
                  2a0c:7886:100::/48
                  2a0e:15c7:88::/48
                  2a0e:15c7:99::/48
                  2a0e:1a83:77::/48
                  2a0e:f603:66::/48
                  2a0f:140::/29
                  2a0f:1206:55::/48
                  2a0f:1206:66::/48
                  2a0f:2500::/29
                  2a0f:3d86:88::/48
                  2a0f:3d86:99::/48
                  2a0f:7d06:88::/48
                  2a0f:7d06:99::/48
                  2a0f:cc00::/29
                  2a0f:d200::/29
                  2a0f:da40::/29
                  2a0f:db40::/29
                  2a0f:dfc0::/29
                  2a0f:e040::/29
                  2a0f:e1c1:22::/48
                  2a0f:e202:44::/48
                  2a0f:e202:55::/48
                  2a0f:e4c0::/29
                  2a0f:e6c6:100::/47
                  2a0f:e7c6:66::/48
                  2a0f:e7c6:77::/48
                  2a0f:e7c6:88::/48
                  2a0f:e844:22::/48
                  2a0f:ea44:66::/48
                  2a0f:ea44:77::/48
                  2a0f:fc00::/29
                  2a12:ac46:77::/48
                  2a12:ecc0:168::/48
                  2a12:ecc0:178::/48
                  2a13:18c6:77::/48
                  2a13:18c6:88::/48
                  2a13:7d80::/29
                  2a13:8c86:10a::/48
                  2a13:8c86:130::/48
                  2a13:c900:88::/48
                  2a13:c900:99::/48
                  2a13:e107:99::/48
                  2a13:e107:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:1b:3b:f4:a1:27:5a:d1:11:b3:74:15:c7:7c:ea:f3:dc:
         8d:b3:a9:d6:14:8c:0d:fd:67:4b:a6:98:c3:cb:5c:9c:3c:11:
         b4:f9:a1:23:ce:3e:b7:a0:fa:81:18:61:cb:ae:da:5e:a3:b7:
         6c:23:a4:b6:f3:74:2c:64:7f:89:07:5a:8d:8c:43:5d:05:1c:
         59:c2:f5:2f:61:3f:c0:88:df:f6:1b:33:d5:66:13:ce:e7:39:
         a6:75:f8:70:a2:13:4c:8b:ab:9e:53:04:56:6f:c1:fb:18:69:
         86:8f:2c:0e:97:43:ce:21:ff:e4:b5:e2:d1:75:a9:75:13:92:
         14:b8:db:92:42:9c:eb:c2:9e:9a:46:c9:de:a2:d5:1c:42:c6:
         51:b9:04:b3:60:9c:a5:b3:34:42:d3:d1:c3:d1:ae:ce:6b:e1:
         12:69:30:2e:97:a0:93:32:fc:e9:f6:94:04:5b:65:7e:83:b6:
         ff:e3:69:0b:63:e2:af:89:d8:8c:89:f9:36:20:43:c3:a6:72:
         ed:c6:a2:50:ab:80:ea:7c:fa:a3:8b:a5:ac:9f:d1:0d:88:4b:
         51:48:17:53:a7:1c:14:88:48:b6:09:65:0d:33:b5:9a:7c:75:
         23:de:d3:39:47:e0:c0:81:52:26:75:49:c8:d9:97:68:d4:51:
         9a:06:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:46:25 2025 by rpki-client