Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EU5ZJfJAPVH8Qw1aQyA92mte8W0.roa
File:                     EU5ZJfJAPVH8Qw1aQyA92mte8W0.roa (raw, json)
Hash identifier:          0MK1uFKrQDRk/GVKvZ3vl5TjL/dbTR1ROsInJlhXM+Y=
Subject key identifier:   11:4E:59:25:F2:40:3D:51:FC:43:0D:5A:43:20:3D:DA:6B:5E:F1:6D
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019614846D647DC81CF099A1B09139F76312
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EU5ZJfJAPVH8Qw1aQyA92mte8W0.roa
Signing time:             Tue 08 Apr 2025 08:29:05 +0000
ROA not before:           Tue 08 Apr 2025 08:29:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8717
IP address blocks:        5.53.128.0/17 maxlen: 17
                          37.63.0.0/17 maxlen: 17
                          46.232.152.0/21 maxlen: 21
                          46.238.0.0/18 maxlen: 18
                          46.238.14.0/24 maxlen: 24
                          62.204.128.0/19 maxlen: 19
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          62.204.141.0/24 maxlen: 24
                          62.221.128.0/19 maxlen: 19
                          62.221.128.0/24 maxlen: 24
                          77.70.0.0/17 maxlen: 17
                          77.236.160.0/19 maxlen: 19
                          77.236.178.0/23 maxlen: 23
                          78.83.0.0/16 maxlen: 16
                          78.83.7.0/24 maxlen: 24
                          78.83.143.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          78.83.145.0/24 maxlen: 24
                          78.83.146.0/24 maxlen: 24
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.160.0/24 maxlen: 24
                          78.83.210.0/24 maxlen: 24
                          78.83.225.0/24 maxlen: 24
                          78.83.226.0/23 maxlen: 23
                          78.90.0.0/16 maxlen: 16
                          78.90.206.0/24 maxlen: 24
                          78.90.247.0/24 maxlen: 24
                          80.253.48.0/20 maxlen: 20
                          80.253.52.0/24 maxlen: 24
                          80.253.53.0/24 maxlen: 24
                          82.103.64.0/18 maxlen: 18
                          82.103.91.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.109.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          82.147.128.0/19 maxlen: 19
                          83.97.24.0/21 maxlen: 21
                          84.242.128.0/18 maxlen: 18
                          84.252.0.0/18 maxlen: 18
                          85.91.128.0/19 maxlen: 19
                          85.118.64.0/19 maxlen: 19
                          85.130.0.0/17 maxlen: 17
                          85.130.95.0/24 maxlen: 24
                          85.130.96.0/23 maxlen: 23
                          85.130.120.0/23 maxlen: 23
                          85.196.128.0/18 maxlen: 18
                          87.97.128.0/17 maxlen: 17
                          87.97.160.0/22 maxlen: 22
                          87.227.128.0/17 maxlen: 17
                          88.203.128.0/17 maxlen: 17
                          88.203.128.0/23 maxlen: 23
                          88.203.128.0/24 maxlen: 24
                          88.203.129.0/24 maxlen: 24
                          88.203.132.0/24 maxlen: 24
                          88.203.147.0/24 maxlen: 24
                          88.203.177.0/24 maxlen: 24
                          88.203.204.0/24 maxlen: 24
                          88.203.237.0/24 maxlen: 24
                          89.186.200.0/21 maxlen: 21
                          89.190.192.0/19 maxlen: 19
                          89.215.0.0/16 maxlen: 16
                          89.215.8.0/22 maxlen: 22
                          89.215.40.0/22 maxlen: 22
                          89.215.48.0/22 maxlen: 22
                          89.253.128.0/18 maxlen: 18
                          92.247.0.0/16 maxlen: 16
                          92.247.168.0/24 maxlen: 24
                          95.111.0.0/17 maxlen: 17
                          95.140.208.0/20 maxlen: 20
                          130.204.0.0/16 maxlen: 16
                          151.251.0.0/16 maxlen: 16
                          151.251.38.0/24 maxlen: 24
                          151.251.140.0/24 maxlen: 24
                          151.251.237.0/24 maxlen: 24
                          176.12.0.0/18 maxlen: 18
                          193.22.103.0/24 maxlen: 24
                          195.24.32.0/19 maxlen: 19
                          195.24.54.0/24 maxlen: 24
                          195.34.96.0/19 maxlen: 19
                          195.34.101.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          195.34.123.0/24 maxlen: 24
                          195.149.248.0/21 maxlen: 21
                          195.177.248.0/23 maxlen: 23
                          212.36.0.0/19 maxlen: 19
                          212.36.6.0/24 maxlen: 24
                          212.50.0.0/19 maxlen: 19
                          212.50.7.0/24 maxlen: 24
                          212.91.160.0/19 maxlen: 19
                          212.91.184.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          212.95.160.0/19 maxlen: 19
                          212.95.161.0/24 maxlen: 24
                          212.104.96.0/19 maxlen: 19
                          213.169.32.0/19 maxlen: 19
                          213.191.160.0/19 maxlen: 19
                          213.222.32.0/19 maxlen: 19
                          213.222.59.0/24 maxlen: 24
                          213.226.0.0/18 maxlen: 18
                          213.226.5.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.9.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.240.192.0/18 maxlen: 18
                          217.9.224.0/20 maxlen: 20
                          217.10.240.0/20 maxlen: 20
                          217.18.240.0/20 maxlen: 20
                          217.79.32.0/20 maxlen: 20
                          2a00:4800::/29 maxlen: 29
                          2a01:288::/32 maxlen: 32
                          2a01:288:400b::/48 maxlen: 48
                          2a01:288:400c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 08 Apr 2025 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:84:6d:64:7d:c8:1c:f0:99:a1:b0:91:39:f7:63:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Apr  8 08:29:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=114e5925f2403d51fc430d5a43203dda6b5ef16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:55:11:7b:e5:43:13:76:93:36:b6:d2:80:
                    fd:ee:ca:33:1e:19:b6:11:ea:cd:5c:ef:d8:e7:76:
                    99:08:05:1a:82:99:ce:03:f5:c6:65:cc:e3:6d:d2:
                    01:d2:75:ac:ed:ce:80:81:be:e3:50:c4:5a:c6:0c:
                    a2:0c:93:59:58:a0:35:b4:e4:a5:32:07:c4:fd:20:
                    1f:01:1f:b2:14:bb:0f:51:03:ef:58:1e:63:a9:86:
                    c9:da:fc:3f:d9:3d:40:bd:64:ec:bd:22:a3:0c:e1:
                    ae:c0:74:6d:34:6d:fe:5d:a1:66:8d:ca:60:f4:8d:
                    5e:5d:d3:eb:a7:31:fc:2c:8d:ec:73:22:d9:47:87:
                    c6:7f:24:52:88:14:59:21:75:1b:20:90:bf:d2:a4:
                    c8:ee:be:4c:d1:fa:26:a9:7f:cb:a6:63:b4:96:71:
                    cb:2b:9b:28:b6:f2:55:95:b6:6c:6a:a5:33:4c:38:
                    b6:de:84:63:18:b8:20:2c:16:e0:06:a5:52:16:62:
                    56:a8:43:99:76:40:c4:a2:22:c7:4a:47:5a:82:60:
                    c7:dc:17:51:98:c2:75:ff:ab:49:6f:27:f9:aa:31:
                    fb:93:a4:26:36:94:49:fb:1d:ae:ea:5c:7c:e9:88:
                    88:b8:cd:fc:e4:07:93:8f:32:d9:55:cc:b2:bf:de:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4E:59:25:F2:40:3D:51:FC:43:0D:5A:43:20:3D:DA:6B:5E:F1:6D
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EU5ZJfJAPVH8Qw1aQyA92mte8W0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.53.128.0/17
                  37.63.0.0/17
                  46.232.152.0/21
                  46.238.0.0/18
                  62.204.128.0/19
                  62.221.128.0/19
                  77.70.0.0/17
                  77.236.160.0/19
                  78.83.0.0/16
                  78.90.0.0/16
                  80.253.48.0/20
                  82.103.64.0/18
                  82.147.128.0/19
                  83.97.24.0/21
                  84.242.128.0/18
                  84.252.0.0/18
                  85.91.128.0/19
                  85.118.64.0/19
                  85.130.0.0/17
                  85.196.128.0/18
                  87.97.128.0/17
                  87.227.128.0/17
                  88.203.128.0/17
                  89.186.200.0/21
                  89.190.192.0/19
                  89.215.0.0/16
                  89.253.128.0/18
                  92.247.0.0/16
                  95.111.0.0/17
                  95.140.208.0/20
                  130.204.0.0/16
                  151.251.0.0/16
                  176.12.0.0/18
                  193.22.103.0/24
                  195.24.32.0/19
                  195.34.96.0/19
                  195.149.248.0/21
                  195.177.248.0/23
                  212.36.0.0/19
                  212.50.0.0/19
                  212.91.160.0/19
                  212.95.160.0/19
                  212.104.96.0/19
                  213.169.32.0/19
                  213.191.160.0/19
                  213.222.32.0/19
                  213.226.0.0/18
                  213.240.192.0/18
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20
                IPv6:
                  2a00:4800::/29
                  2a01:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:86:9e:31:57:ad:84:2b:a9:f8:3d:3d:84:e2:c9:f7:7c:90:
         80:25:22:0b:b4:e9:9e:ca:8b:81:bd:9a:af:48:b0:f8:6e:1e:
         20:2d:e0:f6:1b:8a:6c:ce:b1:aa:9f:50:20:33:c0:e1:09:c9:
         4b:4c:fe:69:6c:7a:5e:02:2a:8d:42:f6:92:71:f3:f8:00:1a:
         ea:41:22:1c:93:e9:dc:a1:59:6b:a0:41:3b:51:76:7e:3b:66:
         70:26:99:65:8b:06:ce:e8:28:af:76:eb:8e:94:5b:22:e8:69:
         ad:d1:94:7d:a5:c1:8a:eb:94:f5:7f:50:0a:42:0c:34:4b:e7:
         47:79:94:f7:9f:9b:08:2e:b0:02:6f:a7:56:73:89:5f:40:95:
         4a:51:01:bf:bd:58:c9:e0:be:4d:cf:ab:54:4c:2c:77:a5:ee:
         6d:e5:b1:85:17:8c:f2:56:e0:33:b2:c9:e1:50:c2:55:db:5f:
         c5:9c:b8:38:15:24:9d:18:22:e8:df:87:c2:e5:f6:0f:49:05:
         fa:8a:db:b6:91:09:a5:96:ad:7c:0e:5f:9a:22:bd:b6:81:1c:
         88:9c:43:63:b9:78:bb:56:ff:ff:d3:d3:fd:b1:e3:77:52:18:
         2e:d0:b8:d5:90:62:12:de:0a:6f:cb:20:ef:d8:15:12:58:7a:
         dd:e1:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:48:17 2025 by rpki-client