Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UyE3VHjLXfjgz8W9eCX3xWQZiXQ.roa
File:                     UyE3VHjLXfjgz8W9eCX3xWQZiXQ.roa (raw, json)
Hash identifier:          B43RkUuJu+5vmboOJw2q+zqAPRXcX0uMUVUtytXWNJ4=
Subject key identifier:   53:21:37:54:78:CB:5D:F8:E0:CF:C5:BD:78:25:F7:C5:64:19:89:74
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0196EB4E2AAD42D19181B2F22D59119970E7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UyE3VHjLXfjgz8W9eCX3xWQZiXQ.roa
Signing time:             Tue 20 May 2025 01:28:10 +0000
ROA not before:           Tue 20 May 2025 01:28:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12586
IP address blocks:        5.83.128.0/19 maxlen: 32
                          5.83.128.0/20 maxlen: 32
                          5.83.136.0/24 maxlen: 24
                          5.83.151.0/24 maxlen: 32
                          5.83.156.0/24 maxlen: 24
                          5.83.157.0/24 maxlen: 24
                          5.83.158.0/24 maxlen: 24
                          5.175.128.0/24 maxlen: 32
                          5.175.129.0/24 maxlen: 32
                          5.175.130.0/24 maxlen: 32
                          5.175.131.0/24 maxlen: 32
                          5.175.133.0/24 maxlen: 32
                          5.175.138.0/24 maxlen: 24
                          5.175.143.0/24 maxlen: 24
                          5.175.192.0/24 maxlen: 24
                          5.175.198.0/24 maxlen: 24
                          5.175.199.0/24 maxlen: 24
                          5.175.207.0/24 maxlen: 24
                          5.175.208.0/24 maxlen: 24
                          5.175.225.0/24 maxlen: 32
                          5.175.226.0/24 maxlen: 32
                          5.175.227.0/24 maxlen: 32
                          5.175.228.0/24 maxlen: 32
                          5.175.229.0/24 maxlen: 32
                          5.175.230.0/24 maxlen: 32
                          5.175.231.0/24 maxlen: 32
                          5.175.232.0/24 maxlen: 32
                          5.175.235.0/24 maxlen: 32
                          5.175.240.0/24 maxlen: 32
                          5.175.241.0/24 maxlen: 32
                          5.175.242.0/24 maxlen: 32
                          5.175.243.0/24 maxlen: 32
                          5.175.244.0/24 maxlen: 32
                          5.175.251.0/24 maxlen: 32
                          5.175.252.0/24 maxlen: 32
                          5.175.253.0/24 maxlen: 32
                          5.175.254.0/24 maxlen: 32
                          5.175.255.0/24 maxlen: 32
                          5.230.0.0/15 maxlen: 32
                          5.230.6.0/24 maxlen: 32
                          5.230.11.0/24 maxlen: 32
                          5.230.102.0/24 maxlen: 32
                          5.230.224.0/24 maxlen: 32
                          5.231.24.0/24 maxlen: 24
                          5.231.43.0/24 maxlen: 24
                          5.231.48.0/24 maxlen: 24
                          5.231.49.0/24 maxlen: 24
                          5.231.50.0/24 maxlen: 24
                          5.231.51.0/24 maxlen: 24
                          5.231.52.0/24 maxlen: 24
                          5.231.53.0/24 maxlen: 24
                          5.231.80.0/24 maxlen: 24
                          5.231.104.0/24 maxlen: 24
                          5.231.111.0/24 maxlen: 24
                          5.231.114.0/24 maxlen: 24
                          5.231.125.0/24 maxlen: 24
                          5.231.201.0/24 maxlen: 24
                          5.231.202.0/24 maxlen: 24
                          5.231.232.0/24 maxlen: 24
                          5.231.233.0/24 maxlen: 24
                          77.90.0.0/18 maxlen: 32
                          77.90.49.0/24 maxlen: 24
                          83.243.80.0/21 maxlen: 32
                          85.93.0.0/19 maxlen: 32
                          85.93.7.0/24 maxlen: 24
                          85.93.12.0/24 maxlen: 24
                          85.93.15.0/24 maxlen: 24
                          85.93.23.0/24 maxlen: 24
                          85.118.160.0/21 maxlen: 32
                          87.239.128.0/21 maxlen: 32
                          89.106.64.0/19 maxlen: 32
                          89.106.70.0/24 maxlen: 24
                          89.106.78.0/24 maxlen: 24
                          89.106.79.0/24 maxlen: 24
                          89.106.81.0/24 maxlen: 24
                          89.106.82.0/24 maxlen: 24
                          89.106.83.0/24 maxlen: 24
                          89.106.84.0/24 maxlen: 24
                          89.106.85.0/24 maxlen: 24
                          89.106.86.0/24 maxlen: 24
                          89.106.87.0/24 maxlen: 24
                          89.106.94.0/24 maxlen: 24
                          89.144.0.0/18 maxlen: 32
                          89.144.6.0/24 maxlen: 24
                          89.144.7.0/24 maxlen: 24
                          89.144.11.0/24 maxlen: 24
                          89.144.21.0/24 maxlen: 24
                          89.144.34.0/24 maxlen: 24
                          89.144.38.0/24 maxlen: 24
                          89.144.39.0/24 maxlen: 24
                          89.144.47.0/24 maxlen: 24
                          89.144.48.0/24 maxlen: 24
                          89.144.49.0/24 maxlen: 24
                          89.144.51.0/24 maxlen: 24
                          89.144.52.0/24 maxlen: 24
                          89.144.59.0/24 maxlen: 24
                          89.144.60.0/24 maxlen: 24
                          89.144.62.0/24 maxlen: 24
                          94.103.160.0/20 maxlen: 32
                          94.103.168.0/24 maxlen: 24
                          94.103.170.0/24 maxlen: 24
                          94.103.171.0/24 maxlen: 24
                          94.103.172.0/24 maxlen: 24
                          94.103.173.0/24 maxlen: 24
                          94.103.174.0/24 maxlen: 24
                          94.249.128.0/17 maxlen: 32
                          94.249.182.0/24 maxlen: 24
                          94.249.191.0/24 maxlen: 24
                          94.249.207.0/24 maxlen: 24
                          94.249.212.0/24 maxlen: 24
                          94.249.213.0/24 maxlen: 24
                          94.249.214.0/24 maxlen: 24
                          94.249.215.0/24 maxlen: 24
                          95.215.32.0/22 maxlen: 32
                          178.18.144.0/20 maxlen: 32
                          178.18.147.0/24 maxlen: 24
                          178.18.149.0/24 maxlen: 24
                          185.13.156.0/22 maxlen: 32
                          185.13.159.0/24 maxlen: 24
                          185.47.140.0/24 maxlen: 32
                          185.47.141.0/24 maxlen: 32
                          185.47.142.0/24 maxlen: 24
                          185.121.71.0/24 maxlen: 32
                          193.28.251.0/24 maxlen: 32
                          195.110.14.0/23 maxlen: 32
                          217.69.160.0/20 maxlen: 32
                          217.69.167.0/24 maxlen: 24
                          217.69.170.0/24 maxlen: 24
                          2a00:12d8::/29 maxlen: 128
                          2a00:19d0::/29 maxlen: 128
                          2a00:cdc0::/32 maxlen: 128
                          2a01:bd40::/29 maxlen: 128
                          2a02:7a0::/29 maxlen: 128
                          2a02:2fc0::/29 maxlen: 128
                          2a02:2fc0::/48 maxlen: 48
                          2a02:2fc0:1::/48 maxlen: 48
                          2a02:2fc0:3::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 21 May 2025 01:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:eb:4e:2a:ad:42:d1:91:81:b2:f2:2d:59:11:99:70:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May 20 01:28:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5321375478cb5df8e0cfc5bd7825f7c564198974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:14:0b:ea:a9:eb:b4:b1:28:56:56:16:03:de:
                    62:d5:88:d9:87:6a:ff:9c:85:38:53:e5:aa:f2:1c:
                    d5:4d:b6:dc:83:22:56:44:47:f0:10:b3:1f:89:63:
                    6d:0e:d1:5c:00:ab:05:5d:36:d4:7e:8e:f2:0b:b8:
                    79:ea:03:5c:49:7e:7b:f4:53:99:73:79:8a:6e:87:
                    37:36:b1:12:03:73:24:68:30:7b:9f:04:c9:6e:9a:
                    d0:93:48:6f:7e:7a:69:bd:ec:5a:c5:65:39:f6:18:
                    6b:fc:f0:7e:b6:3c:d9:c5:af:4e:c2:c6:60:2d:96:
                    2e:aa:93:4a:d5:07:9c:76:43:ef:c2:bd:bf:e5:86:
                    1e:2d:67:65:2b:39:4b:92:cb:1d:0a:12:51:b1:01:
                    19:eb:a4:92:c6:03:c0:7a:27:d6:39:a5:3e:02:32:
                    de:8a:61:c9:b1:b5:ec:e6:fe:56:ee:a9:16:84:ba:
                    4c:1f:72:3a:eb:82:05:19:d7:9b:61:53:99:e3:76:
                    71:43:61:16:ac:ee:16:dc:0b:7d:fc:e3:7e:d3:8f:
                    a6:90:d2:d2:a6:37:c5:05:b0:c4:b0:1e:6b:47:06:
                    1a:68:81:6f:27:1d:7f:6f:35:e9:d8:74:bd:c4:8a:
                    7c:95:8c:85:fe:68:a4:63:b5:5f:8d:ed:58:bc:4b:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:37:54:78:CB:5D:F8:E0:CF:C5:BD:78:25:F7:C5:64:19:89:74
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UyE3VHjLXfjgz8W9eCX3xWQZiXQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.128.0/19
                  5.175.128.0/22
                  5.175.133.0/24
                  5.175.138.0/24
                  5.175.143.0/24
                  5.175.192.0/24
                  5.175.198.0/23
                  5.175.207.0-5.175.208.255
                  5.175.225.0-5.175.232.255
                  5.175.235.0/24
                  5.175.240.0-5.175.244.255
                  5.175.251.0-5.175.255.255
                  5.230.0.0/15
                  77.90.0.0/18
                  83.243.80.0/21
                  85.93.0.0/19
                  85.118.160.0/21
                  87.239.128.0/21
                  89.106.64.0/19
                  89.144.0.0/18
                  94.103.160.0/20
                  94.249.128.0/17
                  95.215.32.0/22
                  178.18.144.0/20
                  185.13.156.0/22
                  185.47.140.0-185.47.142.255
                  185.121.71.0/24
                  193.28.251.0/24
                  195.110.14.0/23
                  217.69.160.0/20
                IPv6:
                  2a00:12d8::/29
                  2a00:19d0::/29
                  2a00:cdc0::/32
                  2a01:bd40::/29
                  2a02:7a0::/29
                  2a02:2fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         aa:f7:17:bc:50:ab:44:2c:f1:8a:f9:38:fa:5b:fc:f8:d5:dc:
         9d:fe:3c:ae:8b:ee:10:58:70:20:c6:26:55:90:a9:cf:6d:1b:
         98:c4:60:67:7a:9a:c6:bf:8e:80:8d:df:e2:6b:ed:cc:33:a3:
         dd:79:41:3f:ab:ae:6c:5f:4d:b5:a7:67:79:38:12:ee:19:98:
         f4:e9:13:1d:f7:fb:b3:30:29:73:0e:dd:10:29:c8:c6:36:48:
         d3:e4:79:37:3c:57:e9:84:11:ca:cf:63:f1:16:69:85:dd:88:
         05:bf:39:2d:7a:dd:d3:01:72:14:2c:9d:f6:a5:e3:8a:9d:38:
         4d:60:63:0d:c4:a4:da:c1:d6:39:7d:38:aa:11:9d:38:04:26:
         ce:ef:55:91:29:82:f6:94:a1:c2:74:80:23:4a:18:44:ca:ca:
         8c:7c:ad:2c:89:b5:9c:e3:8f:06:b4:93:73:e8:34:f7:e0:44:
         c0:37:03:aa:46:2a:f5:fb:c8:2d:b3:b5:6f:73:74:c2:db:ef:
         73:6b:eb:e7:40:91:53:4f:00:bf:8d:4a:c1:63:3f:1b:89:3f:
         e4:c3:83:0c:07:df:16:b8:d5:00:8e:0e:80:e2:fe:0c:9c:05:
         26:83:f6:8f:d0:a1:02:1f:13:7e:6a:03:b7:53:1a:ae:26:9f:
         3c:87:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:16:23 2025 by rpki-client