Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e_OyDxNOPyGnFB1jBbORAcT-7ZA.roa
File:                     e_OyDxNOPyGnFB1jBbORAcT-7ZA.roa (raw, json)
Hash identifier:          PEzkASbHVtAtfNKKbTYOqNFdCfBEm/lEEgCslA3NEhw=
Subject key identifier:   7B:F3:B2:0F:13:4E:3F:21:A7:14:1D:63:05:B3:91:01:C4:FE:ED:90
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019665FEF783DB3070F1A8A40CB7D3D2967D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e_OyDxNOPyGnFB1jBbORAcT-7ZA.roa
Signing time:             Thu 24 Apr 2025 04:12:10 +0000
ROA not before:           Thu 24 Apr 2025 04:12:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12586
IP address blocks:        5.83.128.0/19 maxlen: 32
                          5.83.128.0/20 maxlen: 32
                          5.83.129.0/24 maxlen: 24
                          5.83.136.0/24 maxlen: 24
                          5.83.151.0/24 maxlen: 32
                          5.83.156.0/24 maxlen: 24
                          5.83.157.0/24 maxlen: 24
                          5.83.158.0/24 maxlen: 24
                          5.175.128.0/24 maxlen: 32
                          5.175.129.0/24 maxlen: 32
                          5.175.130.0/24 maxlen: 32
                          5.175.131.0/24 maxlen: 32
                          5.175.133.0/24 maxlen: 32
                          5.175.143.0/24 maxlen: 24
                          5.175.218.0/24 maxlen: 32
                          5.175.219.0/24 maxlen: 32
                          5.175.220.0/24 maxlen: 24
                          5.175.225.0/24 maxlen: 32
                          5.175.226.0/24 maxlen: 32
                          5.175.227.0/24 maxlen: 32
                          5.175.228.0/24 maxlen: 32
                          5.175.229.0/24 maxlen: 32
                          5.175.230.0/24 maxlen: 32
                          5.175.231.0/24 maxlen: 32
                          5.175.232.0/24 maxlen: 32
                          5.175.235.0/24 maxlen: 32
                          5.175.240.0/24 maxlen: 32
                          5.175.241.0/24 maxlen: 32
                          5.175.242.0/24 maxlen: 32
                          5.175.243.0/24 maxlen: 32
                          5.175.244.0/24 maxlen: 32
                          5.175.248.0/24 maxlen: 24
                          5.175.251.0/24 maxlen: 32
                          5.175.252.0/24 maxlen: 32
                          5.175.253.0/24 maxlen: 32
                          5.175.254.0/24 maxlen: 32
                          5.175.255.0/24 maxlen: 32
                          5.230.0.0/15 maxlen: 32
                          5.230.6.0/24 maxlen: 32
                          5.230.11.0/24 maxlen: 32
                          5.230.102.0/24 maxlen: 32
                          5.230.224.0/24 maxlen: 32
                          5.231.24.0/24 maxlen: 24
                          5.231.30.0/24 maxlen: 24
                          5.231.43.0/24 maxlen: 24
                          5.231.48.0/24 maxlen: 24
                          5.231.49.0/24 maxlen: 24
                          5.231.50.0/24 maxlen: 24
                          5.231.51.0/24 maxlen: 24
                          5.231.52.0/24 maxlen: 24
                          5.231.53.0/24 maxlen: 24
                          5.231.94.0/24 maxlen: 24
                          5.231.104.0/24 maxlen: 24
                          5.231.105.0/24 maxlen: 24
                          5.231.106.0/24 maxlen: 24
                          5.231.107.0/24 maxlen: 24
                          5.231.108.0/24 maxlen: 24
                          5.231.109.0/24 maxlen: 24
                          5.231.110.0/24 maxlen: 24
                          5.231.111.0/24 maxlen: 24
                          5.231.112.0/24 maxlen: 24
                          5.231.113.0/24 maxlen: 24
                          5.231.114.0/24 maxlen: 24
                          5.231.232.0/24 maxlen: 24
                          5.231.233.0/24 maxlen: 24
                          5.231.234.0/24 maxlen: 24
                          5.231.254.0/24 maxlen: 24
                          77.90.0.0/18 maxlen: 32
                          77.90.20.0/24 maxlen: 24
                          77.90.21.0/24 maxlen: 24
                          83.243.80.0/21 maxlen: 32
                          85.93.0.0/19 maxlen: 32
                          85.93.1.0/24 maxlen: 24
                          85.93.12.0/24 maxlen: 24
                          85.93.15.0/24 maxlen: 24
                          85.118.160.0/21 maxlen: 32
                          85.118.162.0/24 maxlen: 24
                          87.239.128.0/21 maxlen: 32
                          87.239.131.0/24 maxlen: 24
                          89.106.64.0/19 maxlen: 32
                          89.106.94.0/24 maxlen: 24
                          89.144.0.0/18 maxlen: 32
                          89.144.7.0/24 maxlen: 24
                          89.144.8.0/24 maxlen: 24
                          89.144.17.0/24 maxlen: 24
                          89.144.18.0/24 maxlen: 24
                          89.144.21.0/24 maxlen: 24
                          89.144.22.0/24 maxlen: 24
                          89.144.38.0/24 maxlen: 24
                          89.144.46.0/24 maxlen: 24
                          89.144.47.0/24 maxlen: 24
                          89.144.48.0/24 maxlen: 24
                          89.144.49.0/24 maxlen: 24
                          89.144.50.0/24 maxlen: 24
                          89.144.51.0/24 maxlen: 24
                          89.144.52.0/24 maxlen: 24
                          89.144.53.0/24 maxlen: 24
                          89.144.54.0/24 maxlen: 24
                          89.144.55.0/24 maxlen: 24
                          89.144.58.0/24 maxlen: 24
                          89.144.59.0/24 maxlen: 24
                          94.103.160.0/20 maxlen: 32
                          94.103.164.0/24 maxlen: 24
                          94.249.128.0/17 maxlen: 32
                          94.249.150.0/24 maxlen: 24
                          94.249.170.0/24 maxlen: 24
                          94.249.194.0/24 maxlen: 24
                          94.249.212.0/24 maxlen: 24
                          94.249.214.0/24 maxlen: 24
                          94.249.231.0/24 maxlen: 24
                          95.215.32.0/22 maxlen: 32
                          178.18.144.0/20 maxlen: 32
                          178.18.151.0/24 maxlen: 24
                          185.13.156.0/22 maxlen: 32
                          185.13.156.0/24 maxlen: 24
                          185.13.159.0/24 maxlen: 24
                          185.47.140.0/24 maxlen: 32
                          185.47.141.0/24 maxlen: 32
                          185.47.142.0/24 maxlen: 24
                          185.121.71.0/24 maxlen: 32
                          193.28.251.0/24 maxlen: 32
                          195.110.14.0/23 maxlen: 32
                          217.69.160.0/20 maxlen: 32
                          217.69.167.0/24 maxlen: 24
                          217.69.170.0/24 maxlen: 24
                          2a00:12d8::/29 maxlen: 128
                          2a00:19d0::/29 maxlen: 128
                          2a00:cdc0::/32 maxlen: 128
                          2a01:bd40::/29 maxlen: 128
                          2a02:7a0::/29 maxlen: 128
                          2a02:2fc0::/29 maxlen: 128
                          2a02:2fc0::/48 maxlen: 48
                          2a02:2fc0:1::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 24 Apr 2025 12:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:65:fe:f7:83:db:30:70:f1:a8:a4:0c:b7:d3:d2:96:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Apr 24 04:12:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7bf3b20f134e3f21a7141d6305b39101c4feed90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:f1:df:5d:30:c2:dc:9b:dc:2d:c1:9d:ad:
                    58:f5:bc:4a:82:8b:dd:8d:ee:2d:b6:24:7a:4d:0a:
                    19:40:08:6e:6e:76:94:c2:60:81:79:8a:88:6c:0e:
                    c2:2c:d2:c3:16:24:4f:b0:9c:92:c2:22:f9:40:03:
                    50:81:23:d7:da:9d:03:67:25:11:3c:13:24:f2:81:
                    af:07:8e:51:4f:78:4c:62:96:f6:97:bf:c8:b6:42:
                    8d:8f:0c:32:06:7d:9f:4a:24:c9:c7:18:b0:72:8c:
                    2f:11:fa:77:5f:1a:eb:1e:77:57:b3:53:18:0b:b4:
                    64:63:20:8d:1d:07:82:30:e1:bf:69:35:74:63:3f:
                    33:51:86:33:b7:61:1a:de:92:2b:1c:b7:39:59:ae:
                    c7:d4:ba:4f:08:f1:7d:03:4d:ef:18:09:55:17:b8:
                    d0:2c:75:36:6d:59:a4:ab:67:d9:16:02:00:c0:5c:
                    cb:34:9a:7a:43:a0:b7:81:28:2f:eb:fb:dd:5c:7d:
                    76:b0:19:6a:5f:6c:7e:54:9c:fb:33:05:84:c8:c8:
                    68:90:4f:7d:69:b9:af:6c:d0:6f:43:00:68:d9:75:
                    a1:b7:1b:ab:93:26:fc:7b:41:e1:a4:29:ef:91:e6:
                    2a:83:66:20:5e:26:68:d4:8b:39:5b:17:b8:00:14:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:B2:0F:13:4E:3F:21:A7:14:1D:63:05:B3:91:01:C4:FE:ED:90
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e_OyDxNOPyGnFB1jBbORAcT-7ZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.128.0/19
                  5.175.128.0/22
                  5.175.133.0/24
                  5.175.143.0/24
                  5.175.218.0-5.175.220.255
                  5.175.225.0-5.175.232.255
                  5.175.235.0/24
                  5.175.240.0-5.175.244.255
                  5.175.248.0/24
                  5.175.251.0-5.175.255.255
                  5.230.0.0/15
                  77.90.0.0/18
                  83.243.80.0/21
                  85.93.0.0/19
                  85.118.160.0/21
                  87.239.128.0/21
                  89.106.64.0/19
                  89.144.0.0/18
                  94.103.160.0/20
                  94.249.128.0/17
                  95.215.32.0/22
                  178.18.144.0/20
                  185.13.156.0/22
                  185.47.140.0-185.47.142.255
                  185.121.71.0/24
                  193.28.251.0/24
                  195.110.14.0/23
                  217.69.160.0/20
                IPv6:
                  2a00:12d8::/29
                  2a00:19d0::/29
                  2a00:cdc0::/32
                  2a01:bd40::/29
                  2a02:7a0::/29
                  2a02:2fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         55:90:6a:92:d3:39:90:48:d4:61:29:74:e6:e3:15:7d:c3:54:
         df:ce:58:cd:62:7d:7a:0f:83:61:31:42:a5:80:e5:dc:ec:8e:
         66:1b:a7:bf:5f:eb:25:72:b8:9a:48:70:24:d7:05:7e:98:ea:
         f0:91:30:0b:48:ba:9c:a2:b8:21:2b:bd:d9:3c:12:d7:9d:e8:
         cf:f1:68:1e:9c:31:ef:a1:cf:1d:1a:10:0a:84:dd:0a:7a:c9:
         f0:70:c5:31:b9:83:83:99:b3:54:86:28:a7:0b:20:cb:d9:35:
         08:be:56:5c:98:18:ad:99:be:3b:19:bf:6e:96:8a:2b:f3:eb:
         31:54:21:88:54:d1:9e:c6:af:65:c0:f6:bf:9c:87:50:95:64:
         58:9d:e4:18:a4:e2:cf:95:45:df:34:bd:65:23:e9:e1:56:2f:
         27:f6:0c:f0:66:c5:20:44:e7:8c:7e:d9:83:97:6c:dd:41:dd:
         a8:22:43:55:1c:02:d8:ed:0c:5d:bd:53:45:e8:8e:8f:8b:30:
         a4:fa:e3:17:4e:31:f8:33:c9:84:fa:49:ab:7a:0c:c8:46:ba:
         95:02:04:6b:6b:f8:31:3b:64:cf:68:00:5a:c7:55:31:d2:83:
         b4:82:89:6f:ec:01:ba:09:0a:f4:3a:be:17:96:0d:d7:6c:ef:
         61:5e:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:25:44 2025 by rpki-client