Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z8S6NlTJkQbKohQxGuY9fy_uFwc.roa
File:                     Z8S6NlTJkQbKohQxGuY9fy_uFwc.roa (raw, json)
Hash identifier:          VUL2xDaAnQUQY7hmYCHF/EaJBYE3phw4nuBX06M/DQE=
Subject key identifier:   67:C4:BA:36:54:C9:91:06:CA:A2:14:31:1A:E6:3D:7F:2F:EE:17:07
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0196211082087A7088D887655BB7631B5FFD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z8S6NlTJkQbKohQxGuY9fy_uFwc.roa
Signing time:             Thu 10 Apr 2025 18:57:31 +0000
ROA not before:           Thu 10 Apr 2025 18:57:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        37.202.203.0/24 maxlen: 24
                          37.202.206.0/24 maxlen: 24
                          151.240.0.0/24 maxlen: 24
                          151.240.1.0/24 maxlen: 24
                          151.240.2.0/24 maxlen: 24
                          151.240.3.0/24 maxlen: 24
                          151.240.4.0/24 maxlen: 24
                          151.240.5.0/24 maxlen: 24
                          151.240.6.0/24 maxlen: 24
                          151.240.7.0/24 maxlen: 24
                          151.240.8.0/24 maxlen: 24
                          151.240.9.0/24 maxlen: 24
                          151.240.10.0/24 maxlen: 24
                          151.240.11.0/24 maxlen: 24
                          151.240.12.0/24 maxlen: 24
                          151.240.13.0/24 maxlen: 24
                          151.240.14.0/24 maxlen: 24
                          151.240.15.0/24 maxlen: 24
                          151.240.16.0/24 maxlen: 24
                          151.240.17.0/24 maxlen: 24
                          151.240.18.0/24 maxlen: 24
                          151.240.19.0/24 maxlen: 24
                          151.240.20.0/24 maxlen: 24
                          151.240.21.0/24 maxlen: 24
                          151.240.22.0/24 maxlen: 24
                          151.240.23.0/24 maxlen: 24
                          151.240.24.0/24 maxlen: 24
                          151.240.25.0/24 maxlen: 24
                          151.240.26.0/24 maxlen: 24
                          151.240.27.0/24 maxlen: 24
                          151.240.28.0/24 maxlen: 24
                          151.240.29.0/24 maxlen: 24
                          151.240.30.0/24 maxlen: 24
                          151.240.31.0/24 maxlen: 24
                          151.240.32.0/24 maxlen: 24
                          151.240.33.0/24 maxlen: 24
                          151.240.34.0/24 maxlen: 24
                          151.240.35.0/24 maxlen: 24
                          151.240.36.0/24 maxlen: 24
                          151.240.37.0/24 maxlen: 24
                          151.240.38.0/24 maxlen: 24
                          151.240.39.0/24 maxlen: 24
                          151.240.40.0/24 maxlen: 24
                          151.240.41.0/24 maxlen: 24
                          151.240.42.0/24 maxlen: 24
                          151.240.43.0/24 maxlen: 24
                          151.240.44.0/24 maxlen: 24
                          151.240.45.0/24 maxlen: 24
                          151.240.46.0/24 maxlen: 24
                          151.240.47.0/24 maxlen: 24
                          151.240.48.0/24 maxlen: 24
                          151.240.49.0/24 maxlen: 24
                          151.240.50.0/24 maxlen: 24
                          151.240.51.0/24 maxlen: 24
                          151.240.52.0/24 maxlen: 24
                          151.240.53.0/24 maxlen: 24
                          151.240.54.0/24 maxlen: 24
                          151.240.55.0/24 maxlen: 24
                          151.240.56.0/24 maxlen: 24
                          151.240.57.0/24 maxlen: 24
                          151.240.58.0/24 maxlen: 24
                          151.240.59.0/24 maxlen: 24
                          151.240.60.0/24 maxlen: 24
                          151.240.61.0/24 maxlen: 24
                          151.240.62.0/24 maxlen: 24
                          151.240.63.0/24 maxlen: 24
                          151.240.64.0/24 maxlen: 24
                          151.240.65.0/24 maxlen: 24
                          151.240.66.0/24 maxlen: 24
                          151.240.67.0/24 maxlen: 24
                          151.240.68.0/24 maxlen: 24
                          151.240.69.0/24 maxlen: 24
                          151.240.70.0/24 maxlen: 24
                          151.240.71.0/24 maxlen: 24
                          151.240.72.0/24 maxlen: 24
                          151.240.73.0/24 maxlen: 24
                          151.240.74.0/24 maxlen: 24
                          151.240.75.0/24 maxlen: 24
                          151.240.76.0/24 maxlen: 24
                          151.240.77.0/24 maxlen: 24
                          151.240.78.0/24 maxlen: 24
                          151.240.79.0/24 maxlen: 24
                          151.240.80.0/24 maxlen: 24
                          151.240.81.0/24 maxlen: 24
                          151.240.82.0/24 maxlen: 24
                          151.240.83.0/24 maxlen: 24
                          151.240.84.0/24 maxlen: 24
                          151.240.85.0/24 maxlen: 24
                          151.240.86.0/24 maxlen: 24
                          151.240.87.0/24 maxlen: 24
                          151.240.88.0/24 maxlen: 24
                          151.240.89.0/24 maxlen: 24
                          151.240.90.0/24 maxlen: 24
                          151.240.91.0/24 maxlen: 24
                          151.240.92.0/24 maxlen: 24
                          151.240.93.0/24 maxlen: 24
                          151.240.94.0/24 maxlen: 24
                          151.240.95.0/24 maxlen: 24
                          151.240.96.0/24 maxlen: 24
                          151.240.97.0/24 maxlen: 24
                          151.240.98.0/24 maxlen: 24
                          151.240.99.0/24 maxlen: 24
                          151.240.100.0/24 maxlen: 24
                          151.240.101.0/24 maxlen: 24
                          151.240.102.0/24 maxlen: 24
                          151.240.103.0/24 maxlen: 24
                          151.240.104.0/24 maxlen: 24
                          151.240.105.0/24 maxlen: 24
                          151.240.106.0/24 maxlen: 24
                          151.240.107.0/24 maxlen: 24
                          151.240.108.0/24 maxlen: 24
                          151.240.109.0/24 maxlen: 24
                          151.240.110.0/24 maxlen: 24
                          151.240.111.0/24 maxlen: 24
                          151.240.112.0/24 maxlen: 24
                          151.240.113.0/24 maxlen: 24
                          151.240.114.0/24 maxlen: 24
                          151.240.115.0/24 maxlen: 24
                          151.240.116.0/24 maxlen: 24
                          151.240.117.0/24 maxlen: 24
                          151.240.118.0/24 maxlen: 24
                          151.240.119.0/24 maxlen: 24
                          151.240.120.0/24 maxlen: 24
                          151.240.121.0/24 maxlen: 24
                          151.240.122.0/24 maxlen: 24
                          151.240.123.0/24 maxlen: 24
                          151.240.124.0/24 maxlen: 24
                          151.240.125.0/24 maxlen: 24
                          151.240.126.0/24 maxlen: 24
                          151.240.127.0/24 maxlen: 24
                          151.240.128.0/24 maxlen: 24
                          151.240.129.0/24 maxlen: 24
                          151.240.130.0/24 maxlen: 24
                          151.240.131.0/24 maxlen: 24
                          151.240.132.0/24 maxlen: 24
                          151.240.133.0/24 maxlen: 24
                          151.240.134.0/24 maxlen: 24
                          151.240.135.0/24 maxlen: 24
                          151.240.136.0/24 maxlen: 24
                          151.240.137.0/24 maxlen: 24
                          151.240.138.0/24 maxlen: 24
                          151.240.139.0/24 maxlen: 24
                          151.240.140.0/24 maxlen: 24
                          151.240.141.0/24 maxlen: 24
                          151.240.142.0/24 maxlen: 24
                          151.240.143.0/24 maxlen: 24
                          151.240.144.0/24 maxlen: 24
                          151.240.145.0/24 maxlen: 24
                          151.240.146.0/24 maxlen: 24
                          151.240.147.0/24 maxlen: 24
                          151.240.148.0/24 maxlen: 24
                          151.240.149.0/24 maxlen: 24
                          151.240.150.0/24 maxlen: 24
                          151.240.151.0/24 maxlen: 24
                          151.240.152.0/24 maxlen: 24
                          151.240.153.0/24 maxlen: 24
                          151.240.154.0/24 maxlen: 24
                          151.240.155.0/24 maxlen: 24
                          151.240.156.0/24 maxlen: 24
                          151.240.157.0/24 maxlen: 24
                          151.240.158.0/24 maxlen: 24
                          151.240.159.0/24 maxlen: 24
                          151.240.160.0/24 maxlen: 24
                          151.240.161.0/24 maxlen: 24
                          151.240.162.0/24 maxlen: 24
                          151.240.163.0/24 maxlen: 24
                          151.240.164.0/24 maxlen: 24
                          151.240.165.0/24 maxlen: 24
                          151.240.166.0/24 maxlen: 24
                          151.240.167.0/24 maxlen: 24
                          151.240.168.0/24 maxlen: 24
                          151.240.169.0/24 maxlen: 24
                          151.240.170.0/24 maxlen: 24
                          151.240.171.0/24 maxlen: 24
                          151.240.172.0/24 maxlen: 24
                          151.240.173.0/24 maxlen: 24
                          151.240.174.0/24 maxlen: 24
                          151.240.175.0/24 maxlen: 24
                          151.240.176.0/24 maxlen: 24
                          151.240.177.0/24 maxlen: 24
                          151.240.178.0/24 maxlen: 24
                          151.240.179.0/24 maxlen: 24
                          151.240.180.0/24 maxlen: 24
                          151.240.181.0/24 maxlen: 24
                          151.240.182.0/24 maxlen: 24
                          151.240.183.0/24 maxlen: 24
                          151.240.184.0/24 maxlen: 24
                          151.240.185.0/24 maxlen: 24
                          151.240.186.0/24 maxlen: 24
                          151.240.187.0/24 maxlen: 24
                          151.240.188.0/24 maxlen: 24
                          151.240.189.0/24 maxlen: 24
                          151.240.190.0/24 maxlen: 24
                          151.240.191.0/24 maxlen: 24
                          151.240.192.0/24 maxlen: 24
                          151.240.193.0/24 maxlen: 24
                          151.240.194.0/24 maxlen: 24
                          151.240.195.0/24 maxlen: 24
                          151.240.196.0/24 maxlen: 24
                          151.240.197.0/24 maxlen: 24
                          151.240.198.0/24 maxlen: 24
                          151.240.199.0/24 maxlen: 24
                          151.240.200.0/24 maxlen: 24
                          151.240.201.0/24 maxlen: 24
                          151.240.202.0/24 maxlen: 24
                          151.240.203.0/24 maxlen: 24
                          151.240.204.0/24 maxlen: 24
                          151.240.205.0/24 maxlen: 24
                          151.240.206.0/24 maxlen: 24
                          151.240.207.0/24 maxlen: 24
                          151.240.208.0/24 maxlen: 24
                          151.240.209.0/24 maxlen: 24
                          151.240.210.0/24 maxlen: 24
                          151.240.211.0/24 maxlen: 24
                          151.240.212.0/24 maxlen: 24
                          151.240.213.0/24 maxlen: 24
                          151.240.214.0/24 maxlen: 24
                          151.240.215.0/24 maxlen: 24
                          151.240.216.0/24 maxlen: 24
                          151.240.217.0/24 maxlen: 24
                          151.240.218.0/24 maxlen: 24
                          151.240.219.0/24 maxlen: 24
                          151.240.220.0/24 maxlen: 24
                          151.240.221.0/24 maxlen: 24
                          151.240.222.0/24 maxlen: 24
                          151.240.223.0/24 maxlen: 24
                          151.240.224.0/24 maxlen: 24
                          151.240.225.0/24 maxlen: 24
                          151.240.226.0/24 maxlen: 24
                          151.240.227.0/24 maxlen: 24
                          151.240.228.0/24 maxlen: 24
                          151.240.229.0/24 maxlen: 24
                          151.240.230.0/24 maxlen: 24
                          151.240.231.0/24 maxlen: 24
                          151.240.232.0/24 maxlen: 24
                          151.240.233.0/24 maxlen: 24
                          151.240.234.0/24 maxlen: 24
                          151.240.235.0/24 maxlen: 24
                          151.240.236.0/24 maxlen: 24
                          151.240.237.0/24 maxlen: 24
                          151.240.238.0/24 maxlen: 24
                          151.240.239.0/24 maxlen: 24
                          151.240.240.0/24 maxlen: 24
                          151.240.241.0/24 maxlen: 24
                          151.240.242.0/24 maxlen: 24
                          151.240.243.0/24 maxlen: 24
                          151.240.244.0/24 maxlen: 24
                          151.240.245.0/24 maxlen: 24
                          151.240.246.0/24 maxlen: 24
                          151.240.247.0/24 maxlen: 24
                          151.240.248.0/24 maxlen: 24
                          151.240.249.0/24 maxlen: 24
                          151.240.250.0/24 maxlen: 24
                          151.240.251.0/24 maxlen: 24
                          151.240.252.0/24 maxlen: 24
                          151.240.253.0/24 maxlen: 24
                          151.240.254.0/24 maxlen: 24
                          151.240.255.0/24 maxlen: 24
                          151.242.39.0/24 maxlen: 24
                          151.242.40.0/24 maxlen: 24
                          151.242.190.0/24 maxlen: 24
                          151.242.194.0/24 maxlen: 24
                          151.243.41.0/24 maxlen: 24
                          151.243.115.0/24 maxlen: 24
                          151.243.120.0/24 maxlen: 24
                          151.243.223.0/24 maxlen: 24
                          151.243.229.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 11 Apr 2025 19:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:21:10:82:08:7a:70:88:d8:87:65:5b:b7:63:1b:5f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Apr 10 18:57:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67c4ba3654c99106caa214311ae63d7f2fee1707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:01:bb:fa:a7:38:5a:33:b3:d6:e5:72:a4:
                    e2:88:06:da:7d:8d:d0:0c:88:0a:09:51:d9:17:d7:
                    4b:55:36:d3:f2:f6:5d:c6:96:d1:25:73:f9:23:e8:
                    98:78:af:36:c2:c5:ba:e4:c8:51:a0:c2:5b:8a:80:
                    8e:dd:03:df:f5:60:98:71:f9:86:b6:51:01:36:b9:
                    b4:5f:cb:5b:cd:81:42:27:b0:60:41:58:b5:e6:6e:
                    4e:5c:93:4f:b7:29:8c:18:f7:65:29:de:32:05:98:
                    bf:b0:f9:5d:84:1b:b6:84:8f:44:e1:c1:90:50:cd:
                    3f:ef:22:6f:de:75:b4:db:db:53:bf:89:d5:ce:b4:
                    2e:54:01:5a:1b:a7:d8:b1:c0:aa:ef:69:a6:87:27:
                    e0:a6:e1:bb:01:ea:f6:48:ab:30:85:b2:50:0d:af:
                    bb:07:3c:a3:f9:8e:83:0a:97:02:be:7b:6c:3e:00:
                    58:b9:24:69:ab:1d:20:77:d2:22:02:42:c1:64:c4:
                    06:f5:b2:4b:58:ca:b1:3a:07:e2:f0:fb:88:ad:48:
                    53:ba:c6:99:4f:f6:8d:1c:31:5f:39:e8:72:a9:30:
                    46:46:36:c5:f9:9f:a6:ee:38:77:5c:c9:d5:45:11:
                    6d:68:89:c1:62:64:e6:e5:7b:af:32:fd:07:8d:6e:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:BA:36:54:C9:91:06:CA:A2:14:31:1A:E6:3D:7F:2F:EE:17:07
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z8S6NlTJkQbKohQxGuY9fy_uFwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.202.203.0/24
                  37.202.206.0/24
                  151.240.0.0/16
                  151.242.39.0-151.242.40.255
                  151.242.190.0/24
                  151.242.194.0/24
                  151.243.41.0/24
                  151.243.115.0/24
                  151.243.120.0/24
                  151.243.223.0/24
                  151.243.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:bb:61:b8:62:78:4c:91:e8:9a:30:70:5c:4a:4d:b0:81:
         b9:15:20:af:65:92:8e:7b:17:a3:fa:c5:f3:4a:a7:52:a4:2b:
         02:2a:f6:05:d4:b1:ad:78:76:88:d4:92:59:16:50:76:85:c7:
         3d:c2:8f:12:87:a9:c2:71:79:77:6e:1d:2f:c1:1b:02:86:ca:
         a2:a3:d8:24:ea:7e:99:7e:c2:3a:98:32:52:1c:19:69:ff:e5:
         f9:8c:6f:dd:8a:23:c4:94:8a:cd:b6:5c:63:60:95:2e:89:b8:
         9c:27:41:de:f6:ee:2e:ad:5b:57:9b:58:43:c0:c5:a7:28:21:
         5e:da:ea:9b:78:25:25:44:9c:8e:45:ae:44:91:64:5e:a7:66:
         1b:83:e8:66:a1:00:98:ac:28:2a:7a:bc:bb:8c:0e:21:73:84:
         d3:20:a0:2b:5e:86:86:80:2c:d2:9c:aa:92:f8:de:39:6c:f0:
         60:2d:91:17:af:1b:7d:e9:60:65:17:2c:76:e9:d5:a2:25:5b:
         a7:7e:a3:22:bc:59:0f:4a:8e:04:13:6d:72:67:48:a1:b3:d4:
         fc:51:51:82:e7:07:0b:20:57:e4:c2:8b:5e:42:5e:72:76:ec:
         49:0c:04:c6:b8:0e:dd:e1:af:a3:77:58:3f:9f:90:98:7e:0d:
         b7:e3:42:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAZYhEIIIenCI2IdlW7djG1/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDEwMTg1NzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2M0YmEzNjU0Yzk5MTA2Y2FhMjE0MzExYWU2M2Q3ZjJmZWUxNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIcBu/qnOFozs9blcqTiiAbafY3Q
DIgKCVHZF9dLVTbT8vZdxpbRJXP5I+iYeK82wsW65MhRoMJbioCO3QPf9WCYcfmG
tlEBNrm0X8tbzYFCJ7BgQVi15m5OXJNPtymMGPdlKd4yBZi/sPldhBu2hI9E4cGQ
UM0/7yJv3nW029tTv4nVzrQuVAFaG6fYscCq72mmhyfgpuG7Aer2SKswhbJQDa+7
Bzyj+Y6DCpcCvntsPgBYuSRpqx0gd9IiAkLBZMQG9bJLWMqxOgfi8PuIrUhTusaZ
T/aNHDFfOehyqTBGRjbF+Z+m7jh3XMnVRRFtaInBYmTm5XuvMv0HjW56rQIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFGfEujZUyZEGyqIUMRrmPX8v7hcHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWjhTNk5sVEprUWJLb2hReEd1WTlmeV91RndjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBPBAIAATBJAwQAJcrLAwQA
JcrOAwMAl/AwDAMEAJfyJwMEAJfyKAMEAJfyvgMEAJfywgMEAJfzKQMEAJfzcwME
AJfzeAMEAJfz3wMEAJfz5TANBgkqhkiG9w0BAQsFAAOCAQEAMW27YbhieEyR6Jow
cFxKTbCBuRUgr2WSjnsXo/rF80qnUqQrAir2BdSxrXh2iNSSWRZQdoXHPcKPEoep
wnF5d24dL8EbAobKoqPYJOp+mX7COpgyUhwZaf/l+Yxv3YojxJSKzbZcY2CVLom4
nCdB3vbuLq1bV5tYQ8DFpyghXtrqm3glJUScjkWuRJFkXqdmG4PoZqEAmKwoKnq8
u4wOIXOE0yCgK16GhoAs0pyqkvjeOWzwYC2RF68bfelgZRcsdunVoiVbp36jIrxZ
D0qOBBNtcmdIobPU/FFRgucHCyBX5MKLXkJecnbsSQwExrgO3eGvo3dYP5+QmH4N
t+NCJg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:05:27 2025 by rpki-client