Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/kJbqugGzjcar_vQMB3lbuYt_PTw.roa
File:                     kJbqugGzjcar_vQMB3lbuYt_PTw.roa (raw, json)
Hash identifier:          emVPsJYUnPe+oYUzPMkJk5nNc+wu7Ryrw0pN/lbLOi8=
Subject key identifier:   90:96:EA:BA:01:B3:8D:C6:AB:FE:F4:0C:07:79:5B:B9:8B:7F:3D:3C
Certificate issuer:       /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial:       01983C4A63FCFF460EBD068B6138412E8257
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/kJbqugGzjcar_vQMB3lbuYt_PTw.roa
Signing time:             Thu 24 Jul 2025 11:56:04 +0000
ROA not before:           Thu 24 Jul 2025 11:56:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44477
IP address blocks:        37.221.124.0/22 maxlen: 24
                          45.67.228.0/24 maxlen: 24
                          45.67.229.0/24 maxlen: 24
                          45.67.231.0/24 maxlen: 24
                          45.120.176.0/22 maxlen: 24
                          62.3.12.0/24 maxlen: 24
                          74.119.192.0/24 maxlen: 24
                          74.119.193.0/24 maxlen: 24
                          74.119.194.0/24 maxlen: 24
                          74.119.195.0/24 maxlen: 24
                          80.92.204.0/24 maxlen: 24
                          80.92.205.0/24 maxlen: 24
                          80.92.206.0/24 maxlen: 24
                          86.104.72.0/22 maxlen: 24
                          89.221.224.0/24 maxlen: 24
                          89.221.225.0/24 maxlen: 24
                          91.132.132.0/22 maxlen: 24
                          91.194.161.0/24 maxlen: 24
                          91.225.217.0/24 maxlen: 24
                          91.225.218.0/24 maxlen: 24
                          91.225.219.0/24 maxlen: 24
                          94.131.8.0/24 maxlen: 24
                          94.131.10.0/24 maxlen: 24
                          94.131.13.0/24 maxlen: 24
                          94.131.14.0/24 maxlen: 24
                          94.131.20.0/24 maxlen: 24
                          94.131.96.0/24 maxlen: 24
                          94.131.104.0/24 maxlen: 24
                          94.131.117.0/24 maxlen: 24
                          103.35.188.0/22 maxlen: 24
                          103.106.0.0/22 maxlen: 24
                          103.113.68.0/22 maxlen: 24
                          103.231.72.0/22 maxlen: 24
                          146.19.170.0/24 maxlen: 24
                          176.120.64.0/22 maxlen: 24
                          176.120.64.0/24 maxlen: 24
                          176.120.72.0/22 maxlen: 24
                          185.234.56.0/22 maxlen: 24
                          185.234.64.0/22 maxlen: 24
                          185.235.240.0/22 maxlen: 24
                          185.236.232.0/22 maxlen: 24
                          185.242.84.0/24 maxlen: 24
                          185.242.85.0/24 maxlen: 24
                          185.242.86.0/24 maxlen: 24
                          185.242.87.0/24 maxlen: 24
                          185.250.148.0/24 maxlen: 24
                          185.250.150.0/24 maxlen: 24
                          185.250.151.0/24 maxlen: 24
                          193.203.202.0/24 maxlen: 24
                          194.54.156.0/24 maxlen: 24
                          194.54.157.0/24 maxlen: 24
                          194.54.158.0/24 maxlen: 24
                          194.54.159.0/24 maxlen: 24
                          194.62.42.0/24 maxlen: 24
                          194.246.114.0/24 maxlen: 24
                          194.246.115.0/24 maxlen: 24
                          195.42.232.0/22 maxlen: 24
                          195.149.87.0/24 maxlen: 24
                          213.159.64.0/21 maxlen: 24
                          213.159.72.0/21 maxlen: 24
                          213.159.76.0/24 maxlen: 24
                          213.159.77.0/24 maxlen: 24
                          213.159.78.0/24 maxlen: 24
                          213.159.79.0/24 maxlen: 24
                          2a09:7c40::/32 maxlen: 32
                          2a09:7c41::/32 maxlen: 32
                          2a09:7c42::/32 maxlen: 32
                          2a09:7c43::/32 maxlen: 32
                          2a09:7c44::/32 maxlen: 32
                          2a09:7c45::/32 maxlen: 32
                          2a09:7c46::/32 maxlen: 32
                          2a09:7c47::/32 maxlen: 32
                          2a0b:cf43::/32 maxlen: 32
                          2a0b:cf45::/32 maxlen: 32
                          2a0b:cf46::/32 maxlen: 32
                          2a0b:cf47::/32 maxlen: 32
                          2a11:3805::/32 maxlen: 32
                          2a11:3c01::/32 maxlen: 32
                          2a11:3c02::/32 maxlen: 32
                          2a11:3c03::/32 maxlen: 32
                          2a11:4c00::/32 maxlen: 32
                          2a11:4c01::/32 maxlen: 32
                          2a11:4c04::/32 maxlen: 32
                          2a11:4c05::/32 maxlen: 32
                          2a11:4c06::/32 maxlen: 32
                          2a11:7e06::/32 maxlen: 32
                          2a14:2d80::/32 maxlen: 32
                          2a14:2d81::/32 maxlen: 32
                          2a14:2d82::/32 maxlen: 32
                          2a14:2d83::/32 maxlen: 32
                          2a14:2d85::/32 maxlen: 32
                          2a14:2d87::/32 maxlen: 32
                          2a14:2e80::/32 maxlen: 32
                          2a14:2f80::/32 maxlen: 32
                          2a14:3080::/32 maxlen: 32
                          2a14:3081::/32 maxlen: 32
                          2a14:3082::/32 maxlen: 32
                          2a14:3083::/32 maxlen: 32
                          2a14:3084::/32 maxlen: 32
                          2a14:3085::/32 maxlen: 32
                          2a14:3086::/32 maxlen: 32
                          2a14:3087::/32 maxlen: 32
                          2a14:3880::/32 maxlen: 32
Validation:               Failed, certificate revoked on Fri 08 Aug 2025 07:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:4a:63:fc:ff:46:0e:bd:06:8b:61:38:41:2e:82:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
        Validity
            Not Before: Jul 24 11:56:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9096eaba01b38dc6abfef40c07795bb98b7f3d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:6f:82:8d:fe:31:83:1f:4e:e4:fd:46:75:
                    41:89:e2:a7:64:58:23:9e:b0:16:3c:28:67:62:96:
                    80:2c:08:dd:db:d9:84:41:f3:a1:92:0a:b7:9a:80:
                    23:54:d7:9c:54:38:1f:9d:eb:76:11:47:9d:be:53:
                    c4:bb:47:68:a0:98:72:7d:66:b0:0c:2c:ff:73:55:
                    83:93:7d:5b:51:76:39:61:15:62:96:2c:ef:a8:82:
                    36:cb:95:dc:de:bb:ee:bc:98:2f:73:a2:7a:11:c7:
                    c1:ee:fa:d9:1c:8b:d3:19:58:f1:55:4f:ba:67:db:
                    6e:51:ea:64:7b:2f:b6:68:89:44:ab:0f:4c:26:8a:
                    02:aa:17:9b:7d:a5:32:b5:89:ae:9a:6f:ae:4b:81:
                    96:8e:59:58:ce:6e:b4:09:d4:55:d9:d7:57:fd:0e:
                    2f:65:aa:b9:46:c5:c9:fd:3c:75:5d:24:7e:bb:08:
                    50:98:a7:f8:84:e4:68:8f:2c:8d:52:1d:cf:9e:1d:
                    8d:41:5f:06:3e:99:d6:59:16:bb:73:fa:b0:e4:bb:
                    f6:34:a3:75:10:fe:b8:8e:91:79:37:c8:df:57:d7:
                    c5:b1:25:30:4e:73:e8:92:46:bd:cd:ac:cd:16:f1:
                    36:6b:89:7e:c9:e2:d7:49:9b:e5:69:df:c6:30:97:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:EA:BA:01:B3:8D:C6:AB:FE:F4:0C:07:79:5B:B9:8B:7F:3D:3C
            X509v3 Authority Key Identifier:
                keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/kJbqugGzjcar_vQMB3lbuYt_PTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.221.124.0/22
                  45.67.228.0/23
                  45.67.231.0/24
                  45.120.176.0/22
                  62.3.12.0/24
                  74.119.192.0/22
                  80.92.204.0-80.92.206.255
                  86.104.72.0/22
                  89.221.224.0/23
                  91.132.132.0/22
                  91.194.161.0/24
                  91.225.217.0-91.225.219.255
                  94.131.8.0/24
                  94.131.10.0/24
                  94.131.13.0-94.131.14.255
                  94.131.20.0/24
                  94.131.96.0/24
                  94.131.104.0/24
                  94.131.117.0/24
                  103.35.188.0/22
                  103.106.0.0/22
                  103.113.68.0/22
                  103.231.72.0/22
                  146.19.170.0/24
                  176.120.64.0/22
                  176.120.72.0/22
                  185.234.56.0/22
                  185.234.64.0/22
                  185.235.240.0/22
                  185.236.232.0/22
                  185.242.84.0/22
                  185.250.148.0/24
                  185.250.150.0/23
                  193.203.202.0/24
                  194.54.156.0/22
                  194.62.42.0/24
                  194.246.114.0/23
                  195.42.232.0/22
                  195.149.87.0/24
                  213.159.64.0/20
                IPv6:
                  2a09:7c40::/29
                  2a0b:cf43::/32
                  2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:3805::/32
                  2a11:3c01::-2a11:3c03:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:4c00::/31
                  2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:7e06::/32
                  2a14:2d80::/30
                  2a14:2d85::/32
                  2a14:2d87::/32
                  2a14:2e80::/32
                  2a14:2f80::/32
                  2a14:3080::/29
                  2a14:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:e7:00:f4:ae:bc:62:e9:57:f4:75:d5:4f:19:de:bd:cc:
         8a:63:e3:8e:c4:7d:19:9e:77:59:bd:89:34:4e:73:5a:b8:b1:
         2c:b1:7f:4c:97:d7:d7:ff:29:c3:a4:d1:6b:64:64:72:94:2e:
         b7:c7:4e:bf:12:28:73:eb:30:4b:e9:cd:f4:95:12:79:10:7d:
         67:6f:97:d9:6e:4a:7d:8d:5e:6e:62:e1:92:ff:f0:11:68:47:
         c0:d8:d8:21:76:ec:25:c0:86:e3:bf:ab:72:ae:22:21:a0:5b:
         02:1c:4d:0b:34:dd:81:24:90:87:55:0c:66:16:1f:63:9f:0b:
         57:76:58:96:90:1f:a1:dc:8d:88:7b:57:b4:c8:94:bc:15:ff:
         45:3f:e6:f4:dc:50:08:1f:0b:ad:de:72:32:09:11:25:cf:fd:
         85:af:4d:4f:41:28:72:fd:98:41:fc:da:20:59:5d:15:8b:43:
         e6:39:36:9f:51:ba:2f:4c:03:52:62:15:48:12:98:b5:40:ac:
         89:46:92:d8:32:b8:a1:02:8e:be:ba:18:b7:3a:43:40:b0:17:
         a6:1b:20:4b:b3:0e:12:aa:75:51:1a:9d:1a:5f:e9:ce:18:21:
         12:00:cf:44:6f:e3:5b:57:35:4c:39:b6:1b:1b:b0:d4:e5:02:
         db:04:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:05 2025 by rpki-client