Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Umc7OG-ckhuxt26rga0QYjakNIg.roa
File:                     Umc7OG-ckhuxt26rga0QYjakNIg.roa (raw, json)
Hash identifier:          Mk8TRmcYHzqKYHtCaWZi50mgKFZguP781GM1tti6dx4=
Subject key identifier:   52:67:3B:38:6F:9C:92:1B:B1:B7:6E:AB:81:AD:10:62:36:A4:34:88
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0196AEB57909585A88DEBEC61E50DF5678D2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Umc7OG-ckhuxt26rga0QYjakNIg.roa
Signing time:             Thu 08 May 2025 07:04:10 +0000
ROA not before:           Thu 08 May 2025 07:04:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30633
IP address blocks:        45.85.160.0/24 maxlen: 24
                          45.86.247.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          45.129.127.0/24 maxlen: 24
                          45.135.37.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          80.253.250.0/24 maxlen: 24
                          80.253.251.0/24 maxlen: 24
                          103.139.50.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          193.27.21.0/24 maxlen: 24
                          193.27.23.0/24 maxlen: 24
                          193.164.199.0/24 maxlen: 24
                          195.66.24.0/24 maxlen: 24
                          195.66.25.0/24 maxlen: 24
                          2a06:1180:1c5::/48 maxlen: 48
                          2a06:1181:100::/48 maxlen: 48
                          2a06:1184:33::/48 maxlen: 48
                          2a06:35c2::/32 maxlen: 32
                          2a07:bb40::/29 maxlen: 29
                          2a09:17c4::/32 maxlen: 32
                          2a0a:2d04:100::/48 maxlen: 48
                          2a0a:2d06:33::/48 maxlen: 48
                          2a0c:7886:b::/48 maxlen: 48
                          2a0c:7886:33::/48 maxlen: 48
                          2a0e:15c7:88::/48 maxlen: 48
                          2a0e:1a80:2541::/48 maxlen: 48
                          2a0e:1a81::/32 maxlen: 32
                          2a0e:1a83:66::/48 maxlen: 48
                          2a0e:c780::/32 maxlen: 32
                          2a0e:c781::/32 maxlen: 32
                          2a0e:f201:1::/48 maxlen: 48
                          2a0f:1206:44::/48 maxlen: 48
                          2a0f:1583::/32 maxlen: 32
                          2a0f:1e00:123::/48 maxlen: 48
                          2a0f:1e00:456::/48 maxlen: 48
                          2a0f:1e00:987::/48 maxlen: 48
                          2a0f:1e00:abc::/48 maxlen: 48
                          2a0f:1e00:def9::/48 maxlen: 48
                          2a0f:1e01:1::/48 maxlen: 48
                          2a0f:1e81:2::/48 maxlen: 48
                          2a0f:1e81:1293::/48 maxlen: 48
                          2a0f:1e81:4319::/48 maxlen: 48
                          2a0f:1e81:92e8::/48 maxlen: 48
                          2a0f:1e81:a3d0::/48 maxlen: 48
                          2a0f:1e81:cdae::/48 maxlen: 48
                          2a0f:2e80::/29 maxlen: 29
                          2a0f:3045::/32 maxlen: 32
                          2a0f:3d84::/32 maxlen: 32
                          2a0f:7d02:1::/48 maxlen: 48
                          2a0f:7d02:100::/48 maxlen: 48
                          2a0f:7d06:fc9d::/48 maxlen: 48
                          2a0f:df44::/32 maxlen: 32
                          2a0f:e1c6::/32 maxlen: 32
                          2a0f:e6c5::/32 maxlen: 32
                          2a0f:e7c6:55::/48 maxlen: 48
                          2a0f:e844:8642::/48 maxlen: 48
                          2a10:30c0::/29 maxlen: 29
                          2a10:32c0::/29 maxlen: 29
                          2a10:35c0::/29 maxlen: 29
                          2a10:36c0::/29 maxlen: 29
                          2a10:3740::/29 maxlen: 29
                          2a10:37c0::/29 maxlen: 29
                          2a10:4a00::/29 maxlen: 29
                          2a10:5400::/29 maxlen: 29
                          2a10:6400::/29 maxlen: 29
                          2a10:6b00::/29 maxlen: 29
                          2a10:6d40::/29 maxlen: 29
                          2a10:7100::/29 maxlen: 29
                          2a10:7500::/29 maxlen: 29
                          2a10:7d00::/29 maxlen: 29
                          2a11:fd80::/29 maxlen: 29
                          2a12:ac40::/32 maxlen: 32
                          2a12:ac41::/32 maxlen: 32
                          2a12:ecc0:271::/48 maxlen: 48
                          2a12:ecc0:3e2::/48 maxlen: 48
                          2a12:ecc4:2213::/48 maxlen: 48
                          2a12:f540::/29 maxlen: 29
                          2a13:18c0:1::/48 maxlen: 48
                          2a13:18c4::/32 maxlen: 32
                          2a13:18c6:55::/48 maxlen: 48
                          2a13:18c6:c9a1::/48 maxlen: 48
                          2a13:8c84::/32 maxlen: 32
                          2a13:9280::/32 maxlen: 32
                          2a13:c904::/32 maxlen: 32
                          2a13:cf01::/32 maxlen: 32
                          2a13:cf03::/32 maxlen: 32
                          2a13:cf06::/32 maxlen: 32
                          2a13:df00::/29 maxlen: 29
                          2a13:e100:1312::/48 maxlen: 48
                          2a13:e101:2::/48 maxlen: 48
                          2a13:e104::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 08 May 2025 16:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b5:79:09:58:5a:88:de:be:c6:1e:50:df:56:78:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May  8 07:04:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=52673b386f9c921bb1b76eab81ad106236a43488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:bc:8e:a9:7f:57:37:cd:4e:db:16:de:1e:
                    d2:9a:ad:8b:45:d8:f0:5a:c7:14:93:5c:af:42:f7:
                    c6:9d:76:17:fa:52:5d:28:51:1a:ef:8c:60:2b:08:
                    d2:ba:88:b8:0f:81:fc:eb:12:92:fa:17:ce:72:97:
                    8b:de:04:a9:1b:cf:8c:09:6c:97:65:43:49:b7:51:
                    51:32:cd:11:cb:01:fc:cf:4b:e2:df:2e:d0:72:1e:
                    02:ac:e8:b6:27:94:a0:d0:2e:9a:6f:f9:f5:b2:db:
                    e7:a5:76:06:10:5a:41:57:b0:89:20:dd:b7:97:5e:
                    9a:15:84:a7:a9:80:8e:34:18:e4:b1:50:ea:34:e8:
                    76:c9:6f:3e:73:5a:4d:15:02:0a:7f:31:98:47:74:
                    1b:53:0f:74:f3:7a:cb:ec:dc:d6:da:d6:0f:ce:b2:
                    b4:46:58:ba:ad:7e:a7:2b:4e:d3:f5:07:4e:b9:b7:
                    18:71:6e:44:cd:a5:c4:d2:e2:57:ea:ef:16:2d:11:
                    b5:c8:7d:5d:4f:25:bd:12:47:f6:5f:ce:f8:f8:f0:
                    72:86:6c:8c:05:96:a4:a4:7d:0f:35:06:96:bd:3b:
                    b1:49:aa:36:91:98:69:91:5b:f5:de:ae:0a:4b:50:
                    8f:60:a7:c8:70:6e:eb:a5:fb:24:30:c4:b2:b3:60:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:67:3B:38:6F:9C:92:1B:B1:B7:6E:AB:81:AD:10:62:36:A4:34:88
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Umc7OG-ckhuxt26rga0QYjakNIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.160.0/24
                  45.86.247.0/24
                  45.128.77.0/24
                  45.129.127.0/24
                  45.135.37.0/24
                  45.157.37.0/24
                  80.253.250.0/23
                  103.139.50.0/24
                  185.164.59.0/24
                  193.27.21.0/24
                  193.27.23.0/24
                  193.164.199.0/24
                  195.66.24.0/23
                IPv6:
                  2a06:1180:1c5::/48
                  2a06:1181:100::/48
                  2a06:1184:33::/48
                  2a06:35c2::/32
                  2a07:bb40::/29
                  2a09:17c4::/32
                  2a0a:2d04:100::/48
                  2a0a:2d06:33::/48
                  2a0c:7886:b::/48
                  2a0c:7886:33::/48
                  2a0e:15c7:88::/48
                  2a0e:1a80:2541::/48
                  2a0e:1a81::/32
                  2a0e:1a83:66::/48
                  2a0e:c780::/31
                  2a0e:f201:1::/48
                  2a0f:1206:44::/48
                  2a0f:1583::/32
                  2a0f:1e00:123::/48
                  2a0f:1e00:456::/48
                  2a0f:1e00:987::/48
                  2a0f:1e00:abc::/48
                  2a0f:1e00:def9::/48
                  2a0f:1e01:1::/48
                  2a0f:1e81:2::/48
                  2a0f:1e81:1293::/48
                  2a0f:1e81:4319::/48
                  2a0f:1e81:92e8::/48
                  2a0f:1e81:a3d0::/48
                  2a0f:1e81:cdae::/48
                  2a0f:2e80::/29
                  2a0f:3045::/32
                  2a0f:3d84::/32
                  2a0f:7d02:1::/48
                  2a0f:7d02:100::/48
                  2a0f:7d06:fc9d::/48
                  2a0f:df44::/32
                  2a0f:e1c6::/32
                  2a0f:e6c5::/32
                  2a0f:e7c6:55::/48
                  2a0f:e844:8642::/48
                  2a10:30c0::/29
                  2a10:32c0::/29
                  2a10:35c0::/29
                  2a10:36c0::/29
                  2a10:3740::/29
                  2a10:37c0::/29
                  2a10:4a00::/29
                  2a10:5400::/29
                  2a10:6400::/29
                  2a10:6b00::/29
                  2a10:6d40::/29
                  2a10:7100::/29
                  2a10:7500::/29
                  2a10:7d00::/29
                  2a11:fd80::/29
                  2a12:ac40::/31
                  2a12:ecc0:271::/48
                  2a12:ecc0:3e2::/48
                  2a12:ecc4:2213::/48
                  2a12:f540::/29
                  2a13:18c0:1::/48
                  2a13:18c4::/32
                  2a13:18c6:55::/48
                  2a13:18c6:c9a1::/48
                  2a13:8c84::/32
                  2a13:9280::/32
                  2a13:c904::/32
                  2a13:cf01::/32
                  2a13:cf03::/32
                  2a13:cf06::/32
                  2a13:df00::/29
                  2a13:e100:1312::/48
                  2a13:e101:2::/48
                  2a13:e104::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:a5:6b:59:da:6f:0e:5f:8b:db:6e:19:eb:9c:24:d9:c7:c2:
         26:e8:5a:8a:83:4c:39:63:31:57:82:06:c3:36:97:ca:44:a5:
         63:9b:31:87:49:3a:a4:93:c6:87:c2:48:c9:fe:6d:9f:6a:20:
         ba:b9:08:5c:79:fe:50:ac:ad:f0:9d:6e:1a:69:a4:b9:4a:3b:
         08:1c:a1:49:84:e4:40:40:83:99:83:a2:db:f1:0e:eb:dd:79:
         0f:ff:39:0c:fd:18:f9:0d:f9:28:58:fe:28:92:84:d6:e2:11:
         7e:05:bf:39:ee:75:f7:a7:c0:6a:b9:03:0c:ce:ff:e6:11:f5:
         cd:c9:1d:14:f7:5b:95:64:c3:eb:51:17:3d:73:e8:c1:4f:d5:
         ac:22:c3:3b:33:cd:61:a9:30:6a:9b:42:7c:cb:e2:2c:70:e3:
         0e:c6:e4:2f:0a:cc:bb:cb:45:8c:e1:93:6e:52:55:7f:34:11:
         0f:4d:73:50:45:f2:05:c0:a8:ac:60:b2:11:1f:61:3a:6b:04:
         33:79:21:99:cd:3e:35:61:c1:1c:8b:bf:a8:71:bb:29:e5:9f:
         10:84:2d:c5:e4:b9:78:76:57:02:bd:74:19:34:ba:fd:86:b8:
         44:c6:e3:91:46:11:3d:30:ef:78:c9:cc:ad:31:6e:6b:53:65:
         f9:9c:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:26:50 2025 by rpki-client