Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/OEu1DgvHswXDAxqak0SZKxRSdNY.roa
File:                     OEu1DgvHswXDAxqak0SZKxRSdNY.roa (raw, json)
Hash identifier:          rmhLhjuVlOsVisbzKCgc1clcjkv1pLgAuaxO28Doug8=
Subject key identifier:   38:4B:B5:0E:0B:C7:B3:05:C3:03:1A:9A:93:44:99:2B:14:52:74:D6
Certificate issuer:       /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial:       018CF92770B593D0E6A653CAF11700E18A6B
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/OEu1DgvHswXDAxqak0SZKxRSdNY.roa
Signing time:             Thu 11 Jan 2024 15:32:40 +0000
ROA not before:           Thu 11 Jan 2024 15:32:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15502
IP address blocks:        109.79.92.0/23 maxlen: 23
                          109.79.92.0/22 maxlen: 22
                          109.79.94.0/23 maxlen: 23
                          109.79.64.0/21 maxlen: 21
                          109.79.76.0/22 maxlen: 22
                          109.79.72.0/22 maxlen: 22
                          109.79.84.0/22 maxlen: 22
                          109.79.80.0/22 maxlen: 22
                          109.79.88.0/22 maxlen: 22
                          109.79.200.0/21 maxlen: 21
                          89.19.67.0/24 maxlen: 24
                          89.19.79.0/24 maxlen: 24
                          89.19.89.0/24 maxlen: 24
                          89.19.88.0/24 maxlen: 24
                          89.19.86.0/24 maxlen: 24
                          109.79.160.0/21 maxlen: 21
                          109.79.172.0/22 maxlen: 22
                          109.79.168.0/22 maxlen: 22
                          109.79.176.0/22 maxlen: 22
                          109.79.180.0/22 maxlen: 22
                          109.79.184.0/22 maxlen: 22
                          109.79.190.0/23 maxlen: 23
                          109.79.188.0/23 maxlen: 23
                          109.79.188.0/22 maxlen: 22
                          109.79.192.0/21 maxlen: 21
                          109.78.144.0/20 maxlen: 20
                          109.78.160.0/21 maxlen: 21
                          109.78.160.0/20 maxlen: 20
                          109.78.168.0/21 maxlen: 21
                          109.78.176.0/20 maxlen: 20
                          109.78.176.0/21 maxlen: 21
                          109.78.184.0/21 maxlen: 21
                          109.78.96.0/20 maxlen: 20
                          109.78.112.0/20 maxlen: 20
                          109.78.128.0/20 maxlen: 20
                          109.78.240.0/20 maxlen: 20
                          109.78.240.0/21 maxlen: 21
                          109.78.248.0/21 maxlen: 21
                          109.78.192.0/21 maxlen: 21
                          109.78.204.0/22 maxlen: 22
                          109.78.200.0/22 maxlen: 22
                          109.78.208.0/22 maxlen: 22
                          109.78.212.0/22 maxlen: 22
                          109.78.216.0/22 maxlen: 22
                          109.78.222.0/23 maxlen: 23
                          109.78.220.0/23 maxlen: 23
                          109.78.220.0/22 maxlen: 22
                          109.78.224.0/21 maxlen: 21
                          109.78.224.0/20 maxlen: 20
                          109.78.232.0/21 maxlen: 21
                          109.77.176.0/20 maxlen: 20
                          109.77.192.0/21 maxlen: 21
                          109.77.200.0/22 maxlen: 22
                          109.77.204.0/22 maxlen: 22
                          109.77.208.0/22 maxlen: 22
                          109.77.212.0/22 maxlen: 22
                          109.77.218.0/23 maxlen: 23
                          109.77.216.0/22 maxlen: 22
                          109.77.216.0/23 maxlen: 23
                          109.77.220.0/22 maxlen: 22
                          109.77.224.0/20 maxlen: 20
                          109.77.124.0/22 maxlen: 22
                          109.77.120.0/22 maxlen: 22
                          109.77.120.0/21 maxlen: 21
                          109.77.128.0/20 maxlen: 20
                          109.77.144.0/20 maxlen: 20
                          109.70.208.0/21 maxlen: 21
                          109.77.164.0/22 maxlen: 22
                          109.77.164.0/23 maxlen: 23
                          109.77.162.0/23 maxlen: 23
                          109.77.160.0/22 maxlen: 22
                          109.77.160.0/23 maxlen: 23
                          109.77.166.0/23 maxlen: 23
                          109.77.172.0/22 maxlen: 22
                          109.77.170.0/23 maxlen: 23
                          109.77.168.0/23 maxlen: 23
                          109.77.168.0/22 maxlen: 22
                          109.78.28.0/22 maxlen: 22
                          109.78.32.0/21 maxlen: 21
                          109.78.32.0/20 maxlen: 20
                          109.78.40.0/21 maxlen: 21
                          109.78.48.0/20 maxlen: 20
                          109.78.48.0/21 maxlen: 21
                          109.78.56.0/21 maxlen: 21
                          109.77.240.0/21 maxlen: 21
                          109.77.240.0/20 maxlen: 20
                          109.77.248.0/21 maxlen: 21
                          109.78.0.0/20 maxlen: 20
                          109.78.16.0/21 maxlen: 21
                          109.78.24.0/21 maxlen: 21
                          109.78.24.0/22 maxlen: 22
                          64.43.44.0/22 maxlen: 22
                          109.76.218.0/23 maxlen: 23
                          109.76.216.0/22 maxlen: 22
                          109.76.216.0/23 maxlen: 23
                          64.43.40.0/22 maxlen: 22
                          109.76.220.0/22 maxlen: 22
                          109.77.0.0/20 maxlen: 20
                          109.77.0.0/21 maxlen: 21
                          109.77.8.0/21 maxlen: 21
                          109.76.160.0/20 maxlen: 20
                          64.43.4.0/22 maxlen: 22
                          109.76.176.0/20 maxlen: 20
                          64.43.0.0/22 maxlen: 22
                          64.43.8.0/22 maxlen: 22
                          109.76.192.0/21 maxlen: 21
                          64.43.12.0/22 maxlen: 22
                          64.43.24.0/22 maxlen: 22
                          109.76.200.0/22 maxlen: 22
                          109.76.204.0/22 maxlen: 22
                          64.43.28.0/22 maxlen: 22
                          109.76.212.0/22 maxlen: 22
                          109.76.208.0/22 maxlen: 22
                          109.77.80.0/20 maxlen: 20
                          109.77.96.0/20 maxlen: 20
                          109.77.112.0/21 maxlen: 21
                          109.77.16.0/20 maxlen: 20
                          109.77.32.0/20 maxlen: 20
                          109.77.48.0/20 maxlen: 20
                          109.77.64.0/20 maxlen: 20
                          109.76.0.0/20 maxlen: 20
                          109.76.16.0/20 maxlen: 20
                          109.76.32.0/21 maxlen: 21
                          109.76.32.0/20 maxlen: 20
                          109.76.40.0/21 maxlen: 21
                          109.76.128.0/21 maxlen: 21
                          109.76.136.0/22 maxlen: 22
                          109.76.144.0/22 maxlen: 22
                          109.76.140.0/22 maxlen: 22
                          109.76.148.0/22 maxlen: 22
                          109.76.152.0/22 maxlen: 22
                          109.76.152.0/23 maxlen: 23
                          109.76.156.0/22 maxlen: 22
                          109.76.154.0/23 maxlen: 23
                          109.76.54.0/23 maxlen: 23
                          109.76.52.0/23 maxlen: 23
                          109.76.52.0/22 maxlen: 22
                          109.76.56.0/21 maxlen: 21
                          109.76.56.0/22 maxlen: 22
                          109.76.60.0/22 maxlen: 22
                          109.76.64.0/20 maxlen: 20
                          109.76.80.0/21 maxlen: 21
                          109.76.88.0/21 maxlen: 21
                          109.76.88.0/22 maxlen: 22
                          109.76.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 15:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f9:27:70:b5:93:d0:e6:a6:53:ca:f1:17:00:e1:8a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
        Validity
            Not Before: Jan 11 15:32:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=384bb50e0bc7b305c3031a9a9344992b145274d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:ac:b5:6e:17:ab:4d:69:fd:d3:b4:9f:1b:
                    3c:a9:c6:90:9c:cf:10:95:94:d8:00:13:06:17:c8:
                    27:80:5e:5f:b8:be:a8:e0:fb:88:dd:ee:f9:57:e9:
                    0f:e5:9f:1e:24:83:ad:ed:e8:5a:47:26:6b:39:09:
                    e1:bd:29:cb:f9:cc:15:f2:f7:53:28:31:8e:8d:2d:
                    0a:57:e2:ba:51:1a:24:3f:b7:47:73:b4:92:17:7b:
                    ef:bb:14:ae:03:e3:9c:d5:77:4c:40:a1:d9:fb:c2:
                    45:a3:4e:63:7e:ae:4b:be:1c:4c:9e:57:a3:5f:b4:
                    f9:37:d9:21:16:eb:c8:8c:2c:da:77:48:fc:79:61:
                    74:b7:c7:cd:94:68:cb:79:d7:85:9c:c4:99:7b:41:
                    6d:87:ee:d2:d8:09:db:da:d0:a7:96:d2:40:a4:8f:
                    e3:fe:c0:44:1d:26:26:f3:42:1a:e6:d5:1e:ef:53:
                    8b:5f:eb:17:b8:cb:db:63:97:9a:3f:1f:0a:78:33:
                    7a:81:67:0d:94:f5:79:f1:01:c2:ff:93:c6:b3:dc:
                    25:8e:ec:43:20:30:b4:65:12:9d:81:cb:5c:97:14:
                    31:c0:90:f5:5f:f5:30:f2:bf:3d:93:28:e1:64:55:
                    2c:9e:1e:25:ff:7a:ae:e0:26:b7:52:c1:96:75:55:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4B:B5:0E:0B:C7:B3:05:C3:03:1A:9A:93:44:99:2B:14:52:74:D6
            X509v3 Authority Key Identifier:
                keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/OEu1DgvHswXDAxqak0SZKxRSdNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.43.0.0/20
                  64.43.24.0/21
                  64.43.40.0/21
                  89.19.67.0/24
                  89.19.79.0/24
                  89.19.86.0/24
                  89.19.88.0/23
                  109.70.208.0/21
                  109.76.0.0-109.76.47.255
                  109.76.52.0-109.76.95.255
                  109.76.128.0-109.76.223.255
                  109.77.0.0-109.78.63.255
                  109.78.96.0-109.78.255.255
                  109.79.64.0/19
                  109.79.160.0-109.79.207.255

    Signature Algorithm: sha256WithRSAEncryption
         70:8b:7a:7c:e4:57:00:5a:d3:a9:0c:3b:00:3f:08:a9:67:0e:
         ab:18:de:b6:51:d5:01:3c:c6:08:51:c8:a7:5c:46:d5:b4:7a:
         59:9e:c5:26:75:a0:27:94:77:5a:f6:4a:9a:ac:3a:1a:b4:30:
         68:73:6c:c8:85:ad:61:c3:4e:c4:64:72:b7:bc:20:ca:29:c9:
         2f:92:fa:fb:46:64:8f:1d:1e:7c:11:8b:98:eb:cb:5a:f7:16:
         67:c7:50:c0:9b:8d:ec:1f:41:fb:41:20:da:1a:b4:d3:bb:b7:
         7c:ad:57:72:c8:9b:10:51:69:e7:65:b4:81:e2:ad:9e:33:a1:
         a7:ed:51:a3:49:ca:35:bc:37:f7:3d:8d:a1:23:09:ab:e1:76:
         4a:e1:1e:9c:b8:c5:3d:60:be:36:75:17:39:aa:dd:0c:0f:e6:
         ac:18:75:9e:e8:95:9a:e3:8d:bd:8a:79:d8:47:f8:d1:4d:90:
         ef:9d:da:3d:d9:32:d9:58:fa:3e:76:e0:a0:3c:af:b6:ea:47:
         d0:88:82:e2:e1:e7:90:e1:fb:a2:b1:c2:bf:e0:18:13:1e:af:
         df:5d:89:95:80:18:55:7d:b0:c4:c6:5b:38:f8:41:8a:ef:b2:
         dd:df:51:4e:00:57:7e:fa:bf:81:ac:39:2d:17:e2:d2:c8:53:
         99:c1:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:12 2024 by rpki-client on console-ams.rpki-client.org