Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BTJUMctjs33elEcLJJ0H7Q_48t8.roa
File:                     BTJUMctjs33elEcLJJ0H7Q_48t8.roa (raw, json)
Hash identifier:          8cTElnR6EPo6nqovv8wGTM1zwpBrM3ZQ5RcRRAHlOgM=
Subject key identifier:   05:32:54:31:CB:63:B3:7D:DE:94:47:0B:24:9D:07:ED:0F:F8:F2:DF
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEAD8014C90B7A3BBB48FB051F407E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BTJUMctjs33elEcLJJ0H7Q_48t8.roa
Signing time:             Sun 01 Jan 2023 06:04:42 +0000
ROA not before:           Sun 01 Jan 2023 06:04:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12741
IP address blocks:        77.252.0.0/14 maxlen: 14
                          159.205.0.0/16 maxlen: 16
                          193.19.104.0/23 maxlen: 23
                          89.171.0.0/16 maxlen: 16
                          62.87.128.0/17 maxlen: 17
                          178.16.116.0/24 maxlen: 24
                          178.16.121.0/24 maxlen: 24
                          178.16.125.0/24 maxlen: 24
                          62.181.160.0/19 maxlen: 19
                          213.134.128.0/19 maxlen: 19
                          87.204.0.0/15 maxlen: 15
                          62.244.128.0/19 maxlen: 19
                          82.143.128.0/18 maxlen: 18
                          62.89.64.0/18 maxlen: 18
                          77.65.188.0/24 maxlen: 24
                          77.65.193.0/24 maxlen: 24
                          77.65.209.0/24 maxlen: 24
                          213.241.0.0/17 maxlen: 17
                          178.36.0.0/15 maxlen: 15
                          213.238.64.0/18 maxlen: 18
                          213.241.89.0/24 maxlen: 24
                          83.238.0.0/16 maxlen: 16
                          62.233.128.0/17 maxlen: 17
                          213.17.244.0/24 maxlen: 24
                          81.210.0.0/17 maxlen: 17
                          5.226.135.0/24 maxlen: 24
                          213.186.64.0/19 maxlen: 19
                          77.65.134.0/24 maxlen: 24
                          212.106.0.0/19 maxlen: 19
                          77.65.155.0/24 maxlen: 24
                          77.65.171.0/24 maxlen: 24
                          213.146.32.0/19 maxlen: 19
                          78.8.0.0/14 maxlen: 14
                          62.111.128.0/17 maxlen: 17
                          37.128.0.0/17 maxlen: 17
                          85.128.0.0/17 maxlen: 17
                          62.148.64.0/19 maxlen: 19
                          84.40.128.0/17 maxlen: 17
                          81.168.128.0/17 maxlen: 17
                          81.219.0.0/16 maxlen: 16
                          193.91.16.0/20 maxlen: 20
                          195.114.160.0/19 maxlen: 19
                          85.202.54.0/24 maxlen: 24
                          85.202.59.0/24 maxlen: 24
                          213.195.128.0/18 maxlen: 18
                          217.30.128.0/19 maxlen: 19
                          213.17.128.0/17 maxlen: 17
                          5.226.92.0/24 maxlen: 24
                          213.216.64.0/18 maxlen: 18
                          193.192.173.0/24 maxlen: 24
                          93.159.0.0/18 maxlen: 18
                          193.192.181.0/24 maxlen: 24
                          193.192.190.0/24 maxlen: 24
                          193.192.188.0/24 maxlen: 24
                          62.111.250.0/24 maxlen: 24
                          5.226.64.0/18 maxlen: 18
                          87.105.0.0/16 maxlen: 16
                          2001:41b0::/32 maxlen: 48
                          2001:41b0:22b:100::/56 maxlen: 56
                          2001:16b0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 11:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:ad:80:14:c9:0b:7a:3b:bb:48:fb:05:1f:40:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05325431cb63b37dde94470b249d07ed0ff8f2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:6f:e0:d2:64:a9:5a:1d:6a:06:83:94:1c:
                    10:e0:2e:37:e7:b2:04:08:de:98:64:fb:0e:01:d8:
                    43:63:66:e6:a2:5d:ad:e7:29:65:d3:e5:3f:5d:6f:
                    7d:01:15:fa:b1:f7:d5:01:53:dd:da:f7:55:ef:9e:
                    12:1e:bd:7a:ec:8d:8a:f5:81:9a:b5:af:a8:bf:bf:
                    dc:aa:63:a1:92:57:19:3b:a6:a9:bb:2c:bd:42:01:
                    65:d1:12:cd:c7:c6:cc:bf:c7:2a:b8:c6:0c:4e:96:
                    07:c7:91:c4:73:06:42:26:98:de:16:e7:0a:0e:f0:
                    21:f0:34:60:7a:25:b0:f4:06:36:96:23:ea:3b:ed:
                    38:1e:5d:72:ea:da:ab:8d:36:16:4d:c6:cd:bb:41:
                    9d:4e:af:86:41:1c:66:b8:86:8d:22:66:dd:06:3c:
                    5f:06:70:d7:eb:a3:e4:05:7f:7b:49:53:d9:b8:93:
                    80:1f:e7:ec:40:22:04:a7:7e:fc:80:25:78:31:e9:
                    ea:b6:89:57:e4:56:fb:ed:87:80:6a:d8:31:59:0b:
                    2c:9f:98:1f:21:2b:2b:ee:70:33:00:48:3b:ba:cb:
                    89:36:70:8d:32:d1:5e:b9:ec:4c:78:82:70:51:74:
                    f5:e7:42:d9:ef:e4:6d:d1:b6:20:8b:b9:6a:a6:e1:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:32:54:31:CB:63:B3:7D:DE:94:47:0B:24:9D:07:ED:0F:F8:F2:DF
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BTJUMctjs33elEcLJJ0H7Q_48t8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.64.0/18
                  5.226.135.0/24
                  37.128.0.0/17
                  62.87.128.0/17
                  62.89.64.0/18
                  62.111.128.0/17
                  62.148.64.0/19
                  62.181.160.0/19
                  62.233.128.0/17
                  62.244.128.0/19
                  77.65.134.0/24
                  77.65.155.0/24
                  77.65.171.0/24
                  77.65.188.0/24
                  77.65.193.0/24
                  77.65.209.0/24
                  77.252.0.0/14
                  78.8.0.0/14
                  81.168.128.0/17
                  81.210.0.0/17
                  81.219.0.0/16
                  82.143.128.0/18
                  83.238.0.0/16
                  84.40.128.0/17
                  85.128.0.0/17
                  85.202.54.0/24
                  85.202.59.0/24
                  87.105.0.0/16
                  87.204.0.0/15
                  89.171.0.0/16
                  93.159.0.0/18
                  159.205.0.0/16
                  178.16.116.0/24
                  178.16.121.0/24
                  178.16.125.0/24
                  178.36.0.0/15
                  193.19.104.0/23
                  193.91.16.0/20
                  193.192.173.0/24
                  193.192.181.0/24
                  193.192.188.0/24
                  193.192.190.0/24
                  195.114.160.0/19
                  212.106.0.0/19
                  213.17.128.0/17
                  213.134.128.0/19
                  213.146.32.0/19
                  213.186.64.0/19
                  213.195.128.0/18
                  213.216.64.0/18
                  213.238.64.0/18
                  213.241.0.0/17
                  217.30.128.0/19
                IPv6:
                  2001:16b0::/32
                  2001:41b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:67:ce:5b:d5:2f:3f:32:ad:15:37:b6:89:b5:6c:89:6c:
         4e:d1:ec:15:9c:1c:b2:ad:d8:b9:b7:77:b2:13:da:de:83:97:
         14:e8:e0:d9:b9:c2:46:6e:01:21:18:23:23:28:65:a3:d9:98:
         d7:e5:ea:b8:70:34:89:6f:db:fd:1d:8f:ab:32:68:c3:cc:25:
         84:0d:cb:a7:57:b5:93:32:b6:21:dc:53:85:d4:6b:b3:b1:a1:
         a1:a8:ab:07:7a:da:ab:c7:72:3e:d3:bc:5c:17:a3:66:8b:5a:
         a6:c6:0e:ae:b1:e6:c1:d6:e1:44:b7:25:8c:d3:a6:99:25:d6:
         b5:d6:b7:41:73:e0:96:b3:59:3d:22:d6:91:e9:62:01:97:8a:
         86:10:f8:c1:6d:f7:07:aa:69:c2:43:5c:4b:3e:bc:a6:68:e6:
         10:28:32:73:df:0e:4a:4f:97:74:a4:ec:41:4b:24:e1:08:14:
         8b:13:76:8b:6b:a2:c2:00:39:ba:eb:23:50:d9:06:c4:4f:d1:
         8c:ad:19:98:76:47:47:d0:65:31:33:72:3f:ad:fc:f2:3e:e5:
         20:14:01:64:a8:42:27:e9:4e:dc:7d:f0:af:3a:ec:42:7c:4d:
         90:d9:e0:81:b1:6e:29:7d:61:24:05:3f:ae:f3:12:15:44:70:
         4a:5f:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org