Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ve6YkipIevbbyrPeVlw-VJdyYBo.roa
File:                     ve6YkipIevbbyrPeVlw-VJdyYBo.roa (raw, json)
Hash identifier:          HFEfpJAKFx3gbvzi+P0WmL/9VZRru/ueIHfDVXTfBNI=
Subject key identifier:   BD:EE:98:92:2A:48:7A:F6:DB:CA:B3:DE:56:5C:3E:54:97:72:60:1A
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       01896441F68102A7C5218B216FC33A6C1A1B
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ve6YkipIevbbyrPeVlw-VJdyYBo.roa
Signing time:             Mon 17 Jul 2023 14:29:51 +0000
ROA not before:           Mon 17 Jul 2023 14:29:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198949
IP address blocks:        95.174.160.0/19 maxlen: 24
                          87.255.128.0/19 maxlen: 24
                          217.19.192.0/20 maxlen: 24
                          159.20.8.0/21 maxlen: 24
                          213.222.64.0/18 maxlen: 24
                          95.168.0.0/19 maxlen: 24
                          79.80.0.0/12 maxlen: 24
                          185.147.204.0/22 maxlen: 24
                          79.174.192.0/18 maxlen: 24
                          85.168.0.0/14 maxlen: 24
                          194.6.128.0/19 maxlen: 24
                          195.146.192.0/19 maxlen: 24
                          62.39.0.0/16 maxlen: 24
                          77.140.0.0/14 maxlen: 24
                          62.106.128.0/17 maxlen: 24
                          217.112.224.0/20 maxlen: 24
                          194.153.89.0/24 maxlen: 24
                          194.153.90.0/24 maxlen: 24
                          194.153.88.0/23 maxlen: 24
                          194.153.97.0/24 maxlen: 24
                          194.153.92.0/24 maxlen: 24
                          178.18.176.0/20 maxlen: 24
                          87.100.0.0/17 maxlen: 24
                          212.39.128.0/19 maxlen: 24
                          62.241.64.0/18 maxlen: 24
                          178.19.0.0/20 maxlen: 24
                          81.220.0.0/16 maxlen: 24
                          77.233.96.0/19 maxlen: 24
                          78.112.0.0/12 maxlen: 24
                          62.85.128.0/19 maxlen: 24
                          37.64.0.0/13 maxlen: 24
                          46.165.64.0/18 maxlen: 24
                          89.185.160.0/19 maxlen: 24
                          84.205.128.0/19 maxlen: 24
                          212.23.160.0/19 maxlen: 24
                          212.30.96.0/19 maxlen: 24
                          91.91.0.0/16 maxlen: 24
                          88.219.0.0/16 maxlen: 24
                          81.64.0.0/14 maxlen: 24
                          80.118.0.0/15 maxlen: 24
                          195.132.0.0/16 maxlen: 24
                          195.98.96.0/19 maxlen: 24
                          78.159.0.0/19 maxlen: 24
                          84.4.0.0/14 maxlen: 24
                          85.192.192.0/18 maxlen: 24
                          79.132.32.0/19 maxlen: 24
                          77.192.0.0/12 maxlen: 24
                          86.64.0.0/12 maxlen: 24
                          80.70.32.0/20 maxlen: 24
                          80.124.0.0/15 maxlen: 24
                          82.151.0.0/19 maxlen: 24
                          95.157.192.0/18 maxlen: 24
                          212.198.0.0/16 maxlen: 24
                          93.191.80.0/21 maxlen: 24
                          77.84.0.0/16 maxlen: 24
                          91.151.112.0/20 maxlen: 24
                          86.63.224.0/19 maxlen: 24
                          213.144.192.0/19 maxlen: 24
                          77.144.0.0/12 maxlen: 24
                          217.70.80.0/20 maxlen: 24
                          85.117.128.0/19 maxlen: 24
                          195.3.0.0/18 maxlen: 24
                          77.137.196.0/22 maxlen: 24
                          77.137.200.0/21 maxlen: 24
                          95.171.128.0/19 maxlen: 24
                          77.137.208.0/20 maxlen: 24
                          80.185.0.0/16 maxlen: 24
                          81.185.0.0/16 maxlen: 24
                          77.137.224.0/19 maxlen: 24
                          84.96.0.0/13 maxlen: 24
                          87.231.0.0/16 maxlen: 24
                          62.62.169.0/24 maxlen: 24
                          89.2.0.0/15 maxlen: 24
                          188.224.0.0/17 maxlen: 24
                          95.136.128.0/17 maxlen: 24
                          194.183.192.0/19 maxlen: 24
                          62.62.128.0/17 maxlen: 24
                          89.157.88.0/21 maxlen: 24
                          89.157.96.0/19 maxlen: 24
                          141.170.216.0/21 maxlen: 24
                          213.245.0.0/16 maxlen: 24
                          185.150.120.0/22 maxlen: 24
                          213.203.64.0/18 maxlen: 24
                          89.156.0.0/14 maxlen: 24
                          213.169.160.0/19 maxlen: 24
                          93.0.0.0/11 maxlen: 24
                          109.0.0.0/11 maxlen: 24
                          93.182.192.0/18 maxlen: 24
                          81.1.0.0/18 maxlen: 24
                          88.136.0.0/13 maxlen: 24
                          213.176.192.0/19 maxlen: 24
                          84.55.128.0/18 maxlen: 24
                          89.170.0.0/16 maxlen: 24
                          62.129.160.0/19 maxlen: 24
                          62.8.0.0/19 maxlen: 24
                          77.136.0.0/16 maxlen: 24
                          46.35.0.0/19 maxlen: 24
                          80.236.0.0/17 maxlen: 24
                          77.128.0.0/13 maxlen: 24
                          188.7.0.0/16 maxlen: 24
                          212.94.160.0/19 maxlen: 24
                          83.141.128.0/17 maxlen: 24
                          188.141.128.0/17 maxlen: 24
                          213.128.32.0/19 maxlen: 24
                          194.242.176.0/20 maxlen: 24
                          195.7.96.0/19 maxlen: 24
                          92.88.0.0/13 maxlen: 24
                          85.68.0.0/15 maxlen: 24
                          213.223.0.0/16 maxlen: 24
                          91.68.0.0/14 maxlen: 24
                          91.88.0.0/16 maxlen: 24
                          82.216.0.0/16 maxlen: 24
                          95.175.160.0/19 maxlen: 24
                          195.115.0.0/16 maxlen: 24
                          78.155.128.0/19 maxlen: 24
                          2a00:ec80::/32 maxlen: 48
                          2a00:5e80::/32 maxlen: 48
                          2a00:ec81::/32 maxlen: 48
                          2a00:6200::/29 maxlen: 48
                          2a00:7180::/32 maxlen: 48
                          2a02:8400::/25 maxlen: 48

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 17:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:41:f6:81:02:a7:c5:21:8b:21:6f:c3:3a:6c:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Jul 17 14:29:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdee98922a487af6dbcab3de565c3e549772601a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:37:37:b7:11:f2:bf:cb:66:03:b9:93:aa:
                    45:fa:d4:cb:6f:86:99:23:39:cf:dd:39:32:1b:76:
                    ed:28:36:1e:75:96:a9:a2:3f:84:6c:d9:77:26:78:
                    10:6d:38:01:ea:d3:13:d4:6f:cc:49:f3:13:69:82:
                    94:ff:53:75:02:d2:85:eb:2e:f6:5b:dd:50:3e:03:
                    f1:b7:d6:02:c3:72:72:01:83:12:5b:69:b9:84:5c:
                    eb:d2:bc:ad:b3:3d:60:b8:58:19:0f:af:38:e6:29:
                    ec:0d:29:76:12:da:b6:50:96:c3:78:37:72:2f:d2:
                    39:f3:3f:67:86:1b:3c:44:34:58:1a:6a:97:24:b1:
                    a8:01:6d:a0:af:fe:32:58:3a:d4:3a:26:59:af:2b:
                    de:a8:fc:3c:4d:a8:b9:2f:94:c1:a9:1e:ea:6f:55:
                    a3:6a:2a:db:0e:2b:ef:2d:a7:8e:76:c7:ff:30:6a:
                    83:96:65:f5:1c:a5:bb:d3:34:8c:fc:e8:a0:c3:e1:
                    10:4e:a5:d5:fb:fe:e5:88:19:bd:1c:c0:c9:06:bf:
                    59:60:37:c6:e7:ee:c3:f3:27:c9:3d:e6:58:d0:27:
                    78:b7:43:0a:0c:cb:48:92:82:14:18:ff:f4:8e:ca:
                    d8:6c:fb:67:27:c7:19:93:8d:52:fa:0f:cb:27:2c:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:98:92:2A:48:7A:F6:DB:CA:B3:DE:56:5C:3E:54:97:72:60:1A
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ve6YkipIevbbyrPeVlw-VJdyYBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.64.0.0/13
                  46.35.0.0/19
                  46.165.64.0/18
                  62.8.0.0/19
                  62.39.0.0/16
                  62.62.128.0/17
                  62.85.128.0/19
                  62.106.128.0/17
                  62.129.160.0/19
                  62.241.64.0/18
                  77.84.0.0/16
                  77.128.0.0-77.136.255.255
                  77.137.196.0-77.137.255.255
                  77.140.0.0-77.159.255.255
                  77.192.0.0/12
                  77.233.96.0/19
                  78.112.0.0/12
                  78.155.128.0/19
                  78.159.0.0/19
                  79.80.0.0/12
                  79.132.32.0/19
                  79.174.192.0/18
                  80.70.32.0/20
                  80.118.0.0/15
                  80.124.0.0/15
                  80.185.0.0/16
                  80.236.0.0/17
                  81.1.0.0/18
                  81.64.0.0/14
                  81.185.0.0/16
                  81.220.0.0/16
                  82.151.0.0/19
                  82.216.0.0/16
                  83.141.128.0/17
                  84.4.0.0/14
                  84.55.128.0/18
                  84.96.0.0/13
                  84.205.128.0/19
                  85.68.0.0/15
                  85.117.128.0/19
                  85.168.0.0/14
                  85.192.192.0/18
                  86.63.224.0-86.79.255.255
                  87.100.0.0/17
                  87.231.0.0/16
                  87.255.128.0/19
                  88.136.0.0/13
                  88.219.0.0/16
                  89.2.0.0/15
                  89.156.0.0/14
                  89.170.0.0/16
                  89.185.160.0/19
                  91.68.0.0/14
                  91.88.0.0/16
                  91.91.0.0/16
                  91.151.112.0/20
                  92.88.0.0/13
                  93.0.0.0/11
                  93.182.192.0/18
                  93.191.80.0/21
                  95.136.128.0/17
                  95.157.192.0/18
                  95.168.0.0/19
                  95.171.128.0/19
                  95.174.160.0/19
                  95.175.160.0/19
                  109.0.0.0/11
                  141.170.216.0/21
                  159.20.8.0/21
                  178.18.176.0/20
                  178.19.0.0/20
                  185.147.204.0/22
                  185.150.120.0/22
                  188.7.0.0/16
                  188.141.128.0/17
                  188.224.0.0/17
                  194.6.128.0/19
                  194.153.88.0-194.153.90.255
                  194.153.92.0/24
                  194.153.97.0/24
                  194.183.192.0/19
                  194.242.176.0/20
                  195.3.0.0/18
                  195.7.96.0/19
                  195.98.96.0/19
                  195.115.0.0/16
                  195.132.0.0/16
                  195.146.192.0/19
                  212.23.160.0/19
                  212.30.96.0/19
                  212.39.128.0/19
                  212.94.160.0/19
                  212.198.0.0/16
                  213.128.32.0/19
                  213.144.192.0/19
                  213.169.160.0/19
                  213.176.192.0/19
                  213.203.64.0/18
                  213.222.64.0/18
                  213.223.0.0/16
                  213.245.0.0/16
                  217.19.192.0/20
                  217.70.80.0/20
                  217.112.224.0/20
                IPv6:
                  2a00:5e80::/32
                  2a00:6200::/29
                  2a00:7180::/32
                  2a00:ec80::/31
                  2a02:8400::/25

    Signature Algorithm: sha256WithRSAEncryption
         95:ef:90:19:42:ea:68:40:dd:6e:4b:f7:25:ec:5b:3a:56:e3:
         9b:10:0a:46:40:ec:bb:63:65:10:19:86:25:ed:ed:1f:70:fb:
         0c:e6:40:1c:62:a5:d0:c6:90:c2:31:5a:fd:62:b1:46:ec:b4:
         95:74:5f:40:46:99:b1:83:fb:ac:63:bc:bf:40:f3:d4:4d:1a:
         71:4c:32:6b:51:12:ce:83:41:52:29:02:1a:70:09:38:9d:ed:
         4a:2c:0a:37:12:32:9a:30:a7:ed:a0:c9:d3:c8:97:78:b0:d7:
         61:30:8a:77:d1:c9:ba:1f:81:e1:c7:8a:39:a2:18:6d:5d:54:
         73:09:cb:db:a0:42:86:3b:dc:a8:05:db:0e:20:96:45:0c:49:
         3b:9c:5f:a4:ea:8f:32:86:ce:5a:79:43:b5:ef:da:2f:06:c2:
         a1:0f:d3:15:24:79:84:55:30:e7:c9:5c:75:85:2c:94:55:9c:
         8e:dc:9e:bb:65:84:12:9c:7a:51:a0:24:3a:66:d5:75:f7:c8:
         a7:dd:b5:6d:f5:ad:54:08:92:9f:f5:61:69:f3:d1:a2:0e:f9:
         6f:5a:be:20:79:0c:84:18:84:25:20:c3:dc:f9:b5:0c:70:e7:
         1d:9a:50:80:50:ac:8c:5d:3c:b7:ec:df:9d:1f:ba:53:82:2f:
         af:1e:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org