Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/ASV9chM3JXwtSVTYQsqQ1WfmHsQ.roa
File:                     ASV9chM3JXwtSVTYQsqQ1WfmHsQ.roa (raw, json)
Hash identifier:          QL5OVsxAax3TaNQ6m5iFkIfZCm+5sCF6SbAsW/mOeSQ=
Subject key identifier:   01:25:7D:72:13:37:25:7C:2D:49:54:D8:42:CA:90:D5:67:E6:1E:C4
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       018722CC728A5B4C416F2A116D477EE84E25
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/ASV9chM3JXwtSVTYQsqQ1WfmHsQ.roa
Signing time:             Mon 27 Mar 2023 11:20:36 +0000
ROA not before:           Mon 27 Mar 2023 11:20:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44444
IP address blocks:        157.167.200.0/24 maxlen: 24
                          157.167.159.0/24 maxlen: 24
                          157.167.158.0/24 maxlen: 24
                          157.167.157.0/24 maxlen: 24
                          157.167.160.0/24 maxlen: 24
                          157.167.163.0/24 maxlen: 24
                          157.167.161.0/24 maxlen: 24
                          157.167.162.0/24 maxlen: 24
                          157.167.192.0/24 maxlen: 24
                          157.167.4.0/24 maxlen: 24
                          157.167.10.0/24 maxlen: 24
                          157.167.11.0/24 maxlen: 24
                          157.167.13.0/24 maxlen: 24
                          157.167.14.0/24 maxlen: 24
                          157.167.12.0/24 maxlen: 24
                          157.167.17.0/24 maxlen: 24
                          157.167.15.0/24 maxlen: 24
                          157.167.16.0/24 maxlen: 24
                          157.167.20.0/24 maxlen: 24
                          157.167.21.0/24 maxlen: 24
                          157.167.18.0/24 maxlen: 24
                          157.167.19.0/24 maxlen: 24
                          157.167.24.0/24 maxlen: 24
                          157.167.22.0/24 maxlen: 24
                          157.167.23.0/24 maxlen: 24
                          157.167.27.0/24 maxlen: 24
                          157.167.28.0/24 maxlen: 24
                          157.167.25.0/24 maxlen: 24
                          157.167.26.0/24 maxlen: 24
                          157.167.31.0/24 maxlen: 24
                          157.167.29.0/24 maxlen: 24
                          157.167.30.0/24 maxlen: 24
                          157.167.34.0/24 maxlen: 24
                          157.167.35.0/24 maxlen: 24
                          157.167.32.0/24 maxlen: 24
                          157.167.33.0/24 maxlen: 24
                          157.167.38.0/24 maxlen: 24
                          157.167.36.0/24 maxlen: 24
                          157.167.37.0/24 maxlen: 24
                          157.167.93.0/24 maxlen: 24
                          157.167.94.0/24 maxlen: 24
                          157.167.92.0/24 maxlen: 24
                          157.167.97.0/24 maxlen: 24
                          157.167.95.0/24 maxlen: 24
                          157.167.96.0/24 maxlen: 24
                          157.167.98.0/24 maxlen: 24
                          157.167.104.0/24 maxlen: 24
                          157.167.102.0/24 maxlen: 24
                          157.167.103.0/24 maxlen: 24
                          157.167.105.0/24 maxlen: 24
                          157.167.100.0/24 maxlen: 24
                          157.167.101.0/24 maxlen: 24
                          157.167.99.0/24 maxlen: 24
                          157.167.107.0/24 maxlen: 24
                          157.167.108.0/24 maxlen: 24
                          157.167.106.0/24 maxlen: 24
                          157.167.111.0/24 maxlen: 24
                          157.167.109.0/24 maxlen: 24
                          157.167.110.0/24 maxlen: 24
                          157.167.112.0/24 maxlen: 24
                          157.167.118.0/24 maxlen: 24
                          157.167.116.0/24 maxlen: 24
                          157.167.117.0/24 maxlen: 24
                          157.167.114.0/24 maxlen: 24
                          157.167.115.0/24 maxlen: 24
                          157.167.113.0/24 maxlen: 24
                          157.167.121.0/24 maxlen: 24
                          157.167.122.0/24 maxlen: 24
                          157.167.119.0/24 maxlen: 24
                          157.167.120.0/24 maxlen: 24
                          157.167.125.0/24 maxlen: 24
                          157.167.123.0/24 maxlen: 24
                          157.167.124.0/24 maxlen: 24
                          157.167.131.0/24 maxlen: 24
                          157.167.132.0/24 maxlen: 24
                          157.167.128.0/24 maxlen: 24
                          157.167.126.0/24 maxlen: 24
                          157.167.127.0/24 maxlen: 24
                          157.167.41.0/24 maxlen: 24
                          157.167.42.0/24 maxlen: 24
                          157.167.39.0/24 maxlen: 24
                          157.167.40.0/24 maxlen: 24
                          157.167.43.0/24 maxlen: 24
                          157.167.44.0/24 maxlen: 24
                          157.167.48.0/24 maxlen: 24
                          157.167.49.0/24 maxlen: 24
                          157.167.46.0/24 maxlen: 24
                          157.167.47.0/24 maxlen: 24
                          157.167.50.0/24 maxlen: 24
                          157.167.51.0/24 maxlen: 24
                          157.167.45.0/24 maxlen: 24
                          157.167.55.0/24 maxlen: 24
                          157.167.56.0/24 maxlen: 24
                          157.167.53.0/24 maxlen: 24
                          157.167.54.0/24 maxlen: 24
                          157.167.58.0/24 maxlen: 24
                          157.167.57.0/24 maxlen: 24
                          157.167.52.0/24 maxlen: 24
                          157.167.62.0/24 maxlen: 24
                          157.167.63.0/24 maxlen: 24
                          157.167.60.0/24 maxlen: 24
                          157.167.61.0/24 maxlen: 24
                          157.167.64.0/24 maxlen: 24
                          157.167.59.0/24 maxlen: 24
                          157.167.65.0/24 maxlen: 24
                          157.167.66.0/24 maxlen: 24
                          157.167.69.0/24 maxlen: 24
                          157.167.70.0/24 maxlen: 24
                          157.167.67.0/24 maxlen: 24
                          157.167.68.0/24 maxlen: 24
                          157.167.71.0/24 maxlen: 24
                          157.167.76.0/24 maxlen: 24
                          157.167.77.0/24 maxlen: 24
                          157.167.74.0/24 maxlen: 24
                          157.167.75.0/24 maxlen: 24
                          157.167.78.0/24 maxlen: 24
                          157.167.72.0/24 maxlen: 24
                          157.167.73.0/24 maxlen: 24
                          157.167.79.0/24 maxlen: 24
                          157.167.80.0/24 maxlen: 24
                          157.167.83.0/24 maxlen: 24
                          157.167.84.0/24 maxlen: 24
                          157.167.81.0/24 maxlen: 24
                          157.167.82.0/24 maxlen: 24
                          157.167.85.0/24 maxlen: 24
                          157.167.90.0/24 maxlen: 24
                          157.167.89.0/24 maxlen: 24
                          157.167.88.0/24 maxlen: 24
                          157.167.91.0/24 maxlen: 24
                          157.167.86.0/24 maxlen: 24
                          157.167.87.0/24 maxlen: 24
                          86.111.222.0/24 maxlen: 24
                          86.111.223.0/24 maxlen: 24
                          85.115.39.0/24 maxlen: 24
                          85.115.40.0/24 maxlen: 24
                          85.115.43.0/24 maxlen: 24
                          85.115.44.0/24 maxlen: 24
                          85.115.41.0/24 maxlen: 24
                          85.115.42.0/24 maxlen: 24
                          85.115.50.0/24 maxlen: 24
                          85.115.51.0/24 maxlen: 24
                          85.115.48.0/24 maxlen: 24
                          85.115.49.0/24 maxlen: 24
                          85.115.46.0/24 maxlen: 24
                          85.115.47.0/24 maxlen: 24
                          85.115.45.0/24 maxlen: 24
                          85.115.53.0/24 maxlen: 24
                          85.115.54.0/24 maxlen: 24
                          85.115.52.0/24 maxlen: 24
                          85.115.57.0/24 maxlen: 24
                          85.115.56.0/24 maxlen: 24
                          85.115.58.0/24 maxlen: 24
                          85.115.62.0/24 maxlen: 24
                          85.115.63.0/24 maxlen: 24
                          85.115.60.0/24 maxlen: 24
                          85.115.61.0/24 maxlen: 24
                          85.115.59.0/24 maxlen: 24
                          85.115.37.0/24 maxlen: 24
                          85.115.34.0/24 maxlen: 24
                          85.115.36.0/24 maxlen: 24
                          85.115.35.0/24 maxlen: 24
                          85.115.38.0/24 maxlen: 24
                          85.115.32.0/24 maxlen: 24
                          85.115.33.0/24 maxlen: 24
                          2001:4010::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 03 Apr 2023 11:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:cc:72:8a:5b:4c:41:6f:2a:11:6d:47:7e:e8:4e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: Mar 27 11:20:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01257d721337257c2d4954d842ca90d567e61ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:29:5b:c2:c2:db:d0:ff:19:39:1b:d2:aa:
                    33:6e:05:be:0a:03:e3:75:4a:c0:7e:c6:d0:b5:f1:
                    a3:84:81:31:78:9d:37:19:50:14:11:6f:2d:cc:34:
                    09:9c:1d:f6:eb:a3:be:3c:87:d0:fb:50:4a:bf:2b:
                    e7:df:65:ba:ed:3f:24:0f:ef:48:81:e2:48:c7:b3:
                    3c:c9:ca:51:ae:8a:51:a6:d2:a7:2a:59:a5:96:0e:
                    f7:44:16:b1:8e:0e:01:c0:21:12:21:a4:a2:fc:66:
                    00:8f:b6:08:ea:36:0f:56:1e:d7:d9:bf:1f:1f:b6:
                    12:35:d0:cb:65:57:bc:9c:61:83:9e:18:4b:b1:b3:
                    4f:e1:56:52:bc:a7:84:b5:45:07:84:e1:d7:6e:38:
                    b3:88:58:d3:25:2f:83:ff:81:a0:96:d5:55:9f:d9:
                    9b:8b:40:3c:89:9c:da:ff:2f:51:13:bf:bf:70:b0:
                    fc:2f:4f:56:51:2e:91:1d:03:64:53:a0:63:b0:f9:
                    db:cd:52:86:9d:77:fd:1b:f6:da:bb:e9:9b:aa:c4:
                    08:74:4b:13:37:69:cd:ac:9a:32:ec:76:68:b7:52:
                    23:fd:a3:49:1d:ec:32:c4:9c:19:fb:96:5e:d7:9d:
                    4b:51:21:09:59:1f:06:c1:73:53:a3:41:6b:96:fd:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:7D:72:13:37:25:7C:2D:49:54:D8:42:CA:90:D5:67:E6:1E:C4
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/ASV9chM3JXwtSVTYQsqQ1WfmHsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.32.0-85.115.54.255
                  85.115.56.0/21
                  86.111.222.0/23
                  157.167.4.0/24
                  157.167.10.0-157.167.128.255
                  157.167.131.0-157.167.132.255
                  157.167.157.0-157.167.163.255
                  157.167.192.0/24
                  157.167.200.0/24
                IPv6:
                  2001:4010::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:a7:5e:43:8d:3b:4b:86:14:89:40:45:ef:49:7e:1a:63:
         89:9e:a2:88:a2:42:57:51:2d:f2:61:d1:7e:cf:9b:94:92:e4:
         ef:12:38:e2:5f:39:4b:8e:fc:f4:44:7f:38:bb:c6:ee:bf:95:
         69:28:b8:ae:78:9e:1c:93:3e:75:67:cf:aa:cd:f2:75:49:38:
         eb:08:22:1d:58:c6:04:b3:ed:61:fd:38:9a:7b:d9:8b:18:3c:
         26:3b:36:bb:50:15:6b:85:3f:6f:f3:83:63:60:06:65:23:cd:
         aa:89:aa:03:0e:9f:97:63:9a:d3:79:12:46:54:02:af:d4:d3:
         eb:a1:80:0c:6a:dd:c7:c1:dd:63:89:a8:6a:f5:b7:44:c4:0d:
         2e:2c:b9:80:66:be:54:1c:b7:52:aa:74:39:72:9c:4e:1d:25:
         e1:a4:18:9b:5a:65:f9:3a:73:79:4c:88:24:3a:94:28:64:f9:
         49:77:a3:f0:7d:a9:e4:13:ed:ab:74:67:2e:d4:8a:70:69:e2:
         99:a8:1c:56:a5:c7:60:15:25:78:48:e0:f5:3e:84:88:90:60:
         65:51:9e:2b:01:e4:c2:79:5f:42:67:b1:82:e0:f5:58:3e:b5:
         f7:ff:a4:4b:22:f1:91:1c:46:21:b8:21:a7:5c:a9:6d:a2:3f:
         67:d3:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org