Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa
File:                     pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa (raw, json)
Hash identifier:          MRa79bK43/15uXyForjSs8TMxx/7jxCtYP2qLtacbzI=
Subject key identifier:   A6:78:7C:8D:8C:21:52:DE:C3:19:90:55:FA:3E:A0:91:2E:5F:8D:A5
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       018E80C9FE0BB79A172692EA9A26DCC33DD1
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa
Signing time:             Wed 27 Mar 2024 16:41:45 +0000
ROA not before:           Wed 27 Mar 2024 16:41:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     24852
IP address blocks:        79.132.160.0/19 maxlen: 19
                          84.55.0.0/18 maxlen: 18
                          84.55.32.0/24 maxlen: 24
                          84.55.33.0/24 maxlen: 24
                          84.55.34.0/23 maxlen: 23
                          84.55.36.0/23 maxlen: 23
                          84.55.48.0/21 maxlen: 21
                          84.55.56.0/23 maxlen: 23
                          84.55.58.0/23 maxlen: 23
                          84.55.60.0/23 maxlen: 23
                          84.55.62.0/23 maxlen: 23
                          88.223.0.0/18 maxlen: 18
                          88.223.96.0/22 maxlen: 22
                          88.223.104.0/21 maxlen: 21
                          88.223.112.0/20 maxlen: 20
                          88.223.128.0/22 maxlen: 22
                          88.223.144.0/21 maxlen: 21
                          88.223.152.0/24 maxlen: 24
                          88.223.153.0/24 maxlen: 24
                          88.223.160.0/20 maxlen: 20
                          88.223.192.0/19 maxlen: 19
                          95.173.32.0/19 maxlen: 19
                          185.104.176.0/22 maxlen: 22
                          213.164.112.0/22 maxlen: 22
                          213.164.116.0/23 maxlen: 23
                          213.164.118.0/24 maxlen: 24
                          217.147.34.0/24 maxlen: 24
                          217.147.35.0/24 maxlen: 24
                          217.147.36.0/23 maxlen: 23
                          217.147.38.0/24 maxlen: 24
                          217.147.40.0/24 maxlen: 24
                          217.147.41.0/24 maxlen: 24
                          217.147.44.0/23 maxlen: 23
                          217.147.46.0/24 maxlen: 24
                          217.147.47.0/24 maxlen: 24
                          2a01:7c80::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 07:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:80:c9:fe:0b:b7:9a:17:26:92:ea:9a:26:dc:c3:3d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Mar 27 16:41:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a6787c8d8c2152dec3199055fa3ea0912e5f8da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:a9:ae:34:88:ee:5a:ee:98:93:bd:23:af:
                    2c:50:4e:98:a5:7e:8a:3f:5b:fa:4d:47:ae:12:03:
                    17:8d:7d:0d:54:be:66:57:89:c0:6d:88:e7:fa:e3:
                    3a:6d:9a:53:4c:66:c2:0d:12:ed:a4:46:92:dc:84:
                    e1:04:8f:2e:92:fa:ec:6f:38:45:16:f9:9a:8f:17:
                    67:29:c5:b7:c7:4f:e3:e5:93:60:b1:2c:81:c7:60:
                    f3:bc:bc:4a:2b:88:19:59:e9:b6:ca:5c:2a:94:d0:
                    36:77:1a:d3:89:ff:ac:b0:15:34:61:61:01:f7:ce:
                    de:e3:21:09:19:09:67:c9:74:26:c8:df:2d:c0:af:
                    9e:7e:64:ca:a6:4b:f0:15:8d:8f:2f:c9:d1:8a:c3:
                    73:02:b4:85:50:5f:ec:05:8f:9a:57:82:fe:eb:b4:
                    d6:14:a5:87:a4:3e:c1:ad:bf:f7:5f:d5:2d:06:55:
                    dc:f6:11:e5:1d:89:fb:4c:b6:00:23:c4:52:c6:b5:
                    b5:7f:56:c4:eb:27:f3:fd:96:3c:d6:40:c6:1f:9d:
                    9c:f2:bf:0c:22:95:64:c5:9b:35:83:91:20:53:0c:
                    c2:d1:2e:1a:61:82:41:9f:e2:70:82:af:b8:0e:fe:
                    39:f9:71:f9:15:3b:0a:03:18:54:65:0c:61:3c:29:
                    74:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:78:7C:8D:8C:21:52:DE:C3:19:90:55:FA:3E:A0:91:2E:5F:8D:A5
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.132.160.0/19
                  84.55.0.0/18
                  88.223.0.0/18
                  88.223.96.0/22
                  88.223.104.0-88.223.131.255
                  88.223.144.0-88.223.153.255
                  88.223.160.0/20
                  88.223.192.0/19
                  95.173.32.0/19
                  185.104.176.0/22
                  213.164.112.0-213.164.118.255
                  217.147.34.0-217.147.38.255
                  217.147.40.0/23
                  217.147.44.0/22
                IPv6:
                  2a01:7c80::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:6b:67:6c:97:6f:a9:c9:fa:a7:9a:67:8d:3c:97:5e:ce:
         3f:a1:17:47:47:e8:43:a8:11:dd:de:99:ef:6a:03:65:8a:6e:
         0e:3d:97:c6:fb:75:88:2c:96:c3:58:be:c6:bd:f5:25:08:3d:
         27:e3:7f:7f:75:ef:e8:04:6c:42:99:10:c7:89:e8:25:f8:9f:
         72:47:f9:30:7e:c2:ff:b7:57:21:8a:fe:2e:71:f5:a5:75:f1:
         40:74:ca:00:8a:7c:cc:49:aa:4a:c6:47:0e:b7:5f:43:26:6b:
         47:af:92:db:e7:0c:73:43:e9:0d:ab:90:c3:79:34:ef:39:88:
         99:1d:0f:5f:f4:b8:b1:dd:2b:76:ee:28:e9:d5:db:69:8e:2c:
         5a:ff:af:c4:ff:37:9d:61:96:1c:e2:75:64:3e:f6:f3:8d:7b:
         a9:4c:6a:07:3a:9f:b5:9a:8f:7c:f0:26:7a:02:f1:35:3b:7f:
         cf:b4:b5:1e:11:b1:9d:46:54:ba:90:ab:2d:da:b3:aa:0a:47:
         14:ad:11:a4:4c:02:a1:59:09:27:52:88:fa:cc:73:41:cb:53:
         0b:2f:b1:d0:11:01:7f:b4:d9:ae:1c:4a:21:79:13:01:48:68:
         b6:b8:3a:71:d1:16:9d:34:50:97:6a:62:2b:74:73:7e:c6:35:
         f7:f5:f5:d6
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAY6Ayf4Lt5oXJpLqmibcwz3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjQwMzI3MTY0MTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjc4N2M4ZDhjMjE1MmRlYzMxOTkwNTVmYTNlYTA5MTJlNWY4ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO2prjSI7lrumJO9I68sUE6YpX6K
P1v6TUeuEgMXjX0NVL5mV4nAbYjn+uM6bZpTTGbCDRLtpEaS3IThBI8ukvrsbzhF
FvmajxdnKcW3x0/j5ZNgsSyBx2DzvLxKK4gZWem2ylwqlNA2dxrTif+ssBU0YWEB
987e4yEJGQlnyXQmyN8twK+efmTKpkvwFY2PL8nRisNzArSFUF/sBY+aV4L+67TW
FKWHpD7Brb/3X9UtBlXc9hHlHYn7TLYAI8RSxrW1f1bE6yfz/ZY81kDGH52c8r8M
IpVkxZs1g5EgUwzC0S4aYYJBn+Jwgq+4Dv45+XH5FTsKAxhUZQxhPCl0WQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFKZ4fI2MIVLewxmQVfo+oJEuX42lMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvcG5oOGpZd2hVdDdER1pCVi1qNmdrUzVmamFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDB6BAIAATB0AwQFT4Sg
AwQGVDcAAwQGWN8AAwQCWN9gMAwDBANY32gDBAJY34AwDAMEBFjfkAMEAVjfmAME
BFjfoAMEBVjfwAMEBV+tIAMEArlosDAMAwQE1aRwAwQA1aR2MAwDBAHZkyIDBADZ
kyYDBAHZkygDBALZkywwDgQCAAIwCAMGByoBfIAAMA0GCSqGSIb3DQEBCwUAA4IB
AQBKmmtnbJdvqcn6p5pnjTyXXs4/oRdHR+hDqBHd3pnvagNlim4OPZfG+3WILJbD
WL7GvfUlCD0n439/de/oBGxCmRDHiegl+J9yR/kwfsL/t1chiv4ucfWldfFAdMoA
inzMSapKxkcOt19DJmtHr5Lb5wxzQ+kNq5DDeTTvOYiZHQ9f9Lix3St27ijp1dtp
jixa/6/E/zedYZYc4nVkPvbzjXupTGoHOp+1mo988CZ6AvE1O3/PtLUeEbGdRlS6
kKst2rOqCkcUrRGkTAKhWQknUoj6zHNBy1MLL7HQEQF/tNmuHEoheRMBSGi2uDpx
0RadNFCXamIrdHN+xjX39fXW
-----END CERTIFICATE-----
Generated at Tue Jun 11 12:41:29 2024 by rpki-client on console-ams.rpki-client.org