Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GPNcdPoMzh-4eEfCGaLBwieptcc.roa
File:                     GPNcdPoMzh-4eEfCGaLBwieptcc.roa (raw, json)
Hash identifier:          bOwlARNpbSfgKLhJLWt1IbDerAIjOWZVgf9/nZtPkZc=
Subject key identifier:   18:F3:5C:74:FA:0C:CE:1F:B8:78:47:C2:19:A2:C1:C2:27:A9:B5:C7
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018832F5470ECD061B09257E5930E0A83EB5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GPNcdPoMzh-4eEfCGaLBwieptcc.roa
Signing time:             Fri 19 May 2023 07:41:55 +0000
ROA not before:           Fri 19 May 2023 07:41:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.6.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.25.0/24 maxlen: 24
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.44.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.51.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.67.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.79.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.84.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.41.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          193.124.226.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.200.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.36.0/24 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.209.0/24 maxlen: 24
                          194.87.221.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.87.227.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 May 2023 19:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:32:f5:47:0e:cd:06:1b:09:25:7e:59:30:e0:a8:3e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May 19 07:41:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=18f35c74fa0cce1fb87847c219a2c1c227a9b5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:ad:7c:1e:31:e6:0c:50:c9:b1:fc:7a:c9:
                    ca:e4:2a:28:fe:70:40:97:03:58:65:33:f7:7e:7d:
                    a6:7d:52:14:86:46:3a:81:c0:cf:12:44:5b:d7:78:
                    6c:5e:5c:5c:7e:4c:41:f3:d6:09:96:32:dd:9f:68:
                    1c:02:7d:98:9f:29:71:05:a2:a2:3e:ab:c5:b6:ed:
                    e0:f1:91:c5:5a:04:99:c1:34:e2:af:0c:36:7a:09:
                    02:4b:a8:be:ca:4d:94:fb:89:ef:06:23:94:af:0c:
                    62:9b:b3:1d:5b:dc:8d:57:7b:55:ac:af:c6:1c:7c:
                    68:95:2b:ed:6b:e3:7d:d8:65:46:d2:11:a9:83:1b:
                    a6:e3:b8:28:57:70:43:fb:73:21:fe:d6:27:30:d5:
                    3d:db:e9:de:c9:c8:af:ce:3e:9f:4d:4e:54:06:22:
                    a8:20:3a:a8:49:13:71:2a:dc:24:54:3c:d5:f7:44:
                    62:25:4d:29:71:ab:e3:40:67:3d:73:0e:55:93:a1:
                    e5:0b:0e:f7:08:92:93:35:1b:d4:66:a7:67:a2:c6:
                    c0:d9:b9:2c:be:9b:47:23:c7:b9:87:6b:99:15:b8:
                    67:31:09:89:6f:65:5c:7b:0b:8b:a6:f4:f5:ed:de:
                    4d:85:5e:93:b4:0a:d6:77:c2:ff:57:e6:9c:1a:e6:
                    a3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:5C:74:FA:0C:CE:1F:B8:78:47:C2:19:A2:C1:C2:27:A9:B5:C7
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GPNcdPoMzh-4eEfCGaLBwieptcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/23
                  193.124.16.0/24
                  193.124.36.0/24
                  193.124.44.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.200.0-193.124.202.255
                  193.124.204.0/24
                  193.124.226.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.6.0/23
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0-194.87.44.255
                  194.87.51.0/24
                  194.87.56.0/24
                  194.87.67.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.119.0/24
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.172.0/24
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.209.0/24
                  194.87.221.0-194.87.222.255
                  194.87.227.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.18.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.53.0-195.58.54.255
                  195.58.56.0/24
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.41.0/24
                  195.133.74.0/24
                  195.133.79.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         71:71:10:82:23:28:30:15:8b:fa:f5:3f:12:21:43:c7:df:2b:
         34:e1:27:f6:30:9f:2c:c3:0a:53:bb:8e:ab:68:c6:5b:9c:53:
         d6:b9:4f:f5:c3:9f:34:db:cf:7a:7f:06:94:1b:b3:fc:41:81:
         f5:d7:bd:6d:9f:6a:f7:7f:fe:b5:20:6e:d4:c6:78:bc:f6:ba:
         93:e1:26:ed:bf:ba:10:b9:09:88:f1:4e:76:35:10:20:90:af:
         55:6f:8b:dd:9f:52:e7:92:01:41:7e:bf:53:9f:dc:7a:54:c4:
         55:1b:e4:aa:92:c1:69:da:3d:c2:ed:93:39:00:9c:e5:57:c6:
         94:fe:e4:2a:49:28:5e:59:d6:e1:75:b4:0b:3c:16:7f:fb:a9:
         fc:f5:a0:df:7a:f4:2e:45:b7:c0:91:7c:e5:08:fc:22:ad:50:
         f5:e6:83:91:e1:68:35:dc:a7:1c:e8:e1:bb:f9:9a:b2:5d:b0:
         2f:3d:ef:73:0a:53:5c:66:3c:ac:69:56:15:98:f0:f7:12:ca:
         5f:94:75:d4:4c:a7:14:90:52:09:4d:18:ce:75:be:75:3d:c4:
         11:72:b2:3a:88:e9:c7:84:e8:0d:dd:e3:bf:18:01:d1:d2:cc:
         f4:d6:79:0f:4d:82:42:5c:32:33:47:39:bd:83:85:f2:81:60:
         85:69:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:11 2024 by rpki-client on console-fra.rpki-client.org