Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/iQF5Z46box8Wq5A_d3ujY6MV3fY.roa
File:                     iQF5Z46box8Wq5A_d3ujY6MV3fY.roa (raw, json)
Hash identifier:          STmf5FG3sh0HVf2LEgQpvyNE27e+UtTMRJvJbfBJ10o=
Subject key identifier:   89:01:79:67:8E:9B:A3:1F:16:AB:90:3F:77:7B:A3:63:A3:15:DD:F6
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       0187B8699C282E76545B68257E21FA607799
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/iQF5Z46box8Wq5A_d3ujY6MV3fY.roa
Signing time:             Tue 25 Apr 2023 12:35:41 +0000
ROA not before:           Tue 25 Apr 2023 12:35:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2914
IP address blocks:        62.73.162.0/23 maxlen: 23
                          62.73.161.0/24 maxlen: 24
                          62.73.160.0/19 maxlen: 19
                          62.73.160.0/24 maxlen: 29
                          213.198.73.128/25 maxlen: 25
                          82.112.104.64/26 maxlen: 26
                          158.181.56.0/21 maxlen: 21
                          213.198.83.0/25 maxlen: 25
                          213.198.82.0/25 maxlen: 25
                          82.112.107.32/30 maxlen: 30
                          82.112.107.112/28 maxlen: 28
                          83.217.241.128/25 maxlen: 25
                          213.198.26.16/29 maxlen: 29
                          213.198.94.96/27 maxlen: 27
                          212.119.0.0/19 maxlen: 19
                          82.112.105.0/24 maxlen: 24
                          213.198.26.8/29 maxlen: 29
                          91.186.188.0/23 maxlen: 24
                          91.186.191.0/24 maxlen: 24
                          83.217.239.0/27 maxlen: 27
                          83.217.241.0/27 maxlen: 27
                          82.112.110.0/23 maxlen: 24
                          82.112.112.0/23 maxlen: 24
                          82.112.108.0/23 maxlen: 23
                          82.112.114.0/24 maxlen: 24
                          82.112.116.0/23 maxlen: 24
                          213.198.86.0/26 maxlen: 26
                          82.112.124.0/23 maxlen: 24
                          82.112.120.0/23 maxlen: 24
                          82.112.126.0/24 maxlen: 24
                          82.112.127.0/24 maxlen: 24
                          91.186.160.0/19 maxlen: 19
                          91.186.176.0/24 maxlen: 24
                          91.186.178.0/24 maxlen: 24
                          91.186.179.0/24 maxlen: 24
                          91.186.177.0/24 maxlen: 24
                          91.186.182.0/24 maxlen: 24
                          91.186.186.0/23 maxlen: 23
                          91.186.180.0/23 maxlen: 24
                          91.186.183.0/24 maxlen: 24
                          82.112.123.208/28 maxlen: 28
                          82.112.107.40/30 maxlen: 30
                          213.198.1.0/27 maxlen: 27
                          91.186.176.208/28 maxlen: 28
                          213.198.86.128/27 maxlen: 27
                          5.158.208.0/21 maxlen: 21
                          5.158.212.0/24 maxlen: 24
                          5.158.210.0/24 maxlen: 24
                          5.158.211.0/24 maxlen: 24
                          5.158.208.0/23 maxlen: 24
                          5.158.214.0/24 maxlen: 24
                          5.158.215.0/24 maxlen: 24
                          213.198.28.0/24 maxlen: 24
                          213.198.30.0/24 maxlen: 24
                          213.198.31.0/24 maxlen: 24
                          213.198.51.0/24 maxlen: 24
                          213.198.54.0/23 maxlen: 24
                          213.198.65.0/24 maxlen: 24
                          213.198.71.0/24 maxlen: 24
                          213.198.70.0/24 maxlen: 24
                          213.198.75.0/24 maxlen: 24
                          213.198.78.0/24 maxlen: 24
                          213.198.74.0/24 maxlen: 24
                          213.198.4.0/24 maxlen: 24
                          213.198.0.0/24 maxlen: 24
                          213.198.2.0/24 maxlen: 24
                          213.198.3.0/24 maxlen: 24
                          213.198.8.0/23 maxlen: 24
                          213.198.6.0/23 maxlen: 24
                          213.198.10.0/23 maxlen: 24
                          213.198.5.0/24 maxlen: 24
                          213.198.24.0/23 maxlen: 24
                          83.217.239.32/27 maxlen: 27
                          185.84.16.0/22 maxlen: 22
                          83.217.251.160/27 maxlen: 27
                          213.198.85.0/24 maxlen: 24
                          213.198.79.0/24 maxlen: 24
                          213.198.84.0/24 maxlen: 24
                          213.198.26.0/29 maxlen: 29
                          213.198.91.0/24 maxlen: 24
                          213.198.90.0/24 maxlen: 24
                          213.198.88.0/24 maxlen: 24
                          213.198.93.0/24 maxlen: 24
                          213.198.97.0/24 maxlen: 24
                          213.198.98.0/24 maxlen: 24
                          213.198.96.0/24 maxlen: 24
                          213.198.99.0/24 maxlen: 24
                          83.217.239.128/28 maxlen: 28
                          82.112.107.28/30 maxlen: 30
                          91.186.177.176/29 maxlen: 29
                          213.198.1.32/27 maxlen: 27
                          83.217.230.0/24 maxlen: 24
                          83.217.228.0/23 maxlen: 24
                          83.217.240.0/24 maxlen: 24
                          83.217.234.0/23 maxlen: 24
                          83.217.236.0/23 maxlen: 24
                          83.217.244.0/23 maxlen: 24
                          83.217.246.0/23 maxlen: 24
                          83.217.242.0/23 maxlen: 24
                          83.217.250.0/24 maxlen: 24
                          83.217.248.0/23 maxlen: 24
                          83.217.251.0/24 maxlen: 24
                          83.231.128.0/17 maxlen: 17
                          213.130.32.0/19 maxlen: 19
                          213.198.86.160/27 maxlen: 27
                          83.217.224.0/19 maxlen: 19
                          83.217.224.0/23 maxlen: 23
                          82.112.104.128/25 maxlen: 25
                          82.112.123.64/28 maxlen: 28
                          82.112.107.24/30 maxlen: 30
                          91.186.190.128/25 maxlen: 25
                          91.186.190.0/25 maxlen: 25
                          213.198.86.64/26 maxlen: 26
                          213.198.86.192/26 maxlen: 26
                          213.198.95.64/26 maxlen: 26
                          83.217.237.32/28 maxlen: 28
                          83.231.183.64/27 maxlen: 27
                          83.217.239.64/26 maxlen: 26
                          82.112.107.36/30 maxlen: 30
                          83.231.233.240/28 maxlen: 28
                          91.186.177.184/29 maxlen: 29
                          2001:728:2807::/48 maxlen: 64
                          2001:728:2806::/48 maxlen: 64
                          2001:728:2809::/48 maxlen: 64
                          2001:728:c00::/38 maxlen: 64
                          2001:728:2400::/38 maxlen: 64
                          2001:728:2c00::/38 maxlen: 64
                          2001:728:4400::/38 maxlen: 64
                          2001:728:4000::/38 maxlen: 64
                          2001:728::/32 maxlen: 32
                          2001:728:2808::/48 maxlen: 64
                          2001:728:1010:300::/56 maxlen: 64

Validation:               Failed, certificate revoked on Tue 25 Apr 2023 12:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b8:69:9c:28:2e:76:54:5b:68:25:7e:21:fa:60:77:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Apr 25 12:35:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=890179678e9ba31f16ab903f777ba363a315ddf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:71:07:de:f8:66:aa:ae:3b:ab:21:6e:ab:
                    9c:25:da:d2:59:ac:f3:d2:de:df:ec:0b:5f:f5:48:
                    e5:d8:13:3b:4d:02:35:22:c8:0d:c4:3f:f8:05:a2:
                    4f:a7:1e:04:ff:29:1e:ca:8f:2f:0d:f8:ac:09:32:
                    00:d8:ff:15:a6:88:c4:7c:0f:0f:0f:7d:ac:48:51:
                    74:be:c5:3f:48:35:a9:4d:53:cb:c1:1e:51:f2:c6:
                    4e:a9:01:26:fa:fe:3f:16:cf:b8:1d:c4:cf:81:c8:
                    3f:2b:90:3d:b2:0a:c3:38:a6:72:97:0b:df:85:5b:
                    9e:4e:9f:ad:25:b6:b9:c4:e7:f9:71:19:ef:d2:b4:
                    2a:fd:d7:7d:27:7f:d3:7f:9e:f3:8e:e8:80:51:97:
                    68:ed:37:b5:44:15:3b:d7:ba:7d:60:17:cb:21:46:
                    09:10:5d:0f:ca:0e:aa:b3:e0:70:5b:4d:ad:eb:f4:
                    43:3d:a6:f6:6b:7a:10:0f:b7:bf:52:19:37:f3:35:
                    60:8b:36:ab:3b:47:1c:ba:4a:d6:14:e5:be:b6:cb:
                    bc:af:29:ba:39:2e:b8:64:ff:5a:e9:ac:66:79:c3:
                    41:3e:d7:9d:10:93:d0:64:a7:74:f1:18:93:e0:01:
                    5a:54:be:5b:be:11:3f:99:c6:90:9f:2b:e1:1f:0d:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:79:67:8E:9B:A3:1F:16:AB:90:3F:77:7B:A3:63:A3:15:DD:F6
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/iQF5Z46box8Wq5A_d3ujY6MV3fY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.158.208.0/21
                  62.73.160.0/19
                  82.112.104.64-82.112.105.255
                  82.112.107.24-82.112.107.43
                  82.112.107.112/28
                  82.112.108.0-82.112.114.255
                  82.112.116.0/23
                  82.112.120.0/23
                  82.112.123.64/28
                  82.112.123.208/28
                  82.112.124.0/22
                  83.217.224.0/19
                  83.231.128.0/17
                  91.186.160.0/19
                  158.181.56.0/21
                  185.84.16.0/22
                  212.119.0.0/19
                  213.130.32.0/19
                  213.198.0.0-213.198.1.63
                  213.198.2.0-213.198.11.255
                  213.198.24.0-213.198.26.23
                  213.198.28.0/24
                  213.198.30.0/23
                  213.198.51.0/24
                  213.198.54.0/23
                  213.198.65.0/24
                  213.198.70.0/23
                  213.198.73.128-213.198.75.255
                  213.198.78.0/23
                  213.198.82.0/25
                  213.198.83.0/25
                  213.198.84.0-213.198.86.255
                  213.198.88.0/24
                  213.198.90.0/23
                  213.198.93.0/24
                  213.198.94.96/27
                  213.198.95.64/26
                  213.198.96.0/22
                IPv6:
                  2001:728::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:eb:37:e0:00:9a:cd:54:ef:50:40:38:91:12:bc:fa:04:b7:
         1a:53:d3:4d:44:0c:c0:7b:ae:3e:43:dd:41:fd:48:77:09:01:
         68:1f:44:46:b5:2b:f5:8c:82:e6:e6:c3:d8:e2:bd:27:2e:73:
         0b:61:16:f9:da:8e:69:4a:bc:4d:56:05:5f:9a:7d:99:d4:0d:
         b7:ff:84:2e:71:91:60:e3:a4:1d:87:ac:ce:32:bb:3f:d9:ed:
         e0:a3:a6:a9:2a:53:01:5a:0a:08:07:b8:51:04:d1:cb:4c:8f:
         0a:1b:c8:c4:bc:42:36:31:46:bc:c3:dd:77:9c:fc:c1:5a:85:
         67:32:97:e7:6a:42:42:a8:cc:27:78:6c:7c:4f:22:de:f6:65:
         5b:0c:b6:67:96:e3:b7:42:9e:46:f3:53:f6:7b:96:39:bd:ae:
         5f:a6:ba:19:06:30:d2:31:e0:3a:8b:d4:61:36:f6:25:47:5e:
         d3:f8:2b:ad:5d:34:0c:22:7e:5e:0b:f6:7c:a8:85:15:cf:da:
         10:3c:23:bb:8f:dd:1a:21:29:20:29:84:97:bf:cf:8b:a0:b7:
         da:c3:12:2f:8e:ab:ef:a5:dd:2e:5a:44:52:da:27:45:41:fd:
         e2:07:5d:a4:3a:7e:d0:82:f4:fb:76:2e:a5:31:6b:93:07:da:
         18:3b:d3:63
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgISAYe4aZwoLnZUW2glfiH6YHeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjMwNDI1MTIzNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTAxNzk2NzhlOWJhMzFmMTZhYjkwM2Y3NzdiYTM2M2EzMTVkZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuytxB974ZqquO6shbqucJdrSWazz
0t7f7Atf9Ujl2BM7TQI1IsgNxD/4BaJPpx4E/ykeyo8vDfisCTIA2P8VpojEfA8P
D32sSFF0vsU/SDWpTVPLwR5R8sZOqQEm+v4/Fs+4HcTPgcg/K5A9sgrDOKZylwvf
hVueTp+tJba5xOf5cRnv0rQq/dd9J3/Tf57zjuiAUZdo7Te1RBU717p9YBfLIUYJ
EF0Pyg6qs+BwW02t6/RDPab2a3oQD7e/Uhk38zVgizarO0ccukrWFOW+tsu8rym6
OS64ZP9a6axmecNBPtedEJPQZKd08RiT4AFaVL5bvhE/mcaQnyvhHw1PTQIDAQAB
o4IDTDCCA0gwHQYDVR0OBBYEFIkBeWeOm6MfFquQP3d7o2OjFd32MB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvaVFGNVo0NmJveDhXcTVBX2QzdWpZNk1WM2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYAYIKwYBBQUHAQcBAf8EggFPMIIBSzCCATgEAgABMIIB
MAMEAwWe0AMEBT5JoDANAwUGUnBoQAMEAVJwaDAOAwUDUnBrGAMFAlJwaygDBQRS
cGtwMAwDBAJScGwDBABScHIDBAFScHQDBAFScHgDBQRScHtAAwUEUnB70AMEAlJw
fAMEBVPZ4AMEB1PngAMEBVu6oAMEA561OAMEArlUEAMEBdR3AAMEBdWCIDAMAwMB
1cYDBQbVxgEAMAwDBAHVxgIDBALVxggwDQMEA9XGGAMFA9XGGhADBADVxhwDBAHV
xh4DBADVxjMDBAHVxjYDBADVxkEDBAHVxkYwDQMFB9XGSYADBALVxkgDBAHVxk4D
BQfVxlIAAwUH1cZTADAMAwQC1cZUAwQA1cZWAwQA1cZYAwQB1cZaAwQA1cZdAwUF
1cZeYAMFBtXGX0ADBALVxmAwDQQCAAIwBwMFACABBygwDQYJKoZIhvcNAQELBQAD
ggEBAKnrN+AAms1U71BAOJESvPoEtxpT001EDMB7rj5D3UH9SHcJAWgfREa1K/WM
gubmw9jivScucwthFvnajmlKvE1WBV+afZnUDbf/hC5xkWDjpB2HrM4yuz/Z7eCj
pqkqUwFaCggHuFEE0ctMjwobyMS8QjYxRrzD3Xec/MFahWcyl+dqQkKozCd4bHxP
It72ZVsMtmeW47dCnkbzU/Z7ljm9rl+muhkGMNIx4DqL1GE29iVHXtP4K61dNAwi
fl4L9nyohRXP2hA8I7uP3RohKSAphJe/z4ugt9rDEi+Oq++l3S5aRFLaJ0VB/eIH
XaQ6ftCC9Pt2LqUxa5MH2hg702M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org