Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/PriuBkDPSlKVa-DEFkDAoh9LLFM.roa
File:                     PriuBkDPSlKVa-DEFkDAoh9LLFM.roa (raw, json)
Hash identifier:          5g3x8W6vqLSQS0x+8ZAYFyiQTzyygxpoTR6I5JCOBj8=
Subject key identifier:   3E:B8:AE:06:40:CF:4A:52:95:6B:E0:C4:16:40:C0:A2:1F:4B:2C:53
Certificate issuer:       /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial:       01856FA7205679F64AD33610B32F696DB4ED
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/PriuBkDPSlKVa-DEFkDAoh9LLFM.roa
Signing time:             Sun 01 Jan 2023 23:25:01 +0000
ROA not before:           Sun 01 Jan 2023 23:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31638
IP address blocks:        93.115.170.0/23 maxlen: 23
                          89.39.224.0/20 maxlen: 21
                          188.241.190.0/23 maxlen: 24
                          46.255.80.0/21 maxlen: 24
                          89.44.206.0/24 maxlen: 24
                          5.144.184.0/21 maxlen: 24
                          89.45.95.0/24 maxlen: 24
                          37.156.148.0/22 maxlen: 23
                          89.47.32.0/23 maxlen: 24
                          86.105.179.0/24 maxlen: 24
                          188.215.44.0/22 maxlen: 23
                          86.104.6.0/24 maxlen: 24
                          89.45.24.0/21 maxlen: 21
                          89.45.24.0/24 maxlen: 24
                          89.45.26.0/24 maxlen: 24
                          89.45.25.0/24 maxlen: 24
                          89.45.27.0/24 maxlen: 24
                          176.223.164.0/24 maxlen: 24
                          188.215.65.0/24 maxlen: 24
                          37.156.96.0/22 maxlen: 23
                          89.33.232.0/24 maxlen: 24
                          94.177.18.0/23 maxlen: 23
                          93.118.37.0/24 maxlen: 24
                          195.62.160.0/19 maxlen: 20
                          89.34.6.0/24 maxlen: 24
                          89.45.216.0/22 maxlen: 23
                          188.215.248.0/24 maxlen: 24
                          188.212.153.0/24 maxlen: 24
                          188.215.247.0/24 maxlen: 24
                          188.210.239.0/24 maxlen: 24
                          37.156.168.0/22 maxlen: 23
                          185.82.168.0/22 maxlen: 23
                          185.82.170.0/24 maxlen: 24
                          185.82.169.0/24 maxlen: 24
                          185.82.171.0/24 maxlen: 24
                          188.241.4.0/23 maxlen: 24
                          37.156.208.0/22 maxlen: 23
                          94.177.151.0/24 maxlen: 24
                          89.42.230.0/24 maxlen: 24
                          188.209.80.0/20 maxlen: 24
                          86.104.229.0/24 maxlen: 24
                          188.209.88.0/21 maxlen: 21
                          93.113.89.0/24 maxlen: 24
                          86.105.8.0/24 maxlen: 24
                          2a02:20d8::/29 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a7:20:56:79:f6:4a:d3:36:10:b3:2f:69:6d:b4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
        Validity
            Not Before: Jan  1 23:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3eb8ae0640cf4a52956be0c41640c0a21f4b2c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:af:74:ba:35:d7:75:de:b2:57:fc:b4:ce:
                    74:38:77:b0:21:b5:48:78:cf:ee:94:0a:2d:55:e0:
                    f2:db:15:6f:b9:24:86:9c:1b:e1:96:27:4c:63:a0:
                    4c:d5:71:01:f6:d5:cc:d7:39:05:ba:c2:f9:e6:b1:
                    8d:07:b8:6a:31:b9:a3:82:e5:81:f7:09:a9:ba:54:
                    16:68:7d:cc:69:13:e7:0d:de:c9:8a:cf:5b:90:1e:
                    78:c0:ea:7a:3b:8a:07:88:cd:37:43:1e:8f:8a:2b:
                    5d:68:68:14:9c:c9:99:7f:74:e3:82:c7:ab:64:34:
                    1b:12:0f:db:cc:91:cb:4e:e9:0a:76:f9:5b:fa:38:
                    ed:10:06:4c:d2:26:04:c2:6d:a5:15:4e:5f:4e:f5:
                    52:3a:a2:08:36:fd:9c:f6:b8:75:14:d0:52:fe:6a:
                    4c:4e:00:d5:63:2a:cd:f5:37:91:15:f2:46:29:34:
                    cc:14:2a:77:1b:f0:54:5f:e0:c6:66:45:7f:2c:e6:
                    28:2e:f7:6a:9f:44:5c:b4:d6:f8:91:c8:1e:03:3f:
                    ad:70:82:d4:dd:b7:c5:b8:70:2b:6d:33:27:5e:7c:
                    6c:a2:96:c6:fe:e7:3a:a8:d9:6d:18:8d:8b:13:c0:
                    47:3c:90:3e:2f:ad:cc:69:b2:99:de:d6:bc:f9:12:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B8:AE:06:40:CF:4A:52:95:6B:E0:C4:16:40:C0:A2:1F:4B:2C:53
            X509v3 Authority Key Identifier:
                keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/PriuBkDPSlKVa-DEFkDAoh9LLFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.144.184.0/21
                  37.156.96.0/22
                  37.156.148.0/22
                  37.156.168.0/22
                  37.156.208.0/22
                  46.255.80.0/21
                  86.104.6.0/24
                  86.104.229.0/24
                  86.105.8.0/24
                  86.105.179.0/24
                  89.33.232.0/24
                  89.34.6.0/24
                  89.39.224.0/20
                  89.42.230.0/24
                  89.44.206.0/24
                  89.45.24.0/21
                  89.45.95.0/24
                  89.45.216.0/22
                  89.47.32.0/23
                  93.113.89.0/24
                  93.115.170.0/23
                  93.118.37.0/24
                  94.177.18.0/23
                  94.177.151.0/24
                  176.223.164.0/24
                  185.82.168.0/22
                  188.209.80.0/20
                  188.210.239.0/24
                  188.212.153.0/24
                  188.215.44.0/22
                  188.215.65.0/24
                  188.215.247.0-188.215.248.255
                  188.241.4.0/23
                  188.241.190.0/23
                  195.62.160.0/19
                IPv6:
                  2a02:20d8::/29

    Signature Algorithm: sha256WithRSAEncryption
         79:35:f9:ee:68:60:c6:21:05:38:8c:01:de:9a:4d:ce:b1:8f:
         a4:04:9c:f9:10:5e:c6:3a:02:6d:c3:b7:2c:f1:ce:7f:c2:a5:
         82:0c:08:ac:62:18:cc:9c:72:ba:a6:56:dc:01:e3:f5:2b:9a:
         76:f8:ed:74:88:3a:89:a4:16:38:df:29:88:db:48:d1:14:b9:
         ca:0f:8b:70:9b:d2:44:18:13:95:de:e7:bd:33:6d:93:0b:76:
         46:c8:0d:74:c7:2a:d9:dc:df:95:fc:4c:79:c6:ce:0c:89:96:
         65:cc:bd:1a:6b:8e:34:3c:49:5f:48:c3:45:77:fb:06:ce:14:
         6f:06:a0:5f:b4:79:d5:6e:14:8c:ec:5d:a9:9e:c7:1b:2e:21:
         1e:24:cd:18:66:54:3d:ed:41:c0:ef:f6:5e:14:5f:ea:32:d5:
         b9:0f:af:1b:c2:1a:42:08:07:e6:09:49:0e:4f:b4:e9:d8:15:
         61:be:ba:3c:80:37:be:e5:8f:27:19:21:1d:39:62:e9:1d:15:
         d9:63:10:42:11:e4:be:0d:55:29:a1:23:26:af:2a:dd:a9:a6:
         14:2a:d2:fb:d6:22:bf:9b:ea:cf:14:b7:ba:66:0f:77:e8:dd:
         37:af:44:ca:3f:5a:b6:45:75:27:30:ac:93:87:4d:a6:e0:ac:
         64:ab:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org