Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/N3bbOxMijhiDaSvpZkV5gXr4fbI.roa
File:                     N3bbOxMijhiDaSvpZkV5gXr4fbI.roa (raw, json)
Hash identifier:          f7WchomPBppPOGJ9SEcs8atdI7wCK5tbJL5JEajj8c4=
Subject key identifier:   37:76:DB:3B:13:22:8E:18:83:69:2B:E9:66:45:79:81:7A:F8:7D:B2
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       018C7D67D663E098FC17FE94A8E6BACB1460
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/N3bbOxMijhiDaSvpZkV5gXr4fbI.roa
Signing time:             Mon 18 Dec 2023 14:50:06 +0000
ROA not before:           Mon 18 Dec 2023 14:50:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57169
IP address blocks:        37.235.50.0/23 maxlen: 23
                          37.235.48.0/20 maxlen: 20
                          37.235.50.0/24 maxlen: 24
                          37.235.56.0/24 maxlen: 24
                          37.235.57.0/24 maxlen: 24
                          37.235.58.0/24 maxlen: 24
                          37.235.52.0/24 maxlen: 24
                          37.235.59.0/24 maxlen: 24
                          37.235.60.0/24 maxlen: 24
                          37.235.61.0/24 maxlen: 24
                          37.235.62.0/24 maxlen: 24
                          37.235.63.0/24 maxlen: 24
                          158.255.211.0/24 maxlen: 24
                          158.255.212.0/24 maxlen: 24
                          158.255.209.0/24 maxlen: 24
                          158.255.210.0/24 maxlen: 24
                          185.26.236.0/24 maxlen: 24
                          185.26.237.0/24 maxlen: 24
                          185.26.238.0/24 maxlen: 24
                          149.154.152.0/24 maxlen: 24
                          149.154.153.0/24 maxlen: 24
                          149.154.154.0/24 maxlen: 24
                          149.154.155.0/24 maxlen: 24
                          149.154.156.0/24 maxlen: 24
                          5.180.114.0/24 maxlen: 24
                          86.106.119.0/24 maxlen: 24
                          91.227.204.0/23 maxlen: 23
                          91.227.204.0/24 maxlen: 24
                          91.227.205.0/24 maxlen: 24
                          89.31.123.0/24 maxlen: 24
                          83.243.120.0/24 maxlen: 24
                          83.243.122.0/24 maxlen: 24
                          83.243.123.0/24 maxlen: 24
                          91.132.94.0/24 maxlen: 24
                          213.183.54.0/24 maxlen: 24
                          213.183.55.0/24 maxlen: 24
                          213.183.56.0/24 maxlen: 24
                          213.183.57.0/24 maxlen: 24
                          84.247.61.0/24 maxlen: 24
                          151.236.0.0/19 maxlen: 19
                          151.236.0.0/24 maxlen: 24
                          151.236.1.0/24 maxlen: 24
                          151.236.2.0/24 maxlen: 24
                          151.236.3.0/24 maxlen: 24
                          151.236.4.0/24 maxlen: 24
                          151.236.5.0/24 maxlen: 24
                          151.236.6.0/24 maxlen: 24
                          151.236.7.0/24 maxlen: 24
                          151.236.8.0/24 maxlen: 24
                          151.236.9.0/24 maxlen: 24
                          151.236.10.0/24 maxlen: 24
                          151.236.11.0/24 maxlen: 24
                          151.236.12.0/24 maxlen: 24
                          151.236.13.0/24 maxlen: 24
                          151.236.14.0/24 maxlen: 24
                          151.236.20.0/24 maxlen: 24
                          151.236.26.0/23 maxlen: 23
                          151.236.28.0/24 maxlen: 24
                          151.236.30.0/24 maxlen: 24
                          103.57.250.0/24 maxlen: 24
                          92.243.66.0/24 maxlen: 24
                          2a03:f80:359::/48 maxlen: 48
                          2a03:f80:56::/48 maxlen: 48
                          2a03:f80:ed16::/48 maxlen: 48
                          2a03:f80:371::/48 maxlen: 48
                          2a03:f80:ed31::/48 maxlen: 48
                          2a03:f87:ffff::/48 maxlen: 48
                          2a03:f80::/29 maxlen: 29
                          2a03:f80:57::/48 maxlen: 48
                          2a03:f80:ed17::/48 maxlen: 48
                          2a03:f80:354::/48 maxlen: 48
                          2a03:f80:3991::/48 maxlen: 48
                          2a03:f80:ed51::/48 maxlen: 48
                          2a03:f80:7::/48 maxlen: 48
                          2a03:f80:ad15::/48 maxlen: 48
                          2a03:f80:ed15::/48 maxlen: 48
                          2a03:f80:370::/48 maxlen: 48
                          2a03:f80:70::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 08:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7d:67:d6:63:e0:98:fc:17:fe:94:a8:e6:ba:cb:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Dec 18 14:50:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3776db3b13228e1883692be9664579817af87db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:74:8c:6e:ff:5f:bb:f5:b1:74:58:1e:fe:
                    df:ad:a4:d4:5f:0a:75:82:cb:6a:18:fc:b0:a2:1d:
                    52:aa:ff:d1:66:bf:25:4e:f2:e8:bd:86:38:7a:a3:
                    4d:59:0e:df:78:ae:4b:89:be:8b:ce:34:e5:d4:f3:
                    57:fa:2c:4e:c5:7c:90:23:54:09:b6:83:fe:9a:2f:
                    d9:2c:4c:17:93:21:8d:49:9f:fa:91:1c:18:0d:b4:
                    5a:ed:42:ab:2f:85:b4:e3:14:0f:37:48:bf:67:0a:
                    ea:9e:91:4b:27:9e:8c:d7:65:ce:92:c4:31:6b:4b:
                    c4:54:f5:4f:37:02:cb:d8:88:79:81:40:d8:50:a4:
                    ad:fa:4a:e7:f1:ee:fa:28:c5:99:04:5a:ca:2d:8d:
                    a7:9b:7e:92:87:2b:c2:4b:96:20:42:b1:65:cd:8c:
                    d7:97:08:25:a7:dc:ad:25:ce:b0:35:28:a1:dd:da:
                    a6:13:92:cd:b8:ae:58:d4:cd:8d:1b:49:e8:35:be:
                    97:d9:b4:10:25:f6:9c:8f:3a:34:d4:e4:22:fd:fa:
                    fb:25:c8:73:22:71:5e:52:e8:62:8b:c8:da:6c:1c:
                    8f:20:28:2f:e8:e2:89:fc:df:ed:ad:6e:7b:65:34:
                    f3:2b:df:fc:ac:16:ee:d5:dd:7b:e7:bf:8c:73:10:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:DB:3B:13:22:8E:18:83:69:2B:E9:66:45:79:81:7A:F8:7D:B2
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/N3bbOxMijhiDaSvpZkV5gXr4fbI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.114.0/24
                  37.235.48.0/20
                  83.243.120.0/24
                  83.243.122.0/23
                  84.247.61.0/24
                  86.106.119.0/24
                  89.31.123.0/24
                  91.132.94.0/24
                  91.227.204.0/23
                  92.243.66.0/24
                  103.57.250.0/24
                  149.154.152.0-149.154.156.255
                  151.236.0.0/19
                  158.255.209.0-158.255.212.255
                  185.26.236.0-185.26.238.255
                  213.183.54.0-213.183.57.255
                IPv6:
                  2a03:f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:1d:05:67:f6:de:e9:81:a0:40:44:ce:c7:bd:f2:90:ea:
         c0:84:91:0c:4c:fe:5e:e2:42:e1:d4:bc:ec:10:b0:3c:82:df:
         96:e7:69:6e:3c:a3:de:69:8b:b3:39:b2:c6:6e:44:3a:bf:37:
         6d:ab:41:e6:47:5c:7f:f9:c2:cd:a3:8e:66:22:71:f3:bd:11:
         25:2a:e0:a9:19:31:a8:37:07:66:61:2f:1c:46:35:f9:65:9b:
         44:08:b1:e7:d9:f7:0b:1e:e1:f2:b3:35:ff:8e:66:7e:d3:76:
         68:91:46:3c:77:d0:c6:68:bd:33:e9:0f:b5:59:3e:dd:09:9f:
         0f:ac:01:14:a9:95:2a:f8:74:e5:19:eb:c5:99:5d:ca:0b:0a:
         bb:66:d5:46:bb:3e:0f:0e:8f:30:5b:3f:22:17:c0:76:d5:f9:
         31:01:1e:24:4a:51:c5:e3:2d:6c:71:c5:f8:aa:fd:af:1d:a6:
         37:62:2d:22:59:07:f1:eb:98:35:f0:da:fc:4e:16:de:9a:fc:
         10:66:e4:a6:ac:d9:c8:a6:d7:ca:fa:43:3f:b0:9a:86:ee:57:
         7d:b3:54:a0:4a:7a:4f:53:7a:0d:d5:bb:5e:46:bb:96:1f:79:
         c9:87:3a:9e:b5:e3:35:a7:69:72:28:f6:7e:85:33:ff:a5:17:
         7f:d8:c6:ee
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAYx9Z9Zj4Jj8F/6UqOa6yxRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjMxMjE4MTQ1MDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzc2ZGIzYjEzMjI4ZTE4ODM2OTJiZTk2NjQ1Nzk4MTdhZjg3ZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO10jG7/X7v1sXRYHv7fraTUXwp1
gstqGPywoh1Sqv/RZr8lTvLovYY4eqNNWQ7feK5Lib6LzjTl1PNX+ixOxXyQI1QJ
toP+mi/ZLEwXkyGNSZ/6kRwYDbRa7UKrL4W04xQPN0i/ZwrqnpFLJ56M12XOksQx
a0vEVPVPNwLL2Ih5gUDYUKSt+krn8e76KMWZBFrKLY2nm36ShyvCS5YgQrFlzYzX
lwglp9ytJc6wNSih3dqmE5LNuK5Y1M2NG0noNb6X2bQQJfacjzo01OQi/fr7Jchz
InFeUuhii8jabByPICgv6OKJ/N/trW57ZTTzK9/8rBbu1d1757+McxCmpQIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFDd22zsTIo4Yg2kr6WZFeYF6+H2yMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvTjNiYk94TWlqaGlEYVN2cFprVjVnWHI0ZmJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBhwQCAAEwgYADBAAF
tHIDBAQl6zADBABT83gDBAFT83oDBABU9z0DBABWancDBABZH3sDBABbhF4DBAFb
48wDBABc80IDBABnOfowDAMEA5WamAMEAJWanAMEBZfsADAMAwQAnv/RAwQAnv/U
MAwDBAK5GuwDBAC5Gu4wDAMEAdW3NgMEAdW3ODANBAIAAjAHAwUDKgMPgDANBgkq
hkiG9w0BAQsFAAOCAQEADXgdBWf23umBoEBEzse98pDqwISRDEz+XuJC4dS87BCw
PILfludpbjyj3mmLszmyxm5EOr83batB5kdcf/nCzaOOZiJx870RJSrgqRkxqDcH
ZmEvHEY1+WWbRAix59n3Cx7h8rM1/45mftN2aJFGPHfQxmi9M+kPtVk+3QmfD6wB
FKmVKvh05RnrxZldygsKu2bVRrs+Dw6PMFs/IhfAdtX5MQEeJEpRxeMtbHHF+Kr9
rx2mN2ItIlkH8euYNfDa/E4W3pr8EGbkpqzZyKbXyvpDP7Cahu5XfbNUoEp6T1N6
DdW7Xka7lh95yYc6nrXjNadpcij2foUz/6UXf9jG7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org