Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QDwoqamY4xsmKRxojfkxqWRMhyQ.roa
File:                     QDwoqamY4xsmKRxojfkxqWRMhyQ.roa (raw, json)
Hash identifier:          M/IRRwMy/nSiKr4CAyeKdsNQeYoK2PPrDpmOOwvyTes=
Subject key identifier:   40:3C:28:A9:A9:98:E3:1B:26:29:1C:68:8D:F9:31:A9:64:4C:87:24
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0192500308ADF72E1BF733671184FEF82A6F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QDwoqamY4xsmKRxojfkxqWRMhyQ.roa
Signing time:             Thu 03 Oct 2024 01:33:48 +0000
ROA not before:           Thu 03 Oct 2024 01:33:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12586
IP address blocks:        5.83.128.0/19 maxlen: 32
                          5.83.128.0/20 maxlen: 32
                          5.83.134.0/24 maxlen: 24
                          5.83.141.0/24 maxlen: 24
                          5.83.151.0/24 maxlen: 32
                          5.83.156.0/24 maxlen: 24
                          5.175.128.0/17 maxlen: 32
                          5.175.255.0/24 maxlen: 32
                          5.230.0.0/15 maxlen: 32
                          5.230.6.0/24 maxlen: 32
                          5.230.11.0/24 maxlen: 32
                          5.230.102.0/24 maxlen: 32
                          5.230.224.0/24 maxlen: 32
                          5.231.233.0/24 maxlen: 32
                          77.90.0.0/18 maxlen: 32
                          77.90.48.0/24 maxlen: 24
                          77.90.55.0/24 maxlen: 24
                          77.90.60.0/24 maxlen: 24
                          83.243.80.0/21 maxlen: 32
                          85.93.0.0/19 maxlen: 32
                          85.93.20.0/24 maxlen: 32
                          85.118.160.0/21 maxlen: 32
                          87.239.128.0/21 maxlen: 32
                          89.106.64.0/19 maxlen: 32
                          89.144.0.0/18 maxlen: 32
                          94.103.160.0/20 maxlen: 32
                          94.249.128.0/17 maxlen: 32
                          95.215.32.0/22 maxlen: 32
                          178.18.144.0/20 maxlen: 32
                          178.18.151.0/24 maxlen: 32
                          185.13.156.0/22 maxlen: 32
                          185.47.140.0/24 maxlen: 32
                          185.47.141.0/24 maxlen: 32
                          185.121.71.0/24 maxlen: 32
                          193.28.251.0/24 maxlen: 32
                          195.110.14.0/23 maxlen: 32
                          217.69.160.0/20 maxlen: 32
                          2a00:12d8::/29 maxlen: 128
                          2a00:19d0::/29 maxlen: 128
                          2a00:cdc0::/32 maxlen: 128
                          2a01:bd40::/29 maxlen: 128
                          2a02:7a0::/29 maxlen: 128
                          2a02:2fc0::/29 maxlen: 128

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 22:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:50:03:08:ad:f7:2e:1b:f7:33:67:11:84:fe:f8:2a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Oct  3 01:33:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=403c28a9a998e31b26291c688df931a9644c8724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:0c:96:40:79:f8:f5:87:1e:59:6e:31:3d:
                    43:f8:f3:49:46:f2:b3:98:77:e9:4f:7e:38:af:fd:
                    a8:a2:3c:e5:db:be:bd:90:35:24:f4:13:e6:1c:f8:
                    5e:2c:b0:30:33:1e:a5:b3:4f:9d:05:ac:5d:62:00:
                    f9:5b:10:7a:89:ca:b7:bd:60:aa:47:7e:fd:f3:f6:
                    0d:a9:85:4d:b0:10:10:11:ee:88:af:52:fa:d9:24:
                    19:0a:71:ec:d6:d4:06:55:4a:92:42:b5:9e:01:ab:
                    0f:c1:e8:85:70:64:9c:ff:ac:74:77:f3:2b:e6:ae:
                    95:83:f2:67:b7:c2:f5:fb:74:de:bd:f9:c7:05:0d:
                    a8:ac:32:85:a5:72:b0:5c:64:76:1f:9f:46:51:0d:
                    a6:ab:93:e2:46:1e:ae:f3:fa:28:83:a2:2a:20:09:
                    73:78:1c:5d:94:e4:88:51:4a:15:61:3a:2c:31:10:
                    2b:37:db:a5:cd:ef:5e:bd:ee:2b:60:4c:ec:a8:47:
                    08:f2:21:2d:44:be:c2:2d:d4:e7:54:28:d6:13:4e:
                    04:e6:a9:e2:94:b1:66:16:29:76:57:0f:5c:71:96:
                    e8:5b:ea:9a:53:62:0c:d0:37:ba:25:85:16:27:04:
                    f9:38:15:ad:cf:62:8b:1d:2f:10:d3:13:08:4c:27:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:28:A9:A9:98:E3:1B:26:29:1C:68:8D:F9:31:A9:64:4C:87:24
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QDwoqamY4xsmKRxojfkxqWRMhyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.128.0/19
                  5.175.128.0/17
                  5.230.0.0/15
                  77.90.0.0/18
                  83.243.80.0/21
                  85.93.0.0/19
                  85.118.160.0/21
                  87.239.128.0/21
                  89.106.64.0/19
                  89.144.0.0/18
                  94.103.160.0/20
                  94.249.128.0/17
                  95.215.32.0/22
                  178.18.144.0/20
                  185.13.156.0/22
                  185.47.140.0/23
                  185.121.71.0/24
                  193.28.251.0/24
                  195.110.14.0/23
                  217.69.160.0/20
                IPv6:
                  2a00:12d8::/29
                  2a00:19d0::/29
                  2a00:cdc0::/32
                  2a01:bd40::/29
                  2a02:7a0::/29
                  2a02:2fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:ac:ea:3b:69:e0:77:99:0d:7d:b3:b8:16:a7:e8:4b:d7:
         35:f1:25:ac:cc:fa:c4:6f:e8:5f:56:90:fb:5f:0a:44:f3:ef:
         0d:31:c1:ce:7e:95:4d:cc:57:31:a3:5c:b8:24:4b:89:a8:cb:
         a0:b7:41:c9:2d:42:24:55:e9:89:50:f5:7f:fb:65:30:9f:9a:
         f8:b3:13:5a:a2:e5:45:23:08:54:82:be:9a:3b:ec:94:0b:6f:
         5e:56:d9:e4:6a:55:db:a3:06:38:6a:9c:91:e0:7c:2f:90:d3:
         28:c1:fb:66:7e:0c:ee:00:1b:c7:23:89:af:b2:ee:bb:02:41:
         00:26:a6:08:21:37:4c:07:f4:9b:ee:65:30:f4:08:ac:d3:ea:
         92:94:38:20:66:8b:d4:80:48:b6:12:79:a8:fe:1c:1b:c0:28:
         d4:a5:83:f3:a1:dc:da:1c:8f:bb:07:9d:44:e4:4b:4e:bc:e5:
         3b:30:01:96:7c:19:d4:2d:93:fe:d5:4e:6c:d8:77:df:24:f4:
         58:3a:5d:20:67:e2:91:e8:8a:89:89:2c:71:b4:71:3f:79:01:
         e3:e4:89:9f:90:c9:9f:a4:a4:80:3f:49:4a:79:95:e7:db:49:
         22:c0:60:ca:82:f1:2b:e6:0a:fc:4a:02:e6:58:e2:25:df:ba:
         6e:2a:b7:94
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZJQAwit9y4b9zNnEYT++CpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDAzMDEzMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDNjMjhhOWE5OThlMzFiMjYyOTFjNjg4ZGY5MzFhOTY0NGM4NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq14MlkB5+PWHHlluMT1D+PNJRvKz
mHfpT344r/2oojzl2769kDUk9BPmHPheLLAwMx6ls0+dBaxdYgD5WxB6icq3vWCq
R3798/YNqYVNsBAQEe6Ir1L62SQZCnHs1tQGVUqSQrWeAasPweiFcGSc/6x0d/Mr
5q6Vg/Jnt8L1+3TevfnHBQ2orDKFpXKwXGR2H59GUQ2mq5PiRh6u8/oog6IqIAlz
eBxdlOSIUUoVYTosMRArN9ulze9eve4rYEzsqEcI8iEtRL7CLdTnVCjWE04E5qni
lLFmFil2Vw9ccZboW+qaU2IM0De6JYUWJwT5OBWtz2KLHS8Q0xMITCfXMQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEA8KKmpmOMbJikcaI35MalkTIckMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUUR3b3FhbVk0eHNtS1J4b2pma3hxV1JNaHlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAKg6s6jtp4HeZ
DX2zuBan6EvXNfElrMz6xG/oX1aQ+18KRPPvDTHBzn6VTcxXMaNcuCRLiajLoLdB
yS1CJFXpiVD1f/tlMJ+a+LMTWqLlRSMIVIK+mjvslAtvXlbZ5GpV26MGOGqckeB8
L5DTKMH7Zn4M7gAbxyOJr7LuuwJBACamCCE3TAf0m+5lMPQIrNPqkpQ4IGaL1IBI
thJ5qP4cG8Ao1KWD86Hc2hyPuwedRORLTrzlOzABlnwZ1C2T/tVObNh33yT0WDpd
IGfikeiKiYkscbRxP3kB4+SJn5DJn6SkgD9JSnmV59tJIsBgyoLxK+YK/EoC5lji
Jd+6biq3lA==
-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org