Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LsVhrB6sYLGDVTR5F0LM4Oqb6H8.roa
File:                     LsVhrB6sYLGDVTR5F0LM4Oqb6H8.roa (raw, json)
Hash identifier:          yPxa8BGCwkDqL9lFE2QGtwL5na5lxyNBp+j1VVDRMn4=
Subject key identifier:   2E:C5:61:AC:1E:AC:60:B1:83:55:34:79:17:42:CC:E0:EA:9B:E8:7F
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       018C2738C766414EF977A73F3C2E464FE835
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LsVhrB6sYLGDVTR5F0LM4Oqb6H8.roa
Signing time:             Fri 01 Dec 2023 21:11:21 +0000
ROA not before:           Fri 01 Dec 2023 21:11:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        185.100.232.0/22 maxlen: 22
                          193.200.164.0/24 maxlen: 24
                          185.173.161.0/24 maxlen: 24
                          185.173.160.0/24 maxlen: 24
                          185.173.163.0/24 maxlen: 24
                          185.173.162.0/24 maxlen: 24
                          185.180.220.0/22 maxlen: 22
                          89.39.104.0/24 maxlen: 24
                          89.39.105.0/24 maxlen: 24
                          89.39.107.0/24 maxlen: 24
                          89.39.106.0/24 maxlen: 24
                          2.59.168.0/22 maxlen: 22
                          185.132.132.0/24 maxlen: 24
                          185.132.135.0/24 maxlen: 24
                          185.132.134.0/24 maxlen: 24
                          185.132.133.0/24 maxlen: 24
                          62.112.8.0/22 maxlen: 24
                          185.165.240.0/22 maxlen: 22
                          80.79.4.0/24 maxlen: 24
                          80.79.7.0/24 maxlen: 24
                          80.79.6.0/24 maxlen: 24
                          80.79.5.0/24 maxlen: 24
                          185.132.179.0/24 maxlen: 24
                          89.38.98.0/24 maxlen: 24
                          89.38.97.0/24 maxlen: 24
                          185.132.178.0/24 maxlen: 24
                          185.132.177.0/24 maxlen: 24
                          89.38.96.0/24 maxlen: 24
                          185.132.176.0/24 maxlen: 24
                          89.38.99.0/24 maxlen: 24
                          178.132.3.0/24 maxlen: 24
                          178.132.2.0/24 maxlen: 24
                          178.132.1.0/24 maxlen: 24
                          178.132.0.0/24 maxlen: 24
                          178.132.4.0/24 maxlen: 24
                          178.132.6.0/24 maxlen: 24
                          178.132.5.0/24 maxlen: 24
                          178.132.7.0/24 maxlen: 24
                          185.172.90.0/24 maxlen: 24
                          185.172.89.0/24 maxlen: 24
                          185.172.88.0/24 maxlen: 24
                          185.172.91.0/24 maxlen: 24
                          217.23.0.0/24 maxlen: 24
                          217.23.3.0/24 maxlen: 24
                          217.23.2.0/24 maxlen: 24
                          217.23.1.0/24 maxlen: 24
                          217.23.4.0/24 maxlen: 24
                          217.23.7.0/24 maxlen: 24
                          217.23.6.0/24 maxlen: 24
                          217.23.5.0/24 maxlen: 24
                          217.23.10.0/24 maxlen: 24
                          217.23.9.0/24 maxlen: 24
                          217.23.8.0/24 maxlen: 24
                          217.23.11.0/24 maxlen: 24
                          185.184.192.0/24 maxlen: 24
                          217.23.15.0/24 maxlen: 24
                          217.23.14.0/24 maxlen: 24
                          217.23.13.0/24 maxlen: 24
                          217.23.12.0/24 maxlen: 24
                          185.184.195.0/24 maxlen: 24
                          185.184.194.0/24 maxlen: 24
                          185.184.193.0/24 maxlen: 24
                          175.110.112.0/20 maxlen: 20
                          178.218.196.0/22 maxlen: 22
                          185.185.48.0/24 maxlen: 24
                          185.185.51.0/24 maxlen: 24
                          185.185.50.0/24 maxlen: 24
                          185.185.49.0/24 maxlen: 24
                          93.190.136.0/21 maxlen: 22
                          93.190.140.0/22 maxlen: 22
                          185.2.80.0/22 maxlen: 22
                          185.177.124.0/22 maxlen: 22
                          185.191.0.0/22 maxlen: 22
                          212.8.240.0/24 maxlen: 24
                          212.8.243.0/24 maxlen: 24
                          212.8.242.0/24 maxlen: 24
                          212.8.248.0/24 maxlen: 24
                          212.8.250.0/24 maxlen: 24
                          212.8.249.0/24 maxlen: 24
                          212.8.253.0/24 maxlen: 24
                          212.8.252.0/24 maxlen: 24
                          185.183.35.0/24 maxlen: 24
                          185.183.34.0/24 maxlen: 24
                          185.183.33.0/24 maxlen: 24
                          185.183.32.0/24 maxlen: 24
                          194.88.107.0/24 maxlen: 24
                          194.88.106.0/24 maxlen: 24
                          185.182.192.0/24 maxlen: 24
                          185.182.193.0/24 maxlen: 24
                          185.182.195.0/24 maxlen: 24
                          185.182.194.0/24 maxlen: 24
                          185.21.60.0/24 maxlen: 24
                          185.21.63.0/24 maxlen: 24
                          185.21.62.0/24 maxlen: 24
                          185.21.61.0/24 maxlen: 24
                          45.14.132.0/22 maxlen: 22
                          45.82.64.0/22 maxlen: 22
                          194.88.105.0/24 maxlen: 24
                          194.88.104.0/24 maxlen: 24
                          109.236.83.0/24 maxlen: 24
                          109.236.82.0/24 maxlen: 24
                          109.236.81.0/24 maxlen: 24
                          109.236.80.0/24 maxlen: 24
                          109.236.85.0/24 maxlen: 24
                          109.236.84.0/24 maxlen: 24
                          109.236.91.0/24 maxlen: 24
                          109.236.86.0/24 maxlen: 24
                          109.236.90.0/24 maxlen: 24
                          109.236.89.0/24 maxlen: 24
                          109.236.88.0/24 maxlen: 24
                          109.236.87.0/24 maxlen: 24
                          109.236.93.0/24 maxlen: 24
                          109.236.92.0/24 maxlen: 24
                          109.236.95.0/24 maxlen: 24
                          109.236.94.0/24 maxlen: 24
                          185.100.232.0/24 maxlen: 24
                          185.100.233.0/24 maxlen: 24
                          185.100.235.0/24 maxlen: 24
                          185.100.234.0/24 maxlen: 24
                          185.173.160.0/22 maxlen: 22
                          185.180.222.0/24 maxlen: 24
                          185.180.221.0/24 maxlen: 24
                          185.180.220.0/24 maxlen: 24
                          89.39.104.0/22 maxlen: 22
                          185.180.223.0/24 maxlen: 24
                          2.59.168.0/24 maxlen: 24
                          2.59.171.0/24 maxlen: 24
                          2.59.170.0/24 maxlen: 24
                          2.59.169.0/24 maxlen: 24
                          185.132.132.0/22 maxlen: 22
                          62.112.8.0/24 maxlen: 24
                          185.165.240.0/24 maxlen: 24
                          62.112.11.0/24 maxlen: 24
                          62.112.10.0/24 maxlen: 24
                          62.112.9.0/24 maxlen: 24
                          185.165.243.0/24 maxlen: 24
                          185.165.242.0/24 maxlen: 24
                          185.165.241.0/24 maxlen: 24
                          80.79.4.0/22 maxlen: 22
                          185.132.176.0/22 maxlen: 22
                          89.38.96.0/22 maxlen: 22
                          178.132.0.0/21 maxlen: 21
                          185.172.88.0/22 maxlen: 22
                          217.23.0.0/20 maxlen: 20
                          185.184.192.0/22 maxlen: 22
                          175.110.112.0/24 maxlen: 24
                          175.110.113.0/24 maxlen: 24
                          175.110.117.0/24 maxlen: 24
                          175.110.116.0/24 maxlen: 24
                          175.110.115.0/24 maxlen: 24
                          175.110.114.0/24 maxlen: 24
                          175.110.118.0/24 maxlen: 24
                          175.110.120.0/24 maxlen: 24
                          175.110.119.0/24 maxlen: 24
                          175.110.124.0/24 maxlen: 24
                          175.110.123.0/24 maxlen: 24
                          175.110.122.0/24 maxlen: 24
                          175.110.121.0/24 maxlen: 24
                          175.110.125.0/24 maxlen: 24
                          175.110.127.0/24 maxlen: 24
                          175.110.126.0/24 maxlen: 24
                          178.218.198.0/24 maxlen: 24
                          178.218.197.0/24 maxlen: 24
                          178.218.196.0/24 maxlen: 24
                          178.218.199.0/24 maxlen: 24
                          185.185.48.0/22 maxlen: 22
                          91.232.105.0/24 maxlen: 24
                          93.190.138.0/24 maxlen: 24
                          93.190.137.0/24 maxlen: 24
                          93.190.136.0/24 maxlen: 24
                          93.190.139.0/24 maxlen: 24
                          93.190.141.0/24 maxlen: 24
                          93.190.140.0/24 maxlen: 24
                          93.190.143.0/24 maxlen: 24
                          93.190.142.0/24 maxlen: 24
                          185.2.80.0/24 maxlen: 24
                          185.177.124.0/24 maxlen: 24
                          185.2.83.0/24 maxlen: 24
                          185.2.82.0/24 maxlen: 24
                          185.2.81.0/24 maxlen: 24
                          185.177.125.0/24 maxlen: 24
                          185.177.127.0/24 maxlen: 24
                          185.177.126.0/24 maxlen: 24
                          185.191.0.0/24 maxlen: 24
                          185.191.3.0/24 maxlen: 24
                          185.191.2.0/24 maxlen: 24
                          185.191.1.0/24 maxlen: 24
                          212.8.242.0/23 maxlen: 23
                          212.8.248.0/23 maxlen: 23
                          212.8.252.0/23 maxlen: 23
                          45.14.134.0/24 maxlen: 24
                          45.14.133.0/24 maxlen: 24
                          45.14.135.0/24 maxlen: 24
                          185.183.32.0/22 maxlen: 22
                          185.182.192.0/22 maxlen: 22
                          185.21.60.0/22 maxlen: 22
                          45.14.132.0/24 maxlen: 24
                          45.82.64.0/24 maxlen: 24
                          45.82.66.0/24 maxlen: 24
                          45.82.65.0/24 maxlen: 24
                          45.82.67.0/24 maxlen: 24
                          91.229.23.0/24 maxlen: 24
                          194.88.104.0/22 maxlen: 22
                          109.236.80.0/20 maxlen: 20
                          2a00:7c80::/29 maxlen: 32
                          2a00:7c82::/32 maxlen: 32
                          2a00:7c81::/32 maxlen: 32
                          2a00:7c83::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:27:38:c7:66:41:4e:f9:77:a7:3f:3c:2e:46:4f:e8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Dec  1 21:11:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2ec561ac1eac60b1835534791742cce0ea9be87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:c8:86:47:37:5f:73:f9:7e:fe:74:47:2d:
                    85:7d:cf:89:3a:d6:90:42:35:d3:58:72:bf:71:40:
                    b6:d2:0b:a7:c8:90:db:ba:4a:1a:9c:d2:99:f6:c8:
                    81:e1:06:c4:cc:93:41:3a:91:cf:26:86:0f:14:9b:
                    c1:6f:ee:df:80:b6:51:dd:a1:6b:67:03:e0:32:b8:
                    78:04:68:c6:8b:63:77:d3:0d:80:99:af:16:35:d4:
                    c7:91:bb:73:38:06:f7:db:b4:dc:e0:45:6a:f4:c4:
                    3a:a5:51:8d:59:e9:a8:d0:39:65:4a:f3:ad:cc:2b:
                    4f:fc:28:a6:4f:bd:35:91:50:ef:32:d3:87:b0:ef:
                    b2:44:9a:ac:e2:c2:b6:5c:ef:a0:2f:37:94:bf:a2:
                    bd:0f:ba:49:7d:f9:fc:74:7c:a3:f8:b8:03:91:09:
                    84:6d:6f:be:00:a7:74:0a:d8:d3:0a:b7:58:09:f9:
                    36:f0:87:f5:cf:69:ac:36:2f:0c:64:0c:96:10:11:
                    84:c3:58:50:40:ac:d8:1c:66:87:7e:a7:4d:b9:fb:
                    7e:7b:a4:65:6f:68:22:e7:39:ed:a8:bc:a4:69:2e:
                    20:e6:e6:93:ca:82:12:de:20:7a:18:e6:5f:d9:d2:
                    ca:ac:88:f6:85:2b:71:37:71:42:70:b1:19:8c:c1:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:61:AC:1E:AC:60:B1:83:55:34:79:17:42:CC:E0:EA:9B:E8:7F
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LsVhrB6sYLGDVTR5F0LM4Oqb6H8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.168.0/22
                  45.14.132.0/22
                  45.82.64.0/22
                  62.112.8.0/22
                  80.79.4.0/22
                  89.38.96.0/22
                  89.39.104.0/22
                  91.229.23.0/24
                  91.232.105.0/24
                  93.190.136.0/21
                  109.236.80.0/20
                  175.110.112.0/20
                  178.132.0.0/21
                  178.218.196.0/22
                  185.2.80.0/22
                  185.21.60.0/22
                  185.100.232.0/22
                  185.132.132.0/22
                  185.132.176.0/22
                  185.165.240.0/22
                  185.172.88.0/22
                  185.173.160.0/22
                  185.177.124.0/22
                  185.180.220.0/22
                  185.182.192.0/22
                  185.183.32.0/22
                  185.184.192.0/22
                  185.185.48.0/22
                  185.191.0.0/22
                  193.200.164.0/24
                  194.88.104.0/22
                  212.8.240.0/24
                  212.8.242.0/23
                  212.8.248.0-212.8.250.255
                  212.8.252.0/23
                  217.23.0.0/20
                IPv6:
                  2a00:7c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:85:88:15:71:26:42:c8:15:c9:69:b1:98:b9:af:55:67:
         ee:69:37:dd:8a:22:01:2d:7b:78:0d:c1:41:89:95:92:16:ab:
         d0:cb:83:78:a0:82:c0:de:bf:5c:f7:87:ae:14:43:f4:cc:85:
         49:8c:64:db:7c:3f:e0:dd:b3:88:15:49:13:40:56:9f:93:14:
         ef:f1:60:4a:aa:72:12:43:b2:13:36:a5:58:22:7c:ec:37:89:
         a5:e5:35:7a:16:e7:ab:c9:ce:94:79:d4:1c:44:bf:4f:a7:3b:
         1f:39:a7:c4:0c:34:81:2c:64:d6:79:a4:d5:8c:5e:db:ed:60:
         a0:3c:51:af:64:2f:ab:94:3d:24:3a:d9:a7:18:0f:8d:f6:42:
         24:48:46:fb:d5:5e:25:e7:d5:8f:c5:a7:7a:ac:64:be:f2:ed:
         b3:c4:fe:62:aa:93:5b:74:51:3d:89:4b:7b:b5:30:0f:36:f0:
         de:9d:9e:a4:c1:d9:3e:95:59:71:b2:7e:e7:af:cd:05:04:39:
         28:bb:d7:d7:4f:58:bf:e9:61:e2:8a:b0:c7:c1:d8:b8:90:61:
         c5:b8:27:83:99:d4:a5:a8:ea:55:be:69:34:d3:ac:bd:88:f9:
         a2:48:bf:07:d2:a8:b4:56:4f:01:cf:d7:5f:9d:fe:09:8d:4a:
         a9:e6:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org