Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/xVeAR39reyCKgsziXo_ZeF1WS5s.roa
File:                     xVeAR39reyCKgsziXo_ZeF1WS5s.roa (raw, json)
Hash identifier:          +hgHOtinQ7JK/Kkeq7ZGJiuaIX7EmdA+NMI3Q2zXXZ0=
Subject key identifier:   C5:57:80:47:7F:6B:7B:20:8A:82:CC:E2:5E:8F:D9:78:5D:56:4B:9B
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       01867DC090ED04B3D370B70B0B10A3815262
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/xVeAR39reyCKgsziXo_ZeF1WS5s.roa
Signing time:             Thu 23 Feb 2023 10:10:17 +0000
ROA not before:           Thu 23 Feb 2023 10:10:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24875
IP address blocks:        185.147.12.0/22 maxlen: 24
                          89.105.192.0/20 maxlen: 20
                          89.105.192.0/19 maxlen: 19
                          89.105.208.0/20 maxlen: 20
                          80.89.236.0/23 maxlen: 23
                          80.89.224.0/20 maxlen: 24
                          185.80.232.0/22 maxlen: 22
                          185.80.232.0/23 maxlen: 23
                          185.80.234.0/23 maxlen: 23
                          2001:968:2016::/48 maxlen: 48
                          2001:968:2171::/48 maxlen: 48
                          2001:968:2005::/48 maxlen: 48
                          2001:968:2185::/48 maxlen: 48
                          2001:968::/32 maxlen: 32
                          2001:968:2160::/48 maxlen: 48
                          2001:968:2019::/48 maxlen: 48
                          2001:968:2119::/48 maxlen: 48
                          2001:968:2174::/48 maxlen: 48
                          2001:968:2177::/48 maxlen: 48
                          2001:968:677::/48 maxlen: 48
                          2001:968:2152::/48 maxlen: 48
                          2001:968:2108::/48 maxlen: 48
                          2001:968:2188::/48 maxlen: 48
                          2001:968:2008::/48 maxlen: 48
                          2001:968:2146::/48 maxlen: 48
                          2001:968:2021::/48 maxlen: 48
                          2a07:5440::/29 maxlen: 29
                          2001:968:2035::/48 maxlen: 48
                          2001:968:2135::/48 maxlen: 48
                          2001:968:2010::/48 maxlen: 48
                          2001:968:2190::/48 maxlen: 48
                          2001:968:2110::/48 maxlen: 48
                          2001:968:2193::/48 maxlen: 48
                          2001:968:2013::/48 maxlen: 48
                          2001:968:2024::/48 maxlen: 48
                          2001:968:2227::/48 maxlen: 48
                          2001:968:2127::/48 maxlen: 48
                          2001:968:2027::/48 maxlen: 48
                          2001:968:2182::/48 maxlen: 48
                          2001:968:2102::/48 maxlen: 48
                          2001:968:2138::/48 maxlen: 48
                          2001:968:676::/48 maxlen: 48
                          2001:968:2151::/48 maxlen: 48
                          2001:968:2140::/48 maxlen: 48
                          2001:968:2143::/48 maxlen: 48
                          2001:968:679::/48 maxlen: 48
                          2001:968:2179::/48 maxlen: 48
                          2001:968:2032::/48 maxlen: 48
                          2001:968:2132::/48 maxlen: 48
                          2a00:11f8::/32 maxlen: 32
                          2001:968:2026::/48 maxlen: 48
                          2001:968:2226::/48 maxlen: 48
                          2001:968:2101::/48 maxlen: 48
                          2001:968:2181::/48 maxlen: 48
                          2001:968:2001::/48 maxlen: 48
                          2001:968:15::/48 maxlen: 48
                          2001:968:2195::/48 maxlen: 48
                          2001:968:2015::/48 maxlen: 48
                          2001:968:3295::/48 maxlen: 48
                          2001:968:2173::/48 maxlen: 48
                          2001:968:2129::/48 maxlen: 48
                          2001:968:2004::/48 maxlen: 48
                          2001:968:2184::/48 maxlen: 48
                          2001:968:2104::/48 maxlen: 48
                          2001:968:2007::/48 maxlen: 48
                          2001:968:2107::/48 maxlen: 48
                          2001:968:1007::/48 maxlen: 48
                          2001:968:2162::/48 maxlen: 48
                          2001:968:2062::/48 maxlen: 48
                          2001:968:2198::/48 maxlen: 48
                          2001:968:2118::/48 maxlen: 48
                          2a07:5440::/32 maxlen: 32
                          2001:968:2131::/48 maxlen: 48
                          2001:968:2145::/48 maxlen: 48
                          2001:968:2020::/48 maxlen: 48
                          2001:968:2023::/48 maxlen: 48
                          2001:968:2134::/48 maxlen: 48
                          2001:968:2037::/48 maxlen: 48
                          2001:968:2137::/48 maxlen: 48
                          2001:968:2412::/48 maxlen: 48
                          2001:968:2112::/48 maxlen: 48
                          2001:968:2192::/48 maxlen: 48
                          2001:968:2148::/48 maxlen: 48
                          2001:968:2106::/48 maxlen: 48
                          2001:968:2006::/48 maxlen: 48
                          2001:968:2186::/48 maxlen: 48
                          2001:968::/29 maxlen: 29
                          2001:968:675::/48 maxlen: 48
                          2001:968:2150::/48 maxlen: 48
                          2001:968:2153::/48 maxlen: 48
                          2001:968:2189::/48 maxlen: 48
                          2001:968:2109::/48 maxlen: 48
                          2001:968:2164::/48 maxlen: 48
                          2a00:11f8::/29 maxlen: 29
                          2001:968:2178::/48 maxlen: 48
                          2001:968:678::/48 maxlen: 48
                          2001:968:2036::/48 maxlen: 48
                          2001:968:2111::/48 maxlen: 48
                          2001:968:2191::/48 maxlen: 48
                          2001:968:2025::/48 maxlen: 48
                          2001:968:2180::/48 maxlen: 48
                          2001:968:780::/48 maxlen: 48
                          2001:968:1400::/48 maxlen: 48
                          2001:968:100::/48 maxlen: 48
                          2001:968:2103::/48 maxlen: 48
                          2001:968:2003::/48 maxlen: 48
                          2001:968:2139::/48 maxlen: 48
                          2001:968:2194::/48 maxlen: 48
                          2001:968:2197::/48 maxlen: 48
                          2001:968:2117::/48 maxlen: 48
                          2001:968:2017::/48 maxlen: 48
                          2001:968:2172::/48 maxlen: 48
                          2001:968:2128::/48 maxlen: 48
                          2001:968:2155::/48 maxlen: 48
                          2001:968:2130::/48 maxlen: 48
                          2001:968:2133::/48 maxlen: 48
                          2001:968:2144::/48 maxlen: 48
                          2001:968:2147::/48 maxlen: 48
                          2001:968:2022::/48 maxlen: 48
                          2001:968:2158::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:c0:90:ed:04:b3:d3:70:b7:0b:0b:10:a3:81:52:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Feb 23 10:10:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c55780477f6b7b208a82cce25e8fd9785d564b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:13:45:f7:1d:b9:06:66:82:8c:57:ef:7d:fe:
                    08:24:0b:51:18:2e:41:1d:4b:75:e6:d0:b9:09:55:
                    26:bb:7b:82:cf:58:63:42:ae:10:14:27:da:d1:7a:
                    5d:c0:50:ab:1a:90:69:59:28:ed:20:ba:3c:17:2f:
                    88:e4:8c:46:99:00:a0:97:4a:ba:42:15:31:14:5b:
                    32:1b:c4:d8:71:d1:85:79:31:ee:0b:75:a3:50:65:
                    d1:16:92:54:54:03:73:32:b6:2e:76:18:1b:59:74:
                    0f:d7:56:95:12:dc:02:0e:64:6e:9b:4b:20:34:79:
                    f3:9b:af:6f:11:a4:02:c0:7e:63:ba:01:b8:b8:b8:
                    20:6e:c8:a8:fe:e7:3e:b1:90:a9:b6:ff:f2:81:e0:
                    64:af:9e:e6:65:20:1f:c2:ac:ae:d2:11:9f:d7:88:
                    1f:93:e4:9c:02:7e:e2:f4:7b:6a:67:dc:3d:78:77:
                    82:33:cc:2f:1c:49:ef:86:89:5d:41:67:c1:0d:8d:
                    b6:7a:49:89:26:57:54:14:72:6c:5f:12:d4:53:bf:
                    db:87:05:61:23:3b:f8:2c:d2:b4:91:bb:58:dd:6f:
                    a7:e7:92:74:e4:90:3e:b1:e7:93:6f:b9:0a:81:e3:
                    18:1e:f3:5a:83:9a:5e:a9:89:93:83:3d:39:e2:0f:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:80:47:7F:6B:7B:20:8A:82:CC:E2:5E:8F:D9:78:5D:56:4B:9B
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/xVeAR39reyCKgsziXo_ZeF1WS5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.89.224.0/20
                  89.105.192.0/19
                  185.80.232.0/22
                  185.147.12.0/22
                IPv6:
                  2001:968::/29
                  2a00:11f8::/29
                  2a07:5440::/29

    Signature Algorithm: sha256WithRSAEncryption
         c0:15:69:69:95:99:13:8b:84:36:7b:64:ea:4a:53:db:fd:c5:
         82:59:38:96:d6:87:81:59:e6:78:12:30:a1:51:d1:c7:c2:fc:
         d6:6c:a6:87:17:41:55:4b:8a:d3:4e:3b:d6:2d:da:85:38:77:
         89:c5:8b:85:1f:a6:18:be:9f:53:b5:13:8e:be:b7:68:9e:a2:
         5f:88:85:40:0f:cc:3a:0b:72:ce:be:9c:2d:e6:e5:7a:80:51:
         fc:15:56:85:1f:c7:06:7b:1d:66:7d:bf:7f:d4:ae:ee:25:18:
         92:c2:54:f1:63:27:55:eb:52:9a:22:c8:79:b1:a6:cf:8d:15:
         4f:04:7a:a2:76:2a:6c:be:79:b9:a7:3b:a2:0a:49:71:47:13:
         7e:86:f1:50:13:0b:3b:ca:df:38:fa:d8:e1:0d:f4:a0:06:39:
         45:ed:78:d5:c1:f0:08:8f:f2:d1:b2:57:95:c9:c1:ef:81:78:
         90:c1:5e:f1:44:1f:11:ff:53:04:71:1a:36:17:5e:cd:56:e9:
         6d:93:e4:58:22:9a:ff:fd:5e:d5:66:b9:33:6f:28:95:f5:08:
         09:85:8c:9e:4d:a1:a3:e6:a4:94:1d:61:9a:d3:cf:34:de:1a:
         1a:f6:ba:9a:72:76:90:a7:b9:d0:08:a2:5c:f0:fc:41:72:dc:
         23:37:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:56 2024 by rpki-client on console-ams.rpki-client.org