Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5iIR9m-FtF4-DuHSycNaN5f9Zpc.roa
File:                     5iIR9m-FtF4-DuHSycNaN5f9Zpc.roa (raw, json)
Hash identifier:          KlgFh2PcK7LGw+j2rIiM1gO6QM9d9ylAS7/WcJDEjZo=
Subject key identifier:   E6:22:11:F6:6F:85:B4:5E:3E:0E:E1:D2:C9:C3:5A:37:97:FD:66:97
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018B1DCCB1F574190BF85A92FD3744F6EE23
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5iIR9m-FtF4-DuHSycNaN5f9Zpc.roa
Signing time:             Wed 11 Oct 2023 08:13:55 +0000
ROA not before:           Wed 11 Oct 2023 08:13:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/22 maxlen: 22
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.101.90.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked on Wed 29 Nov 2023 08:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1d:cc:b1:f5:74:19:0b:f8:5a:92:fd:37:44:f6:ee:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Oct 11 08:13:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e62211f66f85b45e3e0ee1d2c9c35a3797fd6697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:23:38:fe:15:1f:0c:33:3c:c7:42:40:3a:
                    e9:3e:6d:38:74:7a:29:cb:71:2b:30:01:bd:0b:76:
                    a7:16:d6:ac:f0:41:db:33:ac:4a:ba:94:a7:38:d5:
                    38:b9:ec:6c:ac:2a:54:f8:e5:d9:bf:0b:29:b9:33:
                    71:4e:5a:76:f7:00:e4:c6:fd:04:92:56:7c:40:09:
                    26:97:9d:f9:dd:c0:56:34:71:8c:8a:a9:f1:26:80:
                    fe:e5:7d:03:40:17:1c:21:de:68:73:52:e2:62:bd:
                    bd:ba:5f:e2:9d:27:8d:36:7f:ca:88:23:85:f3:d1:
                    a1:e0:96:e0:21:e7:b1:61:99:1d:a8:ec:7b:de:bf:
                    9a:f9:1b:15:5c:3d:0c:2a:d2:37:a0:c0:23:39:bc:
                    ff:75:27:82:b4:0b:90:0a:84:a0:fe:6d:5c:eb:8d:
                    75:e9:f2:21:36:3c:ba:37:86:ea:1c:69:d5:73:03:
                    c1:f5:9d:62:07:f9:e4:28:a3:8a:11:8b:3f:bf:ee:
                    a2:21:85:62:3c:6d:e8:aa:da:e5:0e:0c:7a:ab:b5:
                    e6:06:c7:29:7e:5d:46:5e:59:ff:7f:9f:d6:d8:c8:
                    27:ff:af:1e:9b:fe:52:28:eb:ae:9c:ee:60:9e:9f:
                    af:47:f0:38:50:55:04:fb:5e:34:b0:23:81:1b:ad:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:22:11:F6:6F:85:B4:5E:3E:0E:E1:D2:C9:C3:5A:37:97:FD:66:97
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5iIR9m-FtF4-DuHSycNaN5f9Zpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.48.0/21
                  5.8.59.0-5.8.61.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0-5.188.211.255
                  5.188.223.0/24
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.14.0/23
                  46.161.24.0/23
                  46.161.32.0/22
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/23
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         78:62:9f:33:68:60:b7:d5:bb:89:61:6c:d4:e2:06:02:fb:40:
         b0:81:99:52:56:eb:85:3f:ac:8e:ee:d6:a1:b2:1d:74:ad:ef:
         a4:08:63:fe:3a:16:d1:1a:a9:9f:84:89:a0:e3:0f:0c:5c:c9:
         0d:05:a1:fa:15:b2:30:08:51:50:26:7a:4b:9b:b0:d0:96:f9:
         37:7b:2b:1c:1c:a7:84:3b:ad:a4:3e:1a:16:d3:34:de:18:17:
         4a:e1:79:55:f2:8c:e2:a8:de:b4:03:1c:93:5d:04:5e:83:79:
         dc:1d:88:59:91:91:be:12:ed:33:51:f6:68:61:0b:b5:a7:c2:
         5b:c5:25:0e:7c:69:00:3f:43:12:62:c4:de:22:0f:ee:dd:a2:
         a2:39:41:6b:03:07:e3:aa:b9:70:36:f5:f1:06:1f:ce:c7:69:
         00:b6:33:cd:76:79:1e:78:0d:83:b8:a5:ea:c0:bf:d3:8f:47:
         88:e3:25:a3:89:fc:ee:1e:08:8f:60:b9:af:fb:f7:41:dc:6b:
         c7:5f:ad:55:eb:0b:75:a2:a6:b7:db:4f:b8:cf:3d:68:2b:bf:
         c4:e1:1e:11:89:14:65:8c:bd:0b:89:cd:49:e3:6e:24:98:08:
         19:ca:79:33:9c:36:26:f8:d7:e8:ed:af:e1:54:82:9e:cb:10:
         bf:26:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:28 2024 by rpki-client on console-fra.rpki-client.org