Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGzVq0GT4quEhMG-_cqarB3P3LI.roa
File:                     AGzVq0GT4quEhMG-_cqarB3P3LI.roa (raw, json)
Hash identifier:          QGZF/KkBbicT5dhIqkWx1lwdlCqgvjj17q0ReUhECOE=
Subject key identifier:   00:6C:D5:AB:41:93:E2:AB:84:84:C1:BE:FD:CA:9A:AC:1D:CF:DC:B2
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018CA194477C8F029E26B966638184F76914
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGzVq0GT4quEhMG-_cqarB3P3LI.roa
Signing time:             Mon 25 Dec 2023 15:24:58 +0000
ROA not before:           Mon 25 Dec 2023 15:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/22 maxlen: 22
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.101.90.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a1:94:47:7c:8f:02:9e:26:b9:66:63:81:84:f7:69:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Dec 25 15:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=006cd5ab4193e2ab8484c1befdca9aac1dcfdcb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:bc:f5:b1:05:5f:95:d3:6d:ff:7c:40:a0:
                    54:8f:3f:49:36:78:19:e3:0e:78:d5:a0:0a:21:11:
                    3f:6a:1d:1a:9a:ad:2c:c5:68:4b:db:9a:3f:d2:2d:
                    c8:30:55:0d:de:3d:c6:db:a3:13:e3:ed:52:c0:d7:
                    e8:6d:89:87:a8:63:c9:81:73:7d:b9:b2:6f:51:1d:
                    16:18:4e:ef:9d:c8:d2:3a:e4:5e:e6:84:7d:42:4f:
                    4f:58:07:7d:a9:87:93:81:7e:6f:c2:ee:d0:02:90:
                    e0:a3:e8:8d:c8:a7:22:2c:77:54:fc:f4:8b:9c:9d:
                    c8:0f:6e:3e:1f:64:94:d2:2b:3c:8c:76:7d:64:b2:
                    b2:9a:ec:47:8d:49:3c:cf:44:a2:eb:64:1c:1c:32:
                    3f:a0:d4:3b:18:18:2b:1c:3a:c7:99:22:20:b1:06:
                    53:9a:d7:ba:88:6a:c6:73:68:80:fa:06:86:dd:d1:
                    21:b6:f6:4a:5d:19:8e:f5:da:72:a0:ab:8e:fb:84:
                    99:15:35:68:f0:d7:87:23:a1:a6:a3:67:b7:f9:19:
                    c0:67:5b:40:95:1a:20:55:81:70:c4:9b:28:34:6f:
                    e2:50:ba:d1:0f:d2:0a:fd:14:9f:9d:aa:19:c8:b1:
                    b3:73:d4:a8:dd:8b:96:cc:e5:e9:2a:e8:c1:d9:f7:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6C:D5:AB:41:93:E2:AB:84:84:C1:BE:FD:CA:9A:AC:1D:CF:DC:B2
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGzVq0GT4quEhMG-_cqarB3P3LI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.48.0/21
                  5.8.60.0/23
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0-5.188.211.255
                  5.188.223.0/24
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.14.0/23
                  46.161.24.0/23
                  46.161.32.0/22
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/23
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:aa:df:6b:76:13:0c:e0:b2:64:10:5e:df:fd:bf:29:08:
         64:c8:d6:5f:a1:d1:07:a4:6b:86:16:e2:cf:d8:ff:43:a1:f0:
         83:88:b3:63:4f:18:ed:87:5d:d6:7d:1e:df:0c:14:22:bd:5d:
         6b:1c:38:66:23:ac:e3:92:71:2f:d8:c0:78:bf:b0:df:da:6f:
         d5:47:0f:09:af:23:26:b4:ef:0f:d8:8c:b8:5d:cf:4b:6c:95:
         da:5f:85:93:d5:40:45:be:6e:ca:28:ba:ff:33:51:c1:a5:14:
         8a:e6:a0:20:5c:62:2a:af:26:87:e8:44:91:5f:80:b8:d4:30:
         78:9d:1b:ce:72:ed:d6:36:1f:b6:4d:d5:3b:e8:97:af:c6:26:
         d7:05:80:29:f9:07:34:c4:16:1b:50:63:cc:88:b4:5b:85:9e:
         49:50:a6:10:51:7c:43:c8:e3:bb:e1:20:90:d5:38:29:1b:38:
         0a:2a:77:44:26:b7:2a:05:50:34:8c:2f:86:22:f6:05:c4:0d:
         76:4a:23:86:4e:df:b7:9c:71:29:38:e5:7a:34:c5:f1:f7:58:
         65:e0:92:e6:cd:29:5a:da:82:c1:74:6d:af:01:0b:bd:b4:d2:
         f3:a2:ca:24:25:4a:ef:ee:3d:f8:c7:54:57:0b:f9:03:33:1b:
         30:9e:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:28 2024 by rpki-client on console-fra.rpki-client.org