Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VBlurlZCFncPwQevn6NXvgA3Zd8.roa
File:                     VBlurlZCFncPwQevn6NXvgA3Zd8.roa (raw, json)
Hash identifier:          ooYvcORKbHNCGH7mpD0o19+s89/amEwMAE5aN47nOZc=
Subject key identifier:   54:19:6E:AE:56:42:16:77:0F:C1:07:AF:9F:A3:57:BE:00:37:65:DF
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018AF45F298D357D9DFE2D7464C45E884DC7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VBlurlZCFncPwQevn6NXvgA3Zd8.roa
Signing time:             Tue 03 Oct 2023 07:09:51 +0000
ROA not before:           Tue 03 Oct 2023 07:09:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/22 maxlen: 22
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.101.90.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked on Tue 03 Oct 2023 07:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f4:5f:29:8d:35:7d:9d:fe:2d:74:64:c4:5e:88:4d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Oct  3 07:09:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=54196eae564216770fc107af9fa357be003765df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:67:47:39:08:a2:8f:b4:d5:85:ec:50:2d:
                    44:d7:6c:e1:fb:9b:92:e4:53:85:6c:23:3d:c8:87:
                    57:9e:7a:50:ab:76:52:31:29:42:5a:ed:e4:63:00:
                    67:5f:05:89:3b:8c:73:17:4a:17:3c:a8:78:ea:db:
                    c1:71:66:12:71:cb:cb:b3:bf:e6:33:34:03:4d:9a:
                    7a:b2:91:02:1e:7e:29:56:41:5a:20:fd:2f:d4:ef:
                    82:ba:87:ea:b2:e4:cc:a8:12:32:b8:64:15:f4:9b:
                    bd:b6:00:6e:46:92:78:17:80:91:87:93:91:24:90:
                    48:8e:d6:96:34:a7:8e:e6:13:59:79:f3:83:86:42:
                    04:d5:74:15:16:8b:20:8d:ab:8f:0f:14:f4:ca:42:
                    e4:81:3c:f5:01:ed:20:0a:9f:3f:78:42:98:6e:27:
                    1d:c6:dd:5f:20:37:b8:d6:f7:76:ef:2e:57:21:ff:
                    98:61:0a:c8:cc:3b:22:cd:af:ec:2b:ee:34:21:b1:
                    75:79:c2:5f:5a:0d:6d:07:06:96:ec:13:7e:03:cb:
                    31:fe:19:a4:d7:b4:b9:80:b5:62:c2:7f:dc:98:2a:
                    63:6a:81:3d:bf:ea:e9:63:3c:f4:0b:2a:25:45:20:
                    e8:5b:f1:7f:b4:f4:fb:90:25:f4:83:46:1d:d2:de:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:19:6E:AE:56:42:16:77:0F:C1:07:AF:9F:A3:57:BE:00:37:65:DF
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VBlurlZCFncPwQevn6NXvgA3Zd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.48.0/21
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0/24
                  5.188.210.0/23
                  5.188.223.0/24
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.14.0/23
                  46.161.24.0/23
                  46.161.32.0/22
                  46.161.42.0/24
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/23
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:4b:f1:40:b2:7e:6e:9e:9c:4d:0c:f9:3f:4d:9d:53:da:
         cb:fa:aa:a6:89:2c:e6:47:72:a3:c5:0a:d3:61:7f:d6:0a:31:
         8a:82:21:9b:3d:25:23:09:fe:f6:4e:56:53:0e:7a:13:fc:61:
         e7:7d:3e:eb:35:78:bb:65:91:59:53:93:fd:82:23:a8:81:e1:
         e8:ab:af:00:03:b5:50:e7:e6:1a:7e:8c:af:85:af:e0:8b:d3:
         9c:ba:5f:14:8e:5a:83:94:8c:2f:5e:39:42:bb:97:fa:db:75:
         b5:84:df:85:6e:7f:f6:a1:8c:27:98:a5:11:eb:2f:37:d9:75:
         6b:10:68:39:e6:18:d1:ee:01:2c:eb:20:02:9c:52:35:a2:19:
         29:73:b6:96:a3:c9:79:6b:8b:f3:fe:95:e7:f3:ca:8d:80:91:
         b7:0a:7d:7c:89:bf:0f:9d:39:4c:fd:a1:15:fd:c8:67:e8:7f:
         96:10:67:a0:dc:c7:e5:ef:54:b3:d3:34:00:8c:f6:70:aa:af:
         3d:a8:b7:99:c9:54:9c:20:9e:d9:1a:cb:63:79:94:f0:c5:65:
         1b:65:ac:ad:36:ee:1f:76:0c:fa:9b:d8:54:8f:6c:8d:d8:e4:
         1b:e8:b1:1a:26:dc:ba:e8:7c:8e:78:4f:0d:33:5c:46:fe:5f:
         32:2f:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org