Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa
File:                     hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa (raw, json)
Hash identifier:          jZUriQlG2P/QDH3Zt/REGWvdvrrGpew+bdI6Zvo4Gpw=
Subject key identifier:   86:98:E2:D1:8D:25:74:8F:CE:4C:D0:39:B2:00:EB:49:47:BB:67:43
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018AF5BC7731E4EFACE5966D3499507B32DA
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa
Signing time:             Tue 03 Oct 2023 13:31:23 +0000
ROA not before:           Tue 03 Oct 2023 13:31:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.48.0/22 maxlen: 22
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.8.0/23 maxlen: 23
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.48.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.101.90.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          91.243.48.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked on Thu 05 Oct 2023 09:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f5:bc:77:31:e4:ef:ac:e5:96:6d:34:99:50:7b:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Oct  3 13:31:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8698e2d18d25748fce4cd039b200eb4947bb6743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:4d:89:6f:b1:1e:c6:bb:72:15:44:27:d3:
                    f2:2c:1a:80:12:bf:88:01:bd:f5:50:40:8c:7a:45:
                    7b:6f:18:92:b6:d6:ef:89:06:7b:ef:ee:a4:17:ff:
                    15:84:48:b6:e2:f8:61:69:e2:35:f5:62:a4:1e:d7:
                    9b:0f:e8:d4:d8:1a:cc:d3:98:75:03:b2:6e:d0:51:
                    d6:46:34:56:fb:5c:71:13:f3:63:87:16:15:43:df:
                    83:45:8c:ef:ec:f0:37:00:05:4c:51:ef:31:93:a9:
                    14:eb:38:3d:8c:6b:fd:f3:e9:11:87:86:25:a1:f5:
                    9a:a1:59:a7:f1:ae:1a:aa:f1:a7:26:a7:d9:95:13:
                    26:98:4c:f7:22:b9:a2:cf:7c:8d:f9:a2:58:d5:cf:
                    2a:1c:99:3b:ea:a3:67:5e:60:d0:01:a5:b9:c7:2d:
                    65:d0:cf:e1:b6:b8:9a:de:4c:91:7c:eb:b8:d6:d6:
                    8a:21:8e:fe:66:5a:30:9f:68:76:27:cc:69:ea:5e:
                    9f:28:58:53:8f:d4:69:5a:9d:d7:b0:85:20:47:0d:
                    3f:e8:da:39:8d:81:38:bf:72:3b:16:42:d5:9d:8b:
                    be:84:b7:11:9e:53:8a:bb:0a:01:41:58:3d:83:2b:
                    a8:81:98:a3:2f:d1:41:68:18:db:bd:ca:22:2b:38:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:98:E2:D1:8D:25:74:8F:CE:4C:D0:39:B2:00:EB:49:47:BB:67:43
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hpji0Y0ldI_OTNA5sgDrSUe7Z0M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.48.0/21
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0/24
                  5.188.210.0/23
                  5.188.223.0/24
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.14.0/23
                  46.161.24.0/23
                  46.161.32.0/22
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/23
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         3b:c5:10:be:70:2b:19:58:93:40:79:cf:82:5c:06:df:15:11:
         e0:12:b2:36:65:8e:37:c8:62:70:f3:b2:6f:66:82:2d:d6:89:
         52:6a:bd:8b:4d:2a:c8:b8:93:a2:00:0c:52:c3:fc:af:d0:15:
         21:ae:a7:ce:54:9b:34:40:ea:d6:6c:d1:a8:75:5a:1b:25:e0:
         bc:a0:d0:60:16:46:ed:e8:0c:7c:67:0e:5d:0a:f5:94:8a:e9:
         52:5d:aa:dc:62:b6:dc:f5:06:d8:5b:a1:3a:65:06:24:54:ea:
         d9:5a:00:90:05:11:36:d3:3d:bf:82:3e:6c:20:7b:cd:0a:b5:
         54:46:8e:e0:76:71:3d:b5:ed:f7:60:20:e5:3e:c4:39:69:85:
         7b:33:46:40:98:2e:be:14:d6:2e:ad:db:c2:1e:e0:5d:2c:21:
         4b:36:e1:6e:ff:51:ff:dc:53:75:35:32:f9:6f:a7:c0:5f:cc:
         8c:cd:10:4e:99:61:70:33:e0:c4:bc:43:2d:01:0f:93:82:a9:
         d5:c8:98:db:e9:f7:d3:9c:24:2e:2c:02:77:8e:34:b7:42:de:
         3c:3c:0f:3f:f0:8d:64:92:a6:61:de:e7:23:79:ca:86:d1:a5:
         56:d6:38:da:47:79:7d:f5:2c:79:c7:0b:62:00:52:c9:70:b0:
         d1:a6:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org