Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/r4-0kXZFxDaNcjbqhyNgn2aEyJ4.roa
File:                     r4-0kXZFxDaNcjbqhyNgn2aEyJ4.roa (raw, json)
Hash identifier:          JsbyVc5ga49TVUB6wkN8H1VUsnfn7cSwASqnh6qTw9Q=
Subject key identifier:   AF:8F:B4:91:76:45:C4:36:8D:72:36:EA:87:23:60:9F:66:84:C8:9E
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018A5F48DA98EE602E11DF61F210BAA71F1A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/r4-0kXZFxDaNcjbqhyNgn2aEyJ4.roa
Signing time:             Mon 04 Sep 2023 08:22:04 +0000
ROA not before:           Mon 04 Sep 2023 08:22:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.12.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.48.0/23 maxlen: 23
                          46.161.48.0/22 maxlen: 22
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.48.0/23 maxlen: 23
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.244.0/23 maxlen: 23
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.52.0/23 maxlen: 23
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.56.0/24 maxlen: 24
                          5.8.57.0/24 maxlen: 24
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.8.0/23 maxlen: 23
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.19.0/24 maxlen: 24
                          5.8.48.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.220.0/23 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.222.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.101.90.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.48.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.62.0/23 maxlen: 23
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked on Mon 11 Sep 2023 08:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5f:48:da:98:ee:60:2e:11:df:61:f2:10:ba:a7:1f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Sep  4 08:22:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af8fb4917645c4368d7236ea8723609f6684c89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6d:4f:ca:21:da:16:b1:f6:44:c7:f8:45:db:
                    4c:ad:91:90:0b:81:e3:05:75:3c:c7:49:16:7f:36:
                    f0:13:54:e8:f0:53:91:90:8b:6b:94:b4:0f:8d:d8:
                    dd:37:ae:f8:cc:cc:1d:f3:23:d9:9e:41:c9:dd:f6:
                    93:af:e6:bd:9c:f5:73:33:56:df:71:91:8a:de:77:
                    ca:d2:9d:d0:a3:b6:2c:1c:5b:25:75:61:3a:5e:54:
                    17:e9:63:29:ef:eb:c1:87:62:2e:56:80:76:6a:ac:
                    4e:9f:72:b8:80:20:2d:4d:2c:64:b6:c7:80:75:f7:
                    1f:65:ba:27:73:a2:3e:f4:3c:10:5b:30:85:7e:a6:
                    51:d1:19:f8:94:bb:7e:71:66:b7:8a:7f:b2:3e:e5:
                    26:79:31:db:7a:99:45:6d:d3:9f:9b:e5:cc:6c:f4:
                    d2:ce:8f:37:fa:dc:f4:8a:4c:9e:0d:d2:87:62:2a:
                    57:19:f1:48:20:bb:b7:02:33:e7:a0:e8:67:94:a7:
                    8e:76:71:4f:46:02:87:b1:8e:a2:97:b6:ae:82:58:
                    07:63:32:95:9f:3a:0d:f6:eb:31:30:61:ac:00:a3:
                    62:d6:37:5a:df:bf:67:a3:15:cc:d0:a4:a6:27:d2:
                    ba:07:e7:90:5a:e4:b8:11:51:e1:79:d0:51:dc:98:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:B4:91:76:45:C4:36:8D:72:36:EA:87:23:60:9F:66:84:C8:9E
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/r4-0kXZFxDaNcjbqhyNgn2aEyJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.19.0/24
                  5.8.48.0-5.8.57.255
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0-5.188.211.255
                  5.188.220.0/22
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.48.0/23
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.12.0/22
                  46.161.20.0-46.161.25.255
                  46.161.32.0/22
                  46.161.42.0/24
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/22
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  146.185.244.0/23
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:1e:23:14:d9:7c:ea:77:75:25:50:99:20:fb:47:63:24:
         08:f8:91:e8:cc:63:44:2a:83:5c:58:49:e0:25:9b:59:a4:f4:
         92:1f:ae:37:c4:fa:3a:fb:09:f7:25:03:d6:6d:2d:2b:ae:fa:
         51:55:43:34:e0:f3:04:2e:83:03:1c:e5:e9:46:b5:00:9a:5b:
         2b:4c:26:7b:2e:dc:c4:10:26:20:30:c3:06:5c:9a:cf:80:15:
         da:fa:e8:83:4e:52:92:59:0f:12:11:60:dc:5f:30:6a:66:06:
         d0:ae:53:be:d7:53:bc:4e:1d:94:6a:3e:e5:ed:50:88:49:97:
         d8:e2:49:ee:05:e2:ab:b7:8d:b6:aa:d9:2f:7e:28:71:64:05:
         ca:c4:f4:30:0d:32:d7:34:21:ef:a7:99:63:03:5e:df:d3:17:
         98:64:11:a5:fc:e0:47:67:c3:88:cc:e2:a9:0e:58:a8:2e:b1:
         c5:95:66:f5:ee:50:d5:a8:03:42:be:8a:5d:4b:5a:da:22:69:
         c4:78:fa:9b:94:e7:da:46:38:f1:8a:2d:d9:6d:06:49:3b:da:
         4f:42:1c:8f:0e:f4:3b:ca:29:3d:80:0c:0a:8e:03:86:61:38:
         39:d0:83:81:9b:75:8e:4b:77:ac:0a:19:c5:a5:7f:cf:6f:b9:
         7a:7f:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org