Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5psZOC1j9kl2fpkzS4EAEQbxhCA.roa
File:                     5psZOC1j9kl2fpkzS4EAEQbxhCA.roa (raw, json)
Hash identifier:          CX2hcyq9JfbWJMsgfOlxoak4wvTXN3/tm6/e1DJmMTw=
Subject key identifier:   E6:9B:19:38:2D:63:F6:49:76:7E:99:33:4B:81:00:11:06:F1:84:20
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       018B1E693ED932E06FBD352297C331142CDF
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5psZOC1j9kl2fpkzS4EAEQbxhCA.roa
Signing time:             Wed 11 Oct 2023 11:04:55 +0000
ROA not before:           Wed 11 Oct 2023 11:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30781
IP address blocks:        46.231.216.0/21 maxlen: 24
                          185.53.80.0/22 maxlen: 24
                          46.22.192.0/20 maxlen: 24
                          46.255.200.0/21 maxlen: 24
                          185.114.100.0/22 maxlen: 24
                          94.100.160.0/20 maxlen: 24
                          37.110.192.0/21 maxlen: 24
                          193.151.84.0/24 maxlen: 24
                          193.151.84.0/22 maxlen: 24
                          37.26.184.0/21 maxlen: 24
                          193.151.87.0/24 maxlen: 24
                          37.156.226.0/24 maxlen: 24
                          194.116.142.0/23 maxlen: 24
                          185.15.140.0/22 maxlen: 24
                          185.62.184.0/22 maxlen: 24
                          212.85.229.0/24 maxlen: 24
                          212.85.230.0/23 maxlen: 24
                          195.234.35.0/24 maxlen: 24
                          95.143.64.0/20 maxlen: 24
                          176.241.120.0/21 maxlen: 24
                          91.224.162.0/23 maxlen: 24
                          212.18.240.0/21 maxlen: 24
                          82.96.128.0/18 maxlen: 24
                          78.153.224.0/19 maxlen: 24
                          185.61.184.0/22 maxlen: 24
                          185.61.184.0/21 maxlen: 24
                          91.226.193.0/24 maxlen: 24
                          185.61.188.0/22 maxlen: 24
                          31.172.232.0/21 maxlen: 24
                          31.172.238.0/24 maxlen: 24
                          185.78.156.0/22 maxlen: 24
                          185.92.36.0/22 maxlen: 24
                          31.7.248.0/21 maxlen: 24
                          193.189.124.0/23 maxlen: 24
                          31.172.160.0/22 maxlen: 24
                          185.4.60.0/23 maxlen: 24
                          185.4.62.0/24 maxlen: 24
                          185.91.224.0/22 maxlen: 24
                          77.72.88.0/21 maxlen: 24
                          37.61.240.0/21 maxlen: 24
                          46.102.116.0/24 maxlen: 24
                          85.31.192.0/19 maxlen: 24
                          82.163.36.0/22 maxlen: 24
                          149.232.160.0/20 maxlen: 24
                          87.121.136.0/21 maxlen: 24
                          5.226.0.0/21 maxlen: 24
                          88.212.144.0/21 maxlen: 24
                          185.209.52.0/22 maxlen: 24
                          82.196.24.0/21 maxlen: 24
                          77.246.80.0/20 maxlen: 24
                          89.44.77.0/24 maxlen: 24
                          195.128.147.0/24 maxlen: 24
                          2a03:bdc0::/32 maxlen: 48
                          2a02:398::/32 maxlen: 48
                          2a0b:41c0::/29 maxlen: 48
                          2a00:68c0::/32 maxlen: 48
                          2a04:cc00::/29 maxlen: 48
                          2a01:240::/32 maxlen: 48
                          2a01:290::/32 maxlen: 48
                          2a00:78c0::/29 maxlen: 48

Validation:               Failed, certificate revoked on Thu 09 Nov 2023 10:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1e:69:3e:d9:32:e0:6f:bd:35:22:97:c3:31:14:2c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Oct 11 11:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e69b19382d63f649767e99334b81001106f18420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:8e:2b:1f:e2:8d:bd:9f:1d:20:92:6e:4d:
                    14:fd:d4:a2:1a:93:76:8e:5e:c3:37:ad:c4:e5:a2:
                    cb:8a:d4:e1:3b:16:31:1f:ab:f2:b6:33:e8:2d:38:
                    d8:88:9f:ff:3b:c0:f2:80:ca:d6:0b:34:df:eb:e2:
                    82:b5:3d:72:d1:fe:90:08:e0:84:9a:a7:db:98:a7:
                    54:dd:95:f7:1d:97:e5:ab:96:3f:18:89:59:93:ea:
                    8c:03:8d:b6:5f:8d:b1:0a:3e:74:e6:f6:a5:8b:6b:
                    88:54:f8:e6:e0:07:ef:65:65:ad:70:c4:54:4e:86:
                    f0:fa:49:1e:71:65:97:d1:8c:a0:51:ba:55:b9:2e:
                    f4:dc:7c:fc:9e:ed:f7:6c:6e:1d:e8:34:ff:d3:ba:
                    9f:23:0e:97:2f:21:85:1c:eb:2b:f4:96:4a:87:50:
                    e4:3a:35:d3:c9:75:4c:63:9b:5a:4c:97:be:5b:c7:
                    d6:67:98:78:ff:4b:e3:d2:36:6f:2b:62:65:b3:95:
                    ec:4d:cb:03:a7:8b:ae:31:fc:3e:0f:70:9a:82:37:
                    86:64:9e:55:02:76:f4:cf:36:97:f2:b6:b6:6d:d6:
                    1f:30:21:68:b9:fb:ed:af:1a:a8:39:24:dc:e2:a0:
                    be:a5:80:8e:23:c7:2b:ae:78:73:d9:21:5c:b0:87:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:19:38:2D:63:F6:49:76:7E:99:33:4B:81:00:11:06:F1:84:20
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5psZOC1j9kl2fpkzS4EAEQbxhCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.0.0/21
                  31.7.248.0/21
                  31.172.160.0/22
                  31.172.232.0/21
                  37.26.184.0/21
                  37.61.240.0/21
                  37.110.192.0/21
                  37.156.226.0/24
                  46.22.192.0/20
                  46.102.116.0/24
                  46.231.216.0/21
                  46.255.200.0/21
                  77.72.88.0/21
                  77.246.80.0/20
                  78.153.224.0/19
                  82.96.128.0/18
                  82.163.36.0/22
                  82.196.24.0/21
                  85.31.192.0/19
                  87.121.136.0/21
                  88.212.144.0/21
                  89.44.77.0/24
                  91.224.162.0/23
                  91.226.193.0/24
                  94.100.160.0/20
                  95.143.64.0/20
                  149.232.160.0/20
                  176.241.120.0/21
                  185.4.60.0-185.4.62.255
                  185.15.140.0/22
                  185.53.80.0/22
                  185.61.184.0/21
                  185.62.184.0/22
                  185.78.156.0/22
                  185.91.224.0/22
                  185.92.36.0/22
                  185.114.100.0/22
                  185.209.52.0/22
                  193.151.84.0/22
                  193.189.124.0/23
                  194.116.142.0/23
                  195.128.147.0/24
                  195.234.35.0/24
                  212.18.240.0/21
                  212.85.229.0-212.85.231.255
                IPv6:
                  2a00:68c0::/32
                  2a00:78c0::/29
                  2a01:240::/32
                  2a01:290::/32
                  2a02:398::/32
                  2a03:bdc0::/32
                  2a04:cc00::/29
                  2a0b:41c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:50:a3:b9:fe:9d:18:96:37:27:d2:d6:a2:88:5c:90:cd:c7:
         23:83:6d:60:76:5e:1d:09:37:06:99:44:a3:3c:08:6e:ec:50:
         d0:02:e3:1f:cc:c9:b6:01:93:22:67:4f:e8:20:9b:29:95:bd:
         9b:8c:56:74:6a:0d:eb:69:60:e0:40:f1:3a:9c:e5:14:22:ad:
         12:7b:4a:dc:5d:da:7c:4f:01:bd:fb:04:fd:a3:ce:64:db:36:
         d3:4d:24:99:96:0c:b8:c3:91:1c:04:b6:52:3f:f4:16:66:27:
         4e:ae:a4:90:0d:c7:c8:3d:24:b7:24:b3:24:3d:61:b2:4a:37:
         ae:57:8a:83:82:78:d0:9a:6e:ae:66:2d:45:8a:f1:94:36:69:
         b2:8e:d7:27:42:92:e0:e9:78:23:ec:7b:ea:46:f3:0f:31:4b:
         7c:1e:ef:15:31:88:28:2b:c8:e3:3e:f1:a5:e4:35:c6:eb:06:
         79:60:9a:f0:a4:90:0c:17:c9:ae:3b:36:62:a9:d0:9f:c4:43:
         95:08:17:2d:24:25:72:b4:c3:1c:fc:10:34:b1:e9:cc:b7:b1:
         15:0d:53:e4:0a:cb:70:90:05:20:ff:4c:9b:8a:71:59:4d:57:
         0c:4a:82:37:85:ec:ed:3d:97:d9:6e:10:b2:14:33:c7:ea:40:
         0c:44:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org