Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/M37FLguaE1r60AuoDxnwTEixQBU.roa
File:                     M37FLguaE1r60AuoDxnwTEixQBU.roa (raw, json)
Hash identifier:          tSwIBFU+B02jNRUQWlcIm5rkBjDEuPaS6AlljrIG1+g=
Subject key identifier:   33:7E:C5:2E:0B:9A:13:5A:FA:D0:0B:A8:0F:19:F0:4C:48:B1:40:15
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       018CC493732374688684DECF27131DB7B8C0
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/M37FLguaE1r60AuoDxnwTEixQBU.roa
Signing time:             Mon 01 Jan 2024 10:30:46 +0000
ROA not before:           Mon 01 Jan 2024 10:30:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2860
IP address blocks:        95.93.192.0/18 maxlen: 18
                          89.154.128.0/18 maxlen: 18
                          212.113.173.0/24 maxlen: 24
                          212.113.183.0/24 maxlen: 24
                          95.93.128.0/18 maxlen: 18
                          89.154.64.0/18 maxlen: 18
                          89.154.192.0/18 maxlen: 18
                          79.168.64.0/18 maxlen: 18
                          89.181.192.0/18 maxlen: 18
                          95.94.64.0/18 maxlen: 18
                          79.168.0.0/18 maxlen: 18
                          89.181.128.0/18 maxlen: 18
                          79.168.0.0/15 maxlen: 15
                          95.94.0.0/18 maxlen: 18
                          94.133.64.0/18 maxlen: 18
                          89.153.128.0/18 maxlen: 18
                          89.180.128.0/18 maxlen: 18
                          95.93.0.0/18 maxlen: 18
                          89.153.64.0/18 maxlen: 18
                          194.79.64.0/19 maxlen: 19
                          194.79.69.0/24 maxlen: 24
                          95.92.192.0/18 maxlen: 18
                          193.126.120.0/24 maxlen: 24
                          193.126.128.0/17 maxlen: 17
                          194.79.86.0/24 maxlen: 24
                          95.93.64.0/18 maxlen: 18
                          94.133.192.0/18 maxlen: 18
                          89.154.0.0/18 maxlen: 18
                          212.113.160.0/19 maxlen: 19
                          89.181.0.0/16 maxlen: 16
                          94.133.128.0/18 maxlen: 18
                          89.153.192.0/18 maxlen: 18
                          95.92.0.0/18 maxlen: 18
                          94.132.128.0/18 maxlen: 18
                          83.132.128.0/18 maxlen: 18
                          85.139.64.0/18 maxlen: 18
                          95.92.0.0/14 maxlen: 14
                          89.152.192.0/18 maxlen: 18
                          109.51.192.0/18 maxlen: 18
                          85.139.0.0/18 maxlen: 18
                          94.132.64.0/18 maxlen: 18
                          89.152.128.0/18 maxlen: 18
                          109.51.128.0/18 maxlen: 18
                          89.180.0.0/16 maxlen: 16
                          89.180.0.0/15 maxlen: 15
                          95.92.128.0/18 maxlen: 18
                          94.133.0.0/18 maxlen: 18
                          85.139.192.0/18 maxlen: 18
                          95.92.64.0/18 maxlen: 18
                          193.126.0.0/17 maxlen: 17
                          193.126.0.0/16 maxlen: 16
                          85.139.128.0/18 maxlen: 18
                          94.132.192.0/18 maxlen: 18
                          83.132.192.0/18 maxlen: 18
                          89.153.0.0/18 maxlen: 18
                          109.50.192.0/18 maxlen: 18
                          81.84.128.0/18 maxlen: 18
                          85.138.128.0/18 maxlen: 18
                          81.84.64.0/18 maxlen: 18
                          85.138.64.0/18 maxlen: 18
                          94.132.0.0/18 maxlen: 18
                          85.138.192.0/18 maxlen: 18
                          83.132.0.0/16 maxlen: 16
                          89.152.64.0/18 maxlen: 18
                          94.132.0.0/15 maxlen: 15
                          109.51.64.0/18 maxlen: 18
                          89.152.0.0/18 maxlen: 18
                          195.23.255.0/24 maxlen: 24
                          109.51.0.0/18 maxlen: 18
                          89.152.0.0/14 maxlen: 14
                          81.84.192.0/18 maxlen: 18
                          195.23.0.0/17 maxlen: 17
                          195.23.0.0/16 maxlen: 16
                          195.23.13.0/24 maxlen: 24
                          217.70.64.0/20 maxlen: 20
                          195.23.37.0/24 maxlen: 24
                          213.22.192.0/18 maxlen: 18
                          88.157.128.0/17 maxlen: 17
                          88.157.134.0/24 maxlen: 24
                          109.49.192.0/18 maxlen: 18
                          88.157.157.0/24 maxlen: 24
                          81.84.0.0/18 maxlen: 18
                          81.84.0.0/16 maxlen: 16
                          85.138.0.0/18 maxlen: 18
                          195.23.128.0/17 maxlen: 17
                          85.138.0.0/15 maxlen: 15
                          109.50.128.0/18 maxlen: 18
                          88.157.230.0/24 maxlen: 24
                          88.157.231.0/24 maxlen: 24
                          83.144.128.0/18 maxlen: 18
                          109.50.64.0/18 maxlen: 18
                          213.205.64.0/19 maxlen: 19
                          213.205.64.0/24 maxlen: 24
                          78.130.0.0/17 maxlen: 17
                          88.157.0.0/17 maxlen: 17
                          213.22.64.0/18 maxlen: 18
                          88.157.0.0/16 maxlen: 16
                          213.22.0.0/18 maxlen: 18
                          213.22.0.0/16 maxlen: 16
                          109.49.0.0/18 maxlen: 18
                          185.224.164.0/22 maxlen: 22
                          109.49.128.0/18 maxlen: 18
                          109.49.64.0/18 maxlen: 18
                          213.22.128.0/18 maxlen: 18
                          79.169.128.0/18 maxlen: 18
                          109.48.64.0/18 maxlen: 18
                          95.95.128.0/18 maxlen: 18
                          93.102.64.0/18 maxlen: 18
                          109.48.0.0/18 maxlen: 18
                          79.169.64.0/18 maxlen: 18
                          62.169.64.0/18 maxlen: 18
                          87.196.64.0/19 maxlen: 19
                          109.48.0.0/14 maxlen: 14
                          93.102.0.0/18 maxlen: 18
                          95.95.64.0/18 maxlen: 18
                          93.102.0.0/16 maxlen: 16
                          109.48.192.0/18 maxlen: 18
                          109.48.128.0/18 maxlen: 18
                          79.169.192.0/18 maxlen: 18
                          88.210.64.0/18 maxlen: 18
                          95.95.192.0/18 maxlen: 18
                          89.155.64.0/18 maxlen: 18
                          79.168.192.0/18 maxlen: 18
                          89.155.0.0/18 maxlen: 18
                          79.168.128.0/18 maxlen: 18
                          95.94.128.0/18 maxlen: 18
                          87.196.0.0/18 maxlen: 18
                          212.0.160.0/21 maxlen: 21
                          87.196.0.0/16 maxlen: 16
                          95.95.0.0/18 maxlen: 18
                          80.243.80.0/20 maxlen: 20
                          89.155.192.0/18 maxlen: 18
                          95.94.192.0/18 maxlen: 18
                          89.155.128.0/18 maxlen: 18
                          79.169.0.0/18 maxlen: 18
                          2a01:10::/29 maxlen: 29
                          2001:1588::/29 maxlen: 29
                          2a01:8:8011::/48 maxlen: 48
                          2a01:8::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 19:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:73:23:74:68:86:84:de:cf:27:13:1d:b7:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  1 10:30:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=337ec52e0b9a135afad00ba80f19f04c48b14015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:07:ff:ec:6b:c9:0a:60:c5:bd:0c:53:f1:
                    69:e3:80:86:28:f1:90:59:30:06:a7:9d:bc:73:22:
                    24:1c:f7:47:f2:81:70:21:30:b3:ad:1b:98:bf:c5:
                    f8:84:68:3e:1c:21:1c:18:b1:3c:c4:9b:90:94:70:
                    96:5f:54:6c:de:49:ec:5a:95:ef:e2:5c:3a:6b:ad:
                    11:1f:28:4d:18:c7:84:0b:7e:06:1c:9c:da:4a:22:
                    a3:d4:f0:a4:b4:51:24:b7:fb:27:e2:3b:ab:60:ea:
                    d6:c8:8e:d3:2e:b7:fa:40:40:0e:fe:88:a1:71:56:
                    12:41:46:57:db:ef:d2:53:4d:b5:24:17:96:87:71:
                    9f:38:96:ca:2e:88:8b:a1:fe:37:23:74:7d:b9:03:
                    27:51:f7:15:7d:aa:8f:e5:d5:2a:41:9e:36:07:a9:
                    34:86:7a:d6:f8:95:06:14:9d:c3:cd:a1:a5:50:ae:
                    e9:fb:2e:bd:10:e8:72:8e:57:a2:8f:53:87:93:2c:
                    df:fb:ed:b3:9c:d8:60:6a:fb:e6:08:4c:a3:f8:66:
                    ba:93:57:3e:cf:01:70:83:35:2a:e7:e5:d8:65:db:
                    9f:53:df:3c:02:6a:d8:b0:0d:42:c9:f3:a9:fb:35:
                    56:3d:7c:7b:31:1e:2b:ba:cc:e1:3b:e6:db:44:d1:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:C5:2E:0B:9A:13:5A:FA:D0:0B:A8:0F:19:F0:4C:48:B1:40:15
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/M37FLguaE1r60AuoDxnwTEixQBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.64.0/18
                  78.130.0.0/17
                  79.168.0.0/15
                  80.243.80.0/20
                  81.84.0.0/16
                  83.132.0.0/16
                  83.144.128.0/18
                  85.138.0.0/15
                  87.196.0.0/16
                  88.157.0.0/16
                  88.210.64.0/18
                  89.152.0.0/14
                  89.180.0.0/15
                  93.102.0.0/16
                  94.132.0.0/15
                  95.92.0.0/14
                  109.48.0.0/14
                  185.224.164.0/22
                  193.126.0.0/16
                  194.79.64.0/19
                  195.23.0.0/16
                  212.0.160.0/21
                  212.113.160.0/19
                  213.22.0.0/16
                  213.205.64.0/19
                  217.70.64.0/20
                IPv6:
                  2001:1588::/29
                  2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:22:34:aa:42:32:27:ff:e4:38:1d:a5:70:27:e9:7c:b9:
         e6:45:e4:e8:9f:0a:ab:e2:cc:e8:05:c5:f0:81:c3:fd:53:3c:
         6a:a1:8f:af:d1:2d:42:71:e9:df:ba:ef:c2:5f:65:f8:34:e6:
         45:ab:4d:0c:01:92:23:73:08:98:13:0f:1a:e4:88:4c:96:83:
         06:85:63:09:d0:37:ca:17:4e:db:b6:3c:fe:28:dd:ca:25:31:
         58:d1:85:65:5d:58:60:36:08:ea:ad:79:04:f7:ed:dc:d9:5d:
         5f:30:59:fb:83:7d:43:8f:45:a5:58:a1:76:33:7c:f8:65:c9:
         95:a1:6b:a2:53:33:cc:04:b8:b8:ec:5c:51:d8:89:1b:af:2c:
         58:11:3e:77:59:f6:97:6d:20:35:ee:a4:cb:e9:ea:f5:ce:00:
         82:67:0e:5d:a1:3c:43:cf:5d:20:ef:df:13:26:b2:57:b5:b8:
         62:c8:4c:1b:b0:74:5f:81:73:8b:a9:53:ba:f4:9f:a3:51:fb:
         4e:f8:60:9f:4d:af:ff:e1:6e:41:fc:99:91:35:bb:b1:17:e5:
         d4:22:03:d2:da:8a:a0:2a:71:52:c2:df:d3:df:aa:ea:68:fb:
         7e:86:1f:3f:9e:a8:c1:26:7e:9c:24:5c:b4:7d:19:6b:81:cb:
         09:d3:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:30 2024 by rpki-client on console-ams.rpki-client.org