Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/VGw55O1nGHNj6jFJfUbC2miEOLE.roa
File:                     VGw55O1nGHNj6jFJfUbC2miEOLE.roa (raw, json)
Hash identifier:          TlJ+7SgC70ruTX8j8cVPNdwx2xEqUlcr/EBDAYaJzFE=
Subject key identifier:   54:6C:39:E4:ED:67:18:73:63:EA:31:49:7D:46:C2:DA:68:84:38:B1
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       0187BF761CB32EA7155E2C45145854872690
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/VGw55O1nGHNj6jFJfUbC2miEOLE.roa
Signing time:             Wed 26 Apr 2023 21:26:41 +0000
ROA not before:           Wed 26 Apr 2023 21:26:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199610
IP address blocks:        31.214.192.0/22 maxlen: 22
                          31.214.196.0/22 maxlen: 22
                          31.214.202.0/23 maxlen: 23
                          31.214.204.0/22 maxlen: 22
                          31.214.208.0/22 maxlen: 22
                          31.214.216.0/23 maxlen: 23
                          31.214.218.0/24 maxlen: 24
                          31.214.219.0/24 maxlen: 24
                          31.214.220.0/23 maxlen: 23
                          31.214.224.0/22 maxlen: 22
                          31.214.232.0/21 maxlen: 21
                          134.255.208.0/23 maxlen: 23
                          134.255.212.0/23 maxlen: 23
                          134.255.214.0/24 maxlen: 24
                          134.255.240.0/24 maxlen: 24
                          134.255.251.0/24 maxlen: 24
                          134.255.198.0/24 maxlen: 24
                          31.214.134.0/23 maxlen: 23
                          31.214.136.0/24 maxlen: 24
                          31.214.142.0/23 maxlen: 23
                          31.214.148.0/24 maxlen: 24
                          45.140.128.0/23 maxlen: 23
                          45.140.131.0/24 maxlen: 24
                          31.214.158.0/23 maxlen: 23
                          31.214.161.0/24 maxlen: 24
                          31.214.160.0/24 maxlen: 24
                          31.214.162.0/23 maxlen: 23
                          31.214.164.0/22 maxlen: 22
                          31.214.130.0/23 maxlen: 23
                          31.214.128.0/24 maxlen: 24
                          37.10.96.0/21 maxlen: 21
                          37.10.104.0/23 maxlen: 23
                          37.10.107.0/24 maxlen: 24
                          37.10.115.0/24 maxlen: 24
                          37.10.118.0/24 maxlen: 24
                          37.10.120.0/22 maxlen: 22
                          37.10.119.0/24 maxlen: 24
                          37.10.124.0/22 maxlen: 22
                          45.159.4.0/23 maxlen: 23
                          45.159.7.0/24 maxlen: 24
                          45.159.6.0/24 maxlen: 24
                          5.83.160.0/22 maxlen: 22
                          5.83.164.0/23 maxlen: 23
                          5.83.166.0/24 maxlen: 24
                          5.83.172.0/23 maxlen: 23
                          5.83.167.0/24 maxlen: 24
                          5.83.168.0/22 maxlen: 22
                          5.83.174.0/23 maxlen: 23
                          46.251.231.0/24 maxlen: 24
                          46.251.228.0/24 maxlen: 24
                          46.251.229.0/24 maxlen: 24
                          46.251.232.0/23 maxlen: 23
                          185.9.104.0/22 maxlen: 22
                          46.251.234.0/24 maxlen: 24
                          46.251.238.0/24 maxlen: 24
                          46.251.235.0/24 maxlen: 24
                          46.251.236.0/24 maxlen: 24
                          46.251.240.0/21 maxlen: 21
                          85.190.138.0/23 maxlen: 23
                          85.190.134.0/23 maxlen: 23
                          85.190.136.0/24 maxlen: 24
                          85.190.137.0/24 maxlen: 24
                          109.230.243.0/24 maxlen: 24
                          109.230.248.0/23 maxlen: 23
                          85.190.140.0/22 maxlen: 22
                          95.156.220.0/23 maxlen: 23
                          95.156.224.0/24 maxlen: 24
                          85.190.144.0/24 maxlen: 24
                          85.190.145.0/24 maxlen: 24
                          85.190.152.0/24 maxlen: 24
                          85.190.147.0/24 maxlen: 24
                          85.190.148.0/24 maxlen: 24
                          85.190.146.0/24 maxlen: 24
                          85.190.150.0/24 maxlen: 24
                          85.190.149.0/24 maxlen: 24
                          85.190.154.0/23 maxlen: 23
                          85.190.153.0/24 maxlen: 24
                          95.156.238.0/24 maxlen: 24
                          85.190.158.0/24 maxlen: 24
                          95.156.239.0/24 maxlen: 24
                          85.190.156.0/23 maxlen: 23
                          85.190.159.0/24 maxlen: 24
                          85.190.160.0/22 maxlen: 22
                          85.190.164.0/22 maxlen: 22
                          85.190.168.0/22 maxlen: 22
                          85.190.172.0/22 maxlen: 22
                          95.156.250.0/24 maxlen: 24
                          109.230.197.0/24 maxlen: 24
                          5.62.96.0/20 maxlen: 20
                          109.230.208.0/24 maxlen: 24
                          109.230.211.0/24 maxlen: 24
                          195.82.158.0/23 maxlen: 23
                          109.230.214.0/24 maxlen: 24
                          95.156.193.0/24 maxlen: 24
                          95.156.194.0/24 maxlen: 24
                          5.62.112.0/21 maxlen: 21
                          95.156.198.0/24 maxlen: 24
                          5.62.120.0/22 maxlen: 22
                          5.62.124.0/23 maxlen: 23
                          5.62.126.0/24 maxlen: 24
                          5.62.127.0/24 maxlen: 24
                          85.190.130.0/23 maxlen: 23
                          95.156.211.0/24 maxlen: 24
                          85.190.128.0/23 maxlen: 23
                          95.156.209.0/24 maxlen: 24
                          85.190.132.0/23 maxlen: 23
                          109.230.240.0/23 maxlen: 23
                          95.156.213.0/24 maxlen: 24
                          5.62.64.0/21 maxlen: 21
                          194.169.211.0/24 maxlen: 24
                          217.114.192.0/21 maxlen: 21
                          128.0.112.0/23 maxlen: 23
                          128.0.114.0/23 maxlen: 23
                          5.101.160.0/21 maxlen: 21
                          2a03:4d45:800::/37 maxlen: 37
                          2a03:4d45::/37 maxlen: 37
                          2a03:4d44:800::/37 maxlen: 37
                          2a03:4d40::/32 maxlen: 32
                          2a03:4d43:800::/37 maxlen: 37
                          2a03:4d41:600::/40 maxlen: 40
                          2a03:4d42::/37 maxlen: 37
                          2a03:4d42:800::/37 maxlen: 37
                          2a03:4d41:100::/40 maxlen: 40
                          2a03:4d41:400::/40 maxlen: 40
                          2a03:4d41:900::/40 maxlen: 40
                          2a03:4d41:200::/40 maxlen: 40
                          2a03:4d41:500::/40 maxlen: 40
                          2a03:4d42::/32 maxlen: 32
                          2a03:4d41:300::/40 maxlen: 40
                          2a03:4d41::/40 maxlen: 40
                          2a03:4d41:200::/44 maxlen: 44
                          2a03:4d41:100::/44 maxlen: 44
                          2a03:4d41:600::/44 maxlen: 44
                          2a03:4d41:500::/44 maxlen: 44
                          2a03:4d41:400::/44 maxlen: 44
                          2a03:4d41:300::/44 maxlen: 44
                          2a03:4d41::/44 maxlen: 44
                          2a03:4d41:10::/44 maxlen: 44
                          2a03:4d41:210::/44 maxlen: 44
                          2a03:4d41:610::/44 maxlen: 44
                          2a03:4d41:510::/44 maxlen: 44
                          2a03:4d47:800::/48 maxlen: 48
                          2a03:4d47::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 16 May 2023 13:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bf:76:1c:b3:2e:a7:15:5e:2c:45:14:58:54:87:26:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Apr 26 21:26:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=546c39e4ed67187363ea31497d46c2da688438b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bd:16:82:7f:2b:4a:2d:75:74:ee:b5:af:56:
                    ad:f4:e3:f8:fe:e2:4c:7d:35:e5:81:03:a6:43:be:
                    30:df:87:39:8b:5e:ef:1b:2b:7e:36:b5:9b:e6:fa:
                    c5:d8:67:24:97:8f:5b:64:c5:46:6a:e4:29:1d:ab:
                    4a:d2:d1:ad:34:60:7a:ce:d9:2b:9e:e3:42:f8:ab:
                    82:60:74:f5:fa:cf:f3:f8:34:f8:1d:b2:9f:4f:42:
                    34:0c:46:6e:f8:33:1d:d2:9f:06:29:22:db:a7:4b:
                    b7:e6:19:88:f2:d3:fe:af:6f:6f:e8:c6:be:5b:8d:
                    70:19:f8:ac:59:4f:71:c2:f0:66:a8:18:f9:51:32:
                    cd:44:6d:17:7a:8c:81:82:52:a7:22:68:8f:85:3a:
                    bd:c8:76:ee:57:c6:9b:51:0b:bb:ae:54:cd:75:32:
                    67:de:b9:d0:28:17:89:e1:1a:1b:e8:a9:df:d5:0f:
                    7d:29:8f:40:ed:5e:bd:c2:eb:8e:75:1f:81:8b:93:
                    c5:45:dc:74:d4:44:7a:2c:74:c6:0c:91:2a:73:32:
                    1f:e1:23:c4:6e:c6:ab:65:33:31:c2:79:76:8d:59:
                    4e:81:79:e6:1d:b9:eb:80:b5:b4:4f:55:3e:08:b8:
                    44:f0:d8:bd:c5:af:3b:28:db:6a:30:b4:f4:39:92:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6C:39:E4:ED:67:18:73:63:EA:31:49:7D:46:C2:DA:68:84:38:B1
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/VGw55O1nGHNj6jFJfUbC2miEOLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.62.64.0/21
                  5.62.96.0/19
                  5.83.160.0/20
                  5.101.160.0/21
                  31.214.128.0/24
                  31.214.130.0/23
                  31.214.134.0-31.214.136.255
                  31.214.142.0/23
                  31.214.148.0/24
                  31.214.158.0-31.214.167.255
                  31.214.192.0/21
                  31.214.202.0-31.214.211.255
                  31.214.216.0-31.214.221.255
                  31.214.224.0/22
                  31.214.232.0/21
                  37.10.96.0-37.10.105.255
                  37.10.107.0/24
                  37.10.115.0/24
                  37.10.118.0-37.10.127.255
                  45.140.128.0/23
                  45.140.131.0/24
                  45.159.4.0/22
                  46.251.228.0/23
                  46.251.231.0-46.251.236.255
                  46.251.238.0/24
                  46.251.240.0/21
                  85.190.128.0-85.190.150.255
                  85.190.152.0-85.190.175.255
                  95.156.193.0-95.156.194.255
                  95.156.198.0/24
                  95.156.209.0/24
                  95.156.211.0/24
                  95.156.213.0/24
                  95.156.220.0/23
                  95.156.224.0/24
                  95.156.238.0/23
                  95.156.250.0/24
                  109.230.197.0/24
                  109.230.208.0/24
                  109.230.211.0/24
                  109.230.214.0/24
                  109.230.240.0/23
                  109.230.243.0/24
                  109.230.248.0/23
                  128.0.112.0/22
                  134.255.198.0/24
                  134.255.208.0/23
                  134.255.212.0-134.255.214.255
                  134.255.240.0/24
                  134.255.251.0/24
                  185.9.104.0/22
                  194.169.211.0/24
                  195.82.158.0/23
                  217.114.192.0/21
                IPv6:
                  2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
                  2a03:4d41:900::/40
                  2a03:4d42::/32
                  2a03:4d43:800::/37
                  2a03:4d44:800::/37
                  2a03:4d45::/36
                  2a03:4d47::/48
                  2a03:4d47:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:18:e9:81:19:b3:4a:f8:6b:62:f2:a6:eb:d1:a6:16:b0:
         77:dd:3b:ad:96:ce:53:23:48:e0:d4:74:34:c2:1a:0c:92:d7:
         31:ed:a7:40:27:c2:45:07:76:47:b1:da:ef:96:64:51:ab:fa:
         c2:c9:f2:e2:ff:40:35:4f:fe:ab:16:03:c1:03:49:9f:ad:99:
         7e:a5:81:24:6e:ae:d6:3a:1e:34:7a:8a:1e:e2:2a:93:14:44:
         b3:ba:16:b6:d3:91:19:99:3c:6c:5f:90:e3:b0:83:4e:c7:3d:
         4a:02:20:a1:a3:67:19:32:60:d2:4d:93:bf:32:b6:f5:c8:3c:
         5e:3e:25:0c:dd:9c:38:a7:02:45:6c:5e:16:d8:fc:9a:d9:0a:
         7b:12:51:b4:49:f8:ad:4d:ab:a6:45:6a:5d:9c:34:8b:55:66:
         30:39:ee:ac:2f:d5:d7:25:45:65:ac:7f:84:f2:96:87:70:74:
         ba:10:94:4f:fd:9f:29:07:d0:2c:9e:d1:a5:df:ad:92:11:ce:
         4c:7b:09:d0:e4:61:10:e5:20:32:03:6f:b6:46:84:bf:5d:af:
         22:c2:74:50:2c:d1:0c:65:02:76:58:1d:1c:7d:bd:5a:a1:be:
         5a:8f:4b:ed:eb:43:18:b7:07:8b:d7:21:39:55:04:e4:5a:e1:
         ea:bd:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org