Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/YTF-x1KcOvHSP171s5Gvvo071So.roa
File:                     YTF-x1KcOvHSP171s5Gvvo071So.roa (raw, json)
Hash identifier:          dnF6WzWqt3/DW4Kb90oYndUBOezVmsxJk95DPTqQY8Q=
Subject key identifier:   61:31:7E:C7:52:9C:3A:F1:D2:3F:5E:F5:B3:91:AF:BE:8D:3B:D5:2A
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       0191370ED60CC61BF9B8A702E3BA6FC41A87
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/YTF-x1KcOvHSP171s5Gvvo071So.roa
Signing time:             Fri 09 Aug 2024 12:13:24 +0000
ROA not before:           Fri 09 Aug 2024 12:13:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199610
IP address blocks:        5.62.64.0/23 maxlen: 23
                          5.62.66.0/24 maxlen: 24
                          5.62.67.0/24 maxlen: 24
                          5.62.68.0/22 maxlen: 22
                          5.62.96.0/20 maxlen: 20
                          5.62.112.0/24 maxlen: 24
                          5.62.113.0/24 maxlen: 24
                          5.62.114.0/24 maxlen: 24
                          5.62.115.0/24 maxlen: 24
                          5.62.116.0/24 maxlen: 24
                          5.62.117.0/24 maxlen: 24
                          5.62.118.0/24 maxlen: 24
                          5.62.119.0/24 maxlen: 24
                          5.62.120.0/24 maxlen: 24
                          5.62.121.0/24 maxlen: 24
                          5.62.122.0/24 maxlen: 24
                          5.62.123.0/24 maxlen: 24
                          5.62.124.0/23 maxlen: 23
                          5.62.126.0/24 maxlen: 24
                          5.62.127.0/24 maxlen: 24
                          5.83.160.0/22 maxlen: 22
                          5.83.164.0/23 maxlen: 23
                          5.83.166.0/24 maxlen: 24
                          5.83.167.0/24 maxlen: 24
                          5.83.168.0/22 maxlen: 22
                          5.83.172.0/23 maxlen: 23
                          5.83.174.0/23 maxlen: 23
                          5.101.160.0/21 maxlen: 21
                          31.214.128.0/24 maxlen: 24
                          31.214.130.0/23 maxlen: 23
                          31.214.134.0/23 maxlen: 23
                          31.214.136.0/24 maxlen: 24
                          31.214.142.0/23 maxlen: 23
                          31.214.148.0/24 maxlen: 24
                          31.214.158.0/23 maxlen: 23
                          31.214.160.0/24 maxlen: 24
                          31.214.161.0/24 maxlen: 24
                          31.214.162.0/24 maxlen: 24
                          31.214.163.0/24 maxlen: 24
                          31.214.164.0/22 maxlen: 22
                          31.214.192.0/22 maxlen: 22
                          31.214.196.0/22 maxlen: 22
                          31.214.202.0/23 maxlen: 23
                          31.214.204.0/22 maxlen: 22
                          31.214.208.0/22 maxlen: 22
                          31.214.216.0/23 maxlen: 23
                          31.214.218.0/24 maxlen: 24
                          31.214.219.0/24 maxlen: 24
                          31.214.220.0/23 maxlen: 23
                          31.214.224.0/22 maxlen: 22
                          31.214.232.0/21 maxlen: 21
                          37.10.96.0/21 maxlen: 21
                          37.10.104.0/23 maxlen: 23
                          37.10.106.0/24 maxlen: 24
                          37.10.107.0/24 maxlen: 24
                          37.10.115.0/24 maxlen: 24
                          37.10.118.0/24 maxlen: 24
                          37.10.119.0/24 maxlen: 24
                          37.10.120.0/22 maxlen: 22
                          37.10.124.0/22 maxlen: 22
                          45.140.128.0/23 maxlen: 23
                          45.140.130.0/24 maxlen: 24
                          45.140.131.0/24 maxlen: 24
                          45.159.4.0/23 maxlen: 23
                          45.159.6.0/24 maxlen: 24
                          45.159.7.0/24 maxlen: 24
                          46.251.228.0/24 maxlen: 24
                          46.251.229.0/24 maxlen: 24
                          46.251.230.0/24 maxlen: 24
                          46.251.231.0/24 maxlen: 24
                          46.251.232.0/23 maxlen: 23
                          46.251.234.0/24 maxlen: 24
                          46.251.235.0/24 maxlen: 24
                          46.251.236.0/24 maxlen: 24
                          46.251.238.0/24 maxlen: 24
                          46.251.240.0/21 maxlen: 21
                          46.251.248.0/24 maxlen: 24
                          85.190.128.0/23 maxlen: 23
                          85.190.130.0/23 maxlen: 23
                          85.190.132.0/23 maxlen: 23
                          85.190.134.0/23 maxlen: 23
                          85.190.136.0/24 maxlen: 24
                          85.190.137.0/24 maxlen: 24
                          85.190.138.0/23 maxlen: 23
                          85.190.140.0/22 maxlen: 22
                          85.190.144.0/24 maxlen: 24
                          85.190.145.0/24 maxlen: 24
                          85.190.146.0/24 maxlen: 24
                          85.190.147.0/24 maxlen: 24
                          85.190.148.0/24 maxlen: 24
                          85.190.149.0/24 maxlen: 24
                          85.190.150.0/24 maxlen: 24
                          85.190.151.0/24 maxlen: 24
                          85.190.152.0/24 maxlen: 24
                          85.190.153.0/24 maxlen: 24
                          85.190.154.0/23 maxlen: 23
                          85.190.156.0/23 maxlen: 23
                          85.190.158.0/24 maxlen: 24
                          85.190.159.0/24 maxlen: 24
                          85.190.160.0/22 maxlen: 22
                          85.190.164.0/22 maxlen: 22
                          85.190.168.0/22 maxlen: 22
                          85.190.172.0/22 maxlen: 22
                          95.156.193.0/24 maxlen: 24
                          95.156.194.0/24 maxlen: 24
                          95.156.198.0/24 maxlen: 24
                          95.156.209.0/24 maxlen: 24
                          95.156.210.0/24 maxlen: 24
                          95.156.211.0/24 maxlen: 24
                          95.156.213.0/24 maxlen: 24
                          95.156.220.0/23 maxlen: 23
                          95.156.224.0/24 maxlen: 24
                          95.156.238.0/24 maxlen: 24
                          95.156.239.0/24 maxlen: 24
                          95.156.250.0/24 maxlen: 24
                          109.230.197.0/24 maxlen: 24
                          109.230.208.0/24 maxlen: 24
                          109.230.211.0/24 maxlen: 24
                          109.230.214.0/24 maxlen: 24
                          109.230.240.0/23 maxlen: 23
                          109.230.243.0/24 maxlen: 24
                          109.230.248.0/23 maxlen: 23
                          128.0.112.0/23 maxlen: 23
                          128.0.114.0/23 maxlen: 23
                          134.255.198.0/24 maxlen: 24
                          134.255.208.0/23 maxlen: 23
                          134.255.212.0/23 maxlen: 23
                          134.255.214.0/24 maxlen: 24
                          134.255.240.0/24 maxlen: 24
                          134.255.251.0/24 maxlen: 24
                          185.9.104.0/22 maxlen: 22
                          194.169.211.0/24 maxlen: 24
                          195.82.158.0/23 maxlen: 23
                          217.114.192.0/21 maxlen: 21
                          2a03:4d40::/32 maxlen: 32
                          2a03:4d40::/48 maxlen: 48
                          2a03:4d40:10::/48 maxlen: 48
                          2a03:4d40:20::/48 maxlen: 48
                          2a03:4d40:30::/48 maxlen: 48
                          2a03:4d40:40::/48 maxlen: 48
                          2a03:4d40:50::/48 maxlen: 48
                          2a03:4d40:60::/48 maxlen: 48
                          2a03:4d40:70::/48 maxlen: 48
                          2a03:4d40:80::/48 maxlen: 48
                          2a03:4d40:90::/48 maxlen: 48
                          2a03:4d40:a0::/48 maxlen: 48
                          2a03:4d40:b0::/48 maxlen: 48
                          2a03:4d41::/40 maxlen: 40
                          2a03:4d41:100::/40 maxlen: 40
                          2a03:4d41:100::/44 maxlen: 44
                          2a03:4d41:200::/40 maxlen: 40
                          2a03:4d41:200::/44 maxlen: 44
                          2a03:4d41:210::/44 maxlen: 44
                          2a03:4d41:300::/40 maxlen: 40
                          2a03:4d41:300::/44 maxlen: 44
                          2a03:4d41:400::/40 maxlen: 40
                          2a03:4d41:400::/44 maxlen: 44
                          2a03:4d41:500::/40 maxlen: 40
                          2a03:4d41:500::/44 maxlen: 44
                          2a03:4d41:510::/44 maxlen: 44
                          2a03:4d41:600::/40 maxlen: 40
                          2a03:4d41:600::/44 maxlen: 44
                          2a03:4d41:610::/44 maxlen: 44
                          2a03:4d41:900::/40 maxlen: 40
                          2a03:4d42::/32 maxlen: 32
                          2a03:4d42::/37 maxlen: 37
                          2a03:4d42:800::/37 maxlen: 37
                          2a03:4d43:800::/37 maxlen: 37
                          2a03:4d44:800::/37 maxlen: 37
                          2a03:4d45:800::/37 maxlen: 37
                          2a03:4d47::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 08:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:37:0e:d6:0c:c6:1b:f9:b8:a7:02:e3:ba:6f:c4:1a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Aug  9 12:13:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=61317ec7529c3af1d23f5ef5b391afbe8d3bd52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:d5:d7:4b:83:41:ce:44:0f:92:67:66:ac:
                    e2:9f:c5:2d:da:7a:75:17:d4:7d:a1:47:d7:65:85:
                    c9:c8:6c:d9:18:df:77:2f:1d:4c:ef:7a:fa:d5:4f:
                    c6:35:14:36:6d:18:9a:fa:05:86:a7:c3:f3:03:89:
                    c1:85:df:b7:e8:b9:24:91:cf:e8:1a:29:58:11:7b:
                    c3:af:28:05:8f:31:d0:4b:44:a5:6d:ad:24:27:9d:
                    27:47:d2:fb:d6:5a:5d:2b:0b:79:d8:b2:80:27:b5:
                    aa:cb:53:41:cd:af:36:4e:0d:bf:6e:89:34:b2:76:
                    a2:aa:10:73:63:43:21:4b:f5:51:b9:5d:94:65:6a:
                    74:12:19:34:d5:5f:d3:d1:e5:3f:8d:3a:92:0b:56:
                    85:49:06:3c:bf:0b:5a:58:01:20:cf:70:b8:4b:25:
                    e8:28:26:ba:52:47:6d:79:dd:75:72:5c:73:d0:48:
                    25:c2:da:58:af:04:4d:2d:62:25:a9:96:e6:b6:41:
                    aa:50:f2:d4:4d:57:1f:ae:78:ac:26:27:69:20:80:
                    51:82:67:14:47:37:f7:28:a4:b0:f2:93:1e:99:80:
                    49:17:1d:f9:10:fc:83:d8:c6:1d:a1:64:77:44:56:
                    67:11:a6:52:88:ce:8c:d0:23:f6:88:ce:67:54:18:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:31:7E:C7:52:9C:3A:F1:D2:3F:5E:F5:B3:91:AF:BE:8D:3B:D5:2A
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/YTF-x1KcOvHSP171s5Gvvo071So.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.62.64.0/21
                  5.62.96.0/19
                  5.83.160.0/20
                  5.101.160.0/21
                  31.214.128.0/24
                  31.214.130.0/23
                  31.214.134.0-31.214.136.255
                  31.214.142.0/23
                  31.214.148.0/24
                  31.214.158.0-31.214.167.255
                  31.214.192.0/21
                  31.214.202.0-31.214.211.255
                  31.214.216.0-31.214.221.255
                  31.214.224.0/22
                  31.214.232.0/21
                  37.10.96.0-37.10.107.255
                  37.10.115.0/24
                  37.10.118.0-37.10.127.255
                  45.140.128.0/22
                  45.159.4.0/22
                  46.251.228.0-46.251.236.255
                  46.251.238.0/24
                  46.251.240.0-46.251.248.255
                  85.190.128.0-85.190.175.255
                  95.156.193.0-95.156.194.255
                  95.156.198.0/24
                  95.156.209.0-95.156.211.255
                  95.156.213.0/24
                  95.156.220.0/23
                  95.156.224.0/24
                  95.156.238.0/23
                  95.156.250.0/24
                  109.230.197.0/24
                  109.230.208.0/24
                  109.230.211.0/24
                  109.230.214.0/24
                  109.230.240.0/23
                  109.230.243.0/24
                  109.230.248.0/23
                  128.0.112.0/22
                  134.255.198.0/24
                  134.255.208.0/23
                  134.255.212.0-134.255.214.255
                  134.255.240.0/24
                  134.255.251.0/24
                  185.9.104.0/22
                  194.169.211.0/24
                  195.82.158.0/23
                  217.114.192.0/21
                IPv6:
                  2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
                  2a03:4d41:900::/40
                  2a03:4d42::/32
                  2a03:4d43:800::/37
                  2a03:4d44:800::/37
                  2a03:4d45:800::/37
                  2a03:4d47::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:43:73:2a:31:9c:dd:d8:e0:55:19:b5:b2:04:ed:cd:2e:cb:
         ad:6e:a9:ae:90:26:4b:df:e2:14:ea:4a:15:8c:cc:ad:00:fc:
         61:68:ed:97:de:6f:d8:47:7b:82:89:43:16:db:ca:fa:95:16:
         44:ac:2a:32:02:f4:67:bd:b0:aa:68:e1:ac:a1:af:e1:84:17:
         be:c8:92:2a:0f:89:aa:99:4c:f5:33:a5:60:cc:41:70:2f:12:
         e6:c7:92:c8:7a:04:de:9f:58:62:36:ae:b1:93:8b:29:fd:f9:
         94:99:f1:77:45:97:5f:95:4a:4a:a2:e8:5b:29:67:51:c8:f2:
         0a:01:57:ad:20:bf:b2:2d:3b:57:d0:91:bd:8d:63:76:ae:9b:
         c9:03:1e:88:85:2f:49:d9:62:b4:db:1b:55:82:b4:69:3e:76:
         a5:43:b8:5a:2c:2c:38:a2:f2:72:27:0e:2f:6f:eb:55:49:98:
         8b:fd:cc:c0:41:62:a1:82:ed:ab:1d:2d:eb:f3:76:a2:bd:de:
         9e:37:e9:09:f8:d9:03:82:f7:3a:09:b1:0f:46:a5:52:a7:70:
         99:fa:91:1f:cd:37:7d:e5:54:48:cf:c3:99:e0:9f:73:aa:e3:
         42:46:68:9a:35:b0:61:60:fe:e5:10:13:c2:58:42:6c:d0:ff:
         50:c6:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 12:20:47 2024 by rpki-client on console-ams.rpki-client.org