Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/iD0HFHCyUzJJ727Vwbw1I90AXWc.roa
File:                     iD0HFHCyUzJJ727Vwbw1I90AXWc.roa (raw, json)
Hash identifier:          uKRnN/xPLG6gaH/yBXZHNwrMoEVoCirLECCOSLB/EqU=
Subject key identifier:   88:3D:07:14:70:B2:53:32:49:EF:6E:D5:C1:BC:35:23:DD:00:5D:67
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       01917F460C606EF7302A0F0FF4E7F8569921
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/iD0HFHCyUzJJ727Vwbw1I90AXWc.roa
Signing time:             Fri 23 Aug 2024 12:46:22 +0000
ROA not before:           Fri 23 Aug 2024 12:46:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199610
IP address blocks:        5.62.64.0/23 maxlen: 23
                          5.62.66.0/24 maxlen: 24
                          5.62.67.0/24 maxlen: 24
                          5.62.68.0/22 maxlen: 22
                          5.62.96.0/20 maxlen: 20
                          5.62.112.0/24 maxlen: 24
                          5.62.113.0/24 maxlen: 24
                          5.62.114.0/24 maxlen: 24
                          5.62.115.0/24 maxlen: 24
                          5.62.116.0/24 maxlen: 24
                          5.62.117.0/24 maxlen: 24
                          5.62.118.0/24 maxlen: 24
                          5.62.119.0/24 maxlen: 24
                          5.62.120.0/24 maxlen: 24
                          5.62.121.0/24 maxlen: 24
                          5.62.122.0/24 maxlen: 24
                          5.62.123.0/24 maxlen: 24
                          5.62.124.0/23 maxlen: 23
                          5.62.126.0/24 maxlen: 24
                          5.62.127.0/24 maxlen: 24
                          5.83.160.0/22 maxlen: 22
                          5.83.164.0/23 maxlen: 23
                          5.83.166.0/24 maxlen: 24
                          5.83.167.0/24 maxlen: 24
                          5.83.168.0/22 maxlen: 22
                          5.83.172.0/23 maxlen: 23
                          5.83.174.0/23 maxlen: 23
                          5.101.160.0/21 maxlen: 21
                          31.214.128.0/24 maxlen: 24
                          31.214.130.0/23 maxlen: 23
                          31.214.134.0/23 maxlen: 23
                          31.214.136.0/24 maxlen: 24
                          31.214.142.0/23 maxlen: 23
                          31.214.148.0/24 maxlen: 24
                          31.214.158.0/23 maxlen: 23
                          31.214.160.0/24 maxlen: 24
                          31.214.161.0/24 maxlen: 24
                          31.214.162.0/24 maxlen: 24
                          31.214.163.0/24 maxlen: 24
                          31.214.164.0/22 maxlen: 22
                          31.214.192.0/22 maxlen: 22
                          31.214.196.0/22 maxlen: 22
                          31.214.202.0/23 maxlen: 23
                          31.214.204.0/22 maxlen: 22
                          31.214.208.0/22 maxlen: 22
                          31.214.216.0/23 maxlen: 23
                          31.214.218.0/24 maxlen: 24
                          31.214.219.0/24 maxlen: 24
                          31.214.220.0/23 maxlen: 23
                          31.214.224.0/22 maxlen: 22
                          31.214.232.0/21 maxlen: 21
                          37.10.96.0/21 maxlen: 21
                          37.10.104.0/23 maxlen: 23
                          37.10.106.0/24 maxlen: 24
                          37.10.107.0/24 maxlen: 24
                          37.10.115.0/24 maxlen: 24
                          37.10.118.0/24 maxlen: 24
                          37.10.119.0/24 maxlen: 24
                          37.10.120.0/22 maxlen: 22
                          37.10.124.0/22 maxlen: 22
                          45.140.128.0/23 maxlen: 23
                          45.140.130.0/24 maxlen: 24
                          45.140.131.0/24 maxlen: 24
                          45.159.4.0/23 maxlen: 23
                          45.159.6.0/24 maxlen: 24
                          45.159.7.0/24 maxlen: 24
                          46.251.228.0/24 maxlen: 24
                          46.251.229.0/24 maxlen: 24
                          46.251.230.0/24 maxlen: 24
                          46.251.231.0/24 maxlen: 24
                          46.251.232.0/23 maxlen: 23
                          46.251.234.0/24 maxlen: 24
                          46.251.235.0/24 maxlen: 24
                          46.251.236.0/24 maxlen: 24
                          46.251.238.0/24 maxlen: 24
                          46.251.240.0/21 maxlen: 21
                          46.251.248.0/24 maxlen: 24
                          85.190.128.0/23 maxlen: 23
                          85.190.130.0/23 maxlen: 23
                          85.190.132.0/23 maxlen: 23
                          85.190.134.0/23 maxlen: 23
                          85.190.136.0/24 maxlen: 24
                          85.190.137.0/24 maxlen: 24
                          85.190.138.0/23 maxlen: 23
                          85.190.140.0/22 maxlen: 22
                          85.190.144.0/24 maxlen: 24
                          85.190.145.0/24 maxlen: 24
                          85.190.146.0/24 maxlen: 24
                          85.190.147.0/24 maxlen: 24
                          85.190.148.0/24 maxlen: 24
                          85.190.149.0/24 maxlen: 24
                          85.190.150.0/24 maxlen: 24
                          85.190.151.0/24 maxlen: 24
                          85.190.152.0/24 maxlen: 24
                          85.190.153.0/24 maxlen: 24
                          85.190.154.0/23 maxlen: 23
                          85.190.156.0/23 maxlen: 23
                          85.190.158.0/24 maxlen: 24
                          85.190.159.0/24 maxlen: 24
                          85.190.160.0/22 maxlen: 22
                          85.190.164.0/22 maxlen: 22
                          85.190.168.0/22 maxlen: 22
                          85.190.172.0/22 maxlen: 22
                          95.156.193.0/24 maxlen: 24
                          95.156.194.0/24 maxlen: 24
                          95.156.198.0/24 maxlen: 24
                          95.156.209.0/24 maxlen: 24
                          95.156.210.0/24 maxlen: 24
                          95.156.211.0/24 maxlen: 24
                          95.156.213.0/24 maxlen: 24
                          95.156.220.0/23 maxlen: 23
                          95.156.224.0/24 maxlen: 24
                          95.156.238.0/24 maxlen: 24
                          95.156.239.0/24 maxlen: 24
                          95.156.250.0/24 maxlen: 24
                          109.230.197.0/24 maxlen: 24
                          109.230.208.0/24 maxlen: 24
                          109.230.211.0/24 maxlen: 24
                          109.230.214.0/24 maxlen: 24
                          109.230.240.0/23 maxlen: 23
                          109.230.243.0/24 maxlen: 24
                          109.230.248.0/23 maxlen: 23
                          128.0.112.0/23 maxlen: 23
                          128.0.114.0/23 maxlen: 23
                          134.255.198.0/24 maxlen: 24
                          134.255.208.0/23 maxlen: 23
                          134.255.212.0/23 maxlen: 23
                          134.255.214.0/24 maxlen: 24
                          134.255.240.0/24 maxlen: 24
                          134.255.251.0/24 maxlen: 24
                          185.9.104.0/22 maxlen: 22
                          194.169.211.0/24 maxlen: 24
                          195.82.158.0/23 maxlen: 23
                          217.114.192.0/21 maxlen: 21
                          217.114.192.0/24 maxlen: 24
                          217.114.193.0/24 maxlen: 24
                          217.114.194.0/24 maxlen: 24
                          217.114.195.0/24 maxlen: 24
                          217.114.196.0/24 maxlen: 24
                          217.114.197.0/24 maxlen: 24
                          217.114.198.0/24 maxlen: 24
                          217.114.199.0/24 maxlen: 24
                          2a03:4d40::/32 maxlen: 32
                          2a03:4d40::/48 maxlen: 48
                          2a03:4d40:10::/48 maxlen: 48
                          2a03:4d40:20::/48 maxlen: 48
                          2a03:4d40:30::/48 maxlen: 48
                          2a03:4d40:40::/48 maxlen: 48
                          2a03:4d40:50::/48 maxlen: 48
                          2a03:4d40:60::/48 maxlen: 48
                          2a03:4d40:70::/48 maxlen: 48
                          2a03:4d40:80::/48 maxlen: 48
                          2a03:4d40:90::/48 maxlen: 48
                          2a03:4d40:a0::/48 maxlen: 48
                          2a03:4d40:b0::/48 maxlen: 48
                          2a03:4d41::/40 maxlen: 40
                          2a03:4d41:100::/40 maxlen: 40
                          2a03:4d41:200::/40 maxlen: 40
                          2a03:4d41:300::/40 maxlen: 40
                          2a03:4d41:400::/40 maxlen: 40
                          2a03:4d41:500::/40 maxlen: 40
                          2a03:4d41:600::/40 maxlen: 40
                          2a03:4d41:900::/40 maxlen: 40
                          2a03:4d42::/32 maxlen: 32
                          2a03:4d42::/37 maxlen: 37
                          2a03:4d42:800::/37 maxlen: 37
                          2a03:4d43:800::/37 maxlen: 37
                          2a03:4d44:800::/37 maxlen: 37
                          2a03:4d45:800::/37 maxlen: 37
                          2a03:4d47::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 16:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:7f:46:0c:60:6e:f7:30:2a:0f:0f:f4:e7:f8:56:99:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Aug 23 12:46:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=883d071470b2533249ef6ed5c1bc3523dd005d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:8d:3d:48:96:80:ca:17:b2:53:dc:34:d0:
                    7a:c8:ec:54:da:4f:fe:c8:a8:cd:33:52:a9:b1:a1:
                    32:f6:07:ce:53:26:63:72:94:74:6d:d4:10:01:bc:
                    83:26:b5:59:ff:3a:ce:ce:52:6b:6a:93:a4:03:20:
                    e3:35:01:d2:bb:37:58:01:28:5e:8c:f2:bf:f9:f2:
                    b7:3a:24:4c:ec:34:f7:48:3d:76:fc:c4:d9:3f:d5:
                    0e:9c:2b:49:4f:9c:81:c9:9e:62:e9:02:15:c1:4d:
                    51:56:8f:08:83:ec:44:58:7c:fc:49:32:47:2d:83:
                    29:ce:4f:56:fa:51:1e:2f:6d:19:fb:b0:16:e8:cf:
                    14:43:f7:17:ce:79:01:0a:22:04:e4:28:77:cc:4a:
                    bc:17:46:f4:b4:d1:18:2b:17:e0:ab:95:0c:d7:0c:
                    bb:93:2e:c1:b5:21:f4:c9:47:ee:ae:f1:ed:44:22:
                    da:3f:67:37:c9:f2:04:07:7f:bb:08:f4:32:29:b4:
                    21:b8:ba:8e:5d:7a:ef:50:09:e2:1b:2b:90:31:d0:
                    1a:28:c3:14:75:44:05:e4:c8:aa:a0:a6:0d:85:35:
                    c3:4f:e4:2d:ac:4d:20:4f:1d:8c:57:70:34:98:75:
                    bf:85:93:21:03:9e:90:dc:be:e0:ad:c7:91:a3:8b:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3D:07:14:70:B2:53:32:49:EF:6E:D5:C1:BC:35:23:DD:00:5D:67
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/iD0HFHCyUzJJ727Vwbw1I90AXWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.62.64.0/21
                  5.62.96.0/19
                  5.83.160.0/20
                  5.101.160.0/21
                  31.214.128.0/24
                  31.214.130.0/23
                  31.214.134.0-31.214.136.255
                  31.214.142.0/23
                  31.214.148.0/24
                  31.214.158.0-31.214.167.255
                  31.214.192.0/21
                  31.214.202.0-31.214.211.255
                  31.214.216.0-31.214.221.255
                  31.214.224.0/22
                  31.214.232.0/21
                  37.10.96.0-37.10.107.255
                  37.10.115.0/24
                  37.10.118.0-37.10.127.255
                  45.140.128.0/22
                  45.159.4.0/22
                  46.251.228.0-46.251.236.255
                  46.251.238.0/24
                  46.251.240.0-46.251.248.255
                  85.190.128.0-85.190.175.255
                  95.156.193.0-95.156.194.255
                  95.156.198.0/24
                  95.156.209.0-95.156.211.255
                  95.156.213.0/24
                  95.156.220.0/23
                  95.156.224.0/24
                  95.156.238.0/23
                  95.156.250.0/24
                  109.230.197.0/24
                  109.230.208.0/24
                  109.230.211.0/24
                  109.230.214.0/24
                  109.230.240.0/23
                  109.230.243.0/24
                  109.230.248.0/23
                  128.0.112.0/22
                  134.255.198.0/24
                  134.255.208.0/23
                  134.255.212.0-134.255.214.255
                  134.255.240.0/24
                  134.255.251.0/24
                  185.9.104.0/22
                  194.169.211.0/24
                  195.82.158.0/23
                  217.114.192.0/21
                IPv6:
                  2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
                  2a03:4d41:900::/40
                  2a03:4d42::/32
                  2a03:4d43:800::/37
                  2a03:4d44:800::/37
                  2a03:4d45:800::/37
                  2a03:4d47::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:05:69:95:72:93:92:40:5c:ea:6d:a1:d1:18:85:a5:95:
         9c:48:0d:33:0f:51:cf:8d:99:57:48:53:a7:28:01:9d:58:53:
         8b:2c:c5:dd:2e:09:a7:08:b4:7b:f4:c1:36:0b:b0:4b:6f:47:
         ac:d4:49:23:b3:43:cb:a8:76:9d:b8:e8:a6:9a:87:8e:a1:5e:
         61:3b:33:2e:c8:ee:1f:dc:98:cc:30:40:2b:ce:d1:04:c1:ed:
         d2:90:c3:e5:ba:6e:c0:e8:96:05:44:bf:5d:14:8b:9b:a3:01:
         1b:1e:02:57:e6:16:4c:b8:29:7f:e0:2a:46:66:85:00:8f:6a:
         b9:93:05:f3:0d:ad:1c:98:45:58:ae:ef:23:8e:37:ea:f6:80:
         14:b6:57:7d:3c:52:0f:b4:08:02:74:e8:1f:8f:12:a5:b1:86:
         a6:a1:a2:12:25:a8:2d:d4:9e:e7:3b:25:86:52:2a:8d:ed:c1:
         84:38:a0:2c:a1:66:91:ab:5d:57:6c:69:96:70:81:c2:f5:e5:
         f7:e8:39:f8:e7:5b:7f:c3:e0:3f:73:1a:7b:85:73:40:9b:88:
         cf:65:f9:5c:c0:73:7e:60:87:ac:a2:74:5a:81:7a:85:61:c6:
         df:65:b0:62:5e:b3:72:d9:4f:9d:15:20:f0:80:23:19:dd:ec:
         0f:33:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 18:39:40 2024 by rpki-client on console-fra.rpki-client.org