Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/W-Xd7lfW8C-g9y9Mc4g2VIjpdrs.roa
File:                     W-Xd7lfW8C-g9y9Mc4g2VIjpdrs.roa (raw, json)
Hash identifier:          U8dz2hv/1J5Cq36OUQqCNUuLrJlKjBbHlIhdg0Q8KMQ=
Subject key identifier:   5B:E5:DD:EE:57:D6:F0:2F:A0:F7:2F:4C:73:88:36:54:88:E9:76:BB
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       01856D8AFC4760B2C5CA2AC9238F645F9329
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/W-Xd7lfW8C-g9y9Mc4g2VIjpdrs.roa
Signing time:             Sun 01 Jan 2023 13:35:03 +0000
ROA not before:           Sun 01 Jan 2023 13:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42298
IP address blocks:        78.100.112.0/20 maxlen: 24
                          78.100.144.0/20 maxlen: 24
                          78.100.62.0/24 maxlen: 24
                          37.208.160.0/20 maxlen: 24
                          78.100.224.0/20 maxlen: 24
                          37.208.176.0/20 maxlen: 24
                          176.202.0.0/20 maxlen: 24
                          78.100.240.0/20 maxlen: 24
                          78.101.0.0/21 maxlen: 24
                          176.202.16.0/20 maxlen: 24
                          78.101.8.0/21 maxlen: 24
                          78.100.160.0/20 maxlen: 24
                          78.100.176.0/20 maxlen: 24
                          37.208.128.0/20 maxlen: 24
                          78.100.192.0/20 maxlen: 24
                          37.208.144.0/20 maxlen: 24
                          78.100.208.0/20 maxlen: 24
                          178.153.128.0/20 maxlen: 24
                          178.153.144.0/20 maxlen: 24
                          178.153.160.0/20 maxlen: 24
                          178.153.80.0/20 maxlen: 24
                          178.153.96.0/20 maxlen: 24
                          78.100.10.0/24 maxlen: 24
                          178.153.240.0/20 maxlen: 24
                          178.153.176.0/20 maxlen: 24
                          178.153.192.0/20 maxlen: 24
                          178.153.208.0/20 maxlen: 24
                          178.153.224.0/20 maxlen: 24
                          178.152.112.0/20 maxlen: 24
                          178.153.16.0/20 maxlen: 24
                          178.153.32.0/20 maxlen: 24
                          178.153.48.0/20 maxlen: 24
                          178.153.64.0/20 maxlen: 24
                          178.153.0.0/20 maxlen: 24
                          178.152.64.0/20 maxlen: 24
                          178.152.80.0/20 maxlen: 24
                          178.152.96.0/20 maxlen: 24
                          178.152.0.0/20 maxlen: 24
                          178.152.16.0/20 maxlen: 24
                          89.211.160.0/20 maxlen: 24
                          37.211.160.0/20 maxlen: 24
                          89.211.176.0/20 maxlen: 24
                          37.211.176.0/20 maxlen: 24
                          89.211.192.0/20 maxlen: 24
                          89.211.96.0/20 maxlen: 24
                          89.211.112.0/20 maxlen: 24
                          89.211.128.0/20 maxlen: 24
                          37.211.128.0/20 maxlen: 24
                          37.211.144.0/20 maxlen: 24
                          89.211.144.0/20 maxlen: 24
                          89.211.208.0/20 maxlen: 24
                          89.211.224.0/20 maxlen: 24
                          89.211.240.0/20 maxlen: 24
                          37.210.192.0/20 maxlen: 24
                          37.210.208.0/20 maxlen: 24
                          37.210.224.0/20 maxlen: 24
                          37.210.144.0/20 maxlen: 24
                          37.210.160.0/20 maxlen: 24
                          37.210.176.0/20 maxlen: 24
                          86.62.242.0/24 maxlen: 24
                          86.62.245.0/24 maxlen: 24
                          86.62.246.0/24 maxlen: 24
                          86.62.243.0/24 maxlen: 24
                          86.62.244.0/24 maxlen: 24
                          86.62.252.0/24 maxlen: 24
                          86.62.251.0/24 maxlen: 24
                          86.62.248.0/24 maxlen: 24
                          86.62.249.0/24 maxlen: 24
                          37.211.48.0/20 maxlen: 24
                          86.62.255.0/24 maxlen: 24
                          213.130.96.0/22 maxlen: 24
                          37.211.64.0/20 maxlen: 24
                          37.211.80.0/20 maxlen: 24
                          213.130.127.0/24 maxlen: 24
                          37.210.240.0/20 maxlen: 24
                          86.62.192.0/22 maxlen: 24
                          86.62.196.0/22 maxlen: 24
                          86.62.200.0/22 maxlen: 24
                          86.62.204.0/22 maxlen: 24
                          37.211.0.0/20 maxlen: 24
                          86.62.211.0/24 maxlen: 24
                          86.62.209.0/24 maxlen: 24
                          37.211.16.0/20 maxlen: 24
                          86.62.218.0/24 maxlen: 24
                          86.62.216.0/24 maxlen: 24
                          86.62.224.0/22 maxlen: 24
                          86.62.223.0/24 maxlen: 24
                          86.62.221.0/24 maxlen: 24
                          86.62.228.0/22 maxlen: 24
                          86.62.232.0/22 maxlen: 24
                          37.211.32.0/20 maxlen: 24
                          86.62.236.0/22 maxlen: 24
                          37.210.0.0/20 maxlen: 24
                          37.210.16.0/20 maxlen: 24
                          37.210.80.0/20 maxlen: 24
                          37.210.96.0/20 maxlen: 24
                          37.210.112.0/20 maxlen: 24
                          37.210.128.0/20 maxlen: 24
                          37.210.32.0/20 maxlen: 24
                          37.210.48.0/20 maxlen: 24
                          37.210.64.0/20 maxlen: 24
                          176.202.80.0/20 maxlen: 24
                          82.148.107.0/24 maxlen: 24
                          176.202.96.0/20 maxlen: 24
                          78.101.80.0/20 maxlen: 24
                          78.101.16.0/20 maxlen: 24
                          176.202.32.0/20 maxlen: 24
                          176.202.48.0/20 maxlen: 24
                          78.101.48.0/20 maxlen: 24
                          78.101.64.0/20 maxlen: 24
                          78.101.176.0/20 maxlen: 24
                          78.101.192.0/20 maxlen: 24
                          78.101.208.0/20 maxlen: 24
                          78.101.224.0/20 maxlen: 24
                          78.101.128.0/20 maxlen: 24
                          78.101.144.0/20 maxlen: 24
                          176.202.160.0/20 maxlen: 24
                          176.202.176.0/20 maxlen: 24
                          78.101.160.0/20 maxlen: 24
                          2001:1a10:1004::/48 maxlen: 48
                          2001:1a10:1001::/48 maxlen: 48
                          2001:1a10:100a::/48 maxlen: 48
                          2001:1a10:1007::/48 maxlen: 48
                          2001:1a10:1009::/48 maxlen: 48
                          2001:1a10:1006::/48 maxlen: 48
                          2001:1a10:100f::/48 maxlen: 48
                          2001:1a10:100c::/48 maxlen: 48
                          2001:1a10:100e::/48 maxlen: 48
                          2001:1a10:1008::/48 maxlen: 48
                          2001:1a10:100b::/48 maxlen: 48
                          2001:1a11::/32 maxlen: 53
                          2001:1a10:1000::/48 maxlen: 48
                          2001:1a10:1003::/48 maxlen: 48
                          2001:1a10:100d::/48 maxlen: 48
                          2001:1a10:1005::/48 maxlen: 48
                          2001:1a10:1002::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:fc:47:60:b2:c5:ca:2a:c9:23:8f:64:5f:93:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Jan  1 13:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5be5ddee57d6f02fa0f72f4c7388365488e976bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:8c:3d:08:47:9c:47:8e:9b:b3:be:62:b6:
                    12:40:dc:87:b4:5a:36:06:75:6e:c4:d9:6e:fb:7d:
                    3d:f3:36:73:e4:f9:f7:53:de:d7:7d:56:89:3c:ce:
                    79:7e:fa:0b:91:5b:cc:0c:cf:0f:07:10:ae:1d:53:
                    ae:60:72:15:d1:2c:a3:3c:3f:a6:f1:b0:0e:e1:19:
                    e8:d3:2f:a4:a1:2e:0e:bf:f9:d5:cb:d4:85:32:ba:
                    68:88:4e:27:44:71:87:71:4d:3a:97:c4:69:ae:0e:
                    c2:99:a6:51:ac:50:c4:32:1e:43:ee:15:d9:4f:39:
                    1d:80:9a:6a:fc:7f:a7:0c:8a:c4:dd:76:86:f7:db:
                    f1:b4:28:8b:49:bc:e6:e2:bd:22:44:51:b4:f1:72:
                    7f:e8:c3:0c:5e:4b:e9:3a:4a:db:53:53:84:b1:f4:
                    7b:a2:ad:eb:04:48:ea:ea:f2:5b:c7:5f:b4:9d:cc:
                    c3:ac:7e:ac:2c:5e:5e:78:50:1c:6d:4b:8f:eb:a1:
                    43:c1:c3:17:64:ec:8c:93:c5:b4:e9:b3:22:f5:ad:
                    de:19:f5:2f:03:8d:46:a8:46:85:a6:1b:14:6e:fe:
                    17:7c:b8:92:85:7e:86:bb:7e:b9:90:f3:6f:05:94:
                    59:83:24:4f:88:3b:e7:b7:75:d4:7c:2e:4c:23:1a:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:DD:EE:57:D6:F0:2F:A0:F7:2F:4C:73:88:36:54:88:E9:76:BB
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/W-Xd7lfW8C-g9y9Mc4g2VIjpdrs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.208.128.0/18
                  37.210.0.0-37.211.95.255
                  37.211.128.0/18
                  78.100.10.0/24
                  78.100.62.0/24
                  78.100.112.0/20
                  78.100.144.0-78.101.31.255
                  78.101.48.0-78.101.95.255
                  78.101.128.0-78.101.239.255
                  82.148.107.0/24
                  86.62.192.0/20
                  86.62.209.0/24
                  86.62.211.0/24
                  86.62.216.0/24
                  86.62.218.0/24
                  86.62.221.0/24
                  86.62.223.0-86.62.239.255
                  86.62.242.0-86.62.246.255
                  86.62.248.0/23
                  86.62.251.0-86.62.252.255
                  86.62.255.0/24
                  89.211.96.0-89.211.255.255
                  176.202.0.0/18
                  176.202.80.0-176.202.111.255
                  176.202.160.0/19
                  178.152.0.0/19
                  178.152.64.0/18
                  178.153.0.0-178.153.111.255
                  178.153.128.0/17
                  213.130.96.0/22
                  213.130.127.0/24
                IPv6:
                  2001:1a10:1000::/44
                  2001:1a11::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:6a:7c:b9:a2:72:4c:d0:01:60:eb:3c:94:69:c5:b9:a1:9a:
         0d:b1:a8:78:7f:b6:61:4f:4d:7f:80:4a:d4:9c:12:a1:22:e6:
         e2:6b:8b:b2:0b:ab:16:c3:8b:85:14:ee:fe:6a:fe:ad:59:75:
         2d:1c:f5:84:fd:9d:93:cc:43:f3:d9:4a:23:c5:12:53:7f:53:
         b0:b0:d2:61:32:a5:03:1b:2c:cd:12:7e:10:1e:a1:43:bc:fa:
         e9:f6:62:d7:e8:4e:5b:1e:31:b4:6f:3f:49:38:0b:23:c9:c0:
         48:d0:da:e6:52:64:fa:26:09:2c:b6:d4:39:c5:94:2b:b8:43:
         f8:3a:41:41:01:eb:9b:e2:e6:dc:5d:9e:cc:f3:02:1f:2d:41:
         0c:c0:09:03:09:28:68:6c:69:a9:0f:e2:b5:1c:5d:2d:15:f5:
         27:8f:7e:de:2f:0d:0c:87:18:c9:53:fc:f6:20:52:94:fd:ae:
         f4:37:33:19:e3:87:7e:3d:31:e3:ca:75:d9:5a:fb:44:7e:87:
         32:78:4e:c3:97:f0:0f:1d:2f:88:ce:9d:16:e0:80:01:a9:b6:
         57:0a:80:e2:b1:d0:5b:0c:cb:c9:45:c5:e5:6a:dc:d4:1c:6f:
         66:a4:b4:f7:2d:29:ba:5b:c6:a5:11:4f:50:ab:c8:fc:62:c7:
         dc:c9:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:11 2024 by rpki-client on console-ams.rpki-client.org