Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1-uiv71lftIx6J5Dgbi6lDgBKVSs.roa
File:                     1-uiv71lftIx6J5Dgbi6lDgBKVSs.roa (raw, json)
Hash identifier:          G0lXWhxOEgJjDFcH6J71/sCEDWVgBRttTFrImDI0jss=
Subject key identifier:   FA:E8:AF:EF:59:5F:B4:8C:7A:27:90:E0:6E:2E:A5:0E:00:4A:55:2B
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       0187863AEE1DC8661A5903BE8570652FFE82
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1-uiv71lftIx6J5Dgbi6lDgBKVSs.roa
Signing time:             Sat 15 Apr 2023 18:43:41 +0000
ROA not before:           Sat 15 Apr 2023 18:43:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 24
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          2.188.48.0/22 maxlen: 22
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.54.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 24
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.189.0.0/16 maxlen: 16
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:86:3a:ee:1d:c8:66:1a:59:03:be:85:70:65:2f:fe:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Apr 15 18:43:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fae8afef595fb48c7a2790e06e2ea50e004a552b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:2d:76:cf:12:54:b3:a6:1c:23:7d:b7:26:
                    ef:ef:3a:e8:65:c3:08:c6:fe:03:fb:fa:5e:26:c7:
                    f4:0b:c7:a5:69:55:81:5a:ae:58:2d:25:ca:1a:df:
                    ff:90:25:f1:8b:48:ed:98:30:e3:b7:a6:43:f5:00:
                    7b:6a:1f:99:7d:54:fc:26:28:b7:bd:98:3a:7a:00:
                    8d:13:39:90:c6:b1:23:ba:62:c8:98:df:49:a3:c6:
                    b5:0f:24:00:50:94:ee:94:ec:d9:4d:ff:ec:d8:3f:
                    73:b5:0a:c2:bc:3b:30:b7:70:8e:bc:08:96:6b:b3:
                    55:82:97:5b:2b:30:e3:02:e8:dd:9e:a5:6e:24:c9:
                    5b:4e:33:7c:89:dd:3b:54:f9:6d:00:29:ff:81:f6:
                    77:de:8d:f2:32:fe:dd:10:4b:0e:1f:49:50:4a:1e:
                    cb:18:c8:f1:85:bd:19:57:f8:84:e8:41:4f:9b:19:
                    f3:a4:b3:38:1e:75:7c:93:a5:b1:eb:6c:e9:b4:b7:
                    f2:ff:2d:98:d1:a8:77:b3:ac:e7:d3:55:61:93:b4:
                    56:e1:ea:b0:d8:15:73:28:ce:6e:a5:2d:c8:c9:a2:
                    08:70:6f:65:12:7c:94:be:69:22:28:21:e4:de:df:
                    b3:6a:29:34:87:c6:a5:9e:c3:26:64:44:61:e3:13:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:AF:EF:59:5F:B4:8C:7A:27:90:E0:6E:2E:A5:0E:00:4A:55:2B
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1-uiv71lftIx6J5Dgbi6lDgBKVSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:32:5b:36:98:c4:55:17:59:cd:0c:f3:cf:7d:4a:e1:3e:
         19:71:02:2d:c6:b5:9d:69:ad:b9:99:5d:37:36:d2:20:ba:0d:
         1e:c5:9b:d2:68:3e:56:6d:98:29:af:1a:9f:b3:b5:19:61:f9:
         de:05:2c:3d:99:dc:82:08:b2:76:36:b5:73:6d:03:77:1b:4b:
         90:42:24:7c:a7:08:20:78:5f:2a:bd:e6:3a:7a:e8:b5:ef:0b:
         84:c2:2b:ec:1f:f2:0e:3a:92:24:85:9c:9d:fe:3b:fd:cd:a2:
         25:5c:6e:0d:9f:a9:bb:dd:3f:95:60:b9:54:56:55:b2:f6:2e:
         fd:1a:07:7b:d2:7b:6d:6c:58:e2:30:9a:d5:c9:be:23:fa:d4:
         a8:f7:0b:b5:d9:17:f8:c0:77:0d:28:a1:7c:5f:88:e4:dc:54:
         ef:df:32:f1:f0:d2:e7:d2:a6:f6:1c:10:e2:30:49:1f:43:7a:
         c3:cc:60:05:60:2a:09:26:e4:96:87:2d:22:42:53:6c:8a:63:
         41:83:79:b8:d3:a3:04:e8:30:fc:30:da:1c:77:e7:08:2a:aa:
         12:73:db:ea:94:c2:97:a6:a7:47:4f:b6:da:36:31:ee:ef:0f:
         a4:56:97:25:f8:10:ff:c5:66:47:6b:b2:9e:f8:63:5c:09:ce:
         66:ef:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:02 2023 by rpki-client on console-fra.rpki-client.org