Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/4-Dbijs6wNq_lXlHniyh_H1t1EI.roa
File:                     4-Dbijs6wNq_lXlHniyh_H1t1EI.roa (raw, json)
Hash identifier:          OJb/mWpwLUfadiuy8X40xMkMvdUZnBnugg2gqBeGvfc=
Subject key identifier:   E3:E0:DB:8A:3B:3A:C0:DA:BF:95:79:47:9E:2C:A1:FC:7D:6D:D4:42
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       01878B2C2F81BD666684C18013EEE7363393
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/4-Dbijs6wNq_lXlHniyh_H1t1EI.roa
Signing time:             Sun 16 Apr 2023 17:45:41 +0000
ROA not before:           Sun 16 Apr 2023 17:45:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 24
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.11.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          2.188.48.0/22 maxlen: 22
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.54.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 24
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.189.0.0/16 maxlen: 16
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 17 Apr 2023 19:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8b:2c:2f:81:bd:66:66:84:c1:80:13:ee:e7:36:33:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Apr 16 17:45:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3e0db8a3b3ac0dabf9579479e2ca1fc7d6dd442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:06:21:1f:00:44:88:fa:5d:37:61:8b:e6:32:
                    14:dc:a4:90:1c:c9:5c:ec:ee:cf:12:d5:c3:64:62:
                    10:01:a5:fb:79:b1:4a:ad:a4:6a:d4:f9:bb:7e:df:
                    d6:f7:e9:e8:50:d0:ae:3d:c7:61:51:db:32:e2:c2:
                    1a:91:31:bd:4a:0a:1d:bb:e5:df:5b:82:7a:db:a8:
                    8a:04:d6:60:36:47:4a:ec:fa:fc:d3:39:a4:a4:2b:
                    9d:c1:81:59:42:8a:3a:66:35:85:d3:64:30:fc:9b:
                    bb:be:6c:27:6c:f2:a8:0d:59:7b:b2:3a:a6:c9:14:
                    c7:85:98:76:01:68:32:60:56:4f:6b:aa:48:3a:8c:
                    3f:0a:94:64:48:d3:8e:dd:10:0e:92:b3:f7:78:6c:
                    25:36:19:7b:97:8f:f4:9e:12:46:c1:35:3d:ed:8e:
                    f0:ae:d0:08:78:83:36:bc:de:28:9a:ad:f3:58:2f:
                    61:3f:4d:20:00:a9:07:11:0a:a3:a2:f7:09:fd:dc:
                    07:7d:61:07:79:ac:14:53:38:60:b4:75:d4:0c:14:
                    8e:e6:af:f2:32:ba:17:6d:1d:84:8a:a6:6b:67:3b:
                    9d:0e:a2:2b:5b:df:07:9c:65:7b:38:4a:38:80:10:
                    d5:1d:30:f3:37:6b:a2:7b:09:33:f2:9c:b9:aa:bf:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E0:DB:8A:3B:3A:C0:DA:BF:95:79:47:9E:2C:A1:FC:7D:6D:D4:42
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/4-Dbijs6wNq_lXlHniyh_H1t1EI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:f4:42:2b:da:fd:9a:fa:d9:d8:2f:ee:ee:04:74:50:fe:0f:
         92:4b:f9:b8:80:42:96:65:ca:fc:24:c1:b3:a3:e1:2c:fb:cc:
         4e:08:48:e1:4f:15:7f:a9:53:e8:07:56:58:a8:e6:9c:50:6c:
         bf:11:fc:17:d7:61:40:2b:83:93:78:45:17:c6:fd:87:db:ca:
         50:81:b5:0f:bc:d0:f2:92:1c:aa:87:cd:94:53:fc:1b:fc:84:
         c0:67:b2:eb:99:d8:48:f9:4e:15:8e:3a:e1:da:de:7b:67:e5:
         de:ce:2e:d3:40:27:10:9c:76:93:90:13:eb:38:13:35:e0:36:
         33:2e:67:46:fd:36:bb:5e:40:fe:4f:43:ce:a0:72:e1:7c:98:
         a4:33:a5:e5:86:4c:70:14:f3:d8:0a:17:89:11:eb:93:2d:fa:
         4a:f3:c3:ce:40:b8:26:77:ea:a8:9b:14:91:cb:30:3a:04:b9:
         7d:1b:52:44:fd:dc:4f:9b:01:fb:6f:1e:dc:02:79:4c:25:46:
         d8:da:9f:5e:c5:23:33:54:59:f9:75:7c:b3:62:88:02:53:f1:
         8f:79:9a:af:3a:f2:2a:bb:68:8a:ec:f8:9d:bd:85:0a:2a:d6:
         7f:2c:ad:4d:f7:4c:2e:85:9a:8c:db:62:88:9e:3f:89:86:65:
         54:78:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org