Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/5GDf1rJQzRsOu6R-sQ-LGRA2Gxk.roa
File:                     5GDf1rJQzRsOu6R-sQ-LGRA2Gxk.roa (raw, json)
Hash identifier:          h63It5a9rxCv2EQgNhD5RNAYsBoWm4L1Vgg/2LuMJDE=
Subject key identifier:   E4:60:DF:D6:B2:50:CD:1B:0E:BB:A4:7E:B1:0F:8B:19:10:36:1B:19
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       01881FD1085AB7D743EFD016DB82BD203F0A
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/5GDf1rJQzRsOu6R-sQ-LGRA2Gxk.roa
Signing time:             Mon 15 May 2023 14:29:32 +0000
ROA not before:           Mon 15 May 2023 14:29:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 24
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.11.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          2.188.48.0/22 maxlen: 22
                          78.39.152.0/24 maxlen: 24
                          78.39.156.0/24 maxlen: 24
                          78.39.155.0/24 maxlen: 24
                          78.39.153.0/24 maxlen: 24
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.54.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.243.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.246.0/24 maxlen: 24
                          78.38.251.0/24 maxlen: 24
                          78.38.248.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.250.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.38.254.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 24
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 24
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.128.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.39.43.0/24 maxlen: 24
                          78.39.40.0/24 maxlen: 24
                          78.39.47.0/24 maxlen: 24
                          78.39.51.0/24 maxlen: 24
                          78.39.48.0/24 maxlen: 24
                          78.39.49.0/24 maxlen: 24
                          78.39.46.0/24 maxlen: 24
                          78.39.50.0/24 maxlen: 24
                          78.39.55.0/24 maxlen: 24
                          78.39.56.0/24 maxlen: 24
                          78.39.57.0/24 maxlen: 24
                          78.39.53.0/24 maxlen: 24
                          78.39.58.0/24 maxlen: 24
                          78.39.54.0/24 maxlen: 24
                          78.39.59.0/24 maxlen: 24
                          78.39.62.0/23 maxlen: 24
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 24
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 24
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 24
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 24
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 24
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 24
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/16 maxlen: 24
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.189.0.0/16 maxlen: 24
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.186.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 24 May 2023 09:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1f:d1:08:5a:b7:d7:43:ef:d0:16:db:82:bd:20:3f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: May 15 14:29:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e460dfd6b250cd1b0ebba47eb10f8b1910361b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:5a:7d:f5:b9:bc:20:e6:76:06:c8:8c:02:
                    3b:9c:0e:1a:ef:5f:d7:d8:a8:e1:b7:84:c2:af:69:
                    b0:bd:4e:1a:41:d9:39:49:4a:58:6a:63:cd:6c:75:
                    83:b6:bd:cc:fd:95:8c:22:a6:34:78:35:3a:6d:0f:
                    1e:78:bf:1e:f4:cb:a3:ec:e1:96:32:19:7b:0e:98:
                    6d:59:42:c6:a9:26:75:df:89:bf:01:6d:63:aa:ef:
                    42:b5:12:a7:bc:f5:0e:3b:fa:d8:85:e8:8c:11:b8:
                    00:0c:96:33:d3:7d:8b:47:24:5b:19:8f:0b:68:6e:
                    6d:af:63:17:26:0b:2b:1c:f7:b5:ed:cd:70:bf:18:
                    cc:75:3b:dc:21:77:a4:a4:21:94:92:0a:89:37:6f:
                    42:94:5b:6a:cb:06:a9:27:98:7a:12:31:ec:92:6c:
                    d3:95:c4:58:4b:8a:27:44:37:38:b7:2e:de:e7:a8:
                    db:83:8d:31:f3:08:ae:80:e5:57:6f:4e:1d:03:24:
                    f0:8a:51:87:18:32:0f:55:36:52:a7:da:f4:53:5b:
                    e1:e0:ed:c9:52:a7:ac:4e:31:3d:da:12:c1:18:95:
                    24:23:ca:bd:ac:07:87:db:e7:b3:6f:c9:7d:ec:55:
                    46:1d:00:59:fa:65:c6:8e:11:a7:0c:7e:37:89:a3:
                    e4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:60:DF:D6:B2:50:CD:1B:0E:BB:A4:7E:B1:0F:8B:19:10:36:1B:19
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/5GDf1rJQzRsOu6R-sQ-LGRA2Gxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:63:45:62:3d:82:b8:58:d9:5c:8b:2e:15:2f:47:bb:d7:
         c0:22:08:18:d6:84:3d:31:77:45:7c:fb:f3:69:13:c6:69:16:
         79:93:a9:42:05:f2:d4:8d:3a:c4:53:88:90:4e:ac:e2:9c:a1:
         1a:08:46:88:c9:16:a0:49:fb:92:b4:fc:14:9e:dc:14:ce:03:
         f2:4b:8b:81:70:a8:e6:9c:02:b1:02:83:48:45:b3:f4:29:78:
         71:91:f8:3f:0c:a6:1b:7c:d4:6c:0b:d9:77:a2:7a:8c:81:ad:
         68:70:2c:68:52:db:f9:4e:36:b7:88:a9:ac:aa:93:d7:6b:c7:
         5f:f8:d5:54:23:99:aa:5b:0a:32:fd:c9:2a:83:97:e0:1e:6d:
         70:ec:fc:5c:27:a6:e7:75:66:43:14:54:86:b4:8b:cb:b3:0d:
         e8:31:41:d1:3b:8b:86:2f:4b:9a:34:b7:38:35:be:f4:2e:c3:
         45:81:8c:9b:a1:3c:1d:78:45:20:25:00:06:0f:84:4a:21:5d:
         11:73:09:47:e2:0f:b6:9c:78:ff:5b:0d:e8:b9:69:53:7d:e2:
         55:a2:d7:63:c8:87:02:3e:dd:07:14:f5:45:ee:fa:76:d4:58:
         82:a2:8d:9b:59:71:22:c4:b7:61:3a:27:41:da:a0:6a:48:e0:
         ae:6b:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org