Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7uK__czs0gHZRYGzq0rETqbqJw8.roa
File:                     7uK__czs0gHZRYGzq0rETqbqJw8.roa (raw, json)
Hash identifier:          JQ+2u84GYz6jhEigLi5CDeLDprRk+KnNlqsoEM+E7yM=
Subject key identifier:   EE:E2:BF:FD:CC:EC:D2:01:D9:45:81:B3:AB:4A:C4:4E:A6:EA:27:0F
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       01881A6C1055489444146B172B99EBF3D4F6
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7uK__czs0gHZRYGzq0rETqbqJw8.roa
Signing time:             Sun 14 May 2023 13:21:09 +0000
ROA not before:           Sun 14 May 2023 13:21:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48159
IP address blocks:        2.188.1.0/24 maxlen: 24
                          2.188.0.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.28.0/24 maxlen: 24
                          78.39.240.0/24 maxlen: 24
                          78.39.149.0/24 maxlen: 24
                          78.39.150.0/24 maxlen: 24
                          78.39.151.0/24 maxlen: 24
                          78.39.156.0/24 maxlen: 24
                          78.39.153.0/24 maxlen: 24
                          78.39.155.0/24 maxlen: 24
                          80.191.56.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          2.185.18.0/24 maxlen: 24
                          2.185.40.0/21 maxlen: 21
                          2.188.64.0/21 maxlen: 21
                          2.188.76.0/24 maxlen: 24
                          2.185.0.0/20 maxlen: 20
                          2.185.0.0/16 maxlen: 16
                          78.38.243.0/24 maxlen: 24
                          78.38.246.0/24 maxlen: 24
                          78.38.251.0/24 maxlen: 24
                          78.38.250.0/24 maxlen: 24
                          78.38.248.0/24 maxlen: 24
                          78.38.254.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 24
                          2.177.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          80.191.0.0/16 maxlen: 16
                          217.218.0.0/16 maxlen: 24
                          78.39.43.0/24 maxlen: 24
                          78.39.40.0/24 maxlen: 24
                          78.39.51.0/24 maxlen: 24
                          78.39.47.0/24 maxlen: 24
                          78.39.50.0/24 maxlen: 24
                          78.39.46.0/24 maxlen: 24
                          78.39.49.0/24 maxlen: 24
                          78.39.48.0/24 maxlen: 24
                          78.39.55.0/24 maxlen: 24
                          78.39.58.0/24 maxlen: 24
                          78.39.54.0/24 maxlen: 24
                          78.39.57.0/24 maxlen: 24
                          78.39.53.0/24 maxlen: 24
                          78.39.56.0/24 maxlen: 24
                          78.39.59.0/24 maxlen: 24
                          78.39.62.0/23 maxlen: 24
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 24
                          78.38.160.0/19 maxlen: 19
                          2.176.128.0/17 maxlen: 17
                          2.185.164.0/24 maxlen: 24
                          2.185.160.0/19 maxlen: 19
                          2.188.179.0/24 maxlen: 24
                          2.185.88.0/22 maxlen: 22
                          217.219.0.0/16 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.184.0/24 maxlen: 24
                          2.188.187.0/24 maxlen: 24
                          2.189.68.0/24 maxlen: 24
                          2.189.72.0/24 maxlen: 24
                          2.189.42.0/24 maxlen: 24
                          2.189.43.0/24 maxlen: 24
                          2.189.56.0/24 maxlen: 24
                          2.189.58.0/24 maxlen: 24
                          2.182.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sun 22 Oct 2023 20:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1a:6c:10:55:48:94:44:14:6b:17:2b:99:eb:f3:d4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: May 14 13:21:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eee2bffdccecd201d94581b3ab4ac44ea6ea270f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d1:e8:d0:41:8d:c5:35:e2:0f:36:f3:ea:12:
                    5f:39:c7:7b:cb:16:90:90:05:c6:f1:d4:ea:e6:ef:
                    32:98:26:8f:01:1a:b7:8a:a3:53:5d:6e:ac:85:ee:
                    b5:fe:97:39:97:2e:66:72:f3:fa:2e:ba:e4:4c:36:
                    f7:5f:29:53:3b:51:e1:06:d6:02:1f:3c:3f:c8:3f:
                    8d:0d:80:55:9d:2f:a6:36:34:d3:64:e6:27:ea:0e:
                    cc:a7:61:de:9f:da:2c:41:01:e0:04:b0:12:a1:4f:
                    1d:5f:29:8d:7f:b0:28:de:db:60:45:2f:f4:83:5d:
                    04:be:a0:1f:b0:8b:2b:cc:f8:5b:a7:ea:ac:9d:e4:
                    b0:35:cc:d1:06:b8:53:d6:57:14:57:e5:d3:c2:de:
                    74:cc:4d:31:d6:0a:c9:10:33:89:b8:24:1e:50:b8:
                    c3:eb:58:6b:83:29:3c:05:89:47:51:d9:00:2a:ae:
                    fa:4f:37:b4:63:54:4b:94:b8:4d:71:98:9e:96:6e:
                    5f:f9:d0:21:e2:cb:97:2f:89:30:ee:98:28:dc:8d:
                    36:28:17:45:ae:5a:c1:2d:36:f9:4c:b7:3c:f4:66:
                    bf:37:71:95:1f:bd:88:fb:31:cb:30:d3:f5:30:6b:
                    0c:bf:6e:f0:32:c1:c2:d9:fc:7d:54:c8:85:2a:0f:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E2:BF:FD:CC:EC:D2:01:D9:45:81:B3:AB:4A:C4:4E:A6:EA:27:0F
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7uK__czs0gHZRYGzq0rETqbqJw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.128.0-2.177.255.255
                  2.182.128.0/21
                  2.185.0.0/16
                  2.188.0.0/23
                  2.188.22.0/24
                  2.188.28.0/24
                  2.188.64.0/21
                  2.188.76.0/24
                  2.188.179.0/24
                  2.188.184.0/23
                  2.188.187.0/24
                  2.189.42.0/23
                  2.189.56.0/24
                  2.189.58.0/24
                  2.189.68.0/24
                  2.189.72.0/24
                  2.191.0.0/16
                  78.38.0.0/15
                  80.191.0.0/16
                  217.218.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         11:65:c2:5e:4f:db:b6:ef:ad:99:a3:3e:c0:1d:72:98:e1:5b:
         b4:3e:e2:fc:85:36:68:45:cb:33:1c:e8:57:1c:82:d6:5e:4e:
         73:2d:d3:fb:8a:42:d1:92:b7:a3:44:17:fd:e9:a1:88:0e:dc:
         4b:44:a1:8a:6c:89:d5:12:d3:5d:3e:4f:d3:e2:f9:42:df:31:
         e9:28:37:d2:4d:27:51:7c:82:3e:d7:df:64:ae:29:8b:30:9e:
         1a:a5:4c:35:5c:c0:02:40:3f:87:7e:94:97:a2:0d:d7:b5:f4:
         7e:33:82:57:e3:cb:3e:4f:5c:60:4a:11:e7:1a:9d:4a:b2:7e:
         af:64:d7:0a:fe:8d:fa:21:7d:2e:ca:d8:c9:e4:60:1d:07:02:
         23:98:ad:a6:53:9b:16:e6:4d:74:16:ae:ff:37:31:99:50:18:
         20:f6:1f:31:10:28:ae:be:5e:a1:e7:0c:1d:e1:47:a1:a6:1f:
         53:d2:57:5c:ff:3f:31:e8:c0:86:bd:c2:be:e4:3f:b5:0b:99:
         3b:ec:58:34:36:b5:c9:40:ac:04:f9:ad:e8:81:39:82:f6:1e:
         ff:86:cc:79:65:79:43:04:97:1c:c2:b4:b9:c6:88:5b:a3:d6:
         61:d1:4d:4c:ce:b5:0c:42:e6:45:60:9b:50:ce:c2:e7:36:07:
         bb:cf:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org