Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GflMoP6i91yNIQpwn1rvRTOD-XI.roa
File:                     GflMoP6i91yNIQpwn1rvRTOD-XI.roa (raw, json)
Hash identifier:          T21TglCsx0GO8WAJzsHx0oGRB0Ak8fxKpkouZ3Wt3ns=
Subject key identifier:   19:F9:4C:A0:FE:A2:F7:5C:8D:21:0A:70:9F:5A:EF:45:33:83:F9:72
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       0187863484845878DBE6DDE988F8405E8B84
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GflMoP6i91yNIQpwn1rvRTOD-XI.roa
Signing time:             Sat 15 Apr 2023 18:36:41 +0000
ROA not before:           Sat 15 Apr 2023 18:36:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 16
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          2.188.48.0/22 maxlen: 22
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.54.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 16
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.189.0.0/16 maxlen: 16
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 15 Apr 2023 18:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:86:34:84:84:58:78:db:e6:dd:e9:88:f8:40:5e:8b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Apr 15 18:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19f94ca0fea2f75c8d210a709f5aef453383f972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0d:0e:52:39:9b:88:bc:ab:1d:53:8e:3b:fb:
                    b9:b2:a7:48:9e:8f:fe:e3:62:ff:6c:09:05:c3:6f:
                    0f:c4:20:f5:a1:21:ba:e5:2f:e8:f7:43:2f:5b:3d:
                    2d:5b:7c:f4:f2:c4:09:16:10:7b:d2:3f:ab:41:21:
                    dc:0b:2d:b0:20:b7:f1:38:2e:bc:02:c9:b3:3b:d0:
                    2d:8e:24:e4:99:94:33:f5:0c:5e:35:42:9e:ad:58:
                    bd:44:ec:bd:1e:5c:7b:5c:ab:bf:cf:27:31:dd:8b:
                    e1:af:59:7a:ef:6c:76:71:e8:a1:f7:87:a1:d2:05:
                    27:01:d8:94:a4:25:f2:08:b4:4c:3e:88:41:f5:2a:
                    3d:c1:8a:96:09:a5:58:9b:ee:62:12:0d:f0:e1:7e:
                    da:be:b1:7a:08:a2:17:e8:ec:fd:f4:01:76:ed:80:
                    4a:c8:3f:3c:48:2f:e5:5a:2d:be:e2:ea:b3:a6:14:
                    15:12:7a:79:5f:a7:1f:47:c0:88:1e:65:b0:28:c8:
                    8d:1e:84:62:87:db:eb:69:c7:79:5a:e7:aa:48:73:
                    ac:2f:4a:5c:30:18:51:31:b8:e3:66:d7:44:a6:47:
                    93:88:50:e5:10:ad:d3:45:d1:8c:df:29:a2:85:b2:
                    5b:1d:12:40:44:97:dc:b0:d7:19:c3:2d:5c:b2:44:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:4C:A0:FE:A2:F7:5C:8D:21:0A:70:9F:5A:EF:45:33:83:F9:72
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GflMoP6i91yNIQpwn1rvRTOD-XI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:de:fd:d2:88:9f:3e:7c:a9:e9:5d:09:bf:c0:1b:18:dd:
         2a:95:0a:47:68:00:81:8c:e8:e3:f0:1c:06:66:c2:9a:ed:31:
         22:36:8d:83:60:07:26:42:c2:04:b2:6e:a6:21:6c:87:ee:51:
         5c:85:ab:75:2f:97:21:45:fc:6c:5b:55:0b:23:2b:b9:e0:20:
         ea:b2:af:43:c3:8b:be:ba:5c:43:23:43:73:1a:1d:dd:a8:10:
         8d:f4:ac:ae:d7:37:ad:05:ad:46:05:3c:ee:6e:2b:1c:98:a6:
         02:51:f5:97:d0:f8:7c:cb:61:38:16:e3:39:4e:44:84:ce:af:
         64:20:7d:32:11:db:96:b9:8c:a2:07:9e:26:cb:64:0a:91:6c:
         20:87:cc:d5:01:82:8d:a2:8e:6f:13:f7:ce:c6:f8:cf:46:91:
         f5:05:c2:f7:3c:17:ff:7a:34:7d:f7:15:1b:69:57:4a:01:58:
         e3:db:6f:3e:c4:80:b4:7e:17:35:5f:80:97:05:da:92:d8:2f:
         26:36:9f:d2:1c:da:bb:60:16:84:53:68:b7:48:35:0c:2b:ea:
         66:e7:c0:41:0f:55:4e:7f:b5:af:a0:2d:5a:53:bb:91:14:2a:
         10:b7:e8:6d:d2:44:d2:5f:01:e1:51:50:12:b1:4b:d4:4a:17:
         f5:3f:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org