Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/V2C1dnuBywWu242LoAXnXNi9Vxg.roa
File:                     V2C1dnuBywWu242LoAXnXNi9Vxg.roa (raw, json)
Hash identifier:          up2qZR5GOL6woH7PxnBRiOyn93KTJlmA3zkFVpZgo5M=
Subject key identifier:   57:60:B5:76:7B:81:CB:05:AE:DB:8D:8B:A0:05:E7:5C:D8:BD:57:18
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       018767008E834A4715D80AB76B4E3CFBBC11
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/V2C1dnuBywWu242LoAXnXNi9Vxg.roa
Signing time:             Sun 09 Apr 2023 17:11:42 +0000
ROA not before:           Sun 09 Apr 2023 17:11:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 16
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          2.188.48.0/22 maxlen: 22
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 16
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 15 Apr 2023 16:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:67:00:8e:83:4a:47:15:d8:0a:b7:6b:4e:3c:fb:bc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Apr  9 17:11:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5760b5767b81cb05aedb8d8ba005e75cd8bd5718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:e1:eb:e1:cd:c3:3e:25:58:4f:56:73:71:
                    2f:58:e8:7a:96:d5:80:94:52:a8:ca:59:b4:48:91:
                    a0:9b:6a:bb:76:9e:f6:45:6b:c9:a8:25:a4:6e:d7:
                    f6:f5:45:79:89:4e:e5:b0:7a:ef:d5:68:3c:0f:26:
                    d5:f5:9d:1c:22:f7:af:5f:e0:58:a5:28:26:9d:d0:
                    38:56:4e:5a:85:07:63:43:83:35:7e:43:a4:11:bb:
                    cd:bd:cd:20:00:21:8d:84:7c:2d:de:13:1e:b2:12:
                    37:02:6b:5a:01:6f:58:89:be:c6:7e:11:c0:4a:83:
                    6e:51:a4:dd:19:26:af:9e:9e:74:fb:e2:47:d2:ae:
                    ad:b2:6d:e7:7f:08:c6:db:74:8e:c3:9f:78:23:c3:
                    4b:c2:1e:c7:9d:20:42:4b:9d:66:b2:3c:72:5c:43:
                    ae:5a:87:ff:d9:6d:57:ea:2b:01:ab:be:29:56:6f:
                    bc:a7:d7:0f:38:f6:e3:0f:ea:b8:c6:7a:b1:73:e8:
                    44:8a:22:6c:53:64:1b:4f:51:27:0b:9c:f8:fe:68:
                    b6:cf:c1:1d:5b:7c:91:75:53:5e:1c:fe:3c:8c:77:
                    45:2f:be:b6:97:c4:d4:4c:e0:59:34:dd:1b:a5:08:
                    59:99:01:5c:96:3c:ca:7a:56:0a:a7:5e:8d:dc:4c:
                    2a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:60:B5:76:7B:81:CB:05:AE:DB:8D:8B:A0:05:E7:5C:D8:BD:57:18
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/V2C1dnuBywWu242LoAXnXNi9Vxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:06:df:58:f8:bd:c0:05:09:a9:67:78:d6:ea:6a:e9:1a:ac:
         f3:89:b1:d6:9e:91:d2:fa:82:a3:63:ad:7f:ac:79:ed:f5:b7:
         1e:1d:e9:0e:b6:7a:81:cc:02:09:89:91:a6:b5:48:36:81:a6:
         31:84:cf:43:13:c9:97:84:60:4d:85:21:d7:20:67:05:8e:31:
         f6:e6:64:26:58:4b:55:ac:d6:49:94:52:a3:ec:d4:a0:fb:7c:
         8b:b6:34:ed:66:63:b8:23:0c:c4:52:23:91:34:25:5d:1b:24:
         d6:d2:8a:7d:86:24:55:cc:f7:c7:77:6b:ee:f6:a0:fb:61:58:
         9b:42:8f:69:44:bd:73:bd:f1:2a:1c:dd:ef:74:8d:93:b8:67:
         02:cd:5d:10:1b:8f:05:a9:cf:0f:fc:f1:9f:04:07:ef:1d:b9:
         00:2f:87:5a:d4:b0:ce:9a:34:49:3f:c6:d7:5b:9d:33:f3:c1:
         34:78:93:6e:40:84:55:f9:b4:6e:41:97:00:09:c8:72:57:a8:
         67:d3:09:4b:96:89:79:ec:67:94:32:97:c6:4a:d1:f8:61:7c:
         f6:ad:36:ab:a0:b9:ed:7e:ca:88:6e:fe:e6:08:3e:10:96:0d:
         92:6b:d3:d5:a5:e3:9d:dd:05:9a:ee:b4:27:96:8d:dd:f2:08:
         17:7d:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org