Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Vs4PVTsQ9aoCTlOVh78FnXAzZLw.roa
File:                     Vs4PVTsQ9aoCTlOVh78FnXAzZLw.roa (raw, json)
Hash identifier:          V4D3gPsweLI/p5zFMSyYZb92eSQa3+JNK+InmcQvXeM=
Subject key identifier:   56:CE:0F:55:3B:10:F5:AA:02:4E:53:95:87:BF:05:9D:70:33:64:BC
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       0187954C0A71225105B702F997DFCC3A12C8
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Vs4PVTsQ9aoCTlOVh78FnXAzZLw.roa
Signing time:             Tue 18 Apr 2023 16:56:41 +0000
ROA not before:           Tue 18 Apr 2023 16:56:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 24
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.11.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          2.188.48.0/22 maxlen: 22
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.54.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 24
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 24
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 24
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.189.0.0/16 maxlen: 24
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.186.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 13 May 2023 15:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:95:4c:0a:71:22:51:05:b7:02:f9:97:df:cc:3a:12:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Apr 18 16:56:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56ce0f553b10f5aa024e539587bf059d703364bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:b8:6c:f5:30:96:79:16:27:5e:24:5a:10:
                    6a:44:27:6d:2c:75:79:63:e1:01:e3:95:e5:a2:b4:
                    ab:1b:33:89:e3:82:88:a7:af:87:09:7a:a8:e3:fb:
                    36:10:3f:55:da:da:e4:65:98:68:24:30:98:a5:97:
                    eb:b6:54:5d:4e:5a:86:7e:fd:31:4c:b5:56:65:a4:
                    0b:f4:9b:3a:42:f9:96:a8:98:f0:d9:42:e9:26:14:
                    cd:3f:9d:d1:71:5b:c8:8d:ee:83:58:62:77:f0:b9:
                    18:be:26:82:1d:2d:17:90:76:03:73:bb:6e:dc:b2:
                    c6:78:44:03:2d:bd:7f:7d:3e:0f:25:fe:2f:ef:00:
                    92:29:df:04:09:d2:79:78:68:e8:4f:f1:09:6f:d6:
                    29:79:ac:02:0c:6f:5e:7b:f0:a8:47:bb:00:cd:9e:
                    45:fb:d7:50:1b:5c:30:b0:61:1f:4b:68:52:6b:fa:
                    90:e0:19:2e:bb:05:7a:ad:64:9b:1f:1f:7d:e8:59:
                    43:df:8b:eb:55:6f:5c:55:54:a6:92:f3:fe:c0:1f:
                    5d:e9:df:ce:9f:99:d1:61:b9:a7:5c:99:de:3e:ad:
                    28:93:c7:c2:c4:ba:01:2c:58:14:10:0e:7a:14:9a:
                    71:89:61:00:8d:b8:d0:b9:5c:25:6c:70:e9:c0:62:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:0F:55:3B:10:F5:AA:02:4E:53:95:87:BF:05:9D:70:33:64:BC
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Vs4PVTsQ9aoCTlOVh78FnXAzZLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:3b:fb:df:54:8a:d2:fb:65:9c:a6:71:d3:9c:2e:07:8b:
         39:4d:d6:c8:81:1f:93:6e:9f:5f:14:8a:be:0f:b1:02:47:d7:
         25:db:1e:c5:2e:fd:e3:9f:3f:6e:55:24:52:69:22:7a:35:54:
         d0:27:da:9a:af:c6:66:d5:37:9e:f2:93:85:92:b6:d9:8f:9c:
         03:2e:fa:3f:6c:0d:1b:bd:20:fe:98:04:1d:9f:30:3b:b0:c5:
         10:a5:ee:b5:e2:50:66:23:12:f0:a3:84:30:09:0e:a2:e1:70:
         ed:29:07:3a:23:11:a8:98:68:74:63:1c:7c:48:92:d2:b4:16:
         41:1b:d5:89:25:52:b4:a3:d0:93:d8:82:3a:7b:3a:4c:48:21:
         8a:6a:9a:32:4f:a4:b8:17:e0:ac:a5:cd:a7:fe:20:fa:d2:b8:
         a9:66:f9:09:90:0e:a8:a0:4c:87:a0:6f:ca:3f:1f:b1:dc:2e:
         d9:8c:20:9a:41:8b:42:a0:44:b2:90:27:6a:7a:9e:04:58:bf:
         bf:f1:ee:53:fe:9d:0c:ac:48:86:5b:4a:58:cb:22:02:ae:e1:
         0a:0e:1f:e1:60:ff:ee:47:1b:ec:8e:ec:63:c1:23:08:ea:93:
         35:97:9f:1b:93:1b:02:1d:c6:ac:ac:27:aa:a0:0a:5d:86:c3:
         26:51:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org