Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/gRSwPS3we3_WRLSADoimhoiE9yc.roa
File:                     gRSwPS3we3_WRLSADoimhoiE9yc.roa (raw, json)
Hash identifier:          dYYPFu4DMkpaDvLSx7jiQIg9THVNlcW8kj6A81CZzGU=
Subject key identifier:   81:14:B0:3D:2D:F0:7B:7F:D6:44:B4:80:0E:88:A6:86:88:84:F7:27
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       0185E32B32B2E96B663DE525718D5C9BD9C5
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/gRSwPS3we3_WRLSADoimhoiE9yc.roa
Signing time:             Tue 24 Jan 2023 09:45:37 +0000
ROA not before:           Tue 24 Jan 2023 09:45:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 16
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.58.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 16
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 Mar 2023 07:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e3:2b:32:b2:e9:6b:66:3d:e5:25:71:8d:5c:9b:d9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Jan 24 09:45:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8114b03d2df07b7fd644b4800e88a6868884f727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:a0:80:eb:81:26:b5:ce:57:9d:ff:c5:8c:
                    9a:93:99:50:a8:3d:92:50:cc:74:b6:a3:ef:f2:05:
                    21:a0:9b:d9:bf:37:e6:0a:b3:0f:36:19:54:3c:e6:
                    f8:6d:24:76:92:e5:f9:86:1b:d9:49:3d:b1:ed:59:
                    a5:31:58:a7:8a:53:9d:26:c0:ff:83:ce:a6:d5:a4:
                    44:e2:70:94:bd:bb:a9:9e:5f:f0:65:1a:a5:84:b7:
                    ef:67:8b:08:9e:a4:7c:9b:88:cd:e9:a5:f0:d4:65:
                    de:c3:b7:af:4a:ff:dd:f6:e0:68:db:2f:ae:57:f4:
                    5d:69:07:33:75:bb:32:66:4a:d4:72:6e:d7:54:5e:
                    c4:24:69:21:06:88:49:24:dd:e2:91:b4:44:0d:ca:
                    62:1b:ff:38:c0:31:11:b6:85:58:42:ac:86:e4:30:
                    22:cb:04:a3:31:cb:b0:2a:e6:f7:41:08:8a:40:6d:
                    68:c1:61:66:2d:4c:e8:94:f1:4c:cc:c8:48:38:4b:
                    be:30:eb:18:99:e9:ec:b6:3e:5f:00:9e:87:a3:4a:
                    26:60:52:cf:e4:ea:4a:09:c4:37:e3:67:5f:34:46:
                    13:48:5b:3d:57:8c:83:60:d3:48:c4:64:1b:a3:31:
                    5a:40:8e:c2:a3:91:fe:9a:b4:23:17:3a:25:ed:c5:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:14:B0:3D:2D:F0:7B:7F:D6:44:B4:80:0E:88:A6:86:88:84:F7:27
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/gRSwPS3we3_WRLSADoimhoiE9yc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:03:2e:ce:da:f1:3e:3b:99:90:a3:d8:4c:cb:da:45:95:
         32:f7:f9:a3:35:8a:a2:a6:24:4d:d6:8d:ee:1a:f4:2d:01:01:
         91:2b:1d:74:12:c5:09:30:d9:79:30:d5:5b:ca:9c:bd:08:7f:
         e7:ce:16:09:76:80:47:36:98:34:ee:bc:af:12:33:91:a3:b2:
         bb:8d:ad:13:b4:bc:9c:60:bf:e2:85:2d:af:2a:ca:fc:10:c0:
         00:1e:96:db:40:4d:58:fa:14:63:20:8c:da:6c:19:15:60:17:
         0a:06:e5:45:dc:b1:be:43:c0:7c:d5:0a:bf:46:eb:9c:8f:8d:
         bc:95:f6:be:66:fa:b0:74:eb:0a:2f:c0:ab:a8:6c:a6:56:00:
         81:d1:ed:4c:68:6e:47:d5:97:08:b0:32:10:2c:e6:f4:20:c1:
         ba:be:3a:7a:c6:ca:67:2f:76:43:32:6f:50:84:94:90:b8:d1:
         17:d3:64:08:92:57:3a:83:a2:a2:0d:11:18:39:b9:86:aa:b0:
         36:d2:17:6c:ef:7a:f8:97:0b:5c:2a:1b:3f:a1:29:fd:2e:d7:
         92:ad:ee:a7:10:ed:d2:62:04:83:17:7c:91:28:3f:96:ee:bd:
         32:9f:ee:f0:64:2e:54:4f:85:9b:ba:53:10:99:84:6e:ba:67:
         bb:98:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org