Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jzZkloFMGb0FOUXE2WD2I-slCW0.roa
File:                     jzZkloFMGb0FOUXE2WD2I-slCW0.roa (raw, json)
Hash identifier:          hIqIKwEo07V/p2uIiceaqVnqIPA5/nPgUjBIqbclj2E=
Subject key identifier:   8F:36:64:96:81:4C:19:BD:05:39:45:C4:D9:60:F6:23:EB:25:09:6D
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       018790A406F8243202F2207628EBF3600700
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jzZkloFMGb0FOUXE2WD2I-slCW0.roa
Signing time:             Mon 17 Apr 2023 19:14:41 +0000
ROA not before:           Mon 17 Apr 2023 19:14:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 24
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.11.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          2.188.48.0/22 maxlen: 22
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.54.0/24 maxlen: 24
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 24
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.189.0.0/16 maxlen: 16
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.186.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 18 Apr 2023 10:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:90:a4:06:f8:24:32:02:f2:20:76:28:eb:f3:60:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Apr 17 19:14:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f366496814c19bd053945c4d960f623eb25096d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:e6:56:3d:8f:34:c3:54:ae:64:88:3b:e2:
                    5f:34:40:47:b0:69:4f:cb:1b:85:44:8a:ab:c8:f4:
                    d0:92:99:5f:8e:d3:a5:89:ff:fc:d3:35:e1:71:0d:
                    e4:7b:9e:36:e5:30:3a:40:f7:fc:9d:87:a6:ec:4a:
                    99:fd:16:20:98:6a:d2:1a:55:84:ba:bc:b7:bb:05:
                    78:d7:9a:6d:40:d4:6c:b7:7f:c8:0e:80:2d:e4:eb:
                    74:2a:94:a3:19:fd:40:f9:6e:66:a9:18:06:72:1e:
                    4b:5e:3c:03:4d:40:27:a8:5b:14:6d:b2:d4:fc:fa:
                    04:b9:09:fa:ed:1e:63:42:fe:8e:64:7b:b2:14:95:
                    ca:34:72:b8:22:21:69:9d:1e:3c:7d:1c:1a:8e:6f:
                    57:11:cd:0d:2c:71:15:b9:93:a3:9d:81:9b:9e:83:
                    ca:88:e8:91:5f:3d:86:61:33:85:b5:37:e3:cc:07:
                    50:5f:12:90:7d:9d:92:20:a9:c1:75:13:a5:e7:d6:
                    63:3f:db:54:cc:7b:4b:06:2d:5b:a9:a2:da:e8:00:
                    1d:d4:4a:98:0b:87:d2:73:aa:85:77:a1:a1:46:d3:
                    42:95:6f:9b:bb:40:5a:9e:03:8d:3e:07:f5:cf:b6:
                    a3:c9:b6:c3:62:7b:ed:81:4e:0a:2b:11:5d:33:bb:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:36:64:96:81:4C:19:BD:05:39:45:C4:D9:60:F6:23:EB:25:09:6D
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jzZkloFMGb0FOUXE2WD2I-slCW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:49:b1:d3:b4:d2:0d:e5:9d:41:42:68:63:52:70:19:83:de:
         3e:a5:cf:ce:fe:83:f6:92:66:e5:e9:b8:66:3b:02:c9:fc:6f:
         98:ed:94:bc:c9:0b:b6:df:35:d3:32:24:ab:a4:be:1b:77:fe:
         ce:66:ae:a1:fa:18:2c:5d:05:a9:d1:f7:94:79:2a:be:c8:9b:
         d0:76:93:b7:b7:c6:af:3b:1c:9d:f4:02:ff:40:f9:30:aa:b9:
         e9:98:d5:ab:df:ce:a2:2b:c8:6e:6d:19:4f:9f:97:75:d1:f8:
         5a:0b:95:ea:30:fc:f9:38:00:56:b5:bf:a4:b0:e8:41:93:25:
         de:de:1b:2b:47:c3:c9:94:55:51:cb:24:c9:56:09:20:c8:8b:
         47:e0:67:44:f1:60:49:ce:fc:82:fc:86:67:97:27:c4:ce:64:
         10:dc:99:2b:a3:72:c9:91:7c:71:88:4e:46:f3:1c:49:d2:4a:
         98:9d:ad:d7:3b:05:96:a3:02:f7:65:d3:7f:f9:c5:01:1e:9a:
         ce:21:87:71:9b:c0:d5:04:e0:c3:3f:56:91:cc:86:69:52:10:
         20:cb:40:c3:66:a9:c6:ee:81:25:06:c4:ba:7a:ea:ea:4f:0e:
         d6:2f:7f:eb:d5:f2:f8:a1:7e:38:02:96:b7:cd:30:d1:41:56:
         4a:52:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org