Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/p-93fXlRmomcprxhSUD9qbkpfbM.roa
File:                     p-93fXlRmomcprxhSUD9qbkpfbM.roa (raw, json)
Hash identifier:          hKnsMd+Q+7qkD9XVkBCa3aKmY/Te1SDf/iRS6Qiu4iU=
Subject key identifier:   A7:EF:77:7D:79:51:9A:89:9C:A6:BC:61:49:40:FD:A9:B9:29:7D:B3
Certificate issuer:       /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial:       018766DF999D668ECDDF10F76B73177F09BA
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/p-93fXlRmomcprxhSUD9qbkpfbM.roa
Signing time:             Sun 09 Apr 2023 16:35:42 +0000
ROA not before:           Sun 09 Apr 2023 16:35:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12880
IP address blocks:        2.188.2.0/24 maxlen: 24
                          2.188.3.0/24 maxlen: 24
                          2.188.4.0/24 maxlen: 24
                          2.188.5.0/24 maxlen: 24
                          2.188.0.0/16 maxlen: 16
                          2.188.10.0/24 maxlen: 24
                          2.188.9.0/24 maxlen: 24
                          2.188.8.0/24 maxlen: 24
                          2.188.7.0/24 maxlen: 24
                          2.188.14.0/24 maxlen: 24
                          2.188.13.0/24 maxlen: 24
                          2.188.17.0/24 maxlen: 24
                          2.188.12.0/24 maxlen: 24
                          2.188.12.0/22 maxlen: 22
                          2.188.15.0/24 maxlen: 24
                          2.188.22.0/24 maxlen: 24
                          2.188.18.0/24 maxlen: 24
                          2.188.21.0/24 maxlen: 24
                          2.188.20.0/24 maxlen: 24
                          2.188.19.0/24 maxlen: 24
                          2.188.26.0/23 maxlen: 23
                          2.188.30.0/24 maxlen: 24
                          2.188.25.0/24 maxlen: 24
                          2.188.31.0/24 maxlen: 24
                          78.39.165.0/24 maxlen: 24
                          78.39.179.0/24 maxlen: 24
                          2.189.5.48/28 maxlen: 28
                          2.188.58.0/24 maxlen: 24
                          2.188.61.0/24 maxlen: 24
                          2.188.64.0/21 maxlen: 21
                          2.188.78.0/24 maxlen: 24
                          2.188.77.0/24 maxlen: 24
                          2.188.76.0/24 maxlen: 24
                          2.188.79.0/24 maxlen: 24
                          78.38.242.0/24 maxlen: 24
                          78.38.241.0/24 maxlen: 24
                          78.38.244.0/24 maxlen: 24
                          78.38.245.0/24 maxlen: 24
                          78.38.249.0/24 maxlen: 24
                          78.38.253.0/24 maxlen: 24
                          78.38.255.0/24 maxlen: 24
                          78.39.0.0/16 maxlen: 16
                          78.38.193.0/24 maxlen: 24
                          78.38.201.0/24 maxlen: 24
                          78.38.209.0/24 maxlen: 24
                          2.187.0.0/16 maxlen: 16
                          78.38.220.0/23 maxlen: 23
                          78.38.240.0/24 maxlen: 24
                          78.39.130.0/24 maxlen: 24
                          2.189.5.96/28 maxlen: 28
                          78.38.32.0/19 maxlen: 19
                          217.219.236.0/22 maxlen: 22
                          78.38.0.0/16 maxlen: 16
                          78.38.160.0/19 maxlen: 19
                          195.146.37.0/24 maxlen: 24
                          195.146.32.0/19 maxlen: 19
                          195.146.32.0/20 maxlen: 20
                          195.146.36.0/24 maxlen: 24
                          195.146.32.0/24 maxlen: 24
                          195.146.50.0/24 maxlen: 24
                          195.146.46.0/23 maxlen: 23
                          195.146.60.0/24 maxlen: 24
                          195.146.63.0/24 maxlen: 24
                          217.219.40.0/22 maxlen: 22
                          2.178.192.0/18 maxlen: 18
                          217.219.0.0/16 maxlen: 16
                          217.219.24.0/21 maxlen: 21
                          217.219.152.0/21 maxlen: 21
                          85.185.230.0/23 maxlen: 23
                          2.189.5.64/28 maxlen: 28
                          85.185.192.0/22 maxlen: 22
                          217.218.85.0/24 maxlen: 24
                          80.191.103.0/24 maxlen: 24
                          217.218.94.0/24 maxlen: 24
                          217.218.96.0/19 maxlen: 19
                          217.218.105.0/24 maxlen: 24
                          217.218.104.0/24 maxlen: 24
                          2.178.0.0/19 maxlen: 19
                          217.218.114.0/24 maxlen: 24
                          217.218.131.0/24 maxlen: 24
                          217.218.127.0/24 maxlen: 24
                          217.218.132.0/24 maxlen: 24
                          80.191.41.0/24 maxlen: 24
                          80.191.64.0/23 maxlen: 23
                          217.218.48.0/21 maxlen: 21
                          80.191.61.0/24 maxlen: 24
                          80.191.67.0/24 maxlen: 24
                          217.218.56.0/24 maxlen: 24
                          80.191.69.0/24 maxlen: 24
                          80.191.70.0/24 maxlen: 24
                          217.218.55.0/24 maxlen: 24
                          217.218.64.0/24 maxlen: 24
                          217.218.64.0/18 maxlen: 18
                          80.191.81.0/24 maxlen: 24
                          217.218.67.0/24 maxlen: 24
                          80.191.88.0/21 maxlen: 21
                          2.189.79.64/27 maxlen: 27
                          85.185.42.0/24 maxlen: 24
                          85.185.45.0/24 maxlen: 24
                          217.218.239.0/24 maxlen: 24
                          217.218.235.0/24 maxlen: 24
                          2.189.5.112/28 maxlen: 28
                          2.178.128.0/18 maxlen: 18
                          217.218.143.0/24 maxlen: 24
                          2.178.32.0/19 maxlen: 19
                          217.218.141.0/24 maxlen: 24
                          217.218.155.0/24 maxlen: 24
                          2.178.64.0/18 maxlen: 18
                          85.185.0.0/16 maxlen: 16
                          217.218.180.0/24 maxlen: 24
                          2.185.0.0/16 maxlen: 16
                          2.177.0.0/17 maxlen: 17
                          2.177.128.0/17 maxlen: 17
                          80.191.0.0/24 maxlen: 24
                          80.191.0.0/16 maxlen: 16
                          2.191.0.0/16 maxlen: 16
                          217.218.0.0/17 maxlen: 17
                          217.218.0.0/16 maxlen: 16
                          80.191.24.0/24 maxlen: 24
                          80.191.27.0/24 maxlen: 24
                          80.191.29.0/24 maxlen: 24
                          80.191.36.0/24 maxlen: 24
                          217.218.21.0/24 maxlen: 24
                          80.191.32.0/24 maxlen: 24
                          2.189.5.32/28 maxlen: 28
                          2.182.248.0/22 maxlen: 22
                          2.182.214.0/23 maxlen: 23
                          2.189.79.32/27 maxlen: 27
                          2.176.192.0/18 maxlen: 18
                          2.189.5.80/28 maxlen: 28
                          2.176.0.0/12 maxlen: 12
                          2.189.7.0/24 maxlen: 24
                          2.188.183.0/24 maxlen: 24
                          2.188.185.0/24 maxlen: 24
                          2.188.192.0/18 maxlen: 18
                          2.189.78.0/24 maxlen: 24
                          2.189.77.0/24 maxlen: 24
                          2.189.79.0/24 maxlen: 24
                          2.182.96.0/19 maxlen: 19
                          2.189.45.0/24 maxlen: 24
                          2.189.59.0/24 maxlen: 24
                          2001:4188::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 09 Apr 2023 17:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:66:df:99:9d:66:8e:cd:df:10:f7:6b:73:17:7f:09:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
        Validity
            Not Before: Apr  9 16:35:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7ef777d79519a899ca6bc614940fda9b9297db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3f:c8:32:c5:95:00:02:10:94:00:6f:28:fb:
                    fc:d3:59:bd:5c:35:e2:08:a9:23:78:52:26:df:ca:
                    e1:52:62:06:b7:70:c6:e6:91:d7:79:f1:54:1f:97:
                    79:ac:2a:7c:22:b3:d4:4a:8d:35:06:64:d7:41:66:
                    56:ee:1e:75:69:18:ee:8a:80:b5:1e:6d:b8:3f:df:
                    01:45:e8:bd:10:24:0a:9c:87:14:98:81:84:6e:70:
                    40:0e:40:04:9f:20:1f:3d:46:f1:a3:8b:cb:fd:56:
                    e2:5f:e2:2b:3d:3d:40:07:7f:72:cb:f9:c8:bf:5e:
                    17:f5:21:39:ae:e6:16:09:99:36:d4:3e:fa:28:e6:
                    04:eb:22:27:e2:c7:ef:e6:36:c9:a7:09:24:01:40:
                    dc:8b:f7:e0:a5:e6:dd:e1:ad:a7:cf:6c:86:35:5d:
                    39:b0:33:e9:ea:34:f7:ab:f1:77:d5:0a:36:e0:48:
                    c8:3c:14:6f:45:cb:ef:67:bb:2b:1c:90:3c:12:94:
                    19:96:cf:a6:ee:df:a3:96:c9:ec:26:e5:15:1e:bf:
                    ee:95:c2:91:ec:67:6e:6a:a8:dd:a5:8b:3c:f2:d4:
                    18:f0:1a:a9:c6:b9:14:e4:2b:97:96:92:48:8c:29:
                    b0:e2:c5:1c:f6:38:e2:d2:a0:da:2a:7f:51:b4:ef:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EF:77:7D:79:51:9A:89:9C:A6:BC:61:49:40:FD:A9:B9:29:7D:B3
            X509v3 Authority Key Identifier:
                keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/p-93fXlRmomcprxhSUD9qbkpfbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.176.0.0/12
                  78.38.0.0/15
                  80.191.0.0/16
                  85.185.0.0/16
                  195.146.32.0/19
                  217.218.0.0/15
                IPv6:
                  2001:4188::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:19:b3:0b:ec:5e:7d:2c:04:fc:41:1e:63:d0:2f:88:49:50:
         3b:8f:64:85:fe:9a:b0:44:ce:e7:a2:a5:0c:35:e1:7a:2d:ac:
         e9:c2:06:ea:b0:04:bc:7d:d5:e9:92:a5:61:a4:7d:c3:3b:23:
         b4:63:92:8d:86:0f:a1:96:84:e3:b9:ce:e2:6a:89:fb:a1:3b:
         89:1b:d2:eb:16:71:0f:f1:0a:da:e7:08:91:27:41:00:09:0a:
         57:e1:43:4a:44:b3:92:f5:90:f9:d3:7a:82:3f:f9:7e:e7:c8:
         69:fa:08:43:8a:5c:33:ee:fc:64:f9:ff:05:4c:2d:38:cd:f2:
         f8:e7:13:02:26:3e:96:88:df:2e:37:0a:67:1d:7a:4d:ab:84:
         f0:09:3a:5d:ea:d5:ba:b2:35:08:b3:3b:f1:a3:1c:65:0c:94:
         8a:80:6a:09:b7:99:be:ab:a2:6e:69:19:83:b3:b6:22:86:98:
         f9:58:55:80:1b:d7:5d:a7:99:cd:fd:d7:c3:98:ca:21:db:cf:
         29:29:35:ad:49:c0:04:7e:29:af:39:0f:5f:4f:f1:70:64:1b:
         d8:7a:15:ff:5f:98:17:ef:9f:e8:16:b0:60:c0:1d:bf:0f:aa:
         b3:0e:a3:0d:4f:3d:31:26:07:25:55:14:b8:b5:72:3e:fa:9d:
         18:b6:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org