Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wGWXlCRquyejbZcsidmMR1wEy0A.roa
File:                     wGWXlCRquyejbZcsidmMR1wEy0A.roa (raw, json)
Hash identifier:          uP6LH1BPa1+F+LpHbT4UDUuJdzlwlMStV3Q3F1hA19M=
Subject key identifier:   C0:65:97:94:24:6A:BB:27:A3:6D:97:2C:89:D9:8C:47:5C:04:CB:40
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       0187B7CDF71E08102E28FBC2DCA90E212B0A
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wGWXlCRquyejbZcsidmMR1wEy0A.roa
Signing time:             Tue 25 Apr 2023 09:45:41 +0000
ROA not before:           Tue 25 Apr 2023 09:45:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8641
IP address blocks:        213.208.160.0/21 maxlen: 21
                          213.208.168.0/23 maxlen: 23
                          213.208.170.0/24 maxlen: 24
                          213.208.172.0/23 maxlen: 23
                          213.208.174.0/23 maxlen: 23
                          213.208.176.0/21 maxlen: 21
                          213.208.186.0/23 maxlen: 23
                          213.208.184.0/24 maxlen: 24
                          213.208.188.0/22 maxlen: 22
                          81.26.144.0/21 maxlen: 21
                          81.26.144.0/24 maxlen: 24
                          81.26.152.0/22 maxlen: 22
                          81.26.155.0/24 maxlen: 24
                          185.106.107.0/24 maxlen: 24
                          77.94.162.0/24 maxlen: 24
                          77.94.160.0/19 maxlen: 19
                          84.47.128.0/23 maxlen: 23
                          84.47.131.0/24 maxlen: 24
                          77.94.175.0/24 maxlen: 24
                          84.47.135.0/24 maxlen: 24
                          84.47.134.0/23 maxlen: 23
                          84.47.136.0/24 maxlen: 24
                          84.47.142.0/24 maxlen: 24
                          84.47.140.0/23 maxlen: 23
                          84.47.144.0/23 maxlen: 23
                          84.47.152.0/23 maxlen: 23
                          84.47.150.0/23 maxlen: 23
                          85.91.96.0/21 maxlen: 21
                          84.47.147.0/24 maxlen: 24
                          84.47.156.0/22 maxlen: 22
                          84.47.160.0/24 maxlen: 24
                          84.47.161.0/24 maxlen: 24
                          84.47.162.0/24 maxlen: 24
                          84.47.163.0/24 maxlen: 24
                          85.91.112.0/22 maxlen: 22
                          84.47.164.0/23 maxlen: 23
                          84.47.168.0/22 maxlen: 22
                          85.91.118.0/23 maxlen: 23
                          213.135.64.0/23 maxlen: 23
                          84.47.172.0/24 maxlen: 24
                          213.135.67.0/24 maxlen: 24
                          213.135.70.0/24 maxlen: 24
                          84.47.178.0/24 maxlen: 24
                          85.91.122.0/24 maxlen: 24
                          85.91.120.0/23 maxlen: 23
                          84.47.176.0/24 maxlen: 24
                          213.135.69.0/24 maxlen: 24
                          84.47.177.0/24 maxlen: 24
                          84.47.176.0/23 maxlen: 23
                          84.47.174.0/23 maxlen: 23
                          84.47.181.0/24 maxlen: 24
                          213.135.72.0/23 maxlen: 23
                          84.47.182.0/23 maxlen: 23
                          84.47.186.0/23 maxlen: 23
                          213.135.77.0/24 maxlen: 24
                          213.135.80.0/24 maxlen: 24
                          84.47.190.0/23 maxlen: 23
                          213.135.82.0/23 maxlen: 23
                          213.135.79.0/24 maxlen: 24
                          213.135.84.0/22 maxlen: 22
                          213.135.88.0/22 maxlen: 22
                          2a02:bc8::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 03 Jul 2023 13:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:cd:f7:1e:08:10:2e:28:fb:c2:dc:a9:0e:21:2b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Apr 25 09:45:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0659794246abb27a36d972c89d98c475c04cb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:01:2b:67:81:a5:a6:29:d1:d9:df:28:c8:
                    bd:43:da:ac:10:9f:cb:ec:1e:a8:f5:bf:0f:31:e4:
                    c1:35:18:e4:8c:2d:d0:53:f3:f8:4d:a3:42:17:f5:
                    23:cd:7f:f8:92:f5:e2:52:13:5b:9f:05:29:ae:1c:
                    93:fb:33:fa:c0:ee:3c:f0:d5:f0:0c:f2:3f:1e:8c:
                    50:d7:61:33:84:5c:b9:91:18:2b:66:5e:cf:22:bb:
                    53:36:27:11:a7:74:2c:a5:e1:a9:75:51:da:b5:d9:
                    33:d3:f7:e0:19:4e:fc:45:6b:03:55:75:13:72:eb:
                    84:93:12:bf:2b:6c:87:2a:2b:5a:e5:20:e8:a4:a7:
                    40:d9:fa:29:ab:e1:c4:71:00:15:3f:af:c5:64:73:
                    59:7f:98:fb:dd:fc:56:a7:97:63:d1:8d:5c:b9:2b:
                    ea:64:bb:10:d2:c2:2a:cb:b8:75:d8:15:c3:f1:ba:
                    ad:74:02:df:4c:02:db:3f:7d:2e:71:cb:c9:87:04:
                    32:39:be:08:be:d4:64:13:16:c2:b9:ee:98:14:8f:
                    7d:62:e6:8f:c0:34:49:0d:6d:2e:c5:a9:d3:fd:4e:
                    96:05:0b:18:63:26:3d:81:9a:8f:05:07:d2:53:c1:
                    d3:a2:8b:ce:74:56:1c:44:e7:5f:aa:df:46:b7:8d:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:65:97:94:24:6A:BB:27:A3:6D:97:2C:89:D9:8C:47:5C:04:CB:40
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wGWXlCRquyejbZcsidmMR1wEy0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.94.160.0/19
                  81.26.144.0-81.26.155.255
                  84.47.128.0/23
                  84.47.131.0/24
                  84.47.134.0-84.47.136.255
                  84.47.140.0-84.47.142.255
                  84.47.144.0/23
                  84.47.147.0/24
                  84.47.150.0-84.47.153.255
                  84.47.156.0-84.47.165.255
                  84.47.168.0-84.47.172.255
                  84.47.174.0-84.47.178.255
                  84.47.181.0-84.47.183.255
                  84.47.186.0/23
                  84.47.190.0/23
                  85.91.96.0/21
                  85.91.112.0/22
                  85.91.118.0-85.91.122.255
                  185.106.107.0/24
                  213.135.64.0/23
                  213.135.67.0/24
                  213.135.69.0-213.135.70.255
                  213.135.72.0/23
                  213.135.77.0/24
                  213.135.79.0-213.135.80.255
                  213.135.82.0-213.135.91.255
                  213.208.160.0-213.208.170.255
                  213.208.172.0-213.208.184.255
                  213.208.186.0-213.208.191.255
                IPv6:
                  2a02:bc8::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:73:95:ff:78:97:72:c6:60:1f:54:87:8f:32:7e:cc:34:da:
         39:a4:cf:4f:fc:64:5a:fa:64:8d:36:66:db:36:ed:ca:1e:d3:
         2e:65:88:74:f4:d5:6d:d9:08:05:5d:c7:46:4e:ce:4a:6f:c8:
         1d:44:4e:69:e8:0a:a9:a3:82:62:d7:58:83:fa:77:de:c5:97:
         7e:cc:c7:d5:76:69:5e:64:b1:23:f8:61:a8:5f:27:4e:55:0a:
         40:ef:22:32:81:31:4f:ff:54:99:00:eb:90:39:b0:58:c8:b7:
         82:b2:a3:6b:f0:63:23:ce:84:16:eb:c0:70:31:27:c4:00:2f:
         bb:ae:bf:ef:c9:e5:f1:32:3f:63:9d:a2:45:d9:d5:ac:c0:d7:
         14:0d:e2:5f:e0:6b:72:d2:ff:ef:20:f9:43:2c:86:44:17:f3:
         0d:7f:a8:a7:04:d2:42:35:7d:7b:5d:d9:9c:10:e8:17:a8:c0:
         94:b7:cf:69:ce:99:c9:bb:84:8a:e3:dd:50:56:db:92:87:14:
         7b:75:f3:ef:34:ad:c1:be:49:7b:cf:fd:4a:81:68:8e:52:cf:
         d3:7f:9f:9c:37:b1:35:2b:d0:98:f4:4b:54:94:98:78:0a:5f:
         b8:b2:3a:3b:2d:0a:26:65:f9:92:d9:e8:63:56:cb:c3:f1:bc:
         23:05:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org