Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ALd9obcRwPAaBIS1fGiiD2pHHNo.roa
File:                     ALd9obcRwPAaBIS1fGiiD2pHHNo.roa (raw, json)
Hash identifier:          zDZ/uyNKbnMUOPoTIKH7YcP5JyAzS5WciX+hEsdvEk4=
Subject key identifier:   00:B7:7D:A1:B7:11:C0:F0:1A:04:84:B5:7C:68:A2:0F:6A:47:1C:DA
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       018D7840E8798BD80362DC0E0351875ABD34
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ALd9obcRwPAaBIS1fGiiD2pHHNo.roa
Signing time:             Mon 05 Feb 2024 07:52:16 +0000
ROA not before:           Mon 05 Feb 2024 07:52:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25003
IP address blocks:        80.74.96.0/19 maxlen: 19
                          80.74.96.0/22 maxlen: 22
                          80.74.96.0/23 maxlen: 23
                          80.74.96.0/24 maxlen: 24
                          80.74.97.0/24 maxlen: 24
                          80.74.99.0/24 maxlen: 24
                          80.74.100.0/22 maxlen: 22
                          80.74.100.0/23 maxlen: 23
                          80.74.100.0/24 maxlen: 24
                          80.74.101.0/24 maxlen: 24
                          80.74.102.0/23 maxlen: 23
                          80.74.102.0/24 maxlen: 24
                          80.74.103.0/24 maxlen: 24
                          80.74.104.0/22 maxlen: 22
                          80.74.104.0/23 maxlen: 23
                          80.74.104.0/24 maxlen: 24
                          80.74.105.0/24 maxlen: 24
                          80.74.106.0/23 maxlen: 23
                          80.74.106.0/24 maxlen: 24
                          80.74.107.0/24 maxlen: 24
                          80.74.108.0/22 maxlen: 22
                          80.74.108.0/23 maxlen: 23
                          80.74.108.0/24 maxlen: 24
                          80.74.109.0/24 maxlen: 24
                          80.74.110.0/23 maxlen: 23
                          80.74.110.0/24 maxlen: 24
                          80.74.111.0/24 maxlen: 24
                          80.74.112.0/20 maxlen: 20
                          80.74.112.0/21 maxlen: 21
                          80.74.112.0/22 maxlen: 22
                          80.74.112.0/23 maxlen: 23
                          80.74.112.0/24 maxlen: 24
                          80.74.113.0/24 maxlen: 24
                          80.74.114.0/24 maxlen: 24
                          80.74.115.0/24 maxlen: 24
                          80.74.116.0/22 maxlen: 22
                          80.74.116.0/23 maxlen: 23
                          80.74.116.0/24 maxlen: 24
                          80.74.117.0/24 maxlen: 24
                          80.74.118.0/23 maxlen: 23
                          80.74.118.0/24 maxlen: 24
                          80.74.119.0/24 maxlen: 24
                          80.74.120.0/22 maxlen: 22
                          80.74.120.0/24 maxlen: 24
                          80.74.121.0/24 maxlen: 24
                          80.74.122.0/23 maxlen: 23
                          80.74.122.0/24 maxlen: 24
                          80.74.123.0/24 maxlen: 24
                          80.74.124.0/22 maxlen: 22
                          91.143.224.0/20 maxlen: 20
                          91.143.224.0/22 maxlen: 22
                          91.143.224.0/23 maxlen: 23
                          91.143.224.0/24 maxlen: 24
                          91.143.226.0/23 maxlen: 23
                          91.143.226.0/24 maxlen: 24
                          91.143.227.0/24 maxlen: 24
                          91.143.228.0/24 maxlen: 24
                          91.143.232.0/22 maxlen: 22
                          91.143.232.0/23 maxlen: 23
                          91.143.232.0/24 maxlen: 24
                          91.143.233.0/24 maxlen: 24
                          92.61.224.0/20 maxlen: 20
                          92.61.226.0/24 maxlen: 24
                          92.61.234.0/23 maxlen: 23
                          92.61.234.0/24 maxlen: 24
                          92.61.235.0/24 maxlen: 24
                          92.61.239.0/24 maxlen: 24
                          94.188.128.0/17 maxlen: 17
                          94.188.128.0/22 maxlen: 22
                          94.188.129.0/24 maxlen: 24
                          94.188.130.0/23 maxlen: 23
                          94.188.130.0/24 maxlen: 24
                          94.188.131.0/24 maxlen: 24
                          94.188.133.0/24 maxlen: 24
                          94.188.136.0/24 maxlen: 24
                          94.188.138.0/23 maxlen: 23
                          94.188.138.0/24 maxlen: 24
                          94.188.139.0/24 maxlen: 24
                          94.188.140.0/24 maxlen: 24
                          94.188.141.0/24 maxlen: 24
                          94.188.144.0/22 maxlen: 22
                          94.188.151.0/24 maxlen: 24
                          94.188.152.0/22 maxlen: 22
                          94.188.153.0/24 maxlen: 24
                          94.188.155.0/24 maxlen: 24
                          94.188.157.0/24 maxlen: 24
                          94.188.158.0/24 maxlen: 24
                          94.188.160.0/24 maxlen: 24
                          94.188.161.0/24 maxlen: 24
                          94.188.162.0/24 maxlen: 24
                          94.188.163.0/24 maxlen: 24
                          94.188.164.0/24 maxlen: 24
                          94.188.165.0/24 maxlen: 24
                          94.188.166.0/24 maxlen: 24
                          94.188.167.0/24 maxlen: 24
                          94.188.169.0/24 maxlen: 24
                          94.188.171.0/24 maxlen: 24
                          94.188.172.0/24 maxlen: 24
                          94.188.173.0/24 maxlen: 24
                          94.188.175.0/24 maxlen: 24
                          94.188.176.0/23 maxlen: 23
                          94.188.178.0/23 maxlen: 23
                          94.188.178.0/24 maxlen: 24
                          94.188.184.0/24 maxlen: 24
                          94.188.186.0/23 maxlen: 23
                          94.188.188.0/23 maxlen: 23
                          94.188.190.0/24 maxlen: 24
                          94.188.191.0/24 maxlen: 24
                          94.188.192.0/24 maxlen: 24
                          94.188.197.0/24 maxlen: 24
                          94.188.199.0/24 maxlen: 24
                          94.188.200.0/24 maxlen: 24
                          94.188.213.0/24 maxlen: 24
                          94.188.217.0/24 maxlen: 24
                          94.188.219.0/24 maxlen: 24
                          94.188.220.0/24 maxlen: 24
                          94.188.221.0/24 maxlen: 24
                          94.188.242.0/24 maxlen: 24
                          94.188.243.0/24 maxlen: 24
                          94.188.244.0/23 maxlen: 23
                          94.188.246.0/23 maxlen: 23
                          94.188.247.0/24 maxlen: 24
                          94.188.248.0/22 maxlen: 22
                          94.188.248.0/23 maxlen: 23
                          94.188.248.0/24 maxlen: 24
                          94.188.251.0/24 maxlen: 24
                          94.188.252.0/23 maxlen: 23
                          94.188.254.0/23 maxlen: 23
                          2a02:23b8::/32 maxlen: 32
                          2a02:23b8:2::/52 maxlen: 52
                          2a02:23b8:1a00::/56 maxlen: 56

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 05:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:78:40:e8:79:8b:d8:03:62:dc:0e:03:51:87:5a:bd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Feb  5 07:52:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=00b77da1b711c0f01a0484b57c68a20f6a471cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:28:ca:1b:91:05:77:ef:49:df:03:d3:55:
                    e6:26:f4:65:a8:5d:11:32:8f:df:06:e6:bf:73:86:
                    39:d4:b1:06:5f:6c:69:64:72:96:3b:7b:3b:a4:e0:
                    18:96:17:2a:02:75:e5:b7:29:16:aa:82:78:f3:a8:
                    be:14:64:8a:69:fb:00:54:06:04:46:8f:75:bd:10:
                    5c:28:df:96:9e:5e:1e:78:80:e9:32:f1:09:0b:a8:
                    ee:b3:42:8e:27:fa:dc:29:6e:40:12:73:8c:1f:b9:
                    fd:b4:6f:ba:2c:76:07:da:17:f4:77:5b:ba:20:dd:
                    8e:a1:7c:6c:a8:30:1b:8f:95:f3:31:3e:26:b2:64:
                    e6:92:9c:85:29:0f:02:1b:65:49:33:e6:7c:98:39:
                    79:c8:ac:c8:70:e4:f0:88:1f:64:cd:77:8c:87:71:
                    2c:93:4d:b1:32:db:6c:02:70:6d:c0:04:f1:47:f3:
                    a4:d0:46:c3:ef:df:d0:e4:8d:05:0c:dc:3d:03:ce:
                    c7:0e:5e:8c:e5:18:77:da:0a:13:bd:ce:9e:8b:85:
                    09:ac:32:cf:f4:df:46:d0:50:36:d8:d8:56:b1:c5:
                    a5:35:6a:f6:3b:be:1b:57:00:2d:79:0a:cd:f8:5e:
                    10:8c:12:fb:ef:44:dc:61:4b:ab:99:6c:07:e3:89:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B7:7D:A1:B7:11:C0:F0:1A:04:84:B5:7C:68:A2:0F:6A:47:1C:DA
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ALd9obcRwPAaBIS1fGiiD2pHHNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.74.96.0/19
                  91.143.224.0/20
                  92.61.224.0/20
                  94.188.128.0/17
                IPv6:
                  2a02:23b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:f2:3c:8c:3b:b1:62:7b:50:99:5f:e2:6d:e7:2b:2f:83:81:
         c4:f8:77:e5:2d:f1:5f:1b:3d:19:48:4f:c2:e0:0f:d0:0c:fb:
         18:5b:11:e9:52:6f:88:5b:1c:4d:8e:04:95:bd:8f:74:95:d6:
         fd:c6:27:c9:74:96:93:97:20:61:25:49:54:18:9a:ef:9e:c5:
         f1:8a:89:99:aa:73:8d:88:e9:53:b2:bc:d2:fd:e7:86:eb:96:
         e4:d0:23:e2:5b:85:c0:3e:1c:c2:56:1d:9d:77:f0:65:ef:77:
         3d:44:53:64:a7:20:35:30:d2:70:3b:f9:24:3c:79:97:e0:63:
         91:c5:11:9c:3e:eb:ac:fa:d3:f7:62:e5:dc:47:e0:ad:68:52:
         65:23:50:ea:8c:a9:f5:02:28:af:9b:04:50:95:fb:eb:cc:de:
         54:e7:bc:45:72:59:7f:fb:94:c1:e0:27:b8:c6:7a:70:2e:39:
         30:98:b8:5b:06:7d:2f:41:e3:84:49:71:3a:00:1f:42:00:9b:
         1d:8d:55:91:a8:a0:e4:c5:8e:96:3d:26:f6:fe:44:26:2d:37:
         74:de:ff:59:7a:c8:84:e6:d0:9a:11:e6:6a:d4:0c:f4:91:fd:
         6a:c3:c6:f1:73:c6:20:df:b7:4b:25:ee:63:24:b8:9b:02:fa:
         bd:c4:57:2e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAY14QOh5i9gDYtwOA1GHWr00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5
YTBkODYwHhcNMjQwMjA1MDc1MjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGI3N2RhMWI3MTFjMGYwMWEwNDg0YjU3YzY4YTIwZjZhNDcxY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnkoyhuRBXfvSd8D01XmJvRlqF0R
Mo/fBua/c4Y51LEGX2xpZHKWO3s7pOAYlhcqAnXltykWqoJ486i+FGSKafsAVAYE
Ro91vRBcKN+Wnl4eeIDpMvEJC6jus0KOJ/rcKW5AEnOMH7n9tG+6LHYH2hf0d1u6
IN2OoXxsqDAbj5XzMT4msmTmkpyFKQ8CG2VJM+Z8mDl5yKzIcOTwiB9kzXeMh3Es
k02xMttsAnBtwATxR/Ok0EbD79/Q5I0FDNw9A87HDl6M5Rh32goTvc6ei4UJrDLP
9N9G0FA22NhWscWlNWr2O74bVwAteQrN+F4QjBL770TcYUurmWwH44mjdQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFAC3faG3EcDwGgSEtXxoog9qRxzaMB8GA1UdIwQY
MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt
NDIxZTZiYzdlMmU4LzEvQUxkOW9iY1J3UEFhQklTMWZHaWlEMnBISE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4
LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFUEpgAwQE
W4/gAwQEXD3gAwQHXryAMA0EAgACMAcDBQAqAiO4MA0GCSqGSIb3DQEBCwUAA4IB
AQAV8jyMO7Fie1CZX+Jt5ysvg4HE+HflLfFfGz0ZSE/C4A/QDPsYWxHpUm+IWxxN
jgSVvY90ldb9xifJdJaTlyBhJUlUGJrvnsXxiomZqnONiOlTsrzS/eeG65bk0CPi
W4XAPhzCVh2dd/Bl73c9RFNkpyA1MNJwO/kkPHmX4GORxRGcPuus+tP3YuXcR+Ct
aFJlI1DqjKn1AiivmwRQlfvrzN5U57xFcll/+5TB4Ce4xnpwLjkwmLhbBn0vQeOE
SXE6AB9CAJsdjVWRqKDkxY6WPSb2/kQmLTd03v9ZesiE5tCaEeZq1Az0kf1qw8bx
c8Yg37dLJe5jJLibAvq9xFcu
-----END CERTIFICATE-----
Generated at Tue Feb 6 06:51:58 2024 by rpki-client on console-ams.rpki-client.org