Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/sVUg5_wvKrrauzSolvq4u89PZO0.roa
File:                     sVUg5_wvKrrauzSolvq4u89PZO0.roa (raw, json)
Hash identifier:          888DZhafIertGCmIRJdv8FdJ87df0fq4UjdADzMnNec=
Subject key identifier:   B1:55:20:E7:FC:2F:2A:BA:DA:BB:34:A8:96:FA:B8:BB:CF:4F:64:ED
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       018CC9C14F637B5CFE26BC609C979F424DBB
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/sVUg5_wvKrrauzSolvq4u89PZO0.roa
Signing time:             Tue 02 Jan 2024 10:38:58 +0000
ROA not before:           Tue 02 Jan 2024 10:38:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202766
IP address blocks:        94.198.46.0/24 maxlen: 24
                          94.198.47.0/24 maxlen: 24
                          45.80.80.0/24 maxlen: 24
                          45.80.82.0/24 maxlen: 24
                          45.80.82.0/23 maxlen: 23
                          45.80.83.0/24 maxlen: 24
                          185.203.23.0/24 maxlen: 24
                          185.203.22.0/24 maxlen: 24
                          89.42.70.0/24 maxlen: 24
                          185.242.175.0/24 maxlen: 24
                          178.19.44.0/24 maxlen: 24
                          45.83.51.0/24 maxlen: 24
                          45.83.50.0/23 maxlen: 23
                          45.83.50.0/24 maxlen: 24
                          178.19.47.0/24 maxlen: 24
                          80.66.112.0/23 maxlen: 23
                          185.229.212.0/22 maxlen: 22
                          185.229.212.0/24 maxlen: 24
                          80.66.117.0/24 maxlen: 24
                          80.66.115.0/24 maxlen: 24
                          185.229.213.0/24 maxlen: 24
                          80.66.118.0/24 maxlen: 24
                          80.66.116.0/24 maxlen: 24
                          80.66.114.0/24 maxlen: 24
                          80.66.121.0/24 maxlen: 24
                          80.66.125.0/24 maxlen: 24
                          89.44.150.0/24 maxlen: 24
                          185.229.214.0/24 maxlen: 24
                          80.66.123.0/24 maxlen: 24
                          80.66.119.0/24 maxlen: 24
                          80.66.120.0/24 maxlen: 24
                          89.44.151.0/24 maxlen: 24
                          185.229.215.0/24 maxlen: 24
                          80.66.124.0/24 maxlen: 24
                          80.66.127.0/24 maxlen: 24
                          80.66.126.0/24 maxlen: 24
                          178.19.32.0/24 maxlen: 24
                          178.19.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 09:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:c1:4f:63:7b:5c:fe:26:bc:60:9c:97:9f:42:4d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 10:38:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b15520e7fc2f2abadabb34a896fab8bbcf4f64ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:7f:5f:3e:ac:d0:6d:9d:c0:fe:73:9a:91:
                    02:39:1b:b0:f1:2d:48:f3:d1:46:3d:d3:01:54:f3:
                    65:35:b0:07:8a:bc:4e:6a:8c:4b:ae:80:2e:19:68:
                    d7:a8:ec:66:c0:67:d1:16:90:f8:cc:89:17:ab:90:
                    9f:a4:8f:9f:bb:42:92:b0:04:91:9c:42:a6:dd:67:
                    10:3e:b1:b2:8b:a8:99:0d:02:cf:1d:c0:eb:fe:b0:
                    c1:2b:fa:0a:d2:82:37:fe:f1:39:ec:40:71:61:31:
                    e5:92:5a:a1:05:ce:26:9a:0b:9b:c1:63:1e:07:2e:
                    d5:a9:bf:b7:55:13:01:c2:82:bc:21:b4:13:0a:b5:
                    69:cf:a8:f6:a5:e5:1b:75:cd:4e:f1:c6:b0:8a:14:
                    fe:dd:9d:22:ce:87:ed:7c:a0:89:87:a6:88:49:5f:
                    fd:d5:9d:3f:6b:e8:b7:95:1c:5f:31:bc:ef:b3:83:
                    4c:ff:21:a0:50:9a:62:92:1c:93:9d:4e:18:f4:54:
                    03:7f:17:dd:84:52:c3:06:9c:dc:a0:2d:29:01:9b:
                    c5:6e:59:73:c2:b4:16:05:f4:66:37:15:e5:84:e9:
                    ce:c9:3a:2e:bc:7f:51:ed:f2:14:5a:f3:80:bc:60:
                    95:55:8b:e5:4f:cc:7f:ec:ed:6f:c4:c9:b6:09:95:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:20:E7:FC:2F:2A:BA:DA:BB:34:A8:96:FA:B8:BB:CF:4F:64:ED
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/sVUg5_wvKrrauzSolvq4u89PZO0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.80.0/24
                  45.80.82.0/23
                  45.83.50.0/23
                  80.66.112.0-80.66.121.255
                  80.66.123.0-80.66.127.255
                  89.42.70.0/24
                  89.44.150.0/23
                  94.198.46.0/23
                  178.19.32.0/23
                  178.19.44.0/24
                  178.19.47.0/24
                  185.203.22.0/23
                  185.229.212.0/22
                  185.242.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:7b:4a:53:97:9d:76:f2:d3:67:64:bd:b0:e4:e4:ea:77:a0:
         bc:03:83:f2:48:3d:a6:58:2e:1a:fd:f4:c4:5b:74:07:7f:9d:
         06:e5:5d:3e:7e:4b:0e:d5:51:fe:41:2d:44:c6:44:d2:99:72:
         f2:fa:b9:4b:14:4d:21:de:a3:b1:9e:da:cf:b7:59:f7:21:cd:
         06:75:ad:06:c8:c9:6f:d1:2b:3c:7d:20:16:00:a7:0b:1e:4a:
         bc:71:6b:b8:9b:b4:00:81:29:36:46:40:50:96:6d:eb:b9:66:
         c2:a2:d9:32:a2:c9:87:7f:e3:1a:3f:71:a5:dd:bb:d5:a8:eb:
         ad:f8:34:19:d2:f8:3f:67:e8:9a:63:12:18:2d:8c:2b:d0:68:
         0e:69:7e:a9:28:53:90:63:e5:f3:57:90:10:83:50:96:d8:bf:
         aa:4d:4a:09:de:f4:5f:f1:40:9a:44:64:4a:36:39:e4:66:2f:
         a8:1a:e6:4a:bb:32:80:15:f1:f3:9a:bc:46:4a:07:dd:d3:7d:
         10:9c:55:fd:5d:60:e5:2e:a7:36:94:0a:54:ab:9e:c5:0f:8d:
         a8:ab:d3:47:1e:27:05:35:a8:e3:cf:60:54:8f:ff:b5:4e:9a:
         d9:bb:b7:de:ba:6a:ec:f1:e2:c4:d9:ac:9f:88:db:e4:09:6c:
         03:52:58:d7
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAYzJwU9je1z+JrxgnJefQk27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQwMTAyMTAzODU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTU1MjBlN2ZjMmYyYWJhZGFiYjM0YTg5NmZhYjhiYmNmNGY2NGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv9/Xz6s0G2dwP5zmpECORuw8S1I
89FGPdMBVPNlNbAHirxOaoxLroAuGWjXqOxmwGfRFpD4zIkXq5CfpI+fu0KSsASR
nEKm3WcQPrGyi6iZDQLPHcDr/rDBK/oK0oI3/vE57EBxYTHlklqhBc4mmgubwWMe
By7Vqb+3VRMBwoK8IbQTCrVpz6j2peUbdc1O8cawihT+3Z0izoftfKCJh6aISV/9
1Z0/a+i3lRxfMbzvs4NM/yGgUJpikhyTnU4Y9FQDfxfdhFLDBpzcoC0pAZvFbllz
wrQWBfRmNxXlhOnOyTouvH9R7fIUWvOAvGCVVYvlT8x/7O1vxMm2CZUxlQIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFLFVIOf8Lyq62rs0qJb6uLvPT2TtMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvc1ZVZzVfd3ZLcnJhdXpTb2x2cTR1ODlQWk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQALVBQAwQB
LVBSAwQBLVMyMAwDBARQQnADBAFQQngwDAMEAFBCewMEB1BCAAMEAFkqRgMEAVks
lgMEAV7GLgMEAbITIAMEALITLAMEALITLwMEAbnLFgMEArnl1AMEALnyrzANBgkq
hkiG9w0BAQsFAAOCAQEAWntKU5eddvLTZ2S9sOTk6negvAOD8kg9plguGv30xFt0
B3+dBuVdPn5LDtVR/kEtRMZE0ply8vq5SxRNId6jsZ7az7dZ9yHNBnWtBsjJb9Er
PH0gFgCnCx5KvHFruJu0AIEpNkZAUJZt67lmwqLZMqLJh3/jGj9xpd271ajrrfg0
GdL4P2fommMSGC2MK9BoDml+qShTkGPl81eQEINQlti/qk1KCd70X/FAmkRkSjY5
5GYvqBrmSrsygBXx85q8RkoH3dN9EJxV/V1g5S6nNpQKVKuexQ+NqKvTRx4nBTWo
489gVI//tU6a2bu33rpq7PHixNmsn4jb5AlsA1JY1w==
-----END CERTIFICATE-----
Generated at Thu Jan 18 13:16:10 2024 by rpki-client on console-fra.rpki-client.org