Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/j-rDt-O4aU7r6-6a81AnCIAxnHA.roa
File:                     j-rDt-O4aU7r6-6a81AnCIAxnHA.roa (raw, json)
Hash identifier:          HIIGfdUhoRc3X6QCGx8Koh2cNp/Bhf7X4QnEtNGmlAk=
Subject key identifier:   8F:EA:C3:B7:E3:B8:69:4E:EB:EB:EE:9A:F3:50:27:08:80:31:9C:70
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       018EF1421DF4E9CF56CDAF289AB5FCFECDBB
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/j-rDt-O4aU7r6-6a81AnCIAxnHA.roa
Signing time:             Thu 18 Apr 2024 12:50:25 +0000
ROA not before:           Thu 18 Apr 2024 12:50:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47583
IP address blocks:        2.57.88.0/23 maxlen: 23
                          2.57.90.0/24 maxlen: 24
                          2.57.91.0/24 maxlen: 24
                          31.170.160.0/22 maxlen: 22
                          31.170.164.0/23 maxlen: 23
                          31.170.164.0/24 maxlen: 24
                          31.170.165.0/24 maxlen: 24
                          31.170.166.0/23 maxlen: 23
                          31.220.16.0/24 maxlen: 24
                          31.220.17.0/24 maxlen: 24
                          31.220.18.0/24 maxlen: 24
                          31.220.19.0/24 maxlen: 24
                          31.220.20.0/23 maxlen: 23
                          31.220.20.0/24 maxlen: 24
                          31.220.21.0/24 maxlen: 24
                          31.220.22.0/24 maxlen: 24
                          31.220.23.0/24 maxlen: 24
                          31.220.48.0/20 maxlen: 20
                          31.220.104.0/24 maxlen: 24
                          31.220.105.0/24 maxlen: 24
                          31.220.106.0/24 maxlen: 24
                          31.220.107.0/24 maxlen: 24
                          31.220.108.0/24 maxlen: 24
                          31.220.109.0/24 maxlen: 24
                          31.220.110.0/24 maxlen: 24
                          31.220.111.0/24 maxlen: 24
                          45.13.132.0/23 maxlen: 23
                          45.13.134.0/23 maxlen: 23
                          45.13.252.0/23 maxlen: 23
                          45.13.254.0/23 maxlen: 23
                          45.87.80.0/22 maxlen: 22
                          45.93.136.0/22 maxlen: 22
                          93.188.160.0/21 maxlen: 21
                          153.92.1.0/24 maxlen: 24
                          153.92.2.0/24 maxlen: 24
                          153.92.3.0/24 maxlen: 24
                          153.92.4.0/23 maxlen: 23
                          153.92.6.0/23 maxlen: 23
                          153.92.6.0/24 maxlen: 24
                          153.92.7.0/24 maxlen: 24
                          153.92.8.0/21 maxlen: 21
                          153.92.8.0/24 maxlen: 24
                          153.92.9.0/24 maxlen: 24
                          153.92.10.0/24 maxlen: 24
                          153.92.11.0/24 maxlen: 24
                          153.92.12.0/24 maxlen: 24
                          153.92.13.0/24 maxlen: 24
                          153.92.14.0/24 maxlen: 24
                          153.92.15.0/24 maxlen: 24
                          156.67.208.0/20 maxlen: 20
                          185.28.20.0/24 maxlen: 24
                          185.28.21.0/24 maxlen: 24
                          185.28.22.0/24 maxlen: 24
                          185.28.23.0/24 maxlen: 24
                          185.77.96.0/24 maxlen: 24
                          185.77.97.0/24 maxlen: 24
                          194.11.154.0/23 maxlen: 23
                          194.11.214.0/23 maxlen: 23
                          195.110.58.0/23 maxlen: 23
                          212.1.208.0/21 maxlen: 21
                          212.1.208.0/24 maxlen: 24
                          212.1.210.0/24 maxlen: 24
                          212.1.211.0/24 maxlen: 24
                          212.1.212.0/22 maxlen: 22
                          212.1.212.0/24 maxlen: 24
                          212.1.215.0/24 maxlen: 24
                          2a02:4780::/48 maxlen: 48
                          2a02:4780:1::/48 maxlen: 48
                          2a02:4780:2::/48 maxlen: 48
                          2a02:4780:3::/48 maxlen: 48
                          2a02:4780:4::/48 maxlen: 48
                          2a02:4780:5::/48 maxlen: 48
                          2a02:4780:6::/48 maxlen: 48
                          2a02:4780:8::/48 maxlen: 48
                          2a02:4780:9::/48 maxlen: 48
                          2a02:4780:a::/48 maxlen: 48
                          2a02:4780:b::/48 maxlen: 48
                          2a02:4780:c::/48 maxlen: 48
                          2a02:4780:d::/48 maxlen: 48
                          2a02:4780:e::/48 maxlen: 48
                          2a02:4780:f::/48 maxlen: 48
                          2a02:4780:10::/48 maxlen: 48
                          2a02:4780:11::/48 maxlen: 48
                          2a02:4780:12::/48 maxlen: 48
                          2a02:4780:13::/48 maxlen: 48
                          2a02:4780:14::/48 maxlen: 48
                          2a02:4780:15::/48 maxlen: 48
                          2a02:4780:16::/48 maxlen: 48
                          2a02:4780:17::/48 maxlen: 48
                          2a02:4780:18::/48 maxlen: 48
                          2a02:4780:19::/48 maxlen: 48
                          2a02:4780:1a::/48 maxlen: 48
                          2a02:4780:1b::/48 maxlen: 48
                          2a02:4780:1c::/48 maxlen: 48
                          2a02:4780:1d::/48 maxlen: 48
                          2a02:4780:1e::/48 maxlen: 48
                          2a02:4780:1f::/48 maxlen: 48
                          2a02:4780:20::/48 maxlen: 48
                          2a02:4780:21::/48 maxlen: 48
                          2a02:4780:22::/48 maxlen: 48
                          2a02:4780:23::/48 maxlen: 48
                          2a02:4780:24::/48 maxlen: 48
                          2a02:4780:25::/48 maxlen: 48
                          2a02:4780:26::/48 maxlen: 48
                          2a02:4780:27::/48 maxlen: 48
                          2a02:4780:28::/48 maxlen: 48
                          2a02:4780:29::/48 maxlen: 48
                          2a02:4780:2a::/48 maxlen: 48
                          2a02:4780:2b::/48 maxlen: 48
                          2a02:4780:2c::/48 maxlen: 48
                          2a02:4780:2d::/48 maxlen: 48
                          2a02:4780:2e::/48 maxlen: 48
                          2a02:4780:2f::/48 maxlen: 48
                          2a02:4780:30::/48 maxlen: 48
                          2a02:4780:31::/48 maxlen: 48
                          2a02:4780:32::/48 maxlen: 48
                          2a02:4780:33::/48 maxlen: 48
                          2a02:4780:36::/48 maxlen: 48
                          2a02:4780:37::/48 maxlen: 48
                          2a02:4780:38::/48 maxlen: 48
                          2a02:4780:39::/48 maxlen: 48
                          2a02:4780:3a::/48 maxlen: 48
                          2a02:4780:3b::/48 maxlen: 48
                          2a02:4780:84::/48 maxlen: 48
                          2a02:4780:85::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 05:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f1:42:1d:f4:e9:cf:56:cd:af:28:9a:b5:fc:fe:cd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Apr 18 12:50:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8feac3b7e3b8694eebebee9af350270880319c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:c3:33:3f:3e:7f:36:44:04:38:3f:67:58:
                    38:2b:73:57:bc:9a:a9:64:87:e8:59:68:3a:08:fd:
                    17:04:50:65:ae:bf:a4:94:f2:2e:eb:6b:39:7e:b2:
                    bb:ca:b2:e5:05:b9:70:a3:b0:e9:d3:08:78:c6:2c:
                    54:a1:e9:e5:8c:36:10:db:ea:78:89:77:fe:52:00:
                    d1:d1:45:2c:5c:bf:4f:6d:c8:55:a1:4b:b1:4e:cf:
                    5a:57:9d:76:d3:2d:c2:22:40:00:46:bd:33:93:62:
                    3f:5b:16:52:d3:ad:e3:7a:35:b2:cb:d1:92:21:d0:
                    f1:17:76:a5:90:05:c9:21:9f:25:10:db:53:f1:18:
                    5f:8e:2b:47:70:da:df:4c:5d:20:61:6e:e0:a6:d0:
                    82:3b:73:fa:76:9c:88:91:d1:e6:1d:b4:f1:b6:80:
                    d9:43:13:69:cd:3b:2f:ec:1e:a6:20:7e:10:aa:31:
                    7a:0d:29:5b:e8:bf:33:b8:2c:83:5a:40:22:06:26:
                    b2:88:b1:a8:31:76:21:7a:90:12:58:cf:6f:95:f6:
                    b7:dd:f0:86:f9:85:90:b6:6d:1e:a6:38:d6:a8:ce:
                    7a:33:11:5d:6a:8e:df:b2:7a:9b:f6:95:ed:c1:ef:
                    4a:0f:b8:63:dd:97:ee:09:9c:9b:01:56:9b:77:d4:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EA:C3:B7:E3:B8:69:4E:EB:EB:EE:9A:F3:50:27:08:80:31:9C:70
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/j-rDt-O4aU7r6-6a81AnCIAxnHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.88.0/22
                  31.170.160.0/21
                  31.220.16.0/21
                  31.220.48.0/20
                  31.220.104.0/21
                  45.13.132.0/22
                  45.13.252.0/22
                  45.87.80.0/22
                  45.93.136.0/22
                  93.188.160.0/21
                  153.92.1.0-153.92.15.255
                  156.67.208.0/20
                  185.28.20.0/22
                  185.77.96.0/23
                  194.11.154.0/23
                  194.11.214.0/23
                  195.110.58.0/23
                  212.1.208.0/21
                IPv6:
                  2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:8::-2a02:4780:33:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:36::-2a02:4780:3b:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:84::/47

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:b4:84:b9:74:f3:e8:19:d3:3d:5a:98:2f:ad:08:70:5d:
         b0:1b:53:aa:4e:49:71:bb:02:85:7c:9d:bd:94:2e:c1:5e:98:
         98:05:6e:69:a5:7b:a0:86:5b:0f:82:4b:36:8e:59:b7:08:ed:
         44:4c:b8:e3:1c:a2:d5:91:ff:bb:2d:a7:a5:d9:9a:af:39:d4:
         52:bd:a2:a4:24:6c:f0:23:2d:a8:ed:93:a2:8a:f3:a0:42:b7:
         c9:d3:48:f0:ec:1a:e3:77:5b:0d:8f:85:39:e4:78:66:e4:60:
         a2:f3:4a:cd:02:30:29:e1:31:c9:3e:e1:2a:69:22:fe:ff:82:
         fe:43:a4:e1:db:ce:fe:48:ea:dd:be:1a:fa:46:34:81:52:6c:
         8e:a8:c9:43:8f:df:0f:80:31:41:40:39:d2:a5:59:3d:30:ac:
         4d:6d:59:7c:8e:55:41:09:ff:44:80:6b:ff:84:59:b4:85:4d:
         19:fa:37:b9:a6:27:af:fc:5f:7c:7f:21:cf:40:d2:a0:34:c7:
         7a:d2:6c:83:67:af:6a:d4:5b:71:75:11:22:28:4c:0b:8d:fa:
         53:42:05:e0:ef:5b:93:8a:3d:9c:48:8b:d3:bf:84:40:bb:77:
         81:ef:60:79:71:9e:53:08:d5:96:63:23:1a:c5:41:61:6f:5c:
         f3:06:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:23 2024 by rpki-client on console-ams.rpki-client.org