Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/QiJUxou7najiqZB3Gi_W6EF2llw.roa
File:                     QiJUxou7najiqZB3Gi_W6EF2llw.roa (raw, json)
Hash identifier:          9m4kAGXa4oe/0sqYC/Mi3mV/sFxOlg1e2UxFlL25alk=
Subject key identifier:   42:22:54:C6:8B:BB:9D:A8:E2:A9:90:77:1A:2F:D6:E8:41:76:96:5C
Certificate issuer:       /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial:       018CC86F73803CD7AE9A7B54DCF7D05DC589
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/QiJUxou7najiqZB3Gi_W6EF2llw.roa
Signing time:             Tue 02 Jan 2024 04:29:56 +0000
ROA not before:           Tue 02 Jan 2024 04:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41798
IP address blocks:        37.208.43.0/24 maxlen: 24
                          37.208.42.0/24 maxlen: 24
                          37.208.44.0/24 maxlen: 24
                          37.208.41.0/24 maxlen: 24
                          37.208.40.0/24 maxlen: 24
                          37.208.45.0/24 maxlen: 24
                          37.208.46.0/24 maxlen: 24
                          37.208.47.0/24 maxlen: 24
                          87.255.203.0/24 maxlen: 24
                          87.255.202.0/24 maxlen: 24
                          87.255.205.0/24 maxlen: 24
                          87.255.204.0/24 maxlen: 24
                          87.255.206.0/24 maxlen: 24
                          87.255.208.0/24 maxlen: 24
                          87.255.210.0/24 maxlen: 24
                          87.255.209.0/24 maxlen: 24
                          87.255.207.0/24 maxlen: 24
                          87.255.212.0/24 maxlen: 24
                          87.255.211.0/24 maxlen: 24
                          87.255.219.0/24 maxlen: 24
                          87.255.218.0/24 maxlen: 24
                          87.255.215.0/24 maxlen: 24
                          87.255.217.0/24 maxlen: 24
                          87.255.216.0/24 maxlen: 24
                          87.255.214.0/24 maxlen: 24
                          87.255.222.0/24 maxlen: 24
                          87.255.223.0/24 maxlen: 24
                          87.255.221.0/24 maxlen: 24
                          87.255.220.0/24 maxlen: 24
                          176.98.226.0/24 maxlen: 24
                          176.98.225.0/24 maxlen: 24
                          176.98.224.0/20 maxlen: 20
                          176.98.224.0/24 maxlen: 24
                          176.98.228.0/24 maxlen: 24
                          176.98.227.0/24 maxlen: 24
                          176.98.233.0/24 maxlen: 24
                          176.98.232.0/24 maxlen: 24
                          176.98.230.0/24 maxlen: 24
                          176.98.229.0/24 maxlen: 24
                          176.98.231.0/24 maxlen: 24
                          176.98.235.0/24 maxlen: 24
                          176.98.234.0/24 maxlen: 24
                          176.98.240.0/24 maxlen: 24
                          176.98.239.0/24 maxlen: 24
                          176.98.237.0/24 maxlen: 24
                          176.98.236.0/24 maxlen: 24
                          176.98.238.0/24 maxlen: 24
                          37.17.176.0/24 maxlen: 24
                          37.17.178.0/24 maxlen: 24
                          37.17.177.0/24 maxlen: 24
                          37.17.179.0/24 maxlen: 24
                          37.17.183.0/24 maxlen: 24
                          37.17.180.0/24 maxlen: 24
                          37.17.182.0/24 maxlen: 24
                          37.17.181.0/24 maxlen: 24
                          176.98.243.0/24 maxlen: 24
                          176.98.242.0/24 maxlen: 24
                          176.98.241.0/24 maxlen: 24
                          2.57.96.0/24 maxlen: 24
                          2.57.98.0/24 maxlen: 24
                          2.57.97.0/24 maxlen: 24
                          2.57.99.0/24 maxlen: 24
                          91.246.80.0/24 maxlen: 24
                          91.246.85.0/24 maxlen: 24
                          91.246.82.0/24 maxlen: 24
                          91.246.81.0/24 maxlen: 24
                          91.246.84.0/24 maxlen: 24
                          91.246.83.0/24 maxlen: 24
                          91.246.89.0/24 maxlen: 24
                          91.246.88.0/24 maxlen: 24
                          91.246.91.0/24 maxlen: 24
                          91.246.90.0/24 maxlen: 24
                          91.246.87.0/24 maxlen: 24
                          91.246.86.0/24 maxlen: 24
                          91.246.92.0/24 maxlen: 24
                          91.246.94.0/24 maxlen: 24
                          91.246.93.0/24 maxlen: 24
                          91.246.96.0/24 maxlen: 24
                          91.246.95.0/24 maxlen: 24
                          91.246.98.0/24 maxlen: 24
                          91.246.97.0/24 maxlen: 24
                          91.246.103.0/24 maxlen: 24
                          91.246.102.0/24 maxlen: 24
                          91.246.99.0/24 maxlen: 24
                          91.246.101.0/24 maxlen: 24
                          91.246.100.0/24 maxlen: 24
                          193.104.253.0/24 maxlen: 24
                          91.185.16.0/24 maxlen: 24
                          91.185.17.0/24 maxlen: 24
                          91.185.13.0/24 maxlen: 24
                          91.185.12.0/24 maxlen: 24
                          91.185.15.0/24 maxlen: 24
                          91.185.14.0/24 maxlen: 24
                          91.185.20.0/24 maxlen: 24
                          91.185.19.0/24 maxlen: 24
                          91.185.22.0/24 maxlen: 24
                          91.185.21.0/24 maxlen: 24
                          91.185.18.0/24 maxlen: 24
                          91.185.23.0/24 maxlen: 24
                          91.185.24.0/24 maxlen: 24
                          91.185.31.0/24 maxlen: 24
                          91.185.30.0/24 maxlen: 24
                          91.185.27.0/24 maxlen: 24
                          91.185.26.0/24 maxlen: 24
                          91.185.29.0/24 maxlen: 24
                          91.185.28.0/24 maxlen: 24
                          91.185.25.0/24 maxlen: 24
                          91.185.2.0/24 maxlen: 24
                          91.185.4.0/24 maxlen: 24
                          91.185.3.0/24 maxlen: 24
                          91.185.1.0/24 maxlen: 24
                          91.185.0.0/24 maxlen: 24
                          91.185.6.0/24 maxlen: 24
                          91.185.5.0/24 maxlen: 24
                          91.185.8.0/24 maxlen: 24
                          91.185.7.0/24 maxlen: 24
                          91.185.9.0/24 maxlen: 24
                          91.185.11.0/24 maxlen: 24
                          91.185.10.0/24 maxlen: 24
                          178.22.172.0/24 maxlen: 24
                          178.22.169.0/24 maxlen: 24
                          178.22.168.0/24 maxlen: 24
                          178.22.171.0/24 maxlen: 24
                          178.22.170.0/24 maxlen: 24
                          178.22.175.0/24 maxlen: 24
                          178.22.174.0/24 maxlen: 24
                          178.22.173.0/24 maxlen: 24
                          94.141.226.0/24 maxlen: 24
                          94.141.225.0/24 maxlen: 24
                          94.141.224.0/24 maxlen: 24
                          94.141.227.0/24 maxlen: 24
                          94.141.228.0/24 maxlen: 24
                          94.141.233.0/24 maxlen: 24
                          94.141.230.0/24 maxlen: 24
                          94.141.229.0/24 maxlen: 24
                          94.141.232.0/24 maxlen: 24
                          94.141.231.0/24 maxlen: 24
                          94.141.234.0/24 maxlen: 24
                          94.141.235.0/24 maxlen: 24
                          94.141.240.0/24 maxlen: 24
                          94.141.237.0/24 maxlen: 24
                          94.141.236.0/24 maxlen: 24
                          94.141.239.0/24 maxlen: 24
                          94.141.238.0/24 maxlen: 24
                          94.141.241.0/24 maxlen: 24
                          94.141.242.0/24 maxlen: 24
                          94.141.243.0/24 maxlen: 24
                          94.141.251.0/24 maxlen: 24
                          94.141.250.0/24 maxlen: 24
                          94.141.248.0/24 maxlen: 24
                          94.141.249.0/24 maxlen: 24
                          2a00:ab40:7201::/48 maxlen: 48
                          2a00:ab40:7301::/48 maxlen: 48
                          2a00:ab40:7401::/48 maxlen: 48
                          2a00:ab40:3000::/48 maxlen: 48
                          2a00:ab40:4000::/48 maxlen: 48
                          2a00:ab40:5000::/48 maxlen: 48
                          2a00:ab40:7200::/48 maxlen: 48
                          2a00:ab40:7300::/48 maxlen: 48
                          2a00:ab40:7400::/48 maxlen: 48
                          2a00:ab40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 11:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:73:80:3c:d7:ae:9a:7b:54:dc:f7:d0:5d:c5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
        Validity
            Not Before: Jan  2 04:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=422254c68bbb9da8e2a990771a2fd6e84176965c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:e4:35:5e:0f:a6:ca:03:52:9d:53:77:2c:
                    5c:ba:97:01:41:07:f2:3c:8f:c6:20:0e:80:5e:37:
                    d6:1d:7a:cc:7e:52:1a:4d:e7:5e:4f:f8:76:24:1c:
                    69:1f:9f:85:3d:7b:0c:3e:96:92:f5:89:57:82:a3:
                    32:3a:19:d4:06:21:9f:a4:4b:9e:1c:17:31:5e:c1:
                    71:10:45:f1:64:e5:4a:d6:3e:bf:f6:32:aa:4c:1d:
                    2b:b3:f9:1b:2d:3a:4d:36:c3:4e:59:58:71:08:91:
                    6c:10:23:a5:51:39:3b:2f:8d:93:7e:b8:e7:64:48:
                    17:20:f4:14:bf:89:7b:f5:c2:61:48:d2:e7:17:42:
                    53:85:c9:6c:62:28:b1:b5:54:63:af:05:c3:05:d3:
                    f7:4f:49:d6:1f:0f:fb:fd:ac:0b:01:49:3c:49:a7:
                    e3:d7:9e:8e:ae:39:c0:d4:bc:aa:94:99:a3:d4:9d:
                    ae:7b:5b:89:09:a7:07:bb:ca:0d:a4:eb:c1:af:70:
                    bc:0a:1e:44:d4:b9:e3:bd:15:3f:6b:97:55:69:2b:
                    65:86:5f:17:e0:a1:7b:ad:00:91:81:76:a2:98:7d:
                    89:3e:c6:0d:8a:24:ce:f0:b1:ed:d4:bf:48:44:a8:
                    77:19:09:6c:26:96:9d:b2:d4:54:88:ec:8c:03:b9:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:54:C6:8B:BB:9D:A8:E2:A9:90:77:1A:2F:D6:E8:41:76:96:5C
            X509v3 Authority Key Identifier:
                keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/QiJUxou7najiqZB3Gi_W6EF2llw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.96.0/22
                  37.17.176.0/21
                  37.208.40.0/21
                  87.255.202.0-87.255.212.255
                  87.255.214.0-87.255.223.255
                  91.185.0.0/19
                  91.246.80.0-91.246.103.255
                  94.141.224.0-94.141.243.255
                  94.141.248.0/22
                  176.98.224.0-176.98.243.255
                  178.22.168.0/21
                  193.104.253.0/24
                IPv6:
                  2a00:ab40::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:c5:8d:1e:bf:8f:a4:2c:60:0c:2a:70:a9:b6:9a:f9:36:
         f8:33:a5:88:c9:c0:37:4e:97:b8:66:dd:fe:6a:41:4e:29:51:
         c8:cc:7e:07:d4:51:83:c1:56:d2:a2:ba:94:72:4d:d5:c4:c6:
         f0:08:52:5e:76:1d:ad:16:3e:22:a6:36:51:10:cc:8f:cc:f6:
         c5:d4:1e:f7:de:9b:79:c6:be:3a:00:ae:bd:c0:d6:5a:05:06:
         17:33:69:cd:01:c7:c5:32:ba:77:e8:d2:bb:06:e3:4a:f8:85:
         a8:c6:e2:bf:5c:12:d3:cd:13:e4:6f:49:36:01:dd:d1:2b:b1:
         24:f7:e7:11:af:44:e4:b5:9e:41:4f:bd:f3:63:36:a0:f9:27:
         dc:bf:1e:bf:fc:7a:33:db:70:61:51:b0:68:a9:f1:c2:a3:00:
         9e:e0:e9:bc:d6:0c:ed:64:00:f2:62:76:05:e8:fa:11:01:7a:
         40:b4:c1:4b:0b:76:01:27:c8:5e:f8:fb:2c:9d:c8:1c:8c:d4:
         4a:d0:fb:33:4b:91:00:fa:a6:f7:7c:09:90:44:48:85:1e:a3:
         75:7e:79:65:a3:33:16:9e:17:e7:d5:f3:33:bf:9d:2c:dd:63:
         e7:3d:93:35:fe:ae:64:68:24:f7:89:b6:b8:cd:a1:1d:50:4b:
         89:3d:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:34 2024 by rpki-client on console-ams.rpki-client.org