Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/n2DatR89YSMeV3TS7-ErwVjHuGc.roa
File:                     n2DatR89YSMeV3TS7-ErwVjHuGc.roa (raw, json)
Hash identifier:          uBD/UO7aD5fMyuH9CVK9QVm0DSZ//BizI483kcrML2E=
Subject key identifier:   9F:60:DA:B5:1F:3D:61:23:1E:57:74:D2:EF:E1:2B:C1:58:C7:B8:67
Certificate issuer:       /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial:       018F78D3ECE2620D7E9BD79559C1143A358E
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/n2DatR89YSMeV3TS7-ErwVjHuGc.roa
Signing time:             Tue 14 May 2024 20:38:25 +0000
ROA not before:           Tue 14 May 2024 20:38:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41798
IP address blocks:        2.57.96.0/24 maxlen: 24
                          2.57.97.0/24 maxlen: 24
                          2.57.98.0/24 maxlen: 24
                          2.57.99.0/24 maxlen: 24
                          37.17.176.0/21 maxlen: 21
                          37.17.176.0/24 maxlen: 24
                          37.17.177.0/24 maxlen: 24
                          37.17.178.0/24 maxlen: 24
                          37.17.179.0/24 maxlen: 24
                          37.17.180.0/24 maxlen: 24
                          37.17.181.0/24 maxlen: 24
                          37.17.182.0/24 maxlen: 24
                          37.17.183.0/24 maxlen: 24
                          37.208.40.0/21 maxlen: 21
                          37.208.40.0/24 maxlen: 24
                          37.208.41.0/24 maxlen: 24
                          37.208.42.0/24 maxlen: 24
                          37.208.43.0/24 maxlen: 24
                          37.208.44.0/24 maxlen: 24
                          37.208.45.0/24 maxlen: 24
                          37.208.46.0/24 maxlen: 24
                          37.208.47.0/24 maxlen: 24
                          87.255.202.0/23 maxlen: 23
                          87.255.202.0/24 maxlen: 24
                          87.255.203.0/24 maxlen: 24
                          87.255.204.0/22 maxlen: 22
                          87.255.204.0/24 maxlen: 24
                          87.255.205.0/24 maxlen: 24
                          87.255.206.0/24 maxlen: 24
                          87.255.207.0/24 maxlen: 24
                          87.255.208.0/20 maxlen: 20
                          87.255.208.0/24 maxlen: 24
                          87.255.209.0/24 maxlen: 24
                          87.255.210.0/24 maxlen: 24
                          87.255.211.0/24 maxlen: 24
                          87.255.212.0/24 maxlen: 24
                          87.255.213.0/24 maxlen: 24
                          87.255.214.0/24 maxlen: 24
                          87.255.215.0/24 maxlen: 24
                          87.255.216.0/24 maxlen: 24
                          87.255.217.0/24 maxlen: 24
                          87.255.218.0/24 maxlen: 24
                          87.255.219.0/24 maxlen: 24
                          87.255.220.0/24 maxlen: 24
                          87.255.221.0/24 maxlen: 24
                          87.255.222.0/24 maxlen: 24
                          87.255.223.0/24 maxlen: 24
                          91.185.0.0/19 maxlen: 19
                          91.185.0.0/24 maxlen: 24
                          91.185.1.0/24 maxlen: 24
                          91.185.2.0/24 maxlen: 24
                          91.185.3.0/24 maxlen: 24
                          91.185.4.0/24 maxlen: 24
                          91.185.5.0/24 maxlen: 24
                          91.185.6.0/24 maxlen: 24
                          91.185.7.0/24 maxlen: 24
                          91.185.8.0/24 maxlen: 24
                          91.185.9.0/24 maxlen: 24
                          91.185.10.0/24 maxlen: 24
                          91.185.11.0/24 maxlen: 24
                          91.185.12.0/24 maxlen: 24
                          91.185.13.0/24 maxlen: 24
                          91.185.14.0/24 maxlen: 24
                          91.185.15.0/24 maxlen: 24
                          91.185.16.0/24 maxlen: 24
                          91.185.17.0/24 maxlen: 24
                          91.185.18.0/24 maxlen: 24
                          91.185.19.0/24 maxlen: 24
                          91.185.20.0/24 maxlen: 24
                          91.185.21.0/24 maxlen: 24
                          91.185.22.0/24 maxlen: 24
                          91.185.23.0/24 maxlen: 24
                          91.185.24.0/24 maxlen: 24
                          91.185.25.0/24 maxlen: 24
                          91.185.26.0/24 maxlen: 24
                          91.185.27.0/24 maxlen: 24
                          91.185.28.0/24 maxlen: 24
                          91.185.29.0/24 maxlen: 24
                          91.185.30.0/24 maxlen: 24
                          91.185.31.0/24 maxlen: 24
                          91.246.80.0/20 maxlen: 20
                          91.246.80.0/24 maxlen: 24
                          91.246.81.0/24 maxlen: 24
                          91.246.82.0/24 maxlen: 24
                          91.246.83.0/24 maxlen: 24
                          91.246.84.0/24 maxlen: 24
                          91.246.85.0/24 maxlen: 24
                          91.246.86.0/24 maxlen: 24
                          91.246.87.0/24 maxlen: 24
                          91.246.88.0/24 maxlen: 24
                          91.246.89.0/24 maxlen: 24
                          91.246.90.0/24 maxlen: 24
                          91.246.91.0/24 maxlen: 24
                          91.246.92.0/24 maxlen: 24
                          91.246.93.0/24 maxlen: 24
                          91.246.94.0/24 maxlen: 24
                          91.246.95.0/24 maxlen: 24
                          91.246.96.0/21 maxlen: 21
                          91.246.96.0/24 maxlen: 24
                          91.246.97.0/24 maxlen: 24
                          91.246.98.0/24 maxlen: 24
                          91.246.99.0/24 maxlen: 24
                          91.246.100.0/24 maxlen: 24
                          91.246.101.0/24 maxlen: 24
                          91.246.102.0/24 maxlen: 24
                          91.246.103.0/24 maxlen: 24
                          94.141.224.0/20 maxlen: 20
                          94.141.224.0/24 maxlen: 24
                          94.141.225.0/24 maxlen: 24
                          94.141.226.0/24 maxlen: 24
                          94.141.227.0/24 maxlen: 24
                          94.141.228.0/24 maxlen: 24
                          94.141.229.0/24 maxlen: 24
                          94.141.230.0/24 maxlen: 24
                          94.141.231.0/24 maxlen: 24
                          94.141.232.0/24 maxlen: 24
                          94.141.233.0/24 maxlen: 24
                          94.141.234.0/24 maxlen: 24
                          94.141.235.0/24 maxlen: 24
                          94.141.236.0/24 maxlen: 24
                          94.141.237.0/24 maxlen: 24
                          94.141.238.0/24 maxlen: 24
                          94.141.239.0/24 maxlen: 24
                          94.141.240.0/22 maxlen: 22
                          94.141.240.0/24 maxlen: 24
                          94.141.241.0/24 maxlen: 24
                          94.141.242.0/24 maxlen: 24
                          94.141.243.0/24 maxlen: 24
                          94.141.248.0/22 maxlen: 22
                          94.141.248.0/24 maxlen: 24
                          94.141.249.0/24 maxlen: 24
                          94.141.250.0/24 maxlen: 24
                          94.141.251.0/24 maxlen: 24
                          176.98.224.0/20 maxlen: 20
                          176.98.224.0/24 maxlen: 24
                          176.98.225.0/24 maxlen: 24
                          176.98.226.0/24 maxlen: 24
                          176.98.227.0/24 maxlen: 24
                          176.98.228.0/24 maxlen: 24
                          176.98.229.0/24 maxlen: 24
                          176.98.230.0/24 maxlen: 24
                          176.98.231.0/24 maxlen: 24
                          176.98.232.0/24 maxlen: 24
                          176.98.233.0/24 maxlen: 24
                          176.98.234.0/24 maxlen: 24
                          176.98.235.0/24 maxlen: 24
                          176.98.236.0/24 maxlen: 24
                          176.98.237.0/24 maxlen: 24
                          176.98.238.0/24 maxlen: 24
                          176.98.239.0/24 maxlen: 24
                          176.98.240.0/22 maxlen: 22
                          176.98.240.0/24 maxlen: 24
                          176.98.241.0/24 maxlen: 24
                          176.98.242.0/24 maxlen: 24
                          176.98.243.0/24 maxlen: 24
                          178.22.168.0/21 maxlen: 21
                          178.22.168.0/24 maxlen: 24
                          178.22.169.0/24 maxlen: 24
                          178.22.170.0/24 maxlen: 24
                          178.22.171.0/24 maxlen: 24
                          178.22.172.0/24 maxlen: 24
                          178.22.173.0/24 maxlen: 24
                          178.22.174.0/24 maxlen: 24
                          178.22.175.0/24 maxlen: 24
                          193.104.253.0/24 maxlen: 24
                          2a00:ab40::/32 maxlen: 48
                          2a00:ab40:3000::/48 maxlen: 48
                          2a00:ab40:4000::/48 maxlen: 48
                          2a00:ab40:5000::/48 maxlen: 48
                          2a00:ab40:7200::/48 maxlen: 48
                          2a00:ab40:7201::/48 maxlen: 48
                          2a00:ab40:7300::/48 maxlen: 48
                          2a00:ab40:7301::/48 maxlen: 48
                          2a00:ab40:7400::/48 maxlen: 48
                          2a00:ab40:7401::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 16 May 2024 09:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:78:d3:ec:e2:62:0d:7e:9b:d7:95:59:c1:14:3a:35:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
        Validity
            Not Before: May 14 20:38:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9f60dab51f3d61231e5774d2efe12bc158c7b867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d2:c7:d5:2a:e5:13:5d:e1:e7:7a:f9:ae:15:
                    cf:46:a7:7f:76:1a:85:b8:85:1e:a1:36:90:90:56:
                    51:e9:d1:03:8d:1f:15:24:9a:c9:a5:85:49:a0:6f:
                    3a:b6:8a:aa:a9:84:55:49:52:f0:f0:df:e7:77:e4:
                    9f:88:43:10:3f:b6:32:2d:84:da:89:f7:bc:56:9f:
                    ec:c9:ed:81:37:50:88:a2:bb:7c:7c:bd:d2:d8:49:
                    c3:62:af:77:f7:5b:33:9b:87:f7:f9:d3:61:5e:43:
                    9d:78:f4:17:aa:d4:2c:38:da:f5:9c:89:d5:50:f0:
                    41:de:ce:16:e3:80:52:b9:fd:73:79:31:33:51:04:
                    0e:71:59:fe:5b:bb:8d:c7:38:a2:71:7e:09:ac:f7:
                    a6:41:5a:e5:dc:4e:b9:f8:fb:07:9f:61:68:09:d8:
                    64:a7:2b:49:3d:19:08:f4:37:56:b7:44:c9:5c:e7:
                    6c:45:85:e6:cf:88:9c:e7:14:ba:6b:a9:3b:03:0b:
                    a7:76:dc:11:64:a7:f4:f9:4a:40:75:ec:19:d4:99:
                    77:27:6a:cf:dc:d2:e3:ee:56:1d:bd:a8:0b:33:7f:
                    61:a8:0d:7e:81:06:f2:e7:f0:28:05:92:d5:00:48:
                    74:18:e4:3c:2a:03:e2:23:c3:75:bf:1c:3d:a6:20:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:60:DA:B5:1F:3D:61:23:1E:57:74:D2:EF:E1:2B:C1:58:C7:B8:67
            X509v3 Authority Key Identifier:
                keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/n2DatR89YSMeV3TS7-ErwVjHuGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.96.0/22
                  37.17.176.0/21
                  37.208.40.0/21
                  87.255.202.0-87.255.223.255
                  91.185.0.0/19
                  91.246.80.0-91.246.103.255
                  94.141.224.0-94.141.243.255
                  94.141.248.0/22
                  176.98.224.0-176.98.243.255
                  178.22.168.0/21
                  193.104.253.0/24
                IPv6:
                  2a00:ab40::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:38:aa:5d:51:25:14:f2:26:69:e1:32:a7:52:a3:6c:fc:
         72:54:0c:27:41:e0:e5:90:a8:64:0d:93:9a:fc:6d:75:29:d7:
         53:d5:67:5a:b8:9b:13:c3:6e:e8:d6:2b:80:7a:0b:a6:d4:d2:
         76:bc:d0:5f:55:be:e2:e7:91:bc:dc:69:7e:18:a3:ee:6c:23:
         95:7a:a9:4a:e8:c9:e1:89:88:62:d0:0b:00:56:40:96:f6:47:
         6b:4f:36:ae:9b:a8:16:e7:7e:eb:8a:73:2e:0b:0e:ef:64:73:
         ee:c8:3f:0d:2a:32:aa:dd:bc:fe:93:6e:21:02:72:4c:43:97:
         c1:11:23:b1:a1:8f:ee:4e:5f:60:84:98:1c:06:b7:ad:48:e4:
         fa:9c:04:62:ea:b0:12:8a:41:a8:c8:96:af:75:b1:d1:63:01:
         9e:5b:3c:df:8b:68:6e:e0:e9:bb:27:53:75:58:db:f9:3f:df:
         a5:bd:f4:e5:67:05:91:b9:c8:f2:84:f2:05:79:4a:8e:97:0e:
         ea:0c:e9:ce:a9:47:84:03:33:b5:26:e8:d6:6e:4d:22:1a:da:
         74:55:d4:22:08:fa:ea:80:ae:78:bd:54:4c:78:c1:f1:6f:d6:
         69:25:b1:bf:72:83:dc:b0:58:0e:82:69:f8:11:10:f9:95:5e:
         c0:5b:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:34 2024 by rpki-client on console-ams.rpki-client.org