Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LoGOTBUQjrYmuUmQhyr367tJauQ.roa
File:                     LoGOTBUQjrYmuUmQhyr367tJauQ.roa (raw, json)
Hash identifier:          3TdK9gjjVj7X49l4TlkCDawk7il5VTYRnfILZM6Vf2Q=
Subject key identifier:   2E:81:8E:4C:15:10:8E:B6:26:B9:49:90:87:2A:F7:EB:BB:49:6A:E4
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       0192B92AB60DCE6DB4EDE8826BB2E638ED20
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LoGOTBUQjrYmuUmQhyr367tJauQ.roa
Signing time:             Wed 23 Oct 2024 11:37:16 +0000
ROA not before:           Wed 23 Oct 2024 11:37:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        14.102.52.0/24 maxlen: 24
                          14.102.53.0/24 maxlen: 24
                          14.102.54.0/24 maxlen: 24
                          14.102.55.0/24 maxlen: 24
                          14.102.63.0/24 maxlen: 24
                          14.102.84.0/24 maxlen: 24
                          14.102.85.0/24 maxlen: 24
                          14.102.86.0/24 maxlen: 24
                          14.102.87.0/24 maxlen: 24
                          62.169.128.0/24 maxlen: 24
                          62.169.129.0/24 maxlen: 24
                          62.169.130.0/24 maxlen: 24
                          62.169.131.0/24 maxlen: 24
                          62.169.132.0/24 maxlen: 24
                          62.169.133.0/24 maxlen: 24
                          62.169.134.0/24 maxlen: 24
                          62.169.135.0/24 maxlen: 24
                          84.51.234.0/24 maxlen: 24
                          84.51.235.0/24 maxlen: 24
                          92.51.232.0/24 maxlen: 24
                          92.51.233.0/24 maxlen: 24
                          92.51.238.0/24 maxlen: 24
                          92.51.239.0/24 maxlen: 24
                          92.51.248.0/24 maxlen: 24
                          92.51.249.0/24 maxlen: 24
                          92.51.250.0/24 maxlen: 24
                          92.51.251.0/24 maxlen: 24
                          92.51.252.0/24 maxlen: 24
                          92.51.253.0/24 maxlen: 24
                          92.51.254.0/24 maxlen: 24
                          103.61.197.0/24 maxlen: 24
                          103.61.198.0/24 maxlen: 24
                          103.61.199.0/24 maxlen: 24
                          103.125.77.0/24 maxlen: 24
                          103.125.78.0/24 maxlen: 24
                          103.125.79.0/24 maxlen: 24
                          103.210.198.0/24 maxlen: 24
                          103.210.199.0/24 maxlen: 24
                          103.213.212.0/24 maxlen: 24
                          103.213.213.0/24 maxlen: 24
                          103.213.214.0/24 maxlen: 24
                          103.213.215.0/24 maxlen: 24
                          103.255.76.0/24 maxlen: 24
                          103.255.77.0/24 maxlen: 24
                          167.160.16.0/24 maxlen: 24
                          167.160.17.0/24 maxlen: 24
                          167.160.29.0/24 maxlen: 24
                          198.55.28.0/24 maxlen: 24
                          198.55.29.0/24 maxlen: 24
                          203.188.164.0/24 maxlen: 24
                          203.188.167.0/24 maxlen: 24
                          203.188.168.0/24 maxlen: 24
                          203.188.169.0/24 maxlen: 24
                          203.188.170.0/24 maxlen: 24
                          203.188.171.0/24 maxlen: 24
                          203.188.172.0/24 maxlen: 24
                          203.188.173.0/24 maxlen: 24
                          212.56.48.0/24 maxlen: 24
                          212.56.49.0/24 maxlen: 24
                          212.56.50.0/24 maxlen: 24
                          212.56.51.0/24 maxlen: 24
                          212.78.245.0/24 maxlen: 24
                          212.78.246.0/24 maxlen: 24
                          212.78.247.0/24 maxlen: 24
                          212.78.248.0/24 maxlen: 24
                          212.78.249.0/24 maxlen: 24
                          212.78.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 06:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b9:2a:b6:0d:ce:6d:b4:ed:e8:82:6b:b2:e6:38:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Oct 23 11:37:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2e818e4c15108eb626b94990872af7ebbb496ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:68:0c:6b:22:3d:de:ac:22:df:3c:14:8f:
                    3f:8e:5c:9b:de:e0:2c:22:5c:fe:4c:49:20:be:13:
                    25:df:61:68:6d:af:18:c8:fd:02:4c:6b:17:38:8f:
                    e8:d9:e5:1e:06:d6:fc:7d:eb:39:9e:93:88:aa:a9:
                    bb:1d:f5:d7:6e:f2:8b:d8:80:e1:61:c7:8b:1c:cb:
                    d5:f9:2c:26:29:24:d7:1e:c1:e3:51:06:22:8e:bc:
                    aa:eb:84:83:8b:96:93:05:2a:63:4b:57:57:de:70:
                    b8:12:6c:0d:01:e4:db:92:6b:b6:3b:84:fc:57:8e:
                    c3:1d:af:6c:e2:e2:87:35:ac:a5:4c:5a:4e:16:d0:
                    3d:2f:af:e7:ec:84:c7:bb:3b:b8:ed:0d:b0:57:6c:
                    3e:d7:ec:13:3a:92:b7:97:3b:e2:b0:e7:78:04:6d:
                    07:3e:0d:53:59:b6:fd:ea:f9:68:85:57:b2:e7:66:
                    91:9e:96:9b:27:f7:af:28:0c:3e:44:66:bf:98:ee:
                    36:ec:5b:b0:47:c1:4f:a9:20:77:e6:8e:d2:c9:43:
                    b7:c0:73:ca:7d:b4:87:98:1f:59:2b:04:e6:41:7c:
                    9c:9f:f9:87:d1:26:96:05:87:5f:a0:a8:35:6c:9a:
                    22:a9:8c:ee:24:63:c6:04:07:aa:60:34:39:25:c6:
                    2e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:8E:4C:15:10:8E:B6:26:B9:49:90:87:2A:F7:EB:BB:49:6A:E4
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LoGOTBUQjrYmuUmQhyr367tJauQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.52.0/22
                  14.102.63.0/24
                  14.102.84.0/22
                  62.169.128.0/21
                  84.51.234.0/23
                  92.51.232.0/23
                  92.51.238.0/23
                  92.51.248.0-92.51.254.255
                  103.61.197.0-103.61.199.255
                  103.125.77.0-103.125.79.255
                  103.210.198.0/23
                  103.213.212.0/22
                  103.255.76.0/23
                  167.160.16.0/23
                  167.160.29.0/24
                  198.55.28.0/23
                  203.188.164.0/24
                  203.188.167.0-203.188.173.255
                  212.56.48.0/22
                  212.78.245.0-212.78.250.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:d8:c9:88:ab:93:46:6d:7e:c4:4c:7d:72:3e:b4:57:4d:54:
         09:d0:3b:c0:c9:1f:d0:4f:fc:34:b3:64:40:dd:55:dc:97:f6:
         69:93:bc:8f:78:94:20:55:ef:27:8a:5f:99:f1:fa:20:09:55:
         25:7e:86:d2:47:ca:6e:6d:72:e2:4a:ac:c7:50:72:df:c0:f7:
         8a:92:fa:9d:f1:3f:94:13:7e:d8:5a:4d:a9:92:3b:2f:9f:d3:
         01:20:b8:89:6b:72:17:c2:2c:36:81:05:92:b4:bb:2d:10:05:
         27:7d:71:0b:d3:5e:90:66:25:d7:15:98:dd:df:77:61:ec:5b:
         91:d3:72:85:29:a2:1a:68:a4:ec:df:59:9d:12:2c:b0:62:96:
         60:53:ca:ed:56:e4:92:21:69:ad:b7:93:7b:af:9c:9a:2a:21:
         df:2f:ac:f8:7e:29:f0:82:09:86:97:4a:4c:54:fe:61:a7:92:
         6c:d8:5f:a5:67:ef:ff:6f:46:92:8a:4f:10:dc:7e:9c:ba:24:
         16:8c:7f:97:67:52:12:95:60:24:02:45:d1:df:ec:26:25:f4:
         15:38:81:b5:0b:cf:2f:70:40:28:28:19:45:2f:83:22:08:f0:
         8b:b0:7b:ba:6f:99:65:c3:fe:1e:db:ea:01:6d:5b:61:57:1f:
         23:ba:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 09:01:23 2024 by rpki-client on console-fra.rpki-client.org