Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/GPMC8bIVMHMvqhmPEjHmfC4499w.roa
File:                     GPMC8bIVMHMvqhmPEjHmfC4499w.roa (raw, json)
Hash identifier:          q5ZDHp88+wxV+OLJUPvOepfbgGfQMVwmJ/dQEyj9akI=
Subject key identifier:   18:F3:02:F1:B2:15:30:73:2F:AA:19:8F:12:31:E6:7C:2E:38:F7:DC
Certificate issuer:       /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial:       0187504DE4042090C2ED9C51AF5349255481
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/GPMC8bIVMHMvqhmPEjHmfC4499w.roa
Signing time:             Wed 05 Apr 2023 07:24:54 +0000
ROA not before:           Wed 05 Apr 2023 07:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207990
IP address blocks:        206.204.0.0/20 maxlen: 32
                          206.204.16.0/20 maxlen: 32
                          43.252.28.0/22 maxlen: 32
                          103.211.184.0/23 maxlen: 32
                          206.204.32.0/20 maxlen: 32
                          203.78.168.0/21 maxlen: 32
                          206.204.48.0/20 maxlen: 32
                          37.61.226.0/24 maxlen: 32
                          94.176.48.0/20 maxlen: 32
                          92.255.86.0/23 maxlen: 32
                          216.194.80.0/20 maxlen: 32
                          103.225.128.0/22 maxlen: 32
                          89.223.14.0/23 maxlen: 32
                          89.223.18.0/23 maxlen: 32
                          45.130.120.0/22 maxlen: 32
                          92.255.32.0/21 maxlen: 32
                          103.207.152.0/23 maxlen: 32
                          213.188.64.0/22 maxlen: 32
                          193.151.52.0/22 maxlen: 32
                          116.212.188.0/22 maxlen: 32
                          180.94.216.0/22 maxlen: 32
                          213.188.80.0/20 maxlen: 32
                          85.208.148.0/22 maxlen: 32
                          103.30.12.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Apr 2023 09:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:50:4d:e4:04:20:90:c2:ed:9c:51:af:53:49:25:54:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
        Validity
            Not Before: Apr  5 07:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=18f302f1b21530732faa198f1231e67c2e38f7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:de:e4:10:8e:b0:c3:f1:c7:5e:9a:db:05:
                    50:ad:b1:e3:91:fd:22:ab:b8:9c:1d:9e:9e:10:49:
                    28:37:5f:d3:80:bd:68:33:88:2a:ee:dc:16:8d:b6:
                    a5:96:23:cf:40:2b:e6:e2:4b:d6:55:12:7e:01:84:
                    b7:14:e9:0f:3a:05:e1:76:10:03:59:a4:18:76:b0:
                    88:0b:da:29:6b:be:e0:8c:71:98:f4:f9:c3:50:d4:
                    36:7c:96:6a:60:52:30:46:57:2c:0e:dd:5a:70:3c:
                    85:23:d7:59:df:86:aa:b6:70:61:6a:30:93:c0:dd:
                    d5:fd:bc:d1:86:00:ac:68:cb:85:c6:bf:c2:1e:83:
                    53:d8:23:d2:9a:7b:4d:d3:8c:27:07:7a:07:da:e3:
                    0c:25:0a:4a:41:b9:71:e7:9e:5b:7c:9f:d4:f7:2a:
                    b5:50:d4:fc:3c:07:e4:3d:d6:b8:77:c5:89:a1:26:
                    24:6d:eb:46:f0:ef:e1:82:25:37:9c:ce:cd:4f:66:
                    d3:d0:e5:8f:f8:67:95:2d:44:88:c8:54:5d:69:04:
                    47:4c:8d:7d:2a:7a:17:ec:c4:39:b1:aa:eb:90:66:
                    ba:56:b5:1d:a8:68:cb:a9:41:6a:1b:d6:5e:d7:52:
                    cf:76:00:43:a5:eb:42:49:5b:8d:d9:a9:71:a2:cc:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:02:F1:B2:15:30:73:2F:AA:19:8F:12:31:E6:7C:2E:38:F7:DC
            X509v3 Authority Key Identifier:
                keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/GPMC8bIVMHMvqhmPEjHmfC4499w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.61.226.0/24
                  43.252.28.0/22
                  45.130.120.0/22
                  85.208.148.0/22
                  89.223.14.0/23
                  89.223.18.0/23
                  92.255.32.0/21
                  92.255.86.0/23
                  94.176.48.0/20
                  103.30.12.0/22
                  103.207.152.0/23
                  103.211.184.0/23
                  103.225.128.0/22
                  116.212.188.0/22
                  180.94.216.0/22
                  193.151.52.0/22
                  203.78.168.0/21
                  206.204.0.0/18
                  213.188.64.0/22
                  213.188.80.0/20
                  216.194.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:65:95:9b:61:eb:76:21:04:c3:ef:2d:a3:96:73:09:d9:
         63:3f:dd:bd:04:0b:6e:1b:6d:a1:02:de:02:60:bf:95:63:33:
         ce:e3:44:bb:06:3f:fe:e9:39:b0:68:26:27:b6:54:9c:8e:13:
         ae:ca:fa:a3:50:e0:cd:ec:00:4e:6d:4c:0c:de:0d:f6:29:27:
         25:3d:ed:ab:15:26:79:ec:9f:b3:80:94:49:d0:44:92:c4:f7:
         b5:91:81:6e:15:2b:6a:63:8a:90:17:6e:06:ab:4e:4c:c0:d8:
         79:14:a5:69:27:b9:38:83:44:4f:c7:64:9b:5b:6c:21:16:57:
         6b:cc:39:9d:12:68:8f:0b:5f:c2:0a:30:58:da:ba:b4:a6:f7:
         03:67:5b:56:39:f2:5e:3f:ad:f4:9f:12:46:f3:4a:5e:52:ea:
         88:b5:11:bf:39:63:10:5b:15:e5:1a:1f:6f:b3:11:1a:ef:ed:
         c6:56:85:03:f2:6c:78:d8:b7:86:bb:46:87:ed:43:bc:76:95:
         07:e6:59:96:73:3d:72:68:25:b9:23:4e:35:85:cb:ef:76:f8:
         34:db:ab:c0:0e:6c:b2:71:b5:50:81:be:8a:67:43:88:f7:a4:
         6c:e7:d2:cd:01:db:a0:3e:fd:1f:8f:05:cb:8a:df:5a:ff:eb:
         7b:e6:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:34 2024 by rpki-client on console-ams.rpki-client.org