Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/GoCj1eZUF1agko6VttwboPFPOMw.roa
File:                     GoCj1eZUF1agko6VttwboPFPOMw.roa (raw, json)
Hash identifier:          W7pr0u6DlHDxisqi2whUNedajsNtFImrYZKXzlYzcXY=
Subject key identifier:   1A:80:A3:D5:E6:54:17:56:A0:92:8E:95:B6:DC:1B:A0:F1:4F:38:CC
Certificate issuer:       /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial:       018C34A801BF3F23E615A7FE1F10FC8EC522
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/GoCj1eZUF1agko6VttwboPFPOMw.roa
Signing time:             Mon 04 Dec 2023 11:47:54 +0000
ROA not before:           Mon 04 Dec 2023 11:47:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49037
IP address blocks:        95.174.98.0/24 maxlen: 24
                          95.174.96.0/23 maxlen: 23
                          95.174.102.0/24 maxlen: 24
                          95.174.101.0/24 maxlen: 24
                          95.174.100.0/24 maxlen: 24
                          95.174.99.0/24 maxlen: 24
                          95.174.105.0/24 maxlen: 24
                          95.174.104.0/24 maxlen: 24
                          95.174.103.0/24 maxlen: 24
                          95.174.112.0/24 maxlen: 24
                          95.174.111.0/24 maxlen: 24
                          95.174.110.0/24 maxlen: 24
                          95.174.109.0/24 maxlen: 24
                          95.174.108.0/24 maxlen: 24
                          95.174.107.0/24 maxlen: 24
                          95.174.106.0/24 maxlen: 24
                          95.174.116.0/24 maxlen: 24
                          95.174.115.0/24 maxlen: 24
                          95.174.114.0/24 maxlen: 24
                          95.174.113.0/24 maxlen: 24
                          95.174.118.0/24 maxlen: 24
                          95.174.117.0/24 maxlen: 24
                          95.174.125.0/24 maxlen: 24
                          95.174.124.0/24 maxlen: 24
                          95.174.123.0/24 maxlen: 24
                          95.174.120.0/24 maxlen: 24
                          95.174.119.0/24 maxlen: 24
                          95.174.127.0/24 maxlen: 24
                          95.174.126.0/24 maxlen: 24
                          185.9.186.0/24 maxlen: 24
                          185.9.184.0/24 maxlen: 24
                          185.9.187.0/24 maxlen: 24
                          185.230.242.0/24 maxlen: 24
                          185.230.241.0/24 maxlen: 24
                          185.230.240.0/24 maxlen: 24
                          46.226.160.0/21 maxlen: 32
                          80.72.16.0/21 maxlen: 32
                          80.72.16.0/23 maxlen: 23
                          80.72.24.0/24 maxlen: 24
                          80.72.20.0/23 maxlen: 32
                          80.72.24.0/22 maxlen: 32
                          80.72.25.0/24 maxlen: 24
                          80.72.26.0/23 maxlen: 23
                          92.118.73.0/24 maxlen: 24
                          92.118.72.0/24 maxlen: 24
                          2a00:8740:25::/48 maxlen: 48
                          2a00:8740:ff00::/48 maxlen: 48
                          2a00:8740:100::/48 maxlen: 48
                          2a00:8740:1b::/48 maxlen: 48
                          2a00:8740:36::/48 maxlen: 48
                          2a00:8740:2f::/48 maxlen: 48
                          2a00:8740:18::/48 maxlen: 48
                          2a00:8740:33::/48 maxlen: 48
                          2a00:8740:111::/48 maxlen: 48
                          2a00:8740:11::/48 maxlen: 48
                          2a00:8740:2c::/48 maxlen: 48
                          2a00:8740:15::/48 maxlen: 48
                          2a00:8740:30::/48 maxlen: 48
                          2a00:8740:26::/48 maxlen: 48
                          2a00:8740:29::/48 maxlen: 48
                          2a00:8740:1f::/48 maxlen: 48
                          2a00:8740:2d::/48 maxlen: 48
                          2a00:8740:23::/48 maxlen: 48
                          2a00:8740:1c::/48 maxlen: 48
                          2a00:8740:112::/48 maxlen: 48
                          2a00:8740:500::/40 maxlen: 40
                          2a00:8740:20::/48 maxlen: 48
                          2a00:8740::/47 maxlen: 47
                          2a00:8740:16::/48 maxlen: 48
                          2a00:8740:34::/48 maxlen: 48
                          2a00:8740:1d::/48 maxlen: 48
                          2a00:8740:2e::/48 maxlen: 48
                          2a00:8740:27::/48 maxlen: 48
                          2a00:8740:2::/48 maxlen: 48
                          2a00:8740:35::/48 maxlen: 48
                          2a00:8740:110::/48 maxlen: 48
                          2a00:8740:10::/48 maxlen: 48
                          2a00:8740:2b::/48 maxlen: 48
                          2a00:8740:24::/48 maxlen: 48
                          2a00:8740:1a::/48 maxlen: 48
                          2a00:8740:28::/48 maxlen: 48
                          2a00:8740:1e::/48 maxlen: 48
                          2a00:8740:21::/48 maxlen: 48
                          2a00:8740:17::/48 maxlen: 48
                          2a00:8740:32::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 09:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:34:a8:01:bf:3f:23:e6:15:a7:fe:1f:10:fc:8e:c5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
        Validity
            Not Before: Dec  4 11:47:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a80a3d5e6541756a0928e95b6dc1ba0f14f38cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:64:45:71:75:a1:df:18:cc:74:b6:4f:9d:
                    f7:68:21:41:e2:a0:9f:de:80:0a:c0:39:6f:12:3d:
                    3c:99:1a:48:ff:5f:ef:c7:9a:a5:4f:0b:f7:7f:b1:
                    80:8a:e0:9a:3c:25:ed:5a:f7:27:84:d8:e6:4b:58:
                    ff:81:3c:ec:83:01:5f:4f:bf:f0:4b:ca:21:2e:d2:
                    b9:d2:90:82:e3:3b:d9:c0:3b:c6:0c:ea:13:e7:92:
                    8e:54:fe:e2:04:b6:81:cf:4e:19:75:c1:67:78:42:
                    5a:c4:61:c9:cb:6c:35:64:24:a5:54:c2:9d:5f:c8:
                    26:af:4a:4e:22:10:0e:26:3f:73:41:4c:26:96:8b:
                    99:7f:e1:be:3b:37:f3:a4:70:22:62:c0:3d:82:a3:
                    07:53:ce:69:74:f4:f6:36:ef:68:cf:7a:99:e1:b1:
                    be:a6:57:dc:56:53:d3:10:48:0c:dd:57:8b:71:ff:
                    f8:85:f3:a0:da:e1:b8:a4:05:24:4d:98:d2:06:5f:
                    e9:44:c6:9a:20:9a:b3:76:6a:55:aa:98:0f:d6:38:
                    6d:e1:19:20:62:b3:cd:e3:13:5f:9e:59:04:55:2f:
                    1c:c8:71:24:38:d9:aa:1a:61:59:ed:28:7a:2b:40:
                    a3:44:82:c8:c7:d8:25:f8:61:9b:19:61:00:14:8d:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:80:A3:D5:E6:54:17:56:A0:92:8E:95:B6:DC:1B:A0:F1:4F:38:CC
            X509v3 Authority Key Identifier:
                keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/GoCj1eZUF1agko6VttwboPFPOMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.160.0/21
                  80.72.16.0-80.72.27.255
                  92.118.72.0/23
                  95.174.96.0-95.174.120.255
                  95.174.123.0-95.174.127.255
                  185.9.184.0/24
                  185.9.186.0/23
                  185.230.240.0-185.230.242.255
                IPv6:
                  2a00:8740::-2a00:8740:2:ffff:ffff:ffff:ffff:ffff
                  2a00:8740:10::/47
                  2a00:8740:15::-2a00:8740:18:ffff:ffff:ffff:ffff:ffff
                  2a00:8740:1a::-2a00:8740:21:ffff:ffff:ffff:ffff:ffff
                  2a00:8740:23::-2a00:8740:29:ffff:ffff:ffff:ffff:ffff
                  2a00:8740:2b::-2a00:8740:30:ffff:ffff:ffff:ffff:ffff
                  2a00:8740:32::-2a00:8740:36:ffff:ffff:ffff:ffff:ffff
                  2a00:8740:100::/48
                  2a00:8740:110::-2a00:8740:112:ffff:ffff:ffff:ffff:ffff
                  2a00:8740:500::/40
                  2a00:8740:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:af:48:95:ac:42:79:27:22:45:1a:e4:e8:97:c2:60:54:15:
         5c:96:8d:c4:85:d3:a9:07:98:68:df:85:c8:18:76:95:69:5f:
         38:54:e9:91:90:a2:84:15:5f:7e:d5:26:04:cb:00:07:ee:5c:
         d1:ce:50:7c:fc:f3:73:24:3b:27:88:62:59:76:06:83:d9:09:
         78:ba:ae:77:fd:21:ae:db:6c:a3:39:1d:d0:c8:b6:87:f8:87:
         21:f5:b4:bb:ab:02:21:ba:28:4f:c5:cd:59:9b:b5:34:bd:0b:
         cf:55:ef:3b:c3:e3:1c:bd:cf:db:c9:09:22:e8:51:b3:96:b4:
         f9:fd:e1:48:0a:85:16:08:5a:bb:5c:10:40:d3:c7:eb:57:7b:
         8a:93:b5:ee:35:c8:f7:d3:1f:2b:0f:bd:d7:30:a6:4d:38:03:
         01:81:36:87:25:08:c0:51:c7:0c:0b:8f:e2:69:70:f2:08:0f:
         4e:d7:d3:a7:8d:6c:07:23:86:d7:6e:41:74:e7:58:ac:ef:f9:
         98:bc:d4:bc:5f:60:50:3f:4e:d0:84:9e:97:38:24:56:de:c5:
         7c:d0:06:a2:ce:c6:bd:e1:0c:d4:c9:cf:f6:c1:6a:04:44:42:
         7d:8b:17:44:80:88:c9:39:b8:6a:0d:ab:d8:09:db:bb:b2:dc:
         53:21:c0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org