Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/PSUttTaheE-FxhmAUFS3kJrQzgc.roa
File:                     PSUttTaheE-FxhmAUFS3kJrQzgc.roa (raw, json)
Hash identifier:          98v0nCyDEjnQDlf8aiXSxx88TNk26qT/fQwmiz0KEBs=
Subject key identifier:   3D:25:2D:B5:36:A1:78:4F:85:C6:19:80:50:54:B7:90:9A:D0:CE:07
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018DBFE96B0D5E94129053DF1C4A4A6162B6
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/PSUttTaheE-FxhmAUFS3kJrQzgc.roa
Signing time:             Mon 19 Feb 2024 05:49:21 +0000
ROA not before:           Mon 19 Feb 2024 05:49:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205647
IP address blocks:        31.56.0.0/18 maxlen: 18
                          31.56.64.0/19 maxlen: 19
                          31.56.96.0/20 maxlen: 20
                          31.56.116.0/24 maxlen: 24
                          31.58.236.0/22 maxlen: 22
                          31.58.240.0/20 maxlen: 20
                          31.59.12.0/22 maxlen: 22
                          85.15.48.0/24 maxlen: 24
                          85.15.49.0/24 maxlen: 24
                          94.182.0.0/18 maxlen: 18
                          94.182.8.0/23 maxlen: 23
                          94.182.12.0/23 maxlen: 23
                          94.182.41.0/24 maxlen: 24
                          94.182.56.0/22 maxlen: 22
                          94.182.60.0/22 maxlen: 22
                          94.182.64.0/18 maxlen: 18
                          94.182.64.0/20 maxlen: 20
                          94.182.72.0/21 maxlen: 21
                          94.182.80.0/20 maxlen: 20
                          94.182.82.0/24 maxlen: 24
                          94.182.96.0/20 maxlen: 20
                          94.182.97.192/28 maxlen: 28
                          94.182.112.0/20 maxlen: 20
                          94.182.114.0/23 maxlen: 23
                          94.182.116.0/22 maxlen: 22
                          94.182.120.0/21 maxlen: 21
                          94.182.128.0/18 maxlen: 18
                          94.182.128.0/20 maxlen: 20
                          94.182.144.0/20 maxlen: 20
                          94.182.160.0/20 maxlen: 20
                          94.182.176.0/20 maxlen: 20
                          94.182.192.0/18 maxlen: 18
                          94.182.204.0/22 maxlen: 22
                          94.182.204.0/24 maxlen: 24
                          94.182.205.0/24 maxlen: 24
                          94.182.206.0/24 maxlen: 24
                          94.182.207.0/24 maxlen: 24
                          94.182.217.0/24 maxlen: 24
                          94.182.222.0/23 maxlen: 23
                          94.182.226.0/24 maxlen: 24
                          94.182.228.0/22 maxlen: 22
                          94.182.232.0/23 maxlen: 23
                          94.182.234.0/23 maxlen: 23
                          94.182.240.0/23 maxlen: 23
                          94.182.244.0/23 maxlen: 23
                          94.182.248.0/23 maxlen: 23
                          94.183.0.0/18 maxlen: 18
                          94.183.64.0/18 maxlen: 18
                          94.183.128.0/18 maxlen: 18
                          94.183.192.0/18 maxlen: 18
                          151.240.80.0/21 maxlen: 21
                          151.240.168.0/22 maxlen: 22
                          151.240.192.0/21 maxlen: 21
                          151.240.240.0/21 maxlen: 21
                          151.241.224.0/21 maxlen: 21
                          151.242.0.0/21 maxlen: 21
                          151.242.8.0/22 maxlen: 22
                          151.244.48.0/22 maxlen: 22
                          151.244.52.0/22 maxlen: 22
                          151.244.56.0/21 maxlen: 21
                          151.244.64.0/21 maxlen: 21
                          151.244.72.0/22 maxlen: 22
                          151.244.76.0/22 maxlen: 22
                          151.244.80.0/21 maxlen: 21
                          151.244.88.0/21 maxlen: 21
                          151.244.96.0/23 maxlen: 23
                          151.244.98.0/23 maxlen: 23
                          151.244.100.0/23 maxlen: 23
                          151.244.102.0/23 maxlen: 23
                          151.244.104.0/23 maxlen: 23
                          151.244.106.0/23 maxlen: 23
                          151.244.108.0/23 maxlen: 23
                          151.244.110.0/23 maxlen: 23
                          151.244.112.0/23 maxlen: 23
                          151.244.114.0/23 maxlen: 23
                          151.244.116.0/23 maxlen: 23
                          151.244.118.0/23 maxlen: 23
                          151.244.120.0/23 maxlen: 23
                          151.244.122.0/23 maxlen: 23
                          151.244.124.0/23 maxlen: 23
                          151.244.126.0/23 maxlen: 23
                          151.244.128.0/22 maxlen: 22
                          151.244.132.0/22 maxlen: 22
                          151.244.136.0/22 maxlen: 22
                          151.244.140.0/22 maxlen: 22
                          151.244.144.0/22 maxlen: 22
                          151.244.148.0/22 maxlen: 22
                          151.244.152.0/22 maxlen: 22
                          151.244.156.0/22 maxlen: 22
                          151.244.160.0/22 maxlen: 22
                          151.244.164.0/22 maxlen: 22
                          151.244.168.0/22 maxlen: 22
                          151.244.172.0/22 maxlen: 22
                          151.244.176.0/22 maxlen: 22
                          151.244.180.0/22 maxlen: 22
                          151.244.184.0/22 maxlen: 22
                          151.244.188.0/22 maxlen: 22
                          151.244.192.0/22 maxlen: 22
                          151.244.196.0/22 maxlen: 22
                          151.244.200.0/22 maxlen: 22
                          151.244.204.0/22 maxlen: 22
                          151.244.208.0/22 maxlen: 22
                          151.244.212.0/22 maxlen: 22
                          151.244.216.0/23 maxlen: 23
                          151.244.218.0/23 maxlen: 23
                          151.244.220.0/23 maxlen: 23
                          151.244.222.0/23 maxlen: 23
                          151.244.224.0/23 maxlen: 23
                          151.244.226.0/23 maxlen: 23
                          151.246.0.0/18 maxlen: 18
                          151.246.64.0/18 maxlen: 18
                          151.246.128.0/18 maxlen: 18
                          151.246.192.0/18 maxlen: 18
                          151.247.0.0/20 maxlen: 20
                          151.247.16.0/22 maxlen: 22
                          151.247.214.0/23 maxlen: 23
                          151.247.216.0/21 maxlen: 21
                          151.247.224.0/22 maxlen: 22
                          151.247.228.0/22 maxlen: 22
                          151.247.232.0/22 maxlen: 22
                          151.247.236.0/24 maxlen: 24
                          151.247.237.0/24 maxlen: 24
                          151.247.238.0/23 maxlen: 23
                          151.247.240.0/24 maxlen: 24
                          151.247.241.0/24 maxlen: 24
                          151.247.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 03 Mar 2024 10:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:bf:e9:6b:0d:5e:94:12:90:53:df:1c:4a:4a:61:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Feb 19 05:49:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3d252db536a1784f85c619805054b7909ad0ce07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:b6:3c:7b:b9:54:71:c5:2f:cf:d3:dd:99:
                    eb:16:70:c6:e4:74:f5:27:00:c6:ba:b8:7b:85:c4:
                    a6:fe:51:65:b7:4c:7c:04:70:3d:cb:e1:47:e8:f9:
                    ce:a6:5b:5a:ba:f0:e1:86:9a:a8:c2:17:2c:c5:e1:
                    74:ed:c8:6d:86:fa:58:22:1e:fc:07:b5:89:ca:cf:
                    df:d3:93:89:ad:80:e3:25:fc:34:21:88:3a:99:9d:
                    8a:df:81:0a:03:fb:c7:89:8c:31:5b:f5:9d:43:12:
                    e5:de:f2:c1:2e:60:5c:ab:50:1d:8e:93:cb:07:9e:
                    45:8a:1a:dd:3f:95:fd:ad:ff:85:e0:8d:80:ac:eb:
                    4e:fb:06:41:b6:e2:cb:12:a6:ba:26:ec:a4:06:5e:
                    9c:d5:1f:97:09:0c:0a:17:a7:f6:46:4b:50:6b:4b:
                    3e:ce:86:8b:90:44:82:80:e5:79:e3:e8:ad:75:17:
                    0e:2e:7b:07:7e:9b:3e:3e:3b:9f:8a:86:38:7d:66:
                    b0:e5:65:c7:b9:67:aa:ad:ac:1d:4a:1d:6b:c9:ce:
                    91:03:de:58:b6:64:21:6c:f9:79:55:ac:82:80:a0:
                    ec:be:71:0f:d7:ee:d7:66:fd:a9:a7:1a:a6:58:18:
                    49:ce:26:36:6b:09:bd:d6:40:3e:d2:1d:13:e3:a5:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:2D:B5:36:A1:78:4F:85:C6:19:80:50:54:B7:90:9A:D0:CE:07
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/PSUttTaheE-FxhmAUFS3kJrQzgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.0.0-31.56.111.255
                  31.56.116.0/24
                  31.58.236.0-31.58.255.255
                  31.59.12.0/22
                  85.15.48.0/23
                  94.182.0.0/15
                  151.240.80.0/21
                  151.240.168.0/22
                  151.240.192.0/21
                  151.240.240.0/21
                  151.241.224.0/21
                  151.242.0.0-151.242.11.255
                  151.244.48.0-151.244.227.255
                  151.246.0.0-151.247.19.255
                  151.247.214.0-151.247.241.255
                  151.247.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:2c:89:70:d3:87:db:14:2e:45:db:d9:07:d9:51:c2:7b:74:
         b3:1e:db:a3:72:cc:51:4b:a6:5c:98:e4:c5:a6:3d:e8:b8:05:
         49:67:50:49:f5:0d:d8:d2:b3:db:be:01:55:00:35:53:c2:f4:
         9c:db:b8:c3:7b:49:f4:1f:2a:d7:77:fc:4c:74:e5:6b:a8:33:
         25:17:08:26:97:16:1a:a3:ee:63:91:5e:9c:55:1f:5b:63:56:
         10:22:df:cd:c1:39:95:35:25:13:cf:d5:fe:60:a1:f8:49:15:
         98:9f:ff:a1:bf:34:4e:d4:15:83:91:37:38:3b:77:c7:84:80:
         df:b7:e0:ed:3b:4e:5b:0f:94:9f:b4:dd:38:00:9e:91:e0:b3:
         a2:f8:4d:09:2f:c7:6e:3c:c8:a2:4a:81:32:49:3f:b3:aa:c6:
         84:8f:7f:e2:4d:13:16:87:49:dc:6e:7c:cb:71:a4:c2:0f:0d:
         22:ad:34:ba:90:1d:92:86:f8:bc:fa:6c:fb:2d:b3:e4:1c:d3:
         c4:7d:2e:f6:b9:9d:75:9d:4c:4d:d0:2b:0e:ab:2a:3e:f6:0f:
         85:3f:b0:d8:03:7b:c6:c6:a7:d9:a9:cb:b8:cf:43:c3:c2:c3:
         87:5d:68:6f:73:41:26:ce:c1:c5:9b:47:a6:73:2a:bd:5b:c4:
         43:f8:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 11:38:12 2024 by rpki-client on console-ams.rpki-client.org