Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GfSCkQy3bLn90rTyqYV4b3wRGyA.roa
File:                     GfSCkQy3bLn90rTyqYV4b3wRGyA.roa (raw, json)
Hash identifier:          zsMZOAftt/jqL9CBQG0UZhlsY7f6Wst9czqTpj4CSTQ=
Subject key identifier:   19:F4:82:91:0C:B7:6C:B9:FD:D2:B4:F2:A9:85:78:6F:7C:11:1B:20
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       018EE15E5728C36CC6B15875534B1799B9BB
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GfSCkQy3bLn90rTyqYV4b3wRGyA.roa
Signing time:             Mon 15 Apr 2024 10:47:20 +0000
ROA not before:           Mon 15 Apr 2024 10:47:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5378
IP address blocks:        62.49.0.0/16 maxlen: 16
                          62.49.0.0/18 maxlen: 18
                          62.49.64.0/18 maxlen: 18
                          62.49.128.0/18 maxlen: 18
                          62.49.192.0/18 maxlen: 18
                          62.56.0.0/17 maxlen: 17
                          62.56.0.0/18 maxlen: 18
                          62.56.64.0/18 maxlen: 18
                          77.233.128.0/19 maxlen: 19
                          80.176.0.0/15 maxlen: 15
                          83.104.0.0/14 maxlen: 14
                          83.104.0.0/18 maxlen: 18
                          83.104.64.0/18 maxlen: 18
                          83.104.128.0/18 maxlen: 18
                          83.104.192.0/18 maxlen: 18
                          83.105.0.0/18 maxlen: 18
                          83.105.64.0/18 maxlen: 18
                          83.105.128.0/18 maxlen: 18
                          83.105.192.0/18 maxlen: 18
                          83.106.0.0/18 maxlen: 18
                          83.106.64.0/18 maxlen: 18
                          83.106.128.0/18 maxlen: 18
                          83.106.192.0/18 maxlen: 18
                          83.107.0.0/18 maxlen: 18
                          83.107.64.0/18 maxlen: 18
                          83.107.128.0/18 maxlen: 18
                          83.107.192.0/18 maxlen: 18
                          141.195.192.0/18 maxlen: 18
                          141.195.192.0/19 maxlen: 19
                          141.195.240.0/20 maxlen: 20
                          193.237.0.0/16 maxlen: 16
                          193.237.0.0/19 maxlen: 19
                          193.237.32.0/19 maxlen: 19
                          193.237.64.0/19 maxlen: 19
                          193.237.96.0/19 maxlen: 19
                          193.237.128.0/21 maxlen: 21
                          193.237.136.0/22 maxlen: 22
                          193.237.140.0/22 maxlen: 22
                          193.237.144.0/21 maxlen: 21
                          193.237.152.0/21 maxlen: 21
                          193.237.160.0/19 maxlen: 19
                          193.237.192.0/19 maxlen: 19
                          193.237.224.0/19 maxlen: 19
                          194.222.0.0/16 maxlen: 16
                          195.8.160.0/19 maxlen: 19
                          195.58.64.0/19 maxlen: 19
                          212.225.0.0/17 maxlen: 17
                          212.228.0.0/15 maxlen: 15
                          212.228.0.0/18 maxlen: 18
                          212.228.64.0/18 maxlen: 18
                          212.228.128.0/19 maxlen: 19
                          212.228.192.0/18 maxlen: 18
                          212.229.0.0/18 maxlen: 18
                          212.229.64.0/21 maxlen: 21
                          212.229.72.0/22 maxlen: 22
                          212.229.76.0/23 maxlen: 23
                          212.229.78.0/23 maxlen: 23
                          212.229.80.0/21 maxlen: 21
                          212.229.88.0/21 maxlen: 21
                          212.229.96.0/19 maxlen: 19
                          212.229.128.0/18 maxlen: 18
                          212.229.192.0/18 maxlen: 18
                          212.248.128.0/17 maxlen: 17
                          2001:958::/32 maxlen: 32
                          2a0a:ef40::/29 maxlen: 29
                          2a0a:ef40:1400::/42 maxlen: 42
                          2a0a:ef40:1440::/42 maxlen: 42
                          2a0a:ef40:1480::/42 maxlen: 42
                          2a0a:ef40:14c0::/42 maxlen: 42
                          2a0a:ef40:1500::/42 maxlen: 42
                          2a0a:ef40:1540::/42 maxlen: 42
                          2a0a:ef40:1580::/42 maxlen: 42
                          2a0a:ef40:15c0::/42 maxlen: 42
                          2a0a:ef40:1600::/42 maxlen: 42
                          2a0a:ef40:1640::/42 maxlen: 42
                          2a0a:ef40:1680::/42 maxlen: 42
                          2a0a:ef40:16c0::/42 maxlen: 42
                          2a0a:ef40:1700::/42 maxlen: 42
                          2a0a:ef40:1740::/42 maxlen: 42
                          2a0a:ef40:1780::/42 maxlen: 42
                          2a0a:ef40:17c0::/42 maxlen: 42
                          2a0a:ef40:1800::/42 maxlen: 42
                          2a0a:ef40:1840::/42 maxlen: 42
                          2a0a:ef40:1880::/42 maxlen: 42
                          2a0a:ef40:18c0::/42 maxlen: 42
                          2a0a:ef40:1900::/42 maxlen: 42
                          2a0a:ef40:1940::/42 maxlen: 42
                          2a0a:ef40:1980::/42 maxlen: 42
                          2a0a:ef40:19c0::/42 maxlen: 42
                          2a0a:ef40:1a00::/42 maxlen: 42
                          2a0a:ef40:1a40::/42 maxlen: 42
                          2a0a:ef40:1a80::/42 maxlen: 42
                          2a0a:ef40:1ac0::/42 maxlen: 42
                          2a0a:ef40:1b00::/42 maxlen: 42
                          2a0a:ef40:1b40::/42 maxlen: 42
                          2a0a:ef40:1b80::/42 maxlen: 42
                          2a0a:ef40:1bc0::/42 maxlen: 42
                          2a0a:ef40:1c00::/42 maxlen: 42
                          2a0a:ef40:1c40::/42 maxlen: 42
                          2a0a:ef40:1c80::/42 maxlen: 42
                          2a0a:ef40:1cc0::/42 maxlen: 42
                          2a0a:ef40:1d00::/42 maxlen: 42
                          2a0a:ef40:1d40::/42 maxlen: 42
                          2a0a:ef40:1d80::/42 maxlen: 42
                          2a0a:ef40:1dc0::/42 maxlen: 42

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 09:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e1:5e:57:28:c3:6c:c6:b1:58:75:53:4b:17:99:b9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Apr 15 10:47:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=19f482910cb76cb9fdd2b4f2a985786f7c111b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:da:83:27:69:b5:4d:98:d2:b1:15:5f:e0:
                    15:be:45:b2:9d:2c:ab:7f:ac:d1:13:95:9b:e0:5a:
                    c9:c3:1f:f5:55:46:11:7a:60:f5:da:36:46:0d:04:
                    0e:82:72:0d:8c:3c:8c:36:ee:74:23:2a:71:7f:f1:
                    d7:bf:2f:5d:2b:0d:b3:fd:61:38:e1:92:8b:57:fb:
                    4f:84:31:5c:a2:8b:3d:d9:8b:de:5f:20:af:c9:52:
                    fd:df:bb:5b:69:75:53:dc:7b:4d:15:dc:c1:e6:ac:
                    8c:34:22:c7:a9:48:26:c8:e7:b1:d9:a7:ab:bf:7d:
                    29:d1:2a:50:f1:18:7c:7c:4d:ad:72:cb:5a:f5:8d:
                    92:10:37:1b:eb:e5:a9:57:7c:9e:29:b2:75:60:ac:
                    60:cf:64:c3:96:fb:19:d8:81:58:0e:47:22:47:e2:
                    d9:e9:4b:19:a4:11:b8:2e:21:c6:73:4c:af:15:8f:
                    53:e1:c8:b2:c2:c2:77:6a:03:29:56:34:94:e9:3e:
                    a8:47:a6:1a:f0:bb:25:5b:07:6f:60:bd:66:36:7c:
                    0e:2f:16:3e:48:15:18:70:64:44:10:90:63:67:bd:
                    af:d7:36:76:d8:8e:d6:3b:64:d1:12:8d:67:23:7d:
                    f2:50:26:db:5b:64:b0:1f:1d:e4:de:82:a3:4c:50:
                    26:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:82:91:0C:B7:6C:B9:FD:D2:B4:F2:A9:85:78:6F:7C:11:1B:20
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GfSCkQy3bLn90rTyqYV4b3wRGyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.49.0.0/16
                  62.56.0.0/17
                  77.233.128.0/19
                  80.176.0.0/15
                  83.104.0.0/14
                  141.195.192.0/18
                  193.237.0.0/16
                  194.222.0.0/16
                  195.8.160.0/19
                  195.58.64.0/19
                  212.225.0.0/17
                  212.228.0.0/15
                  212.248.128.0/17
                IPv6:
                  2001:958::/32
                  2a0a:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:c6:73:41:5b:0b:4f:c5:b8:31:c8:7e:17:7e:68:a6:6f:9d:
         db:22:7e:f7:62:df:25:6f:a1:1d:42:04:39:36:4b:21:99:3d:
         84:9d:e5:06:31:b7:e5:69:ff:80:b3:1c:f1:f9:8f:fa:d9:d7:
         fc:ec:db:fc:09:cd:a1:d2:9c:fc:85:90:aa:f0:b5:7f:36:b1:
         bb:26:6e:39:92:32:d0:e3:e8:2f:46:90:8c:17:17:94:1d:69:
         fa:1a:da:14:1d:34:7f:5c:79:d7:03:0f:5a:5e:7a:09:af:9d:
         b0:f7:cd:2d:aa:82:07:2a:ac:59:fc:d9:00:ad:3b:96:8f:6b:
         b1:bc:d6:5b:16:57:03:80:fc:52:30:9b:a6:9f:f6:37:aa:f0:
         7a:7a:28:f5:85:46:b0:39:b4:42:8a:85:9f:34:e8:9c:1d:b5:
         0e:71:b3:8b:f6:22:ad:79:ce:70:46:9c:e7:49:3a:87:06:06:
         66:63:69:ff:c8:b4:c8:59:32:f7:94:24:43:e9:b4:27:6e:ce:
         8f:12:07:ad:51:3a:83:21:3f:ab:8e:8e:d0:3d:d9:24:c0:a0:
         af:5d:ed:2c:3c:fe:eb:53:c0:02:d8:ee:ca:83:b9:40:7d:08:
         34:32:56:d6:5a:3f:dd:2c:da:ba:ae:7b:5b:ee:ad:7f:b5:0e:
         71:8b:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:10 2024 by rpki-client on console-fra.rpki-client.org