Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/uC_3MhDHiN58_l2uihcAcg9YCz4.roa
File:                     uC_3MhDHiN58_l2uihcAcg9YCz4.roa (raw, json)
Hash identifier:          zCOTPKPJV36HwZdK9UYry+D2MijPlE96QTpKi4NCXeI=
Subject key identifier:   B8:2F:F7:32:10:C7:88:DE:7C:FE:5D:AE:8A:17:00:72:0F:58:0B:3E
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       0191099A2D05E1B83A663F5C23FAD61F43D1
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/uC_3MhDHiN58_l2uihcAcg9YCz4.roa
Signing time:             Wed 31 Jul 2024 16:23:04 +0000
ROA not before:           Wed 31 Jul 2024 16:23:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5378
IP address blocks:        62.49.0.0/16 maxlen: 16
                          62.49.0.0/18 maxlen: 18
                          62.49.64.0/18 maxlen: 18
                          62.49.128.0/18 maxlen: 18
                          62.49.192.0/18 maxlen: 18
                          62.56.0.0/17 maxlen: 17
                          62.56.0.0/18 maxlen: 18
                          62.56.64.0/18 maxlen: 18
                          77.233.128.0/19 maxlen: 19
                          80.176.0.0/15 maxlen: 15
                          80.177.0.0/19 maxlen: 19
                          80.177.32.0/20 maxlen: 20
                          80.177.48.0/20 maxlen: 20
                          83.104.0.0/14 maxlen: 14
                          83.104.0.0/18 maxlen: 18
                          83.104.64.0/18 maxlen: 18
                          83.104.128.0/18 maxlen: 18
                          83.104.192.0/18 maxlen: 18
                          83.105.0.0/18 maxlen: 18
                          83.105.64.0/19 maxlen: 19
                          83.105.96.0/19 maxlen: 19
                          83.105.128.0/19 maxlen: 19
                          83.105.160.0/19 maxlen: 19
                          83.105.192.0/19 maxlen: 19
                          83.105.224.0/19 maxlen: 19
                          83.106.0.0/19 maxlen: 19
                          83.106.32.0/19 maxlen: 19
                          83.106.64.0/19 maxlen: 19
                          83.106.96.0/19 maxlen: 19
                          83.106.160.0/20 maxlen: 20
                          83.106.176.0/20 maxlen: 20
                          83.106.192.0/18 maxlen: 18
                          83.107.0.0/18 maxlen: 18
                          83.107.64.0/18 maxlen: 18
                          83.107.128.0/18 maxlen: 18
                          83.107.192.0/18 maxlen: 18
                          141.195.192.0/18 maxlen: 18
                          141.195.192.0/19 maxlen: 19
                          141.195.240.0/20 maxlen: 20
                          193.237.0.0/16 maxlen: 16
                          193.237.0.0/19 maxlen: 19
                          193.237.32.0/19 maxlen: 19
                          193.237.64.0/19 maxlen: 19
                          193.237.96.0/19 maxlen: 19
                          193.237.128.0/21 maxlen: 21
                          193.237.136.0/22 maxlen: 22
                          193.237.140.0/22 maxlen: 22
                          193.237.144.0/21 maxlen: 21
                          193.237.152.0/21 maxlen: 21
                          193.237.160.0/19 maxlen: 19
                          193.237.192.0/19 maxlen: 19
                          193.237.224.0/19 maxlen: 19
                          194.222.0.0/16 maxlen: 16
                          195.8.160.0/19 maxlen: 19
                          195.58.64.0/19 maxlen: 19
                          212.225.0.0/17 maxlen: 17
                          212.228.0.0/15 maxlen: 15
                          212.228.0.0/18 maxlen: 18
                          212.228.64.0/18 maxlen: 18
                          212.228.128.0/19 maxlen: 19
                          212.228.192.0/18 maxlen: 18
                          212.229.0.0/18 maxlen: 18
                          212.229.64.0/21 maxlen: 21
                          212.229.72.0/22 maxlen: 22
                          212.229.76.0/23 maxlen: 23
                          212.229.78.0/23 maxlen: 23
                          212.229.80.0/21 maxlen: 21
                          212.229.88.0/21 maxlen: 21
                          212.229.96.0/19 maxlen: 19
                          212.229.128.0/18 maxlen: 18
                          212.229.192.0/18 maxlen: 18
                          212.248.128.0/17 maxlen: 17
                          2001:958::/32 maxlen: 32
                          2a0a:ef40::/29 maxlen: 29
                          2a0a:ef40::/42 maxlen: 42
                          2a0a:ef40:40::/42 maxlen: 42
                          2a0a:ef40:80::/42 maxlen: 42
                          2a0a:ef40:c0::/42 maxlen: 42
                          2a0a:ef40:100::/42 maxlen: 42
                          2a0a:ef40:140::/42 maxlen: 42
                          2a0a:ef40:180::/42 maxlen: 42
                          2a0a:ef40:1c0::/42 maxlen: 42
                          2a0a:ef40:400::/42 maxlen: 42
                          2a0a:ef40:440::/42 maxlen: 42
                          2a0a:ef40:480::/42 maxlen: 42
                          2a0a:ef40:4c0::/42 maxlen: 42
                          2a0a:ef40:500::/42 maxlen: 42
                          2a0a:ef40:540::/42 maxlen: 42
                          2a0a:ef40:580::/42 maxlen: 42
                          2a0a:ef40:5c0::/42 maxlen: 42
                          2a0a:ef40:1400::/42 maxlen: 42
                          2a0a:ef40:1440::/42 maxlen: 42
                          2a0a:ef40:1480::/42 maxlen: 42
                          2a0a:ef40:14c0::/42 maxlen: 42
                          2a0a:ef40:1500::/42 maxlen: 42
                          2a0a:ef40:1540::/42 maxlen: 42
                          2a0a:ef40:1580::/42 maxlen: 42
                          2a0a:ef40:15c0::/42 maxlen: 42
                          2a0a:ef40:1600::/42 maxlen: 42
                          2a0a:ef40:1640::/42 maxlen: 42
                          2a0a:ef40:1680::/42 maxlen: 42
                          2a0a:ef40:16c0::/42 maxlen: 42
                          2a0a:ef40:1700::/42 maxlen: 42
                          2a0a:ef40:1740::/42 maxlen: 42
                          2a0a:ef40:1780::/42 maxlen: 42
                          2a0a:ef40:17c0::/42 maxlen: 42
                          2a0a:ef40:1800::/42 maxlen: 42
                          2a0a:ef40:1840::/42 maxlen: 42
                          2a0a:ef40:1880::/42 maxlen: 42
                          2a0a:ef40:18c0::/42 maxlen: 42
                          2a0a:ef40:1900::/42 maxlen: 42
                          2a0a:ef40:1940::/42 maxlen: 42
                          2a0a:ef40:1980::/42 maxlen: 42
                          2a0a:ef40:19c0::/42 maxlen: 42
                          2a0a:ef40:1a00::/42 maxlen: 42
                          2a0a:ef40:1a40::/42 maxlen: 42
                          2a0a:ef40:1a80::/42 maxlen: 42
                          2a0a:ef40:1ac0::/42 maxlen: 42
                          2a0a:ef40:1b00::/42 maxlen: 42
                          2a0a:ef40:1b40::/42 maxlen: 42
                          2a0a:ef40:1b80::/42 maxlen: 42
                          2a0a:ef40:1bc0::/42 maxlen: 42
                          2a0a:ef40:1c00::/42 maxlen: 42
                          2a0a:ef40:1c40::/42 maxlen: 42
                          2a0a:ef40:1c80::/42 maxlen: 42
                          2a0a:ef40:1cc0::/42 maxlen: 42
                          2a0a:ef40:1d00::/42 maxlen: 42
                          2a0a:ef40:1d40::/42 maxlen: 42
                          2a0a:ef40:1d80::/42 maxlen: 42
                          2a0a:ef40:1dc0::/42 maxlen: 42

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 11:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:09:9a:2d:05:e1:b8:3a:66:3f:5c:23:fa:d6:1f:43:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Jul 31 16:23:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b82ff73210c788de7cfe5dae8a1700720f580b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:7c:00:05:e1:0b:bf:ec:e8:22:5b:ac:58:
                    03:1a:36:75:f0:9c:fb:94:5f:79:4a:85:5b:00:51:
                    58:10:14:58:03:3f:8b:04:fe:aa:38:32:cb:54:77:
                    4a:81:24:3f:fb:ed:ba:96:ed:24:95:73:22:ae:84:
                    37:2d:7b:8e:b2:f0:2e:20:71:dd:8d:31:6b:22:c7:
                    c4:ee:01:ac:e6:f1:50:d3:24:4d:96:23:84:b5:64:
                    13:44:a6:85:94:72:3f:37:d7:ad:a7:76:d9:18:24:
                    7d:00:37:84:3e:1c:49:88:d7:6b:45:30:e4:aa:a2:
                    ee:06:f6:8c:e9:fc:15:8e:ef:ac:33:33:2b:9c:45:
                    e2:ba:97:d9:31:12:99:6d:60:92:71:53:a6:72:eb:
                    33:3a:fb:cd:01:e4:d4:54:21:4b:b1:80:20:d7:92:
                    fb:7b:b0:f2:ad:14:a7:19:0c:57:44:88:42:54:35:
                    53:11:c0:87:d5:44:c7:00:d6:a9:cf:1b:d6:54:2b:
                    fe:26:67:5d:0e:52:66:59:5a:6c:2d:dd:de:95:e9:
                    a3:fd:4e:58:09:c7:fd:11:27:55:34:40:50:15:80:
                    82:6e:6d:f9:fb:ed:8a:76:85:5e:af:57:72:d2:3d:
                    0c:46:f6:85:9e:a5:45:b2:39:63:75:17:4a:06:a0:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2F:F7:32:10:C7:88:DE:7C:FE:5D:AE:8A:17:00:72:0F:58:0B:3E
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/uC_3MhDHiN58_l2uihcAcg9YCz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.49.0.0/16
                  62.56.0.0/17
                  77.233.128.0/19
                  80.176.0.0/15
                  83.104.0.0/14
                  141.195.192.0/18
                  193.237.0.0/16
                  194.222.0.0/16
                  195.8.160.0/19
                  195.58.64.0/19
                  212.225.0.0/17
                  212.228.0.0/15
                  212.248.128.0/17
                IPv6:
                  2001:958::/32
                  2a0a:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:54:d3:9c:69:1a:33:9d:85:c2:ff:e5:68:9f:58:0a:0a:16:
         67:f5:0e:ad:c2:c9:ff:ad:d9:2d:78:0f:7b:4c:8a:2e:5b:c3:
         be:37:4e:ca:bb:12:16:c0:70:90:81:9c:be:87:d5:50:89:d5:
         ec:f1:e7:f6:65:d9:15:2f:c5:bb:3d:83:20:6b:ed:b8:fb:57:
         09:c2:48:e7:fd:55:92:93:a3:7f:fc:49:65:23:74:a6:51:20:
         ec:32:1e:b9:89:c1:31:18:2c:77:13:62:6f:bc:04:31:f3:81:
         a1:63:46:f8:29:37:7c:ac:df:8e:b2:29:ab:1d:c9:47:24:9a:
         6e:22:98:89:65:c8:3a:b1:cd:f4:3b:95:42:50:42:28:75:95:
         14:f0:77:37:ea:73:b6:91:59:d8:6a:ca:6b:8b:2b:f8:40:d6:
         ec:df:88:dd:aa:a5:7f:32:4d:79:34:77:6f:52:9c:06:de:78:
         b2:13:7f:57:e8:37:1e:41:04:90:39:33:4e:89:19:95:60:53:
         4c:43:c7:5e:50:1d:01:0b:51:d4:79:1e:8e:9b:24:ba:b6:85:
         13:f1:ee:1e:81:48:4b:f6:b4:db:c0:0f:6e:6f:5b:90:2e:cb:
         79:f8:18:be:58:f7:b8:91:22:f1:09:73:a7:d9:16:31:32:4d:
         57:d7:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 13:20:18 2024 by rpki-client on console-ams.rpki-client.org