Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/c6uofOr-QoA9zBjI288gR4_u5Aw.roa
File:                     c6uofOr-QoA9zBjI288gR4_u5Aw.roa (raw, json)
Hash identifier:          Zb2hp5I8VqZx2/8XPPJS7ejfl0CiRlzb/+Sw/Re8/Ws=
Subject key identifier:   73:AB:A8:7C:EA:FE:42:80:3D:CC:18:C8:DB:CF:20:47:8F:EE:E4:0C
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       018746CB804E08B94C1D3BA9F29720A9E980
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/c6uofOr-QoA9zBjI288gR4_u5Aw.roa
Signing time:             Mon 03 Apr 2023 11:05:54 +0000
ROA not before:           Mon 03 Apr 2023 11:05:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44444
IP address blocks:        157.167.200.0/24 maxlen: 24
                          157.167.159.0/24 maxlen: 24
                          157.167.158.0/24 maxlen: 24
                          157.167.157.0/24 maxlen: 24
                          157.167.160.0/24 maxlen: 24
                          157.167.163.0/24 maxlen: 24
                          157.167.161.0/24 maxlen: 24
                          157.167.162.0/24 maxlen: 24
                          157.167.192.0/24 maxlen: 24
                          157.167.4.0/24 maxlen: 24
                          157.167.10.0/24 maxlen: 24
                          157.167.11.0/24 maxlen: 24
                          157.167.13.0/24 maxlen: 24
                          157.167.14.0/24 maxlen: 24
                          157.167.12.0/24 maxlen: 24
                          157.167.17.0/24 maxlen: 24
                          157.167.15.0/24 maxlen: 24
                          157.167.16.0/24 maxlen: 24
                          157.167.20.0/24 maxlen: 24
                          157.167.21.0/24 maxlen: 24
                          157.167.18.0/24 maxlen: 24
                          157.167.19.0/24 maxlen: 24
                          157.167.24.0/24 maxlen: 24
                          157.167.22.0/24 maxlen: 24
                          157.167.23.0/24 maxlen: 24
                          157.167.27.0/24 maxlen: 24
                          157.167.28.0/24 maxlen: 24
                          157.167.25.0/24 maxlen: 24
                          157.167.26.0/24 maxlen: 24
                          157.167.31.0/24 maxlen: 24
                          157.167.29.0/24 maxlen: 24
                          157.167.30.0/24 maxlen: 24
                          157.167.34.0/24 maxlen: 24
                          157.167.35.0/24 maxlen: 24
                          157.167.32.0/24 maxlen: 24
                          157.167.33.0/24 maxlen: 24
                          157.167.38.0/24 maxlen: 24
                          157.167.36.0/24 maxlen: 24
                          157.167.37.0/24 maxlen: 24
                          157.167.93.0/24 maxlen: 24
                          157.167.94.0/24 maxlen: 24
                          157.167.92.0/24 maxlen: 24
                          157.167.97.0/24 maxlen: 24
                          157.167.95.0/24 maxlen: 24
                          157.167.96.0/24 maxlen: 24
                          157.167.98.0/24 maxlen: 24
                          157.167.104.0/24 maxlen: 24
                          157.167.102.0/24 maxlen: 24
                          157.167.103.0/24 maxlen: 24
                          157.167.105.0/24 maxlen: 24
                          157.167.100.0/24 maxlen: 24
                          157.167.101.0/24 maxlen: 24
                          157.167.99.0/24 maxlen: 24
                          157.167.107.0/24 maxlen: 24
                          157.167.108.0/24 maxlen: 24
                          157.167.106.0/24 maxlen: 24
                          157.167.111.0/24 maxlen: 24
                          157.167.109.0/24 maxlen: 24
                          157.167.110.0/24 maxlen: 24
                          157.167.112.0/24 maxlen: 24
                          157.167.118.0/24 maxlen: 24
                          157.167.116.0/24 maxlen: 24
                          157.167.117.0/24 maxlen: 24
                          157.167.114.0/24 maxlen: 24
                          157.167.115.0/24 maxlen: 24
                          157.167.113.0/24 maxlen: 24
                          157.167.121.0/24 maxlen: 24
                          157.167.122.0/24 maxlen: 24
                          157.167.119.0/24 maxlen: 24
                          157.167.120.0/24 maxlen: 24
                          157.167.125.0/24 maxlen: 24
                          157.167.123.0/24 maxlen: 24
                          157.167.124.0/24 maxlen: 24
                          157.167.131.0/24 maxlen: 24
                          157.167.132.0/24 maxlen: 24
                          157.167.128.0/24 maxlen: 24
                          157.167.126.0/24 maxlen: 24
                          157.167.127.0/24 maxlen: 24
                          157.167.41.0/24 maxlen: 24
                          157.167.42.0/24 maxlen: 24
                          157.167.39.0/24 maxlen: 24
                          157.167.40.0/24 maxlen: 24
                          157.167.43.0/24 maxlen: 24
                          157.167.44.0/24 maxlen: 24
                          157.167.48.0/24 maxlen: 24
                          157.167.49.0/24 maxlen: 24
                          157.167.46.0/24 maxlen: 24
                          157.167.47.0/24 maxlen: 24
                          157.167.50.0/24 maxlen: 24
                          157.167.51.0/24 maxlen: 24
                          157.167.45.0/24 maxlen: 24
                          157.167.55.0/24 maxlen: 24
                          157.167.56.0/24 maxlen: 24
                          157.167.53.0/24 maxlen: 24
                          157.167.54.0/24 maxlen: 24
                          157.167.58.0/24 maxlen: 24
                          157.167.57.0/24 maxlen: 24
                          157.167.52.0/24 maxlen: 24
                          157.167.62.0/24 maxlen: 24
                          157.167.63.0/24 maxlen: 24
                          157.167.60.0/24 maxlen: 24
                          157.167.61.0/24 maxlen: 24
                          157.167.64.0/24 maxlen: 24
                          157.167.59.0/24 maxlen: 24
                          157.167.65.0/24 maxlen: 24
                          157.167.66.0/24 maxlen: 24
                          157.167.69.0/24 maxlen: 24
                          157.167.70.0/24 maxlen: 24
                          157.167.67.0/24 maxlen: 24
                          157.167.68.0/24 maxlen: 24
                          157.167.71.0/24 maxlen: 24
                          157.167.76.0/24 maxlen: 24
                          157.167.77.0/24 maxlen: 24
                          157.167.74.0/24 maxlen: 24
                          157.167.75.0/24 maxlen: 24
                          157.167.78.0/24 maxlen: 24
                          157.167.72.0/24 maxlen: 24
                          157.167.73.0/24 maxlen: 24
                          157.167.79.0/24 maxlen: 24
                          157.167.80.0/24 maxlen: 24
                          157.167.83.0/24 maxlen: 24
                          157.167.84.0/24 maxlen: 24
                          157.167.81.0/24 maxlen: 24
                          157.167.82.0/24 maxlen: 24
                          157.167.85.0/24 maxlen: 24
                          157.167.90.0/24 maxlen: 24
                          157.167.89.0/24 maxlen: 24
                          157.167.88.0/24 maxlen: 24
                          157.167.91.0/24 maxlen: 24
                          157.167.86.0/24 maxlen: 24
                          157.167.87.0/24 maxlen: 24
                          185.4.97.0/24 maxlen: 24
                          185.4.98.0/24 maxlen: 24
                          185.4.99.0/24 maxlen: 24
                          86.111.222.0/24 maxlen: 24
                          86.111.223.0/24 maxlen: 24
                          85.115.39.0/24 maxlen: 24
                          85.115.40.0/24 maxlen: 24
                          85.115.43.0/24 maxlen: 24
                          85.115.44.0/24 maxlen: 24
                          85.115.41.0/24 maxlen: 24
                          85.115.42.0/24 maxlen: 24
                          85.115.50.0/24 maxlen: 24
                          85.115.51.0/24 maxlen: 24
                          85.115.48.0/24 maxlen: 24
                          85.115.49.0/24 maxlen: 24
                          85.115.46.0/24 maxlen: 24
                          85.115.47.0/24 maxlen: 24
                          85.115.45.0/24 maxlen: 24
                          85.115.53.0/24 maxlen: 24
                          85.115.54.0/24 maxlen: 24
                          85.115.52.0/24 maxlen: 24
                          85.115.57.0/24 maxlen: 24
                          85.115.55.0/24 maxlen: 24
                          85.115.56.0/24 maxlen: 24
                          85.115.58.0/24 maxlen: 24
                          85.115.62.0/24 maxlen: 24
                          85.115.63.0/24 maxlen: 24
                          85.115.60.0/24 maxlen: 24
                          85.115.61.0/24 maxlen: 24
                          85.115.59.0/24 maxlen: 24
                          85.115.37.0/24 maxlen: 24
                          85.115.34.0/24 maxlen: 24
                          85.115.36.0/24 maxlen: 24
                          85.115.35.0/24 maxlen: 24
                          85.115.38.0/24 maxlen: 24
                          85.115.32.0/24 maxlen: 24
                          85.115.33.0/24 maxlen: 24
                          2001:4010::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Apr 2023 19:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:46:cb:80:4e:08:b9:4c:1d:3b:a9:f2:97:20:a9:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: Apr  3 11:05:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73aba87ceafe42803dcc18c8dbcf20478feee40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:16:b9:32:d1:6a:d3:31:92:2e:4a:27:51:
                    d8:bc:ce:e5:bb:63:1f:78:53:a4:83:18:f3:e4:e0:
                    92:90:c7:eb:dd:4b:6b:cf:4e:d1:0a:4b:18:3f:3f:
                    58:5a:d5:4e:9e:18:d5:83:4f:28:3b:0e:6b:31:59:
                    73:4f:79:f6:63:9a:70:21:9c:4d:79:8c:50:01:62:
                    eb:09:0e:10:73:59:dd:f1:ae:a8:23:60:00:80:73:
                    01:e2:7e:cb:3d:f9:48:a8:31:38:d1:6a:c7:15:12:
                    bd:90:2c:24:1f:b2:67:ad:37:4a:e3:5f:ef:ce:e8:
                    73:e6:1b:e8:2a:0b:d4:0f:91:2c:11:f4:b6:ff:63:
                    11:11:03:66:bc:82:30:59:bc:d4:09:db:0e:a3:2d:
                    c2:bf:55:99:a0:72:8f:ea:af:ca:62:27:48:74:c4:
                    1c:63:45:dd:91:ab:fc:a3:14:06:1e:6e:00:74:6f:
                    22:82:cf:4a:0a:26:77:d2:cb:80:83:91:ee:30:6f:
                    d2:02:73:a0:b1:5e:25:9d:eb:be:45:32:b9:0a:49:
                    ae:14:89:69:2e:34:fb:b6:1a:5b:b7:96:07:51:6c:
                    ba:8e:08:a4:40:ad:f9:c7:5a:0b:df:69:90:34:54:
                    80:e0:33:e0:04:4c:ef:29:ad:49:dd:50:4c:54:0f:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:A8:7C:EA:FE:42:80:3D:CC:18:C8:DB:CF:20:47:8F:EE:E4:0C
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/c6uofOr-QoA9zBjI288gR4_u5Aw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.32.0/19
                  86.111.222.0/23
                  157.167.4.0/24
                  157.167.10.0-157.167.128.255
                  157.167.131.0-157.167.132.255
                  157.167.157.0-157.167.163.255
                  157.167.192.0/24
                  157.167.200.0/24
                  185.4.97.0-185.4.99.255
                IPv6:
                  2001:4010::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:62:60:ff:7d:4f:f0:7f:d4:de:55:d2:1c:0a:4d:37:85:87:
         62:12:67:15:d4:30:5b:59:e8:04:39:16:24:92:12:a5:d8:6b:
         4c:2c:99:5a:65:0b:ae:70:9e:2a:9c:e7:b1:b1:7a:30:2c:a2:
         7f:b7:d4:65:aa:67:da:25:f2:59:08:7c:fa:42:a9:05:ec:06:
         f4:ca:4d:45:39:89:68:6c:c0:e5:79:78:8f:b6:08:13:32:e1:
         de:67:46:32:0a:fc:1b:44:07:43:4a:af:f0:6f:28:9a:fb:7e:
         85:97:45:fe:22:6c:b5:68:dc:db:9a:cb:8e:21:3d:e9:e2:d4:
         11:f5:5e:24:2d:7f:bd:8e:c4:6c:93:f2:c6:47:dc:12:8c:fc:
         ea:3e:b4:7e:ab:d9:d0:d3:21:bc:6f:b9:86:5e:36:1b:16:f4:
         a0:04:1f:7f:64:e3:94:1e:7b:0e:ea:44:c7:cb:bf:d4:5e:09:
         8a:fd:82:7a:98:61:b3:9d:c3:fa:50:59:ba:86:aa:ef:96:b6:
         47:dc:fe:e0:80:58:81:54:99:ca:f3:69:1e:05:53:a7:5f:d9:
         c6:4e:d1:d0:3f:81:b8:c5:98:64:db:4b:07:6a:ab:3b:e5:8b:
         7b:b5:e5:fe:3f:7d:cf:e5:c3:ad:7a:4a:c4:ff:6d:e3:4d:5d:
         26:6b:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org