Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/alywMh5pQGALnH4BP6M6l3v9utI.roa
File:                     alywMh5pQGALnH4BP6M6l3v9utI.roa (raw, json)
Hash identifier:          XMaBINL20neuyWrqcwcQy6CzIN/4ieedslDqD3PX0HM=
Subject key identifier:   6A:5C:B0:32:1E:69:40:60:0B:9C:7E:01:3F:A3:3A:97:7B:FD:BA:D2
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       018D78486821253231202E9E6E2F5C540A5A
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/alywMh5pQGALnH4BP6M6l3v9utI.roa
Signing time:             Mon 05 Feb 2024 08:00:27 +0000
ROA not before:           Mon 05 Feb 2024 08:00:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12491
IP address blocks:        62.56.128.0/23 maxlen: 24
                          62.56.128.0/24 maxlen: 24
                          62.56.129.0/24 maxlen: 24
                          62.56.130.0/24 maxlen: 24
                          62.56.131.0/24 maxlen: 24
                          62.56.132.0/24 maxlen: 24
                          62.56.133.0/24 maxlen: 24
                          62.56.134.0/23 maxlen: 24
                          62.56.134.0/24 maxlen: 24
                          62.56.136.0/24 maxlen: 24
                          62.56.137.0/24 maxlen: 24
                          62.56.139.0/24 maxlen: 24
                          62.56.140.0/22 maxlen: 24
                          62.56.144.0/22 maxlen: 24
                          62.56.148.0/23 maxlen: 24
                          62.56.150.0/24 maxlen: 24
                          62.56.151.0/24 maxlen: 24
                          62.56.152.0/24 maxlen: 24
                          62.56.153.0/24 maxlen: 24
                          62.56.154.0/24 maxlen: 24
                          62.56.156.0/22 maxlen: 24
                          62.56.160.0/22 maxlen: 24
                          62.56.164.0/24 maxlen: 24
                          62.56.165.0/24 maxlen: 24
                          62.56.166.0/24 maxlen: 24
                          62.56.167.0/24 maxlen: 24
                          62.56.168.0/22 maxlen: 24
                          62.56.168.0/23 maxlen: 24
                          62.56.168.0/24 maxlen: 24
                          62.56.169.0/24 maxlen: 24
                          62.56.170.0/23 maxlen: 24
                          62.56.170.0/24 maxlen: 24
                          62.56.171.0/24 maxlen: 24
                          62.56.172.0/24 maxlen: 24
                          62.56.173.0/24 maxlen: 24
                          62.56.174.0/23 maxlen: 24
                          62.56.175.0/24 maxlen: 24
                          62.56.216.0/24 maxlen: 24
                          62.56.217.0/24 maxlen: 24
                          62.56.218.0/23 maxlen: 24
                          62.56.220.0/23 maxlen: 24
                          62.56.224.0/22 maxlen: 24
                          62.56.228.0/23 maxlen: 24
                          62.56.230.0/24 maxlen: 24
                          62.56.231.0/24 maxlen: 24
                          62.56.232.0/21 maxlen: 24
                          62.56.240.0/22 maxlen: 24
                          62.56.244.0/23 maxlen: 24
                          62.56.246.0/24 maxlen: 24
                          62.56.247.0/24 maxlen: 24
                          62.56.248.0/22 maxlen: 24
                          62.56.248.0/23 maxlen: 24
                          62.56.248.0/24 maxlen: 24
                          62.56.249.0/24 maxlen: 24
                          62.56.250.0/23 maxlen: 24
                          62.56.250.0/24 maxlen: 24
                          62.56.251.0/24 maxlen: 24
                          81.199.0.0/24 maxlen: 24
                          81.199.1.0/24 maxlen: 24
                          81.199.2.0/23 maxlen: 24
                          81.199.4.0/22 maxlen: 24
                          81.199.8.0/24 maxlen: 24
                          81.199.9.0/24 maxlen: 24
                          81.199.10.0/23 maxlen: 24
                          81.199.13.0/24 maxlen: 24
                          81.199.15.0/24 maxlen: 24
                          81.199.16.0/22 maxlen: 24
                          81.199.16.0/23 maxlen: 24
                          81.199.16.0/24 maxlen: 24
                          81.199.17.0/24 maxlen: 24
                          81.199.18.0/23 maxlen: 24
                          81.199.18.0/24 maxlen: 24
                          81.199.19.0/24 maxlen: 24
                          81.199.20.0/24 maxlen: 24
                          81.199.21.0/24 maxlen: 24
                          81.199.22.0/23 maxlen: 24
                          81.199.32.0/22 maxlen: 24
                          81.199.40.0/24 maxlen: 24
                          81.199.41.0/24 maxlen: 24
                          81.199.42.0/24 maxlen: 24
                          81.199.43.0/24 maxlen: 24
                          81.199.44.0/24 maxlen: 24
                          81.199.45.0/24 maxlen: 24
                          81.199.46.0/24 maxlen: 24
                          81.199.47.0/24 maxlen: 24
                          81.199.48.0/24 maxlen: 24
                          81.199.49.0/24 maxlen: 24
                          81.199.50.0/24 maxlen: 24
                          81.199.51.0/24 maxlen: 24
                          81.199.52.0/22 maxlen: 24
                          81.199.54.0/24 maxlen: 24
                          81.199.56.0/23 maxlen: 24
                          81.199.58.0/24 maxlen: 24
                          81.199.59.0/24 maxlen: 24
                          81.199.60.0/24 maxlen: 24
                          81.199.61.0/24 maxlen: 24
                          81.199.62.0/24 maxlen: 24
                          81.199.63.0/24 maxlen: 24
                          81.199.80.0/24 maxlen: 24
                          81.199.81.0/24 maxlen: 24
                          81.199.82.0/24 maxlen: 24
                          81.199.83.0/24 maxlen: 24
                          81.199.84.0/24 maxlen: 24
                          81.199.85.0/24 maxlen: 24
                          81.199.86.0/23 maxlen: 24
                          81.199.88.0/23 maxlen: 24
                          81.199.90.0/24 maxlen: 24
                          81.199.91.0/24 maxlen: 24
                          81.199.92.0/24 maxlen: 24
                          81.199.93.0/24 maxlen: 24
                          81.199.94.0/24 maxlen: 24
                          81.199.95.0/24 maxlen: 24
                          81.199.96.0/24 maxlen: 24
                          81.199.97.0/24 maxlen: 24
                          81.199.101.0/24 maxlen: 24
                          81.199.102.0/23 maxlen: 24
                          81.199.104.0/24 maxlen: 24
                          81.199.105.0/24 maxlen: 24
                          81.199.106.0/24 maxlen: 24
                          81.199.107.0/24 maxlen: 24
                          81.199.108.0/22 maxlen: 24
                          81.199.118.0/23 maxlen: 24
                          81.199.124.0/22 maxlen: 24
                          81.199.128.0/24 maxlen: 24
                          81.199.129.0/24 maxlen: 24
                          81.199.130.0/23 maxlen: 24
                          81.199.132.0/24 maxlen: 24
                          81.199.134.0/23 maxlen: 24
                          81.199.136.0/22 maxlen: 24
                          81.199.136.0/23 maxlen: 24
                          81.199.136.0/24 maxlen: 24
                          81.199.137.0/24 maxlen: 24
                          81.199.138.0/23 maxlen: 24
                          81.199.138.0/24 maxlen: 24
                          81.199.139.0/24 maxlen: 24
                          81.199.140.0/23 maxlen: 24
                          81.199.142.0/23 maxlen: 24
                          81.199.146.0/24 maxlen: 24
                          81.199.147.0/24 maxlen: 24
                          81.199.148.0/22 maxlen: 24
                          81.199.152.0/22 maxlen: 24
                          81.199.156.0/23 maxlen: 24
                          81.199.158.0/23 maxlen: 24
                          81.199.160.0/21 maxlen: 24
                          81.199.168.0/24 maxlen: 24
                          81.199.172.0/23 maxlen: 24
                          81.199.174.0/23 maxlen: 24
                          81.199.176.0/21 maxlen: 24
                          81.199.184.0/24 maxlen: 24
                          81.199.185.0/24 maxlen: 24
                          81.199.186.0/24 maxlen: 24
                          81.199.187.0/24 maxlen: 24
                          81.199.188.0/22 maxlen: 24
                          81.199.192.0/24 maxlen: 24
                          81.199.193.0/24 maxlen: 24
                          81.199.194.0/24 maxlen: 24
                          81.199.195.0/24 maxlen: 24
                          81.199.196.0/22 maxlen: 24
                          81.199.200.0/24 maxlen: 24
                          81.199.201.0/24 maxlen: 24
                          81.199.204.0/24 maxlen: 24
                          81.199.205.0/24 maxlen: 24
                          81.199.206.0/23 maxlen: 24
                          81.199.208.0/23 maxlen: 24
                          81.199.210.0/24 maxlen: 24
                          81.199.211.0/24 maxlen: 24
                          81.199.212.0/24 maxlen: 24
                          81.199.213.0/24 maxlen: 24
                          81.199.214.0/24 maxlen: 24
                          81.199.215.0/24 maxlen: 24
                          81.199.216.0/24 maxlen: 24
                          81.199.217.0/24 maxlen: 24
                          81.199.219.0/24 maxlen: 24
                          81.199.220.0/22 maxlen: 24
                          81.199.224.0/22 maxlen: 24
                          81.199.228.0/23 maxlen: 24
                          81.199.230.0/24 maxlen: 24
                          81.199.232.0/21 maxlen: 24
                          81.199.240.0/22 maxlen: 24
                          81.199.244.0/22 maxlen: 24
                          81.199.248.0/23 maxlen: 24
                          91.203.121.0/24 maxlen: 24
                          91.203.122.0/23 maxlen: 23
                          193.93.96.0/22 maxlen: 24
                          193.93.96.0/24 maxlen: 24
                          193.93.97.0/24 maxlen: 24
                          193.93.98.0/24 maxlen: 24
                          195.200.92.0/23 maxlen: 23
                          195.200.92.0/24 maxlen: 24
                          195.225.62.0/23 maxlen: 24
                          195.225.62.0/24 maxlen: 24
                          195.245.108.0/23 maxlen: 24
                          195.245.108.0/24 maxlen: 24
                          2a02:ba0::/32 maxlen: 48
                          2a02:ba0:1000::/36 maxlen: 48
                          2a02:ba0:1006::/48 maxlen: 48
                          2a02:ba0:1007::/48 maxlen: 48
                          2a02:ba0:1008::/48 maxlen: 48
                          2a02:ba0:1009::/48 maxlen: 48
                          2a02:ba0:1014::/48 maxlen: 48
                          2a02:ba0:1015::/48 maxlen: 48
                          2a02:ba0:1018::/48 maxlen: 48
                          2a02:ba0:1019::/48 maxlen: 48
                          2a02:ba0:1024::/48 maxlen: 48
                          2a02:ba0:1025::/48 maxlen: 48
                          2a02:ba0:1026::/48 maxlen: 48
                          2a02:ba0:1027::/48 maxlen: 48
                          2a02:ba0:102d::/48 maxlen: 48
                          2a02:ba0:102e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 10:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:78:48:68:21:25:32:31:20:2e:9e:6e:2f:5c:54:0a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Feb  5 08:00:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6a5cb0321e6940600b9c7e013fa33a977bfdbad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:e1:0f:ef:dc:6e:99:b6:e5:3b:05:34:79:
                    40:ed:c8:3a:a2:0f:c8:8d:b1:17:a6:c6:d7:64:ed:
                    58:fe:fe:ad:1b:f9:4b:96:53:38:28:95:45:fb:e2:
                    23:2e:af:5a:6e:f3:80:93:db:5f:d3:81:29:80:97:
                    7d:7f:c3:fa:5e:92:02:31:b9:c6:74:c2:f6:5d:ec:
                    1b:fa:ec:08:7a:a3:c5:5b:e2:93:47:e7:42:48:c2:
                    bc:4e:cb:1d:6a:fd:56:96:91:c2:67:2b:14:92:87:
                    ad:f3:26:d4:ba:5e:76:7e:4d:1d:55:ff:b7:b1:36:
                    2c:cb:fa:5a:5c:49:88:88:c5:ea:ff:db:81:03:b2:
                    a0:c4:3e:f7:51:1f:91:71:04:dc:c1:9d:7e:57:a7:
                    1f:db:44:59:f8:c9:e9:c2:41:d0:d9:f1:3b:50:28:
                    25:f6:55:40:2f:39:9b:15:89:df:ce:0f:9a:5d:80:
                    d8:b1:47:d9:c7:ee:aa:c6:08:1b:a7:41:87:9f:a8:
                    d8:11:13:f5:0d:33:27:11:9d:0b:f5:99:8e:37:3a:
                    6d:36:a6:e1:6c:eb:bf:d9:b5:e2:9c:1c:71:71:01:
                    33:ff:51:eb:a0:a2:99:1d:3a:7d:dd:37:07:f3:ac:
                    2d:fe:f2:ef:f7:40:ba:c8:bf:02:ea:2a:ee:50:bb:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5C:B0:32:1E:69:40:60:0B:9C:7E:01:3F:A3:3A:97:7B:FD:BA:D2
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/alywMh5pQGALnH4BP6M6l3v9utI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.56.128.0-62.56.137.255
                  62.56.139.0-62.56.154.255
                  62.56.156.0-62.56.175.255
                  62.56.216.0-62.56.221.255
                  62.56.224.0-62.56.251.255
                  81.199.0.0-81.199.11.255
                  81.199.13.0/24
                  81.199.15.0-81.199.23.255
                  81.199.32.0/22
                  81.199.40.0-81.199.63.255
                  81.199.80.0-81.199.97.255
                  81.199.101.0-81.199.111.255
                  81.199.118.0/23
                  81.199.124.0-81.199.132.255
                  81.199.134.0-81.199.143.255
                  81.199.146.0-81.199.168.255
                  81.199.172.0-81.199.201.255
                  81.199.204.0-81.199.217.255
                  81.199.219.0-81.199.230.255
                  81.199.232.0-81.199.249.255
                  91.203.121.0-91.203.123.255
                  193.93.96.0/22
                  195.200.92.0/23
                  195.225.62.0/23
                  195.245.108.0/23
                IPv6:
                  2a02:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:c4:1a:03:62:21:cf:a2:ab:c1:1e:51:6f:da:a6:6e:46:a5:
         9e:67:20:0d:cd:a0:ff:8d:96:75:6a:9a:89:62:60:e6:c2:42:
         b9:9b:af:37:1b:52:bd:5a:63:56:dc:68:12:70:1d:03:e8:f1:
         68:5f:b5:dd:00:8e:3f:c1:26:9a:19:31:a6:77:89:5a:38:99:
         aa:e0:f6:36:a7:4d:bd:29:fa:2c:94:50:74:d4:3b:a4:51:0a:
         5f:d7:de:df:d0:b5:ed:86:1a:19:67:2d:95:6c:a4:ab:88:4d:
         c5:7c:c1:7a:d2:c4:02:02:e6:af:63:19:cc:88:06:87:09:9c:
         c1:a5:26:3e:8a:12:11:ff:ab:fe:06:be:82:98:9d:a9:e9:72:
         57:51:ab:95:3f:20:1c:21:24:40:74:ca:9c:8d:d0:f0:88:96:
         3a:ce:5c:22:43:69:b5:48:22:a2:d9:be:97:60:1d:b9:7c:b1:
         24:90:51:95:e0:d9:6d:e0:a6:66:76:ed:0f:5c:c9:66:67:ac:
         b6:c1:dd:b0:b8:3d:6e:42:db:cc:a0:40:32:b1:6f:03:4b:7b:
         e4:8a:2a:ca:65:a9:6b:16:16:c7:2e:e7:dc:2e:8b:4f:13:a9:
         04:17:48:96:ee:68:42:ce:a5:9d:cf:21:58:c2:64:e4:a6:37:
         e4:3d:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org