Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/PpjVtAY5vEMIqHCvbBOIvcymkUw.roa
File:                     PpjVtAY5vEMIqHCvbBOIvcymkUw.roa (raw, json)
Hash identifier:          1LkClGy4jnuAV4Hsi9QckiCLnmQ0d16qzY+y4mN9Wow=
Subject key identifier:   3E:98:D5:B4:06:39:BC:43:08:A8:70:AF:6C:13:88:BD:CC:A6:91:4C
Certificate issuer:       /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial:       018CC425565E4AC79071FB69BBCC2FD6064C
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/PpjVtAY5vEMIqHCvbBOIvcymkUw.roa
Signing time:             Mon 01 Jan 2024 08:30:30 +0000
ROA not before:           Mon 01 Jan 2024 08:30:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50463
IP address blocks:        37.19.112.0/24 maxlen: 24
                          37.19.115.0/24 maxlen: 24
                          37.19.114.0/24 maxlen: 24
                          37.19.112.0/20 maxlen: 20
                          37.19.113.0/24 maxlen: 24
                          37.19.116.0/24 maxlen: 24
                          37.19.125.0/24 maxlen: 24
                          141.226.192.0/19 maxlen: 19
                          141.226.192.0/24 maxlen: 24
                          141.226.196.0/24 maxlen: 24
                          141.226.195.0/24 maxlen: 24
                          141.226.194.0/24 maxlen: 24
                          141.226.198.0/24 maxlen: 24
                          141.226.193.0/24 maxlen: 24
                          141.226.204.0/24 maxlen: 24
                          141.226.203.0/24 maxlen: 24
                          141.226.206.0/24 maxlen: 24
                          141.226.205.0/24 maxlen: 24
                          141.226.210.0/24 maxlen: 24
                          141.226.209.0/24 maxlen: 24
                          141.226.208.0/24 maxlen: 24
                          141.226.212.0/24 maxlen: 24
                          141.226.223.0/24 maxlen: 24
                          141.226.221.0/24 maxlen: 24
                          109.226.2.0/24 maxlen: 24
                          109.226.0.0/18 maxlen: 18
                          109.226.0.0/24 maxlen: 24
                          109.226.4.0/24 maxlen: 24
                          109.226.3.0/24 maxlen: 24
                          109.226.6.0/24 maxlen: 24
                          109.226.5.0/24 maxlen: 24
                          109.226.8.0/22 maxlen: 22
                          109.226.7.0/24 maxlen: 24
                          109.226.16.0/22 maxlen: 22
                          109.226.15.0/24 maxlen: 24
                          109.226.14.0/24 maxlen: 24
                          109.226.17.0/24 maxlen: 24
                          109.226.13.0/24 maxlen: 24
                          109.226.23.0/24 maxlen: 24
                          109.226.22.0/24 maxlen: 24
                          109.226.21.0/24 maxlen: 24
                          109.226.24.0/24 maxlen: 24
                          185.3.145.0/24 maxlen: 24
                          185.3.144.0/22 maxlen: 22
                          109.226.29.0/24 maxlen: 24
                          109.226.28.0/24 maxlen: 24
                          109.226.31.0/24 maxlen: 24
                          109.226.26.0/24 maxlen: 24
                          109.226.25.0/24 maxlen: 24
                          109.226.37.0/24 maxlen: 24
                          109.226.36.0/24 maxlen: 24
                          109.226.35.0/24 maxlen: 24
                          109.226.34.0/24 maxlen: 24
                          109.226.38.0/24 maxlen: 24
                          109.226.33.0/24 maxlen: 24
                          109.226.32.0/24 maxlen: 24
                          109.226.44.0/24 maxlen: 24
                          109.226.51.0/24 maxlen: 24
                          109.226.50.0/24 maxlen: 24
                          109.226.49.0/24 maxlen: 24
                          109.226.48.0/24 maxlen: 24
                          109.226.47.0/24 maxlen: 24
                          109.226.45.0/24 maxlen: 24
                          109.226.57.0/24 maxlen: 24
                          109.226.56.0/24 maxlen: 24
                          109.226.55.0/24 maxlen: 24
                          109.226.53.0/24 maxlen: 24
                          109.226.52.0/24 maxlen: 24
                          109.226.61.0/24 maxlen: 24
                          109.226.60.0/24 maxlen: 24
                          109.226.59.0/24 maxlen: 24
                          109.226.63.0/24 maxlen: 24
                          109.226.62.0/24 maxlen: 24
                          5.144.55.0/24 maxlen: 24
                          5.144.54.0/24 maxlen: 24
                          5.144.57.0/24 maxlen: 24
                          5.144.62.0/24 maxlen: 24
                          5.144.61.0/24 maxlen: 24
                          5.144.63.0/24 maxlen: 24
                          5.144.48.0/24 maxlen: 24
                          5.144.48.0/20 maxlen: 20
                          5.144.50.0/24 maxlen: 24
                          5.22.133.0/24 maxlen: 24
                          5.22.135.0/24 maxlen: 24
                          5.22.134.0/24 maxlen: 24
                          5.22.132.0/24 maxlen: 24
                          5.22.130.0/23 maxlen: 23
                          5.22.128.0/21 maxlen: 21
                          5.22.129.0/24 maxlen: 24
                          5.22.128.0/24 maxlen: 24
                          2a00:c281:3004::/48 maxlen: 48
                          2a00:c281:2004::/48 maxlen: 48
                          2a00:c281:1004::/48 maxlen: 48
                          2a00:c281:4::/48 maxlen: 48
                          2a00:c281:4001::/48 maxlen: 48
                          2a00:c281:3001::/48 maxlen: 48
                          2a00:c281:2001::/48 maxlen: 48
                          2a00:c281:1001::/48 maxlen: 48
                          2a00:c281:1::/48 maxlen: 48
                          2a00:c281:300d::/48 maxlen: 48
                          2a00:c281:200d::/48 maxlen: 48
                          2a00:c281:100d::/48 maxlen: 48
                          2a00:c281:d::/48 maxlen: 48
                          2a00:c281:300a::/48 maxlen: 48
                          2a00:c281:200a::/48 maxlen: 48
                          2a00:c281:100a::/48 maxlen: 48
                          2a00:c281:a::/48 maxlen: 48
                          2a00:c281:101b::/48 maxlen: 48
                          2a00:c281:101d::/48 maxlen: 48
                          2a00:c281:101a::/48 maxlen: 48
                          2a00:c281:1012::/48 maxlen: 48
                          2a00:c280::/29 maxlen: 29
                          2a00:c281:300c::/48 maxlen: 48
                          2a00:c281:200c::/48 maxlen: 48
                          2a00:c281:100c::/48 maxlen: 48
                          2a00:c281:c::/48 maxlen: 48
                          2a00:c280:100::/48 maxlen: 48
                          2a00:c281:b::/48 maxlen: 48
                          2a00:c281:100b::/48 maxlen: 48
                          2a00:c281:200b::/48 maxlen: 48
                          2a00:c281:300b::/48 maxlen: 48
                          2a00:c281:101c::/48 maxlen: 48
                          2a00:c281:3003::/48 maxlen: 48
                          2a00:c281:2003::/48 maxlen: 48
                          2a00:c281:1003::/48 maxlen: 48
                          2a00:c281:3::/48 maxlen: 48
                          2a00:c281:1014::/48 maxlen: 48
                          2a00:c281:4000::/48 maxlen: 48
                          2a00:c281:1011::/48 maxlen: 48
                          2a00:c281:2::/48 maxlen: 48
                          2a00:c281:2002::/48 maxlen: 48
                          2a00:c281:3002::/48 maxlen: 48
                          2a00:c281:1002::/48 maxlen: 48
                          2a00:c281:1013::/48 maxlen: 48
                          2a00:c281:2b00::/40 maxlen: 40
                          2a00:c281:2d00::/40 maxlen: 40
                          2a00:c281:1c00::/40 maxlen: 40
                          2a00:c281:4100::/40 maxlen: 40
                          2a00:c281:3300::/40 maxlen: 40
                          2a00:c281:2200::/40 maxlen: 40
                          2a00:c281:4400::/40 maxlen: 40
                          2a00:c281:1400::/40 maxlen: 40
                          2a00:c281:1100::/40 maxlen: 40
                          2a00:c281:b00::/40 maxlen: 40
                          2a00:c281:1600::/40 maxlen: 40
                          2a00:c281:3b00::/40 maxlen: 40
                          2a00:c281:200::/40 maxlen: 40
                          2a00:c281:2400::/40 maxlen: 40
                          2a00:c281:1300::/40 maxlen: 40
                          2a00:c281:2a00::/40 maxlen: 40
                          2a00:c281:2100::/40 maxlen: 40
                          2a00:c281:1700::/40 maxlen: 40
                          2a00:c281:d00::/40 maxlen: 40
                          2a00:c281:300::/40 maxlen: 40
                          2a00:c281:3400::/40 maxlen: 40
                          2a00:c281:3100::/40 maxlen: 40
                          2a00:c281:1200::/40 maxlen: 40
                          2a00:c281:2300::/40 maxlen: 40
                          2a00:c281:c00::/40 maxlen: 40
                          2a00:c281:4200::/40 maxlen: 40
                          2a00:c281:1d00::/40 maxlen: 40
                          2a00:c281:1a00::/40 maxlen: 40
                          2a00:c281:100::/40 maxlen: 40
                          2a00:c281:1500::/40 maxlen: 40
                          2a00:c281:3a00::/40 maxlen: 40
                          2a00:c281:400::/40 maxlen: 40
                          2a00:c281:1800::/40 maxlen: 40
                          2a00:c281:3d00::/40 maxlen: 40
                          2a00:c281:1b00::/40 maxlen: 40
                          2a00:c281:2c00::/40 maxlen: 40
                          2a00:c281:4300::/40 maxlen: 40
                          2a00:c281:a00::/40 maxlen: 40
                          2a00:c281:3200::/40 maxlen: 40
                          2a00:c281:3c00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 14:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:56:5e:4a:c7:90:71:fb:69:bb:cc:2f:d6:06:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
        Validity
            Not Before: Jan  1 08:30:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3e98d5b40639bc4308a870af6c1388bdcca6914c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:d2:ad:24:02:85:1c:3c:d3:d6:12:83:9a:
                    ad:10:dc:df:ef:77:1a:d8:d5:a3:12:6f:a5:64:52:
                    c9:d6:5a:a5:3d:58:e5:76:8d:4f:36:63:96:85:a0:
                    76:9b:1c:8b:2f:6c:b7:24:b2:9f:7e:c0:be:0b:d9:
                    a6:84:f2:16:67:e0:e1:de:1a:ae:76:bb:4a:47:67:
                    44:c3:e5:2f:44:99:06:80:49:5d:8d:ef:c2:0b:aa:
                    56:9d:c1:29:c1:d9:e6:bf:ee:68:00:34:8f:b5:8c:
                    0c:fe:64:a1:09:d4:8a:91:25:dd:4f:49:9f:df:ff:
                    38:ae:c9:8f:8d:9e:88:64:61:ae:43:d2:5f:54:ae:
                    24:35:30:7e:da:b8:3f:d6:83:ea:95:00:11:05:16:
                    01:c6:1c:aa:a2:88:30:d4:92:5f:a9:88:69:c0:23:
                    5c:3b:f8:58:61:a7:f6:d1:26:b7:8d:58:bc:5d:07:
                    86:df:42:51:4b:7b:56:d2:9b:ae:9f:e5:7a:17:17:
                    a2:a0:64:d8:d5:4e:70:e6:13:0b:b4:5d:93:3a:a8:
                    9c:04:8b:7c:ab:ad:7a:c6:10:3c:09:0c:dd:c5:fe:
                    f8:9f:b1:b0:4a:73:53:1a:d5:81:92:cb:dc:86:d1:
                    e1:67:43:dc:10:7d:ed:24:36:d3:db:ff:8e:a3:0f:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:98:D5:B4:06:39:BC:43:08:A8:70:AF:6C:13:88:BD:CC:A6:91:4C
            X509v3 Authority Key Identifier:
                keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/PpjVtAY5vEMIqHCvbBOIvcymkUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.22.128.0/21
                  5.144.48.0/20
                  37.19.112.0/20
                  109.226.0.0/18
                  141.226.192.0/19
                  185.3.144.0/22
                IPv6:
                  2a00:c280::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:37:88:bb:27:4d:e8:d2:fb:c5:88:8d:91:2b:0e:d3:04:71:
         f1:0d:8c:52:50:21:9d:6d:5c:6c:9b:48:c9:d7:1a:ed:bb:16:
         a8:aa:7a:fe:92:8b:27:72:54:d1:15:e8:34:70:d8:0f:3d:aa:
         5d:a6:69:78:ec:56:29:80:1b:07:a6:f6:aa:2f:c3:8c:aa:a1:
         95:3e:bc:16:f3:ca:76:08:a4:c9:f5:7c:64:d1:23:6c:74:ae:
         80:80:2d:9a:a1:db:6b:42:a0:02:63:e2:83:21:20:18:37:0e:
         12:ae:7e:c2:ba:36:62:05:33:85:bf:f5:1d:be:2e:f2:e1:97:
         10:e3:5f:08:2a:a9:4d:f0:06:1b:13:af:d0:10:d2:7c:07:10:
         7b:c3:77:9a:42:12:2b:16:f5:43:3a:73:7d:0b:8c:47:99:d2:
         e3:5a:06:67:b3:97:6e:8b:94:3c:fe:63:17:0e:9f:42:f9:9f:
         bf:59:03:3f:cd:a4:7c:64:06:4e:89:36:67:25:51:be:c6:d8:
         e1:8c:41:1c:b6:e5:d2:45:e6:48:63:80:e5:de:b6:02:f4:50:
         73:47:e1:8c:f5:1b:87:c8:e1:6e:58:8b:50:5c:6e:bb:26:3c:
         11:c9:22:31:13:0e:79:06:f8:9b:3c:4c:cd:be:72:aa:27:a1:
         4f:3c:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 17:29:59 2024 by rpki-client on console-ams.rpki-client.org