Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/p-OuQMxFgJTbjZDVwtRooOXCVC4.roa
File:                     p-OuQMxFgJTbjZDVwtRooOXCVC4.roa (raw, json)
Hash identifier:          acZ1l9G9Sj3q8HHb/iv2DI6vSG2Mmj0LCmyREI80gxc=
Subject key identifier:   A7:E3:AE:40:CC:45:80:94:DB:8D:90:D5:C2:D4:68:A0:E5:C2:54:2E
Certificate issuer:       /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial:       01909C9870E114D5D9D5164722D91DE7A4C0
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/p-OuQMxFgJTbjZDVwtRooOXCVC4.roa
Signing time:             Wed 10 Jul 2024 12:22:34 +0000
ROA not before:           Wed 10 Jul 2024 12:22:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50463
IP address blocks:        5.22.128.0/21 maxlen: 21
                          5.22.130.0/23 maxlen: 23
                          5.22.132.0/24 maxlen: 24
                          5.22.134.0/24 maxlen: 24
                          5.144.48.0/20 maxlen: 20
                          5.144.48.0/24 maxlen: 24
                          5.144.55.0/24 maxlen: 24
                          5.144.57.0/24 maxlen: 24
                          5.144.61.0/24 maxlen: 24
                          37.19.112.0/20 maxlen: 20
                          37.19.112.0/24 maxlen: 24
                          37.19.113.0/24 maxlen: 24
                          37.19.114.0/24 maxlen: 24
                          37.19.115.0/24 maxlen: 24
                          37.19.116.0/24 maxlen: 24
                          37.19.125.0/24 maxlen: 24
                          109.226.0.0/18 maxlen: 18
                          109.226.0.0/24 maxlen: 24
                          109.226.2.0/24 maxlen: 24
                          109.226.3.0/24 maxlen: 24
                          109.226.4.0/24 maxlen: 24
                          109.226.5.0/24 maxlen: 24
                          109.226.6.0/24 maxlen: 24
                          109.226.7.0/24 maxlen: 24
                          109.226.13.0/24 maxlen: 24
                          109.226.14.0/24 maxlen: 24
                          109.226.15.0/24 maxlen: 24
                          109.226.16.0/22 maxlen: 22
                          109.226.17.0/24 maxlen: 24
                          109.226.21.0/24 maxlen: 24
                          109.226.22.0/24 maxlen: 24
                          109.226.23.0/24 maxlen: 24
                          109.226.24.0/24 maxlen: 24
                          109.226.25.0/24 maxlen: 24
                          109.226.26.0/24 maxlen: 24
                          109.226.28.0/24 maxlen: 24
                          109.226.29.0/24 maxlen: 24
                          109.226.31.0/24 maxlen: 24
                          109.226.32.0/24 maxlen: 24
                          109.226.33.0/24 maxlen: 24
                          109.226.34.0/24 maxlen: 24
                          109.226.35.0/24 maxlen: 24
                          109.226.36.0/24 maxlen: 24
                          109.226.37.0/24 maxlen: 24
                          109.226.38.0/24 maxlen: 24
                          109.226.44.0/24 maxlen: 24
                          109.226.45.0/24 maxlen: 24
                          109.226.47.0/24 maxlen: 24
                          109.226.48.0/24 maxlen: 24
                          109.226.49.0/24 maxlen: 24
                          109.226.50.0/24 maxlen: 24
                          109.226.51.0/24 maxlen: 24
                          109.226.52.0/24 maxlen: 24
                          109.226.53.0/24 maxlen: 24
                          109.226.55.0/24 maxlen: 24
                          109.226.56.0/24 maxlen: 24
                          109.226.57.0/24 maxlen: 24
                          109.226.59.0/24 maxlen: 24
                          109.226.60.0/24 maxlen: 24
                          109.226.61.0/24 maxlen: 24
                          141.226.192.0/19 maxlen: 19
                          141.226.192.0/24 maxlen: 24
                          141.226.193.0/24 maxlen: 24
                          141.226.194.0/24 maxlen: 24
                          141.226.195.0/24 maxlen: 24
                          141.226.196.0/24 maxlen: 24
                          141.226.198.0/24 maxlen: 24
                          141.226.203.0/24 maxlen: 24
                          141.226.204.0/24 maxlen: 24
                          141.226.205.0/24 maxlen: 24
                          141.226.206.0/24 maxlen: 24
                          141.226.212.0/24 maxlen: 24
                          141.226.223.0/24 maxlen: 24
                          185.3.144.0/22 maxlen: 22
                          185.3.145.0/24 maxlen: 24
                          2a00:c280::/29 maxlen: 29
                          2a00:c280:100::/48 maxlen: 48
                          2a00:c281:1::/48 maxlen: 48
                          2a00:c281:2::/48 maxlen: 48
                          2a00:c281:3::/48 maxlen: 48
                          2a00:c281:4::/48 maxlen: 48
                          2a00:c281:a::/48 maxlen: 48
                          2a00:c281:b::/48 maxlen: 48
                          2a00:c281:c::/48 maxlen: 48
                          2a00:c281:d::/48 maxlen: 48
                          2a00:c281:100::/40 maxlen: 40
                          2a00:c281:200::/40 maxlen: 40
                          2a00:c281:300::/40 maxlen: 40
                          2a00:c281:400::/40 maxlen: 40
                          2a00:c281:a00::/40 maxlen: 40
                          2a00:c281:b00::/40 maxlen: 40
                          2a00:c281:c00::/40 maxlen: 40
                          2a00:c281:d00::/40 maxlen: 40
                          2a00:c281:1001::/48 maxlen: 48
                          2a00:c281:1002::/48 maxlen: 48
                          2a00:c281:1003::/48 maxlen: 48
                          2a00:c281:1004::/48 maxlen: 48
                          2a00:c281:100a::/48 maxlen: 48
                          2a00:c281:100b::/48 maxlen: 48
                          2a00:c281:100c::/48 maxlen: 48
                          2a00:c281:100d::/48 maxlen: 48
                          2a00:c281:1011::/48 maxlen: 48
                          2a00:c281:1012::/48 maxlen: 48
                          2a00:c281:1013::/48 maxlen: 48
                          2a00:c281:1014::/48 maxlen: 48
                          2a00:c281:101a::/48 maxlen: 48
                          2a00:c281:101b::/48 maxlen: 48
                          2a00:c281:101c::/48 maxlen: 48
                          2a00:c281:101d::/48 maxlen: 48
                          2a00:c281:1100::/40 maxlen: 40
                          2a00:c281:1200::/40 maxlen: 40
                          2a00:c281:1300::/40 maxlen: 40
                          2a00:c281:1400::/40 maxlen: 40
                          2a00:c281:1500::/40 maxlen: 40
                          2a00:c281:1600::/40 maxlen: 40
                          2a00:c281:1700::/40 maxlen: 40
                          2a00:c281:1800::/40 maxlen: 40
                          2a00:c281:1a00::/40 maxlen: 40
                          2a00:c281:1b00::/40 maxlen: 40
                          2a00:c281:1c00::/40 maxlen: 40
                          2a00:c281:1d00::/40 maxlen: 40
                          2a00:c281:2001::/48 maxlen: 48
                          2a00:c281:2002::/48 maxlen: 48
                          2a00:c281:2003::/48 maxlen: 48
                          2a00:c281:2004::/48 maxlen: 48
                          2a00:c281:200a::/48 maxlen: 48
                          2a00:c281:200b::/48 maxlen: 48
                          2a00:c281:200c::/48 maxlen: 48
                          2a00:c281:200d::/48 maxlen: 48
                          2a00:c281:2100::/40 maxlen: 40
                          2a00:c281:2200::/40 maxlen: 40
                          2a00:c281:2300::/40 maxlen: 40
                          2a00:c281:2400::/40 maxlen: 40
                          2a00:c281:2a00::/40 maxlen: 40
                          2a00:c281:2b00::/40 maxlen: 40
                          2a00:c281:2c00::/40 maxlen: 40
                          2a00:c281:2d00::/40 maxlen: 40
                          2a00:c281:3001::/48 maxlen: 48
                          2a00:c281:3002::/48 maxlen: 48
                          2a00:c281:3003::/48 maxlen: 48
                          2a00:c281:3004::/48 maxlen: 48
                          2a00:c281:300a::/48 maxlen: 48
                          2a00:c281:300b::/48 maxlen: 48
                          2a00:c281:300c::/48 maxlen: 48
                          2a00:c281:300d::/48 maxlen: 48
                          2a00:c281:3100::/40 maxlen: 40
                          2a00:c281:3200::/40 maxlen: 40
                          2a00:c281:3300::/40 maxlen: 40
                          2a00:c281:3400::/40 maxlen: 40
                          2a00:c281:3a00::/40 maxlen: 40
                          2a00:c281:3b00::/40 maxlen: 40
                          2a00:c281:3c00::/40 maxlen: 40
                          2a00:c281:3d00::/40 maxlen: 40
                          2a00:c281:4000::/48 maxlen: 48
                          2a00:c281:4001::/48 maxlen: 48
                          2a00:c281:4100::/40 maxlen: 40
                          2a00:c281:4200::/40 maxlen: 40
                          2a00:c281:4300::/40 maxlen: 40
                          2a00:c281:4400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 08:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9c:98:70:e1:14:d5:d9:d5:16:47:22:d9:1d:e7:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
        Validity
            Not Before: Jul 10 12:22:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a7e3ae40cc458094db8d90d5c2d468a0e5c2542e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:a6:2a:9f:e8:32:93:de:c9:3a:bc:4c:aa:
                    7e:b5:7b:ea:9f:0e:c8:ad:2b:b0:97:cb:66:14:36:
                    9a:66:40:be:e9:2d:ba:ac:19:63:f4:a9:51:6d:3e:
                    01:b8:c5:9e:fc:82:0b:9b:12:a0:52:66:97:24:bd:
                    04:0d:da:58:a6:ac:bd:d5:4e:9b:ff:64:87:7a:bd:
                    0d:c3:63:2f:e2:79:80:e7:bb:1c:b6:ea:83:62:4f:
                    b3:a0:c1:09:ef:6f:4d:bd:5f:43:50:5f:ff:24:92:
                    19:d1:84:1c:13:70:53:72:47:aa:36:47:08:12:f5:
                    ab:c2:74:cb:c1:e6:96:b4:ec:a4:97:ce:1e:fb:77:
                    85:f6:dc:ac:86:e3:d6:92:e6:09:c9:73:7f:9b:d7:
                    9a:e1:c2:34:d0:aa:97:10:d3:5c:73:49:e6:63:7c:
                    36:fa:37:30:a2:b4:03:db:43:8a:cf:cb:42:87:12:
                    d9:25:5d:78:cf:cc:0c:55:fe:4b:a2:03:41:24:58:
                    d5:8e:67:9e:40:71:0b:80:f5:2c:6b:94:04:55:7c:
                    80:b5:07:72:a2:40:c3:b5:06:90:e8:8d:a6:51:e2:
                    ad:dd:a1:3e:36:9e:2c:7b:4f:56:aa:7c:b8:ba:de:
                    86:00:64:98:bc:0c:b9:98:21:2f:b5:f8:03:8b:e2:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:AE:40:CC:45:80:94:DB:8D:90:D5:C2:D4:68:A0:E5:C2:54:2E
            X509v3 Authority Key Identifier:
                keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/p-OuQMxFgJTbjZDVwtRooOXCVC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.22.128.0/21
                  5.144.48.0/20
                  37.19.112.0/20
                  109.226.0.0/18
                  141.226.192.0/19
                  185.3.144.0/22
                IPv6:
                  2a00:c280::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:04:6c:e7:89:e0:67:43:80:fc:3e:22:27:a8:8f:5a:4e:28:
         14:38:6e:14:df:15:15:3e:76:c8:b1:06:29:c0:26:e2:aa:c1:
         29:e7:ff:e3:3d:87:ad:af:da:9d:ff:09:b8:5d:40:8f:52:21:
         af:a0:b1:c5:62:7c:7e:fb:5a:19:7d:56:9f:a8:fc:5e:87:8b:
         29:68:11:59:84:5a:2f:eb:a6:c6:53:1a:87:7e:90:4f:96:95:
         bf:4c:59:d0:48:90:1e:2b:5c:54:e7:de:17:04:9a:ab:97:7a:
         4b:c6:1d:b3:c8:13:b1:16:9b:a5:77:f0:50:2c:c5:ec:06:a1:
         32:fd:b3:4a:20:a3:54:6a:1e:75:b4:6a:d0:73:cf:b6:86:52:
         e8:f8:49:67:3e:1d:92:0f:dd:79:a7:09:0f:40:a8:22:70:70:
         a4:82:26:50:09:f8:24:2b:8b:3d:f3:e8:4c:93:37:17:c9:8f:
         5f:bb:46:08:e4:02:de:5f:d1:2a:39:9b:69:98:89:ca:99:71:
         1a:d5:25:48:88:d3:68:0a:c4:c6:8e:96:22:b6:7a:72:23:b6:
         ec:be:e9:6e:31:9f:13:df:99:a9:ff:45:de:7e:f6:64:0e:45:
         35:e9:05:17:00:f9:b8:f5:a5:67:78:9d:0d:39:9c:7f:09:55:
         6b:6b:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:51 2024 by rpki-client on console-fra.rpki-client.org