Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Th_x5rV6r5c5sbKeRpNkL4T5qN8.roa
File:                     Th_x5rV6r5c5sbKeRpNkL4T5qN8.roa (raw, json)
Hash identifier:          dpb0wc8v0bq6nVWlQlu+YEpm0tfsvW5SjQqidUEQOvw=
Subject key identifier:   4E:1F:F1:E6:B5:7A:AF:97:39:B1:B2:9E:46:93:64:2F:84:F9:A8:DF
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018BF9BFDA62516142CB1A7163DEE3F36E47
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Th_x5rV6r5c5sbKeRpNkL4T5qN8.roa
Signing time:             Thu 23 Nov 2023 01:16:21 +0000
ROA not before:           Thu 23 Nov 2023 01:16:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          91.200.241.0/24 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.20.0/22 maxlen: 24
                          194.36.24.0/24 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 32
                          45.143.232.0/22 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          78.142.195.0/24 maxlen: 32
                          78.142.193.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          109.94.168.0/24 maxlen: 32
                          194.169.54.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          2a0c:59c0:3000::/40 maxlen: 128
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 128
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a09:0:9000::/40 maxlen: 128
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f9:bf:da:62:51:61:42:cb:1a:71:63:de:e3:f3:6e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Nov 23 01:16:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e1ff1e6b57aaf9739b1b29e4693642f84f9a8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:d0:a3:87:1b:0a:4d:21:a7:9f:56:49:af:
                    28:81:0d:a1:d4:bc:84:b7:f9:a1:7b:da:c6:af:a8:
                    b2:3f:2d:59:8e:ec:e5:21:b2:84:ae:f9:0b:6f:5d:
                    f5:ba:1d:d0:4b:20:8f:6b:9e:1a:d3:45:97:0f:40:
                    24:6a:c7:83:1b:60:ff:89:b9:51:45:46:8f:b3:13:
                    e0:db:6d:35:aa:d0:ed:4e:00:e7:11:d9:ac:1b:40:
                    7e:1e:6a:3d:6f:51:27:68:62:72:7e:76:64:38:0e:
                    f8:63:33:31:92:69:86:e3:f2:61:92:c8:7c:0f:1e:
                    0e:9e:cc:a4:f5:e5:17:3a:14:ea:b1:97:c5:4c:f7:
                    4c:85:05:3b:73:df:2e:b7:31:5b:89:52:ed:e5:b1:
                    6f:1b:30:e5:bb:8c:59:04:7d:20:79:83:6a:76:4a:
                    b4:ca:73:af:63:92:32:fc:28:26:3a:1c:49:41:8b:
                    c5:19:d6:d4:63:cd:5c:21:33:b2:bd:5b:70:cf:ff:
                    53:6b:50:26:d5:30:fb:f2:5f:8d:3d:c7:02:2c:1c:
                    75:4e:5b:71:c0:cc:08:2e:ec:32:a2:9e:0d:44:d7:
                    0a:15:11:6f:55:33:55:24:a3:71:e4:ba:2a:53:4a:
                    45:1b:8a:48:29:5f:bd:6b:88:e2:d2:12:aa:bc:0e:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1F:F1:E6:B5:7A:AF:97:39:B1:B2:9E:46:93:64:2F:84:F9:A8:DF
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Th_x5rV6r5c5sbKeRpNkL4T5qN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  185.49.32.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:7c:db:77:c5:af:d8:a1:57:a5:14:43:7c:c5:1b:5e:cb:ae:
         2b:90:22:2e:da:9c:de:9d:15:3b:24:ed:b7:cd:5c:04:a0:66:
         39:a6:cc:20:19:c2:a5:bf:e6:7e:69:e9:ac:89:cb:42:da:27:
         d4:db:55:cc:66:f2:14:c9:6b:a3:9b:ec:65:2a:f9:fc:5d:0e:
         74:b7:f4:9c:79:e6:ff:19:44:ce:98:5c:d7:47:3a:8b:72:28:
         bc:3f:c0:42:bd:53:1e:05:38:ab:21:2d:71:66:2d:34:63:4b:
         ec:7b:65:14:70:bd:79:41:2c:f1:57:bb:a0:8b:c1:a7:bf:5a:
         95:16:bc:1d:ef:4e:a5:6e:1e:82:6e:32:f6:52:8b:da:2e:54:
         6a:09:63:e5:bf:da:03:4f:4a:e9:2d:b9:a4:4f:55:b1:ed:0d:
         54:54:3e:38:55:1c:a6:c1:0c:97:d6:6c:83:3e:fb:ba:aa:39:
         47:a2:d4:3f:d9:af:86:0f:81:5f:19:42:bb:d8:a2:a2:33:25:
         4e:d8:98:00:c0:6e:62:63:2f:8b:27:7b:c3:24:0f:2c:fb:bf:
         aa:5c:57:4e:05:86:f3:5e:08:f2:e0:16:06:9e:d3:1f:12:fa:
         6e:f1:59:bf:32:5d:9a:c6:0a:2e:10:23:7c:06:8e:dc:56:0e:
         2e:e7:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 16:25:44 2023 by rpki-client on console-ams.rpki-client.org