Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4TIJBYjNlPap8PWXB4FXPHVVvcU.roa
File:                     4TIJBYjNlPap8PWXB4FXPHVVvcU.roa (raw, json)
Hash identifier:          ZQbC7U/nOwaBz4ghHawg/+yko5Q9j0z4csk8uuNRHWQ=
Subject key identifier:   E1:32:09:05:88:CD:94:F6:A9:F0:F5:97:07:81:57:3C:75:55:BD:C5
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       018FBFB6DA3CF1D74BB77B8C22E9AFC66E22
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4TIJBYjNlPap8PWXB4FXPHVVvcU.roa
Signing time:             Tue 28 May 2024 14:59:42 +0000
ROA not before:           Tue 28 May 2024 14:59:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        92.50.14.0/24 maxlen: 24
                          92.50.15.0/24 maxlen: 24
                          92.50.16.0/24 maxlen: 24
                          92.50.17.0/24 maxlen: 24
                          92.50.18.0/24 maxlen: 24
                          92.50.19.0/24 maxlen: 24
                          92.50.20.0/24 maxlen: 24
                          92.50.21.0/24 maxlen: 24
                          92.50.22.0/24 maxlen: 24
                          92.50.23.0/24 maxlen: 24
                          92.50.24.0/24 maxlen: 24
                          92.50.25.0/24 maxlen: 24
                          92.50.26.0/24 maxlen: 24
                          92.50.27.0/24 maxlen: 24
                          92.50.28.0/24 maxlen: 24
                          92.50.29.0/24 maxlen: 24
                          92.50.30.0/24 maxlen: 24
                          92.50.31.0/24 maxlen: 24
                          92.50.32.0/24 maxlen: 24
                          92.50.33.0/24 maxlen: 24
                          92.50.34.0/24 maxlen: 24
                          92.50.35.0/24 maxlen: 24
                          92.50.36.0/24 maxlen: 24
                          92.50.37.0/24 maxlen: 24
                          92.50.38.0/24 maxlen: 24
                          92.50.39.0/24 maxlen: 24
                          92.50.40.0/24 maxlen: 24
                          92.50.41.0/24 maxlen: 24
                          92.50.42.0/24 maxlen: 24
                          92.50.43.0/24 maxlen: 24
                          92.50.44.0/24 maxlen: 24
                          92.50.45.0/24 maxlen: 24
                          92.50.46.0/24 maxlen: 24
                          92.50.47.0/24 maxlen: 24
                          92.50.48.0/24 maxlen: 24
                          92.50.49.0/24 maxlen: 24
                          92.50.50.0/24 maxlen: 24
                          92.50.51.0/24 maxlen: 24
                          92.50.52.0/24 maxlen: 24
                          92.50.53.0/24 maxlen: 24
                          92.50.54.0/24 maxlen: 24
                          92.50.55.0/24 maxlen: 24
                          92.50.56.0/24 maxlen: 24
                          92.50.57.0/24 maxlen: 24
                          92.50.58.0/24 maxlen: 24
                          92.50.59.0/24 maxlen: 24
                          92.50.60.0/24 maxlen: 24
                          92.50.61.0/24 maxlen: 24
                          92.50.62.0/24 maxlen: 24
                          92.50.63.0/24 maxlen: 24
                          147.136.78.0/24 maxlen: 24
                          147.136.79.0/24 maxlen: 24
                          147.136.84.0/24 maxlen: 24
                          147.136.86.0/24 maxlen: 24
                          147.136.87.0/24 maxlen: 24
                          168.199.133.0/24 maxlen: 24
                          168.199.134.0/24 maxlen: 24
                          168.199.135.0/24 maxlen: 24
                          168.199.136.0/24 maxlen: 24
                          168.199.137.0/24 maxlen: 24
                          168.199.138.0/24 maxlen: 24
                          168.199.139.0/24 maxlen: 24
                          168.199.140.0/24 maxlen: 24
                          168.199.141.0/24 maxlen: 24
                          168.199.142.0/24 maxlen: 24
                          168.199.143.0/24 maxlen: 24
                          168.199.144.0/24 maxlen: 24
                          168.199.145.0/24 maxlen: 24
                          168.199.146.0/24 maxlen: 24
                          168.199.147.0/24 maxlen: 24
                          168.199.148.0/24 maxlen: 24
                          168.199.149.0/24 maxlen: 24
                          168.199.150.0/24 maxlen: 24
                          168.199.151.0/24 maxlen: 24
                          168.199.152.0/24 maxlen: 24
                          168.199.153.0/24 maxlen: 24
                          168.199.154.0/24 maxlen: 24
                          168.199.155.0/24 maxlen: 24
                          168.199.156.0/24 maxlen: 24
                          168.199.157.0/24 maxlen: 24
                          168.199.158.0/24 maxlen: 24
                          168.199.159.0/24 maxlen: 24
                          168.199.164.0/24 maxlen: 24
                          168.199.166.0/24 maxlen: 24
                          168.199.167.0/24 maxlen: 24
                          168.199.168.0/24 maxlen: 24
                          168.199.169.0/24 maxlen: 24
                          168.199.174.0/24 maxlen: 24
                          168.199.202.0/24 maxlen: 24
                          168.199.203.0/24 maxlen: 24
                          168.199.204.0/24 maxlen: 24
                          168.199.206.0/24 maxlen: 24
                          168.199.208.0/24 maxlen: 24
                          168.199.211.0/24 maxlen: 24
                          168.199.216.0/24 maxlen: 24
                          168.199.217.0/24 maxlen: 24
                          168.199.240.0/24 maxlen: 24
                          168.199.241.0/24 maxlen: 24
                          168.199.242.0/24 maxlen: 24
                          168.199.243.0/24 maxlen: 24
                          168.199.244.0/24 maxlen: 24
                          168.199.245.0/24 maxlen: 24
                          168.199.246.0/24 maxlen: 24
                          168.199.247.0/24 maxlen: 24
                          168.199.248.0/24 maxlen: 24
                          168.199.249.0/24 maxlen: 24
                          168.199.250.0/24 maxlen: 24
                          168.199.251.0/24 maxlen: 24
                          168.199.252.0/24 maxlen: 24
                          168.199.253.0/24 maxlen: 24
                          168.199.254.0/24 maxlen: 24
                          168.199.255.0/24 maxlen: 24
                          185.100.58.0/24 maxlen: 24
                          192.95.85.0/24 maxlen: 24
                          192.95.86.0/24 maxlen: 24
                          192.95.91.0/24 maxlen: 24
                          2001:678:8b4::/48 maxlen: 64

Validation:               Failed, certificate revoked on Sun 02 Jun 2024 20:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bf:b6:da:3c:f1:d7:4b:b7:7b:8c:22:e9:af:c6:6e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: May 28 14:59:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e132090588cd94f6a9f0f5970781573c7555bdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:6f:da:b6:85:4b:dd:6c:3c:84:91:68:df:
                    e9:83:e9:7c:b8:e2:11:a9:ae:8c:90:ea:4f:fe:01:
                    12:7c:95:b0:53:2c:17:bf:2b:28:22:f8:3a:e2:2e:
                    63:60:c9:fe:91:c8:43:dc:52:3a:55:44:94:9f:3d:
                    1a:21:9b:01:03:d4:18:e1:87:21:9d:6c:8d:63:76:
                    36:48:1b:3f:b4:32:7e:cb:17:26:a5:fd:d2:a2:2a:
                    55:bc:09:c3:c2:92:d4:9c:95:c0:7a:2f:15:22:fe:
                    29:cd:75:7e:57:bb:dc:aa:c3:ac:a4:d9:7b:de:4a:
                    bd:61:65:25:04:99:f5:7a:88:c2:b4:5c:61:4f:ca:
                    65:86:0c:e3:82:be:99:91:6b:6c:6a:42:0c:d4:75:
                    f4:f6:02:57:11:de:70:c1:69:61:5a:4e:6d:d4:62:
                    d7:9b:5a:e8:27:4f:d0:03:e3:a5:dd:ce:46:e1:a2:
                    0d:e9:f3:a6:f6:79:f5:b3:99:57:5f:88:ed:85:82:
                    e8:b6:15:93:60:d8:60:a6:b2:c6:86:a7:5a:2d:8f:
                    31:d2:38:ca:99:4a:f3:0d:b9:02:b5:a1:0f:ec:74:
                    c5:7f:4a:c8:32:17:11:df:f3:f5:f3:97:dc:97:e5:
                    90:eb:45:1c:c5:6d:3f:92:33:4e:20:c7:dd:84:3c:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:32:09:05:88:CD:94:F6:A9:F0:F5:97:07:81:57:3C:75:55:BD:C5
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4TIJBYjNlPap8PWXB4FXPHVVvcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.50.14.0-92.50.63.255
                  147.136.78.0/23
                  147.136.84.0/24
                  147.136.86.0/23
                  168.199.133.0-168.199.159.255
                  168.199.164.0/24
                  168.199.166.0-168.199.169.255
                  168.199.174.0/24
                  168.199.202.0-168.199.204.255
                  168.199.206.0/24
                  168.199.208.0/24
                  168.199.211.0/24
                  168.199.216.0/23
                  168.199.240.0/20
                  185.100.58.0/24
                  192.95.85.0-192.95.86.255
                  192.95.91.0/24
                IPv6:
                  2001:678:8b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:ec:f8:94:1e:f9:ff:35:a0:1a:8b:04:53:ef:88:89:0c:
         64:b8:e3:45:69:89:94:b7:2e:75:53:2b:a8:7d:04:aa:42:77:
         59:95:74:17:58:e7:1d:f5:10:50:73:6d:87:67:10:b6:59:fa:
         cb:07:26:99:08:04:d6:d9:77:fd:25:bd:75:be:d5:e2:f5:5f:
         91:ef:5c:c5:37:d8:38:14:04:83:21:dd:12:9c:4d:15:ce:70:
         63:63:95:7f:df:b1:10:1d:e7:4d:be:11:3f:d7:85:e4:21:1e:
         16:c8:d3:4b:b6:66:b5:09:3a:31:cb:d5:94:2d:21:f3:02:d5:
         88:d5:79:9d:49:4b:2e:b9:d3:01:c5:cf:a7:92:02:cc:70:7a:
         3a:1b:a1:86:42:01:d3:e7:fb:1f:6e:34:90:82:95:be:a8:86:
         31:0a:38:41:72:13:5c:5a:16:75:36:bd:a5:97:b4:dd:b0:a2:
         cd:7b:e8:4c:9e:f4:ba:45:c2:e5:4b:64:3e:43:4e:a8:92:18:
         8f:9f:48:97:60:3e:42:87:fb:25:92:cb:41:e5:b8:e3:f7:b1:
         c7:3c:b6:8e:e6:b4:8c:18:49:45:2b:26:1f:5b:cf:e7:f4:3f:
         de:0b:8f:5b:5a:3f:34:1f:25:db:54:de:fb:38:2b:1d:76:89:
         39:94:41:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:50 2024 by rpki-client on console-ams.rpki-client.org