Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mSBEr6f-lZz_QkIchZlAWMHiYKg.roa
File:                     mSBEr6f-lZz_QkIchZlAWMHiYKg.roa (raw, json)
Hash identifier:          G4oBsGiYQiJFD5v+Hg0HZzuoj+gZdm7BC37a40Xs8RI=
Subject key identifier:   99:20:44:AF:A7:FE:95:9C:FF:42:42:1C:85:99:40:58:C1:E2:60:A8
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018A0D037632555E2933241DD5F0AC39F003
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mSBEr6f-lZz_QkIchZlAWMHiYKg.roa
Signing time:             Sat 19 Aug 2023 08:57:25 +0000
ROA not before:           Sat 19 Aug 2023 08:57:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.168.41.0/24 maxlen: 24
                          82.153.137.0/24 maxlen: 24
                          82.153.139.0/24 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          82.153.140.0/24 maxlen: 24
                          109.176.216.0/24 maxlen: 24
                          109.176.217.0/24 maxlen: 24
                          109.176.218.0/24 maxlen: 24
                          109.176.219.0/24 maxlen: 24
                          82.153.73.0/24 maxlen: 24
                          109.176.221.0/24 maxlen: 24
                          109.176.222.0/24 maxlen: 24
                          109.176.223.0/24 maxlen: 24
                          109.176.220.0/24 maxlen: 24
                          82.153.78.0/24 maxlen: 24
                          109.176.240.0/24 maxlen: 24
                          109.176.242.0/24 maxlen: 24
                          109.176.243.0/24 maxlen: 24
                          109.176.245.0/24 maxlen: 24
                          109.176.246.0/24 maxlen: 24
                          109.176.249.0/24 maxlen: 24
                          109.176.250.0/24 maxlen: 24
                          109.176.248.0/24 maxlen: 24
                          82.153.227.0/24 maxlen: 24
                          185.49.125.0/24 maxlen: 24
                          82.153.240.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          82.153.249.0/24 maxlen: 24
                          82.153.250.0/24 maxlen: 24
                          81.5.156.0/24 maxlen: 24
                          82.153.221.0/24 maxlen: 24
                          82.153.223.0/24 maxlen: 24
                          82.153.225.0/24 maxlen: 24
                          82.152.111.0/24 maxlen: 24
                          89.213.44.0/24 maxlen: 24
                          89.213.45.0/24 maxlen: 24
                          89.213.173.0/24 maxlen: 24
                          89.213.174.0/24 maxlen: 24
                          89.213.175.0/24 maxlen: 24
                          89.213.179.0/24 maxlen: 24
                          89.213.176.0/24 maxlen: 24
                          89.213.177.0/24 maxlen: 24
                          89.213.178.0/24 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          89.213.181.0/24 maxlen: 24
                          89.213.182.0/24 maxlen: 24
                          89.213.186.0/24 maxlen: 24
                          89.213.183.0/24 maxlen: 24
                          89.213.184.0/24 maxlen: 24
                          89.213.185.0/24 maxlen: 24
                          89.213.187.0/24 maxlen: 24
                          89.213.188.0/24 maxlen: 24
                          89.213.189.0/24 maxlen: 24
                          109.176.211.0/24 maxlen: 24
                          89.213.133.0/24 maxlen: 24
                          89.213.139.0/24 maxlen: 24
                          89.213.134.0/24 maxlen: 24
                          89.213.136.0/24 maxlen: 24
                          89.213.141.0/24 maxlen: 24
                          89.213.140.0/24 maxlen: 24
                          89.213.146.0/24 maxlen: 24
                          89.213.151.0/24 maxlen: 24
                          89.213.152.0/24 maxlen: 24
                          89.213.148.0/24 maxlen: 24
                          89.213.149.0/24 maxlen: 24
                          89.213.150.0/24 maxlen: 24
                          82.152.253.0/24 maxlen: 24
                          82.152.252.0/24 maxlen: 24
                          89.213.153.0/24 maxlen: 24
                          89.213.154.0/24 maxlen: 24
                          89.213.158.0/24 maxlen: 24
                          89.213.159.0/24 maxlen: 24
                          89.213.155.0/24 maxlen: 24
                          89.213.157.0/24 maxlen: 24
                          82.152.255.0/24 maxlen: 24
                          82.153.1.0/24 maxlen: 24
                          89.213.160.0/24 maxlen: 24
                          89.213.162.0/24 maxlen: 24
                          89.213.163.0/24 maxlen: 24
                          89.213.164.0/24 maxlen: 24
                          89.213.172.0/24 maxlen: 24
                          89.213.169.0/24 maxlen: 24
                          89.213.168.0/24 maxlen: 24
                          81.168.116.0/24 maxlen: 24
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          213.152.61.0/24 maxlen: 24
                          213.152.62.0/24 maxlen: 24
                          89.213.5.0/24 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Aug 2023 08:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:0d:03:76:32:55:5e:29:33:24:1d:d5:f0:ac:39:f0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Aug 19 08:57:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=992044afa7fe959cff42421c85994058c1e260a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:95:3a:9f:5f:2a:69:01:34:43:63:69:22:
                    3a:ce:fa:7a:ae:91:1f:ed:e1:96:71:f5:8e:03:a0:
                    0b:ed:d8:86:4c:57:d5:89:b2:8e:1a:0d:57:6f:da:
                    80:aa:72:1e:20:63:66:c0:ef:a6:52:e1:0d:7f:0a:
                    cf:db:4a:6b:55:98:ad:9b:0c:04:1e:6d:13:a0:c8:
                    16:0f:9e:2f:e2:f5:d7:6c:e3:b6:9c:21:fe:ed:ca:
                    48:9e:23:31:a0:d7:7c:d0:9c:b6:3f:90:9d:ff:61:
                    95:3f:97:11:94:a4:4c:5b:5a:3d:12:6c:fc:f1:96:
                    e1:49:1b:04:e1:37:02:c2:0a:5c:62:98:f0:85:8e:
                    da:e5:ea:51:11:c7:80:2b:d0:3b:97:5d:57:4c:67:
                    5d:5f:ad:9e:cc:93:5c:91:cd:49:2d:62:b9:30:2e:
                    60:7e:01:9f:31:f6:11:45:90:51:fc:2c:c1:d7:06:
                    d7:61:ba:83:e4:58:6b:a0:f2:47:68:45:2e:c7:7c:
                    88:13:74:9c:29:f0:3b:af:31:75:05:b5:6a:c2:50:
                    96:50:93:1c:09:b2:16:6b:42:d3:29:37:fa:e9:e4:
                    ee:a9:73:48:84:81:18:e6:35:d7:8e:bc:af:2b:97:
                    e0:00:88:cf:c4:3b:92:72:50:34:ae:0c:6e:bc:8c:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:20:44:AF:A7:FE:95:9C:FF:42:42:1C:85:99:40:58:C1:E2:60:A8
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mSBEr6f-lZz_QkIchZlAWMHiYKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.5.156.0/24
                  81.168.41.0/24
                  81.168.116.0/24
                  81.168.119.0/24
                  81.168.123.0/24
                  82.152.111.0/24
                  82.152.252.0/23
                  82.152.255.0/24
                  82.153.1.0/24
                  82.153.73.0/24
                  82.153.78.0/24
                  82.153.136.0-82.153.140.255
                  82.153.221.0/24
                  82.153.223.0/24
                  82.153.225.0/24
                  82.153.227.0/24
                  82.153.240.0/24
                  82.153.249.0-82.153.250.255
                  89.213.5.0/24
                  89.213.44.0/23
                  89.213.133.0-89.213.134.255
                  89.213.136.0/24
                  89.213.139.0-89.213.141.255
                  89.213.146.0/24
                  89.213.148.0-89.213.155.255
                  89.213.157.0-89.213.160.255
                  89.213.162.0-89.213.164.255
                  89.213.168.0/23
                  89.213.172.0-89.213.189.255
                  109.176.211.0/24
                  109.176.216.0/21
                  109.176.240.0/24
                  109.176.242.0/23
                  109.176.245.0-109.176.246.255
                  109.176.248.0-109.176.250.255
                  185.49.125.0-185.49.127.255
                  213.152.42.0/24
                  213.152.61.0-213.152.62.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:8d:f2:fb:6c:ea:4c:1f:c0:78:d1:a3:00:70:2c:ed:42:
         4a:22:46:c0:1e:fc:f7:7f:21:10:0f:47:10:8e:c3:e6:6f:0f:
         df:37:03:ca:f9:fa:26:4e:4f:c6:2e:0e:34:03:a7:13:4c:ae:
         6d:a7:77:17:43:4f:c4:ad:b2:69:28:a3:ea:f9:8e:63:1a:67:
         ff:42:ff:bc:2e:30:8c:d2:38:74:c5:34:85:7c:68:57:08:97:
         53:68:61:d0:10:93:2b:ac:c6:8b:d5:f3:84:e3:a8:d3:6a:b7:
         03:5c:7b:d8:d0:26:61:d8:03:eb:f7:b8:7b:27:d3:0c:dc:75:
         7d:e5:24:2d:11:c5:08:cd:53:ed:2c:c6:dc:aa:f2:2b:43:28:
         3e:44:70:e3:a1:10:e5:d9:2f:80:05:28:71:6d:29:59:5e:68:
         09:3a:6e:10:f2:30:c6:f8:e5:6f:b3:7b:c0:2e:88:ce:d0:bd:
         35:bb:aa:6f:ae:1c:a1:72:ba:a2:ed:43:cc:81:a2:4e:99:80:
         33:ef:ce:5e:4c:35:1b:95:fe:d9:f4:46:b7:e1:5a:a9:c5:2c:
         d0:c9:44:a1:38:aa:d9:dd:e4:14:cf:7d:2e:9d:bc:f8:73:a0:
         5a:bb:6d:05:d1:9f:c8:8f:49:27:62:13:d9:76:37:d8:61:8c:
         c5:0c:fc:fa
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAYoNA3YyVV4pMyQd1fCsOfADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODE5MDg1NzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTIwNDRhZmE3ZmU5NTljZmY0MjQyMWM4NTk5NDA1OGMxZTI2MGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4SVOp9fKmkBNENjaSI6zvp6rpEf
7eGWcfWOA6AL7diGTFfVibKOGg1Xb9qAqnIeIGNmwO+mUuENfwrP20prVZitmwwE
Hm0ToMgWD54v4vXXbOO2nCH+7cpIniMxoNd80Jy2P5Cd/2GVP5cRlKRMW1o9Emz8
8ZbhSRsE4TcCwgpcYpjwhY7a5epREceAK9A7l11XTGddX62ezJNckc1JLWK5MC5g
fgGfMfYRRZBR/CzB1wbXYbqD5FhroPJHaEUux3yIE3ScKfA7rzF1BbVqwlCWUJMc
CbIWa0LTKTf66eTuqXNIhIEY5jXXjryvK5fgAIjPxDuSclA0rgxuvIwAZQIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFJkgRK+n/pWc/0JCHIWZQFjB4mCoMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbVNCRXI2Zi1sWnpfUWtJY2habEFXTUhpWUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgABMIIB
RAMEAFEFnAMEAFGoKQMEAFGodAMEAFGodwMEAFGoewMEAFKYbwMEAVKY/AMEAFKY
/wMEAFKZAQMEAFKZSQMEAFKZTjAMAwQDUpmIAwQAUpmMAwQAUpndAwQAUpnfAwQA
UpnhAwQAUpnjAwQAUpnwMAwDBABSmfkDBABSmfoDBABZ1QUDBAFZ1SwwDAMEAFnV
hQMEAFnVhgMEAFnViDAMAwQAWdWLAwQBWdWMAwQAWdWSMAwDBAJZ1ZQDBAJZ1Zgw
DAMEAFnVnQMEAFnVoDAMAwQBWdWiAwQAWdWkAwQBWdWoMAwDBAJZ1awDBAFZ1bwD
BABtsNMDBANtsNgDBABtsPADBAFtsPIwDAMEAG2w9QMEAG2w9jAMAwQDbbD4AwQA
bbD6MAwDBAC5MX0DBAe5MQADBADVmCowDAMEANWYPQMEANWYPjANBgkqhkiG9w0B
AQsFAAOCAQEASz+N8vts6kwfwHjRowBwLO1CSiJGwB78938hEA9HEI7D5m8P3zcD
yvn6Jk5Pxi4ONAOnE0yubad3F0NPxK2yaSij6vmOYxpn/0L/vC4wjNI4dMU0hXxo
VwiXU2hh0BCTK6zGi9XzhOOo02q3A1x72NAmYdgD6/e4eyfTDNx1feUkLRHFCM1T
7SzG3KryK0MoPkRw46EQ5dkvgAUocW0pWV5oCTpuEPIwxvjlb7N7wC6IztC9Nbuq
b64coXK6ou1DzIGiTpmAM+/OXkw1G5X+2fRGt+FaqcUs0MlEoTiq2d3kFM99Lp28
+HOgWrttBdGfyI9JJ2IT2XY32GGMxQz8+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org