Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Hjoso_IInweq8p_pjzarngXYcyg.roa
File:                     Hjoso_IInweq8p_pjzarngXYcyg.roa (raw, json)
Hash identifier:          UuT9HXVWkzw5Z2i2Av2+1wJwmsYlPmhEF9TAiBetTFU=
Subject key identifier:   1E:3A:2C:A3:F2:08:9F:07:AA:F2:9F:E9:8F:36:AB:9E:05:D8:73:28
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       018945A8B49BE2B0F2264693A2A68CB0AB7F
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Hjoso_IInweq8p_pjzarngXYcyg.roa
Signing time:             Tue 11 Jul 2023 15:53:51 +0000
ROA not before:           Tue 11 Jul 2023 15:53:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        5.157.192.0/22 maxlen: 22
                          5.157.196.0/22 maxlen: 22
                          5.157.200.0/21 maxlen: 21
                          5.157.208.0/21 maxlen: 21
                          5.157.216.0/22 maxlen: 24
                          5.157.220.0/22 maxlen: 24
                          178.157.120.0/22 maxlen: 22
                          5.157.132.0/22 maxlen: 22
                          5.157.152.0/21 maxlen: 21
                          5.157.168.0/22 maxlen: 24
                          5.157.172.0/22 maxlen: 24
                          5.157.232.0/21 maxlen: 21
                          5.157.228.0/22 maxlen: 22
                          5.157.248.0/21 maxlen: 21
                          188.119.168.0/21 maxlen: 21
                          188.119.184.0/22 maxlen: 22
                          188.119.182.0/23 maxlen: 23
                          188.119.180.0/24 maxlen: 24
                          188.119.188.0/22 maxlen: 24
                          178.157.68.0/22 maxlen: 22
                          178.157.94.0/24 maxlen: 24
                          178.157.100.0/24 maxlen: 24
                          178.157.101.0/24 maxlen: 24
                          178.157.112.0/21 maxlen: 21
                          185.76.61.0/24 maxlen: 24
                          185.76.63.0/24 maxlen: 24
                          188.74.248.0/21 maxlen: 21
                          37.35.48.0/22 maxlen: 22
                          37.35.52.0/24 maxlen: 24
                          188.119.128.0/20 maxlen: 24
                          188.74.192.0/21 maxlen: 21
                          188.74.200.0/21 maxlen: 21
                          62.216.72.0/24 maxlen: 24
                          62.216.73.0/24 maxlen: 24
                          62.216.74.0/24 maxlen: 24
                          62.216.75.0/24 maxlen: 24
                          62.216.72.0/22 maxlen: 22
                          62.216.80.0/24 maxlen: 24
                          62.216.81.0/24 maxlen: 24
                          62.216.82.0/24 maxlen: 24
                          62.216.83.0/24 maxlen: 24
                          188.74.216.0/21 maxlen: 21
                          62.216.80.0/22 maxlen: 22
                          188.74.224.0/21 maxlen: 21
                          188.74.232.0/21 maxlen: 21
                          62.216.92.0/24 maxlen: 24
                          62.216.93.0/24 maxlen: 24
                          62.216.94.0/24 maxlen: 24
                          62.216.95.0/24 maxlen: 24
                          188.74.144.0/22 maxlen: 22
                          188.74.148.0/22 maxlen: 22
                          188.74.160.0/21 maxlen: 21
                          188.74.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 28 Aug 2023 15:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:45:a8:b4:9b:e2:b0:f2:26:46:93:a2:a6:8c:b0:ab:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Jul 11 15:53:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e3a2ca3f2089f07aaf29fe98f36ab9e05d87328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:52:09:81:c0:cb:79:18:fe:e1:e6:f1:08:
                    b4:8d:ae:64:81:4d:a3:d4:44:f0:0b:f4:10:62:4b:
                    05:8c:f5:51:67:ad:7c:9c:77:7b:df:c1:08:39:e5:
                    15:48:58:ef:26:ae:52:7b:2b:aa:82:2b:22:3e:b3:
                    91:ca:dc:1a:5b:41:9f:05:be:30:52:4d:04:15:1b:
                    1c:77:16:24:3e:dc:cd:b2:b4:24:72:9f:00:1b:fc:
                    79:77:3b:f8:c1:09:91:b2:b5:5a:68:26:53:0a:f6:
                    19:fb:63:bc:8c:fa:4a:8e:81:91:6f:10:b5:bf:6c:
                    88:a7:aa:43:51:bc:e6:74:7b:22:7e:d0:59:39:e7:
                    0d:c7:cc:b0:29:39:3e:2d:51:72:8d:51:f2:85:ed:
                    0b:d7:ee:c9:fe:72:fe:41:2d:6a:40:7d:9b:2c:e5:
                    3f:41:6d:e3:47:15:fa:3e:9f:c2:ed:8b:2b:36:fb:
                    31:17:92:76:77:23:a5:88:18:91:60:e3:42:28:17:
                    e8:35:5c:a9:00:2e:bc:c3:9a:81:34:a4:3b:9c:6d:
                    6d:15:a4:38:21:8a:e1:f2:8a:0a:90:22:90:24:15:
                    1b:9f:e4:fc:de:99:cb:d6:a2:56:1a:2e:08:2f:00:
                    ac:d3:33:6d:1e:bf:30:f3:a9:05:38:85:6b:0a:c4:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:2C:A3:F2:08:9F:07:AA:F2:9F:E9:8F:36:AB:9E:05:D8:73:28
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Hjoso_IInweq8p_pjzarngXYcyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.157.132.0/22
                  5.157.152.0/21
                  5.157.168.0/21
                  5.157.192.0/19
                  5.157.228.0-5.157.239.255
                  5.157.248.0/21
                  37.35.48.0-37.35.52.255
                  62.216.72.0/22
                  62.216.80.0/22
                  62.216.92.0/22
                  178.157.68.0/22
                  178.157.94.0/24
                  178.157.100.0/23
                  178.157.112.0-178.157.123.255
                  185.76.61.0/24
                  185.76.63.0/24
                  188.74.144.0/21
                  188.74.160.0/21
                  188.74.184.0/22
                  188.74.192.0/20
                  188.74.216.0-188.74.239.255
                  188.74.248.0/21
                  188.119.128.0/20
                  188.119.168.0/21
                  188.119.180.0/24
                  188.119.182.0-188.119.191.255

    Signature Algorithm: sha256WithRSAEncryption
         a3:75:a4:1f:9d:bf:df:f7:d4:8a:a0:80:bd:89:9c:44:b3:fc:
         24:85:32:0e:56:dc:d4:20:bd:1d:2a:fd:cd:4a:98:0c:db:fa:
         00:bd:01:81:86:ee:50:0a:7e:97:b9:c6:5b:8b:1d:78:3f:eb:
         70:b2:ad:3f:61:cc:50:98:37:be:c6:6c:e7:05:dc:cd:6e:f6:
         e9:72:17:5f:7f:5b:11:d0:95:45:e5:45:95:a9:08:8f:5f:b6:
         f0:f1:01:45:97:4c:6a:2a:eb:ea:09:94:8b:0b:cf:f0:df:f8:
         57:32:a9:48:6c:61:18:07:9c:80:1f:ed:bd:b2:e6:d6:64:12:
         ce:67:fe:d3:84:4f:07:16:20:69:f2:71:e4:21:d1:49:7d:b9:
         38:c8:42:3f:b6:a4:4d:05:74:d6:04:b3:ea:f3:5f:9f:49:c1:
         f2:2c:09:bc:a1:f8:95:5a:9c:fc:f6:a4:84:84:de:91:0c:58:
         4c:7d:f4:74:b4:5f:6d:0b:65:82:66:cf:f8:1a:12:a9:11:0f:
         14:28:35:53:c5:9a:35:6f:54:ed:09:72:b6:46:94:e8:69:c7:
         3c:a8:9c:5c:93:9e:8e:42:90:fa:fc:6f:58:79:e4:c3:5a:9e:
         56:24:80:9a:8f:2a:f0:54:16:13:d4:a1:52:1b:4d:8a:07:3d:
         c7:fc:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org