Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZyuYehvr3aeBtuptBq3Mc9UlkuM.roa
File:                     ZyuYehvr3aeBtuptBq3Mc9UlkuM.roa (raw, json)
Hash identifier:          upvqExk9DHoIUUr83MAWnIw0AHL9ip8xW4Yvwc0JNG4=
Subject key identifier:   67:2B:98:7A:1B:EB:DD:A7:81:B6:EA:6D:06:AD:CC:73:D5:25:92:E3
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       01894E97B1C1BD7A6227715896A0EFED8FBE
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZyuYehvr3aeBtuptBq3Mc9UlkuM.roa
Signing time:             Thu 13 Jul 2023 09:31:51 +0000
ROA not before:           Thu 13 Jul 2023 09:31:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8926
IP address blocks:        93.113.244.0/22 maxlen: 22
                          86.107.64.0/22 maxlen: 22
                          89.46.164.0/22 maxlen: 22
                          188.208.96.0/22 maxlen: 22
                          188.208.104.0/22 maxlen: 22
                          188.214.200.0/21 maxlen: 21
                          89.32.252.0/22 maxlen: 22
                          188.214.228.0/22 maxlen: 24
                          86.107.160.0/21 maxlen: 21
                          188.208.192.0/22 maxlen: 22
                          188.208.204.0/22 maxlen: 22
                          92.114.128.0/18 maxlen: 18
                          92.114.128.0/17 maxlen: 24
                          188.208.112.0/22 maxlen: 22
                          188.208.120.0/21 maxlen: 24
                          89.32.56.0/21 maxlen: 21
                          93.119.200.0/21 maxlen: 21
                          93.119.232.0/21 maxlen: 21
                          93.119.228.0/22 maxlen: 22
                          188.214.60.0/22 maxlen: 22
                          93.113.64.0/21 maxlen: 21
                          188.213.236.0/22 maxlen: 22
                          93.119.160.0/21 maxlen: 21
                          188.213.244.0/22 maxlen: 22
                          93.119.196.0/22 maxlen: 22
                          89.39.96.0/21 maxlen: 21
                          188.214.136.0/22 maxlen: 22
                          89.32.172.0/22 maxlen: 22
                          188.214.147.0/24 maxlen: 24
                          86.106.213.0/24 maxlen: 24
                          89.39.112.0/21 maxlen: 21
                          86.106.208.0/20 maxlen: 20
                          86.106.224.0/19 maxlen: 19
                          86.106.144.0/21 maxlen: 21
                          93.113.80.0/21 maxlen: 21
                          89.32.136.0/21 maxlen: 21
                          93.113.92.0/22 maxlen: 22
                          89.39.76.0/22 maxlen: 22
                          89.39.84.0/22 maxlen: 22
                          178.132.112.0/20 maxlen: 20
                          89.38.32.0/22 maxlen: 22
                          178.132.128.0/18 maxlen: 19
                          89.38.64.0/22 maxlen: 22
                          89.38.76.0/22 maxlen: 22
                          86.105.172.0/22 maxlen: 22
                          93.118.188.0/22 maxlen: 22
                          86.105.80.0/21 maxlen: 21
                          188.213.36.0/22 maxlen: 22
                          188.213.52.0/22 maxlen: 22
                          93.119.96.0/21 maxlen: 21
                          93.119.108.0/22 maxlen: 22
                          93.119.128.0/21 maxlen: 21
                          93.119.140.0/22 maxlen: 22
                          188.213.220.0/22 maxlen: 22
                          93.119.144.0/21 maxlen: 21
                          89.45.40.0/22 maxlen: 22
                          86.105.208.0/22 maxlen: 22
                          109.185.128.0/18 maxlen: 24
                          89.37.104.0/24 maxlen: 24
                          86.104.196.0/22 maxlen: 22
                          109.185.64.0/18 maxlen: 18
                          89.37.44.0/22 maxlen: 22
                          89.44.152.0/22 maxlen: 22
                          86.105.56.0/21 maxlen: 21
                          93.118.176.0/22 maxlen: 22
                          109.185.192.0/18 maxlen: 18
                          93.117.68.0/22 maxlen: 22
                          93.117.72.0/21 maxlen: 21
                          89.36.156.0/22 maxlen: 22
                          85.204.176.0/21 maxlen: 21
                          93.117.48.0/20 maxlen: 20
                          188.212.0.0/22 maxlen: 22
                          188.212.8.0/21 maxlen: 21
                          188.212.24.0/21 maxlen: 21
                          89.43.168.0/22 maxlen: 22
                          188.212.40.0/21 maxlen: 21
                          93.117.128.0/21 maxlen: 21
                          93.117.144.0/21 maxlen: 21
                          93.117.140.0/22 maxlen: 22
                          89.43.128.0/22 maxlen: 22
                          93.117.156.0/22 maxlen: 22
                          109.185.0.0/18 maxlen: 18
                          93.117.160.0/21 maxlen: 21
                          109.185.0.0/16 maxlen: 24
                          93.117.168.0/22 maxlen: 22
                          93.116.128.0/18 maxlen: 18
                          89.42.104.0/22 maxlen: 22
                          188.237.192.0/18 maxlen: 18
                          89.42.128.0/22 maxlen: 22
                          188.237.128.0/18 maxlen: 18
                          93.116.64.0/18 maxlen: 18
                          89.42.64.0/22 maxlen: 22
                          188.237.168.0/24 maxlen: 24
                          89.42.72.0/21 maxlen: 21
                          5.56.64.0/24 maxlen: 24
                          5.56.64.0/18 maxlen: 19
                          5.56.73.0/24 maxlen: 24
                          5.56.72.0/24 maxlen: 24
                          89.42.224.0/22 maxlen: 22
                          188.210.240.0/21 maxlen: 21
                          89.35.200.0/22 maxlen: 22
                          188.210.248.0/22 maxlen: 22
                          93.116.192.0/18 maxlen: 24
                          89.42.180.0/22 maxlen: 22
                          89.34.192.0/21 maxlen: 21
                          94.176.64.0/20 maxlen: 20
                          89.34.204.0/22 maxlen: 22
                          46.55.0.0/18 maxlen: 18
                          46.55.0.0/17 maxlen: 24
                          37.75.64.0/18 maxlen: 19
                          89.34.232.0/22 maxlen: 22
                          188.237.0.0/18 maxlen: 18
                          92.115.192.0/18 maxlen: 18
                          188.237.0.0/16 maxlen: 24
                          212.0.215.0/24 maxlen: 24
                          89.41.64.0/18 maxlen: 20
                          212.0.219.0/24 maxlen: 24
                          37.75.16.0/20 maxlen: 20
                          92.115.128.0/18 maxlen: 18
                          188.209.216.0/21 maxlen: 21
                          93.115.136.0/21 maxlen: 21
                          188.237.64.0/18 maxlen: 18
                          93.116.0.0/18 maxlen: 18
                          89.35.40.0/21 maxlen: 21
                          93.116.0.0/16 maxlen: 24
                          46.55.111.0/24 maxlen: 24
                          89.35.84.0/22 maxlen: 22
                          188.237.24.0/22 maxlen: 24
                          89.35.8.0/21 maxlen: 21
                          46.55.64.0/18 maxlen: 18
                          185.28.104.0/22 maxlen: 24
                          92.114.192.0/20 maxlen: 20
                          92.114.192.0/18 maxlen: 18
                          188.215.236.0/22 maxlen: 22
                          188.215.252.0/22 maxlen: 22
                          92.114.144.0/20 maxlen: 20
                          92.114.160.0/20 maxlen: 20
                          92.114.176.0/20 maxlen: 20
                          92.115.64.0/18 maxlen: 18
                          212.0.192.0/22 maxlen: 22
                          212.0.192.0/19 maxlen: 32
                          212.0.199.0/24 maxlen: 24
                          212.0.195.0/24 maxlen: 24
                          212.0.193.0/24 maxlen: 24
                          89.34.112.0/21 maxlen: 21
                          212.0.198.0/24 maxlen: 24
                          212.0.196.0/24 maxlen: 24
                          212.0.200.0/21 maxlen: 24
                          212.0.203.0/24 maxlen: 24
                          212.0.208.0/20 maxlen: 24
                          212.0.210.0/24 maxlen: 24
                          92.115.0.0/18 maxlen: 18
                          89.40.228.0/22 maxlen: 22
                          92.115.0.0/16 maxlen: 24
                          89.34.64.0/21 maxlen: 21
                          2a02:a30:1600::/48 maxlen: 48
                          2a02:a30:172::/48 maxlen: 48
                          2a02:a30:6330:103::/64 maxlen: 64
                          2a02:a30:f090::/44 maxlen: 48
                          2a02:a30::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 07 Sep 2023 06:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4e:97:b1:c1:bd:7a:62:27:71:58:96:a0:ef:ed:8f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Jul 13 09:31:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=672b987a1bebdda781b6ea6d06adcc73d52592e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:15:96:c1:52:40:24:6b:67:77:94:88:a0:
                    c5:64:a2:69:ee:7a:2e:57:fa:fa:35:0d:93:3b:ca:
                    af:09:19:95:d1:7f:37:d9:ee:46:85:c8:56:9a:bc:
                    57:a7:ac:e8:f6:08:cb:bf:07:56:ee:ad:48:c8:0c:
                    5d:68:d7:99:c5:c8:f9:ad:ba:3f:07:97:ed:92:0f:
                    02:1b:1b:72:6b:7a:1a:41:83:fc:33:0e:99:4e:ff:
                    5f:f2:b3:68:80:a2:27:1c:f4:89:01:85:16:68:4d:
                    1d:e7:d7:37:51:54:04:f8:94:10:1e:d2:bf:9b:22:
                    7a:0a:cc:32:e4:ee:1e:c1:b1:5a:92:91:3d:3f:99:
                    c8:00:6f:06:19:54:0f:e4:50:07:41:44:12:ad:24:
                    0b:b1:6f:f7:0e:cb:b3:1b:8d:16:9b:9d:8d:1b:9a:
                    ad:4a:e9:f9:2e:80:7b:5c:b8:e6:e5:95:ac:fa:ff:
                    5f:df:f8:bb:c2:59:f4:32:48:cf:0a:aa:8c:8e:70:
                    c6:be:01:3d:08:9e:d4:5e:8a:03:38:28:02:ff:4b:
                    93:3c:59:c1:b1:f6:7e:be:3b:5b:6e:8f:84:55:92:
                    90:7d:f6:b9:df:60:4d:f1:68:f6:88:a6:ac:4b:0b:
                    a4:1b:73:6f:50:a5:c2:71:f3:0d:db:1f:4f:4c:d7:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2B:98:7A:1B:EB:DD:A7:81:B6:EA:6D:06:AD:CC:73:D5:25:92:E3
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZyuYehvr3aeBtuptBq3Mc9UlkuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.64.0/18
                  37.75.16.0/20
                  37.75.64.0/18
                  46.55.0.0/17
                  85.204.176.0/21
                  86.104.196.0/22
                  86.105.56.0/21
                  86.105.80.0/21
                  86.105.172.0/22
                  86.105.208.0/22
                  86.106.144.0/21
                  86.106.208.0-86.106.255.255
                  86.107.64.0/22
                  86.107.160.0/21
                  89.32.56.0/21
                  89.32.136.0/21
                  89.32.172.0/22
                  89.32.252.0/22
                  89.34.64.0/21
                  89.34.112.0/21
                  89.34.192.0/21
                  89.34.204.0/22
                  89.34.232.0/22
                  89.35.8.0/21
                  89.35.40.0/21
                  89.35.84.0/22
                  89.35.200.0/22
                  89.36.156.0/22
                  89.37.44.0/22
                  89.37.104.0/24
                  89.38.32.0/22
                  89.38.64.0/22
                  89.38.76.0/22
                  89.39.76.0/22
                  89.39.84.0/22
                  89.39.96.0/21
                  89.39.112.0/21
                  89.40.228.0/22
                  89.41.64.0/18
                  89.42.64.0/22
                  89.42.72.0/21
                  89.42.104.0/22
                  89.42.128.0/22
                  89.42.180.0/22
                  89.42.224.0/22
                  89.43.128.0/22
                  89.43.168.0/22
                  89.44.152.0/22
                  89.45.40.0/22
                  89.46.164.0/22
                  92.114.128.0-92.115.255.255
                  93.113.64.0/21
                  93.113.80.0/21
                  93.113.92.0/22
                  93.113.244.0/22
                  93.115.136.0/21
                  93.116.0.0/16
                  93.117.48.0/20
                  93.117.68.0-93.117.79.255
                  93.117.128.0/21
                  93.117.140.0-93.117.151.255
                  93.117.156.0-93.117.171.255
                  93.118.176.0/22
                  93.118.188.0/22
                  93.119.96.0/21
                  93.119.108.0/22
                  93.119.128.0/21
                  93.119.140.0-93.119.151.255
                  93.119.160.0/21
                  93.119.196.0-93.119.207.255
                  93.119.228.0-93.119.239.255
                  94.176.64.0/20
                  109.185.0.0/16
                  178.132.112.0-178.132.191.255
                  185.28.104.0/22
                  188.208.96.0/22
                  188.208.104.0/22
                  188.208.112.0/22
                  188.208.120.0/21
                  188.208.192.0/22
                  188.208.204.0/22
                  188.209.216.0/21
                  188.210.240.0-188.210.251.255
                  188.212.0.0/22
                  188.212.8.0/21
                  188.212.24.0/21
                  188.212.40.0/21
                  188.213.36.0/22
                  188.213.52.0/22
                  188.213.220.0/22
                  188.213.236.0/22
                  188.213.244.0/22
                  188.214.60.0/22
                  188.214.136.0/22
                  188.214.147.0/24
                  188.214.200.0/21
                  188.214.228.0/22
                  188.215.236.0/22
                  188.215.252.0/22
                  188.237.0.0/16
                  212.0.192.0/19
                IPv6:
                  2a02:a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:15:48:9d:fc:ed:31:b4:8e:ed:07:cb:9e:62:bd:d4:a0:54:
         7d:67:11:23:bf:23:94:7b:88:27:2b:dc:c5:59:c4:8e:ad:a9:
         e8:f7:a7:4a:99:80:48:5b:2d:cd:36:69:dd:a7:9c:e5:b1:a8:
         e9:94:a1:2d:02:ec:8f:f4:c6:3a:9e:83:e1:6e:f9:93:ed:de:
         db:a2:ca:fe:19:87:fa:aa:8f:a5:0e:9a:40:10:e1:5a:b6:55:
         21:2f:41:d8:13:04:20:f6:ce:bb:42:92:a1:89:c8:aa:44:66:
         cf:b6:7a:21:d2:0c:22:37:d7:1a:bb:80:4f:b9:5f:ba:11:08:
         90:82:ab:95:5c:2d:92:f1:d1:ab:fe:64:33:dc:86:2e:b9:d5:
         fa:9d:b2:4f:7c:4c:8c:f5:e2:88:3f:76:cf:67:fb:9d:f6:c3:
         81:56:11:54:b4:28:44:51:21:20:53:ad:59:cf:f4:43:93:52:
         43:b3:f5:49:05:10:d1:2c:63:17:0e:b4:0f:86:04:cf:ea:ca:
         2a:ec:b6:ce:41:61:f8:c8:58:64:48:32:d0:ce:7d:67:f4:87:
         eb:9a:93:d8:a5:37:d3:7f:c2:ab:e9:d4:e2:ae:c0:bc:79:99:
         29:f9:6c:14:ba:3a:2b:32:10:ac:59:9c:4d:4b:c9:ef:04:1d:
         bd:3f:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:01 2024 by rpki-client on console-ams.rpki-client.org