Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/YHjZLE-16czwyfQYHXaxpuLNn-Y.roa
File:                     YHjZLE-16czwyfQYHXaxpuLNn-Y.roa (raw, json)
Hash identifier:          7aXmU5h5lXVZhcbT14sBiTn5JHmkFI3qZz7C801TlE0=
Subject key identifier:   60:78:D9:2C:4F:B5:E9:CC:F0:C9:F4:18:1D:76:B1:A6:E2:CD:9F:E6
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       018A8C74A92B5001DEFA2057F75D583D1CA4
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/YHjZLE-16czwyfQYHXaxpuLNn-Y.roa
Signing time:             Wed 13 Sep 2023 02:52:50 +0000
ROA not before:           Wed 13 Sep 2023 02:52:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42910
IP address blocks:        188.132.135.0/24 maxlen: 32
                          188.132.134.0/24 maxlen: 24
                          188.132.142.0/24 maxlen: 24
                          188.132.147.0/24 maxlen: 32
                          188.132.148.0/24 maxlen: 24
                          188.132.153.0/24 maxlen: 24
                          188.132.158.0/24 maxlen: 32
                          188.132.157.0/24 maxlen: 24
                          188.132.216.0/24 maxlen: 24
                          188.132.215.0/24 maxlen: 24
                          188.132.214.0/24 maxlen: 24
                          188.132.219.0/24 maxlen: 32
                          188.132.217.0/24 maxlen: 32
                          188.132.218.0/24 maxlen: 24
                          188.132.224.0/24 maxlen: 24
                          188.132.226.0/24 maxlen: 32
                          188.132.225.0/24 maxlen: 24
                          188.132.223.0/24 maxlen: 32
                          188.132.220.0/24 maxlen: 24
                          188.132.227.0/24 maxlen: 32
                          188.132.231.0/24 maxlen: 24
                          188.132.229.0/24 maxlen: 32
                          188.132.228.0/24 maxlen: 32
                          188.132.233.0/24 maxlen: 24
                          188.132.232.0/24 maxlen: 24
                          188.132.230.0/24 maxlen: 32
                          77.92.130.0/24 maxlen: 24
                          77.92.129.0/24 maxlen: 24
                          77.92.128.0/24 maxlen: 24
                          188.132.235.0/24 maxlen: 24
                          77.92.132.0/24 maxlen: 24
                          188.132.239.0/24 maxlen: 24
                          77.92.131.0/24 maxlen: 24
                          188.132.234.0/24 maxlen: 32
                          77.92.133.0/24 maxlen: 32
                          188.132.241.0/24 maxlen: 24
                          77.92.137.0/24 maxlen: 24
                          77.92.136.0/24 maxlen: 24
                          188.132.243.0/24 maxlen: 24
                          188.132.244.0/24 maxlen: 32
                          77.92.135.0/24 maxlen: 24
                          77.92.134.0/24 maxlen: 24
                          77.92.139.0/24 maxlen: 24
                          77.92.138.0/24 maxlen: 24
                          188.132.246.0/24 maxlen: 24
                          188.132.245.0/24 maxlen: 24
                          188.132.250.0/24 maxlen: 24
                          188.132.251.0/24 maxlen: 24
                          77.92.143.0/24 maxlen: 24
                          77.92.142.0/24 maxlen: 24
                          77.92.141.0/24 maxlen: 24
                          188.132.253.0/24 maxlen: 24
                          77.92.144.0/24 maxlen: 32
                          188.132.252.0/24 maxlen: 24
                          77.92.140.0/24 maxlen: 32
                          77.92.149.0/24 maxlen: 24
                          77.92.148.0/24 maxlen: 24
                          188.132.255.0/24 maxlen: 24
                          188.132.254.0/24 maxlen: 24
                          77.92.146.0/24 maxlen: 24
                          77.92.158.0/24 maxlen: 24
                          77.92.156.0/24 maxlen: 24
                          77.92.155.0/24 maxlen: 32
                          77.92.159.0/24 maxlen: 24
                          77.92.157.0/24 maxlen: 32
                          188.132.172.0/24 maxlen: 24
                          188.132.175.0/24 maxlen: 24
                          188.132.176.0/24 maxlen: 32
                          188.132.177.0/24 maxlen: 24
                          188.132.183.0/24 maxlen: 32
                          188.132.180.0/24 maxlen: 24
                          188.132.190.0/24 maxlen: 24
                          188.132.195.0/24 maxlen: 24
                          188.132.194.0/24 maxlen: 24
                          188.132.204.0/24 maxlen: 32
                          188.132.200.0/24 maxlen: 24
                          188.132.205.0/24 maxlen: 32
                          188.132.206.0/24 maxlen: 24
                          188.132.211.0/24 maxlen: 32
                          188.132.207.0/24 maxlen: 24
                          188.132.208.0/24 maxlen: 32
                          188.132.213.0/24 maxlen: 24
                          188.132.212.0/24 maxlen: 24
                          212.68.57.0/24 maxlen: 32
                          212.68.56.0/24 maxlen: 32
                          212.68.61.0/24 maxlen: 32
                          31.210.33.0/24 maxlen: 24
                          31.210.32.0/24 maxlen: 24
                          31.210.36.0/24 maxlen: 24
                          31.210.35.0/24 maxlen: 24
                          31.210.44.0/24 maxlen: 24
                          31.210.40.0/24 maxlen: 32
                          31.210.41.0/24 maxlen: 24
                          31.210.46.0/24 maxlen: 24
                          31.210.47.0/24 maxlen: 24
                          31.210.51.0/24 maxlen: 32
                          31.210.50.0/24 maxlen: 32
                          31.210.45.0/24 maxlen: 32
                          31.210.49.0/24 maxlen: 24
                          31.210.48.0/24 maxlen: 24
                          31.210.58.0/24 maxlen: 24
                          31.210.57.0/24 maxlen: 24
                          31.210.56.0/24 maxlen: 24
                          31.210.60.0/24 maxlen: 24
                          31.210.59.0/24 maxlen: 24
                          31.210.61.0/24 maxlen: 32
                          78.135.98.0/24 maxlen: 24
                          78.135.103.0/24 maxlen: 24
                          78.135.99.0/24 maxlen: 32
                          78.135.108.0/24 maxlen: 32
                          78.135.113.0/24 maxlen: 32
                          78.135.116.0/24 maxlen: 24
                          78.135.115.0/24 maxlen: 24
                          78.135.114.0/24 maxlen: 32
                          212.68.32.0/24 maxlen: 32
                          212.68.37.0/24 maxlen: 32
                          212.68.33.0/24 maxlen: 32
                          212.68.38.0/24 maxlen: 24
                          212.68.36.0/24 maxlen: 32
                          212.68.41.0/24 maxlen: 32
                          212.68.40.0/24 maxlen: 32
                          212.68.43.0/24 maxlen: 32
                          212.68.44.0/24 maxlen: 24
                          212.68.42.0/24 maxlen: 32
                          212.68.39.0/24 maxlen: 24
                          212.68.45.0/24 maxlen: 32
                          212.68.46.0/24 maxlen: 32
                          212.68.49.0/24 maxlen: 24
                          212.68.50.0/24 maxlen: 32
                          212.68.51.0/24 maxlen: 24
                          78.135.79.0/24 maxlen: 24
                          2a02:26b0:8001::/48 maxlen: 48
                          2a02:26b0::/32 maxlen: 32
                          2a02:26b0:8000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8c:74:a9:2b:50:01:de:fa:20:57:f7:5d:58:3d:1c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Sep 13 02:52:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6078d92c4fb5e9ccf0c9f4181d76b1a6e2cd9fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:47:c1:85:ae:80:6d:ea:ec:f5:cd:4d:53:
                    aa:f8:0b:14:c5:70:75:bf:0d:f6:ec:73:af:39:a5:
                    b6:7a:c4:96:ea:a9:24:c6:d8:5c:b0:61:af:d4:a5:
                    37:c8:3d:d6:fa:73:a2:06:91:29:13:2d:05:ea:c1:
                    bb:be:32:36:58:23:8f:f8:ef:80:df:1a:b3:ea:09:
                    05:48:8e:f2:fc:ca:76:84:13:5f:cd:f8:ec:25:bb:
                    4c:d5:20:a8:ec:44:ff:59:fd:30:94:cf:24:6f:67:
                    26:bd:82:de:f2:71:af:9d:2a:bc:97:ff:a3:35:22:
                    ae:06:f4:cb:df:9f:24:8a:12:33:87:c2:bc:8f:81:
                    02:ad:b6:11:78:cb:ac:a4:38:33:73:75:b1:12:38:
                    9b:29:c5:fa:9c:bd:98:c3:e6:59:a7:92:b3:10:77:
                    df:81:10:79:c7:cb:fa:26:8c:28:f2:be:c3:33:00:
                    c4:cb:16:15:98:48:62:49:37:0a:68:d4:87:6f:45:
                    4f:aa:e7:ee:34:6d:f8:05:94:c0:0a:40:71:d4:64:
                    82:10:c2:28:d2:2e:f1:bc:94:5c:c1:9f:2a:a1:f0:
                    7f:d0:12:5b:fa:ad:fa:96:88:39:bd:84:43:f5:42:
                    10:07:b3:cc:cd:93:58:48:06:cd:cf:49:b8:53:58:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:78:D9:2C:4F:B5:E9:CC:F0:C9:F4:18:1D:76:B1:A6:E2:CD:9F:E6
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/YHjZLE-16czwyfQYHXaxpuLNn-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.32.0/23
                  31.210.35.0-31.210.36.255
                  31.210.40.0/23
                  31.210.44.0-31.210.51.255
                  31.210.56.0-31.210.61.255
                  77.92.128.0-77.92.144.255
                  77.92.146.0/24
                  77.92.148.0/23
                  77.92.155.0-77.92.159.255
                  78.135.79.0/24
                  78.135.98.0/23
                  78.135.103.0/24
                  78.135.108.0/24
                  78.135.113.0-78.135.116.255
                  188.132.134.0/23
                  188.132.142.0/24
                  188.132.147.0-188.132.148.255
                  188.132.153.0/24
                  188.132.157.0-188.132.158.255
                  188.132.172.0/24
                  188.132.175.0-188.132.177.255
                  188.132.180.0/24
                  188.132.183.0/24
                  188.132.190.0/24
                  188.132.194.0/23
                  188.132.200.0/24
                  188.132.204.0-188.132.208.255
                  188.132.211.0-188.132.220.255
                  188.132.223.0-188.132.235.255
                  188.132.239.0/24
                  188.132.241.0/24
                  188.132.243.0-188.132.246.255
                  188.132.250.0-188.132.255.255
                  212.68.32.0/23
                  212.68.36.0-212.68.46.255
                  212.68.49.0-212.68.51.255
                  212.68.56.0/23
                  212.68.61.0/24
                IPv6:
                  2a02:26b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:96:fe:35:9c:bf:df:47:70:92:13:0e:ba:68:50:38:ad:
         3a:b9:60:b6:48:65:44:47:da:b2:20:ac:0f:c9:df:9d:2a:1e:
         e3:ea:7d:3d:0c:81:83:11:36:f2:8c:88:57:8d:21:7f:58:76:
         78:59:ca:ce:73:75:a8:c9:e4:05:70:c7:71:b6:1b:de:05:f0:
         26:b0:ba:c0:cb:21:f9:c5:66:b8:03:53:10:3a:f5:e4:47:2c:
         93:e8:74:67:83:90:c4:0b:91:c8:5d:14:60:34:75:c1:b6:cc:
         98:7e:7e:96:03:35:df:76:ef:f6:b7:5b:8c:7f:e6:2c:ca:7d:
         56:b5:49:1e:3f:ef:34:44:9f:e2:1f:02:13:2f:eb:a7:bd:f2:
         48:59:da:1c:2a:47:87:63:59:8d:07:7d:08:29:e7:bd:37:b3:
         ae:fc:5c:f5:86:35:b7:21:0d:94:d0:14:cf:63:7a:0e:1d:38:
         89:6c:57:73:31:b0:11:b9:74:f4:75:c8:a9:4d:39:e5:dd:e0:
         10:1b:1b:53:77:68:d4:59:78:7d:1a:53:0d:8b:ed:69:fe:b6:
         6c:b9:73:d4:cb:6a:e0:6a:aa:df:e2:44:64:98:7e:cd:86:d2:
         0e:3d:26:19:31:11:d4:fc:9b:7a:89:5e:ee:a2:c5:a7:ea:ee:
         03:99:8f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 21:36:05 2023 by rpki-client on console-ams.rpki-client.org