Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/BDg-WIFaDClKKbmnkRITysKP8rA.roa
File:                     BDg-WIFaDClKKbmnkRITysKP8rA.roa (raw, json)
Hash identifier:          ISyrUIGJ7CDog6Xd5zi3xZl3Z3ABEQS/UCRY5Q9NpzI=
Subject key identifier:   04:38:3E:58:81:5A:0C:29:4A:29:B9:A7:91:12:13:CA:C2:8F:F2:B0
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0189F5BD400CD033A4BF059628C615E8EE98
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/BDg-WIFaDClKKbmnkRITysKP8rA.roa
Signing time:             Mon 14 Aug 2023 20:29:27 +0000
ROA not before:           Mon 14 Aug 2023 20:29:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15802
IP address blocks:        91.73.80.0/20 maxlen: 20
                          94.201.94.0/24 maxlen: 24
                          91.73.96.0/20 maxlen: 20
                          91.73.112.0/20 maxlen: 20
                          91.73.252.0/22 maxlen: 22
                          94.201.251.0/24 maxlen: 24
                          91.74.10.0/24 maxlen: 24
                          87.201.176.0/22 maxlen: 22
                          87.201.180.0/22 maxlen: 22
                          87.201.184.0/22 maxlen: 22
                          94.201.196.0/22 maxlen: 22
                          91.73.216.0/23 maxlen: 23
                          94.200.163.0/24 maxlen: 24
                          5.32.64.0/19 maxlen: 19
                          5.32.72.0/24 maxlen: 24
                          91.72.188.0/22 maxlen: 22
                          94.200.192.0/19 maxlen: 19
                          91.72.204.0/24 maxlen: 24
                          5.32.94.0/24 maxlen: 24
                          5.32.96.0/19 maxlen: 19
                          91.72.205.0/24 maxlen: 24
                          91.72.206.0/24 maxlen: 24
                          94.200.208.0/24 maxlen: 24
                          5.32.0.0/17 maxlen: 19
                          5.32.23.0/24 maxlen: 24
                          94.200.131.0/24 maxlen: 24
                          5.32.27.0/24 maxlen: 24
                          5.32.32.0/19 maxlen: 19
                          5.32.36.0/24 maxlen: 24
                          94.200.145.0/24 maxlen: 24
                          94.200.148.0/24 maxlen: 24
                          94.200.156.0/24 maxlen: 24
                          87.201.14.0/24 maxlen: 24
                          91.73.16.0/20 maxlen: 20
                          91.73.32.0/20 maxlen: 20
                          87.201.40.0/24 maxlen: 24
                          94.207.239.0/24 maxlen: 24
                          87.201.46.0/24 maxlen: 24
                          91.73.48.0/20 maxlen: 20
                          91.73.64.0/20 maxlen: 20
                          80.227.200.0/22 maxlen: 22
                          5.32.111.0/24 maxlen: 24
                          94.200.227.0/24 maxlen: 24
                          94.200.231.0/24 maxlen: 24
                          91.72.229.0/24 maxlen: 24
                          94.200.240.0/24 maxlen: 24
                          94.200.248.0/22 maxlen: 22
                          91.73.0.0/20 maxlen: 20
                          5.31.96.0/19 maxlen: 19
                          94.206.148.0/22 maxlen: 22
                          94.206.152.0/23 maxlen: 23
                          94.206.164.0/24 maxlen: 24
                          5.31.128.0/20 maxlen: 20
                          5.31.128.0/19 maxlen: 19
                          94.206.183.0/24 maxlen: 24
                          94.206.181.0/24 maxlen: 24
                          94.206.182.0/24 maxlen: 24
                          5.31.144.0/20 maxlen: 20
                          94.206.84.0/24 maxlen: 24
                          94.206.92.0/24 maxlen: 24
                          94.206.97.0/24 maxlen: 24
                          5.31.64.0/19 maxlen: 19
                          94.206.106.0/24 maxlen: 24
                          94.206.112.0/23 maxlen: 23
                          94.200.0.0/13 maxlen: 19
                          5.31.208.0/20 maxlen: 20
                          5.31.224.0/20 maxlen: 20
                          5.31.224.0/19 maxlen: 19
                          5.31.240.0/20 maxlen: 20
                          87.200.0.0/15 maxlen: 19
                          94.200.17.0/24 maxlen: 24
                          5.31.160.0/19 maxlen: 19
                          5.31.160.0/20 maxlen: 20
                          80.227.0.0/16 maxlen: 19
                          5.31.176.0/20 maxlen: 20
                          94.200.29.0/24 maxlen: 24
                          91.72.0.0/14 maxlen: 19
                          94.200.25.0/24 maxlen: 24
                          5.31.192.0/20 maxlen: 20
                          5.31.192.0/19 maxlen: 19
                          94.200.47.0/24 maxlen: 24
                          94.200.51.0/24 maxlen: 24
                          5.30.160.0/19 maxlen: 19
                          94.205.204.0/22 maxlen: 22
                          5.30.96.0/19 maxlen: 19
                          5.30.128.0/19 maxlen: 19
                          94.206.31.0/24 maxlen: 24
                          94.206.40.0/22 maxlen: 22
                          5.31.0.0/19 maxlen: 19
                          94.206.51.0/24 maxlen: 24
                          213.132.32.0/19 maxlen: 19
                          94.206.61.0/24 maxlen: 24
                          5.31.32.0/19 maxlen: 19
                          94.206.74.0/23 maxlen: 23
                          5.30.192.0/19 maxlen: 19
                          94.205.240.0/24 maxlen: 24
                          94.205.254.0/24 maxlen: 24
                          5.30.224.0/19 maxlen: 19
                          94.206.16.0/23 maxlen: 23
                          94.206.21.0/24 maxlen: 24
                          94.205.8.0/22 maxlen: 22
                          5.30.32.0/19 maxlen: 19
                          5.30.64.0/19 maxlen: 19
                          5.30.0.0/19 maxlen: 19
                          5.30.8.0/22 maxlen: 22
                          5.30.0.0/15 maxlen: 15
                          94.203.200.0/22 maxlen: 22
                          94.203.204.0/22 maxlen: 22
                          94.203.228.0/22 maxlen: 22
                          94.203.44.0/23 maxlen: 23
                          94.203.62.0/23 maxlen: 23
                          91.75.85.0/24 maxlen: 24
                          91.75.84.0/24 maxlen: 24
                          91.75.86.0/24 maxlen: 24
                          94.203.90.0/23 maxlen: 23
                          91.75.87.0/24 maxlen: 24
                          91.75.16.0/24 maxlen: 24
                          91.75.18.0/24 maxlen: 24
                          91.75.24.0/24 maxlen: 24
                          94.203.156.0/22 maxlen: 22
                          91.75.177.0/24 maxlen: 24
                          94.203.199.0/24 maxlen: 24
                          94.203.92.0/22 maxlen: 22
                          91.75.130.0/23 maxlen: 23
                          94.202.82.0/23 maxlen: 23
                          94.202.103.0/24 maxlen: 24
                          94.202.54.0/23 maxlen: 23
                          91.74.56.0/24 maxlen: 24
                          91.74.70.0/24 maxlen: 24
                          91.74.68.0/23 maxlen: 23
                          91.74.78.0/23 maxlen: 23
                          94.202.192.0/22 maxlen: 22
                          2a00:f2b::/32 maxlen: 32
                          2a00:f2e::/32 maxlen: 32
                          2a00:f2e:4000::/36 maxlen: 36
                          2a00:f2c::/32 maxlen: 32
                          2a00:f2c::/36 maxlen: 36
                          2a00:f2a:5000::/36 maxlen: 36
                          2a00:f2a:2000::/36 maxlen: 36
                          2a00:f2a:8000::/36 maxlen: 36
                          2a00:f2a:7000::/36 maxlen: 36
                          2a00:f2a:6000::/36 maxlen: 36
                          2a00:f2a:1000::/36 maxlen: 36
                          2a00:f2a:4000::/36 maxlen: 36
                          2a00:f2a:3000::/36 maxlen: 36
                          2a00:f2d::/32 maxlen: 32
                          2a00:f28:2:20b::/64 maxlen: 64
                          2a00:f29:1000::/36 maxlen: 36
                          2a00:f29::/32 maxlen: 32
                          2a00:f28:1000::/36 maxlen: 36
                          2a00:f28:d000::/36 maxlen: 36
                          2a00:f28:6000::/36 maxlen: 36
                          2a00:f28:e000::/36 maxlen: 36
                          2a00:f28:9000::/36 maxlen: 36
                          2a00:f28:4000::/36 maxlen: 36
                          2a00:f28:7000::/36 maxlen: 36
                          2a00:f28:f000::/36 maxlen: 36
                          2a00:f28:c000::/36 maxlen: 36
                          2a00:f28::/32 maxlen: 32
                          2a00:f28:5000::/36 maxlen: 36
                          2a00:f28:2000::/36 maxlen: 36
                          2a00:f28:a000::/36 maxlen: 36
                          2a00:f28:b000::/36 maxlen: 36
                          2a00:f28:3000::/36 maxlen: 36
                          2a00:f28::/36 maxlen: 36
                          2a00:f28:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f5:bd:40:0c:d0:33:a4:bf:05:96:28:c6:15:e8:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Aug 14 20:29:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04383e58815a0c294a29b9a7911213cac28ff2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:83:0b:8a:f2:c1:07:a3:fd:40:06:1e:cb:
                    ed:43:97:68:f5:00:2d:09:cf:40:e5:b5:20:88:fd:
                    6e:26:27:e7:70:16:c1:38:ad:8d:98:ca:9c:be:1d:
                    a3:f1:9e:61:ed:b7:64:ff:78:da:53:d9:8a:69:d6:
                    0f:9a:4b:03:00:84:59:3b:a3:c5:7b:20:e8:e5:fb:
                    d5:e0:49:e1:95:8c:3f:3b:0c:65:ba:24:52:c4:af:
                    46:ee:88:ec:62:eb:15:51:52:5d:68:20:35:e9:59:
                    71:0c:02:0d:58:25:f7:74:54:a3:fd:32:5d:b9:ef:
                    b3:b8:3f:c9:da:cb:b6:62:de:f4:3d:b8:7b:20:ba:
                    03:5b:ea:08:65:f1:5f:83:7b:48:a3:ee:7b:c7:03:
                    f4:bf:da:87:32:ea:70:7e:21:ed:9e:15:5d:0f:a6:
                    cd:a1:a6:62:33:f7:21:4f:99:bf:3f:23:d5:91:fe:
                    5e:31:0b:1c:92:c8:b9:07:bb:f1:9a:cd:39:6d:53:
                    e2:4b:b9:70:17:f4:c5:53:d0:58:fe:49:f7:10:6e:
                    58:cc:7a:94:9f:ea:83:74:03:86:de:2d:41:d4:57:
                    7c:20:67:1b:33:e3:56:0a:0c:12:75:d9:8e:ce:be:
                    b8:37:1e:f8:32:f6:48:9f:18:0c:cd:64:1e:22:66:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:38:3E:58:81:5A:0C:29:4A:29:B9:A7:91:12:13:CA:C2:8F:F2:B0
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/BDg-WIFaDClKKbmnkRITysKP8rA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.30.0.0-5.32.127.255
                  80.227.0.0/16
                  87.200.0.0/15
                  91.72.0.0/14
                  94.200.0.0/13
                  213.132.32.0/19
                IPv6:
                  2a00:f28::/31
                  2a00:f2a:1000::-2a00:f2a:8fff:ffff:ffff:ffff:ffff:ffff
                  2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b7:67:d5:75:9d:ab:9e:5a:00:ce:ca:c8:a2:0e:4b:ac:36:02:
         02:37:1c:1d:38:34:e8:86:f9:92:a1:6b:fe:6d:93:13:97:2b:
         2f:2d:3d:fc:d9:0c:d2:ac:0e:1a:8a:50:03:41:08:de:a6:7b:
         db:47:db:71:30:8b:f1:f6:ad:4e:d2:d3:6e:7b:8a:b5:4f:ac:
         74:4e:9f:fc:43:3e:b8:c3:96:1f:76:a0:09:3f:7c:cd:e2:06:
         7e:fd:97:2a:ff:99:88:31:bf:32:28:a5:bb:8e:51:5a:b2:ff:
         78:c1:96:44:b0:b0:02:f7:01:06:d9:c5:62:3e:41:39:3d:9a:
         2d:09:5f:62:60:7b:d3:e7:95:42:96:b6:1d:c5:20:60:6a:8b:
         b5:43:b4:91:23:60:ba:fb:30:69:d8:06:b9:0d:79:35:7c:2c:
         f3:eb:51:e8:d4:73:b4:52:6e:6b:92:a7:e3:d9:c2:b4:5d:75:
         45:5f:8a:52:4a:f0:02:57:26:8b:bc:46:36:66:64:ad:72:2e:
         40:f8:39:70:e4:83:5c:7f:4a:7f:b4:09:5a:67:e1:e9:3b:a8:
         78:4e:c6:aa:dc:a0:80:83:20:f0:f9:09:5d:08:0e:11:a7:72:
         7d:f0:85:0d:66:f4:5d:82:00:e7:f9:6e:4a:12:18:28:5d:22:
         29:88:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 08:03:21 2023 by rpki-client on console-fra.rpki-client.org