Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/LXIH0OKAKxy9Uu8pVWA-UPIoo4Q.roa
File:                     LXIH0OKAKxy9Uu8pVWA-UPIoo4Q.roa (raw, json)
Hash identifier:          apYzun1EzLV1ON+x72/+yhRrEJbUE5qqP5ILNPfVjzs=
Subject key identifier:   2D:72:07:D0:E2:80:2B:1C:BD:52:EF:29:55:60:3E:50:F2:28:A3:84
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       018843506F9957DABA881D37FF12512E9E49
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/LXIH0OKAKxy9Uu8pVWA-UPIoo4Q.roa
Signing time:             Mon 22 May 2023 11:55:24 +0000
ROA not before:           Mon 22 May 2023 11:55:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15802
IP address blocks:        91.73.80.0/20 maxlen: 20
                          94.201.94.0/24 maxlen: 24
                          91.73.96.0/20 maxlen: 20
                          91.73.112.0/20 maxlen: 20
                          91.73.252.0/22 maxlen: 22
                          94.201.251.0/24 maxlen: 24
                          91.74.10.0/24 maxlen: 24
                          87.201.176.0/22 maxlen: 22
                          87.201.180.0/22 maxlen: 22
                          87.201.184.0/22 maxlen: 22
                          94.201.196.0/22 maxlen: 22
                          91.73.216.0/23 maxlen: 23
                          94.200.163.0/24 maxlen: 24
                          5.32.64.0/19 maxlen: 19
                          5.32.72.0/24 maxlen: 24
                          91.72.188.0/22 maxlen: 22
                          94.200.192.0/19 maxlen: 19
                          91.72.204.0/24 maxlen: 24
                          5.32.94.0/24 maxlen: 24
                          5.32.96.0/19 maxlen: 19
                          91.72.205.0/24 maxlen: 24
                          91.72.206.0/24 maxlen: 24
                          94.200.208.0/24 maxlen: 24
                          5.32.0.0/17 maxlen: 19
                          5.32.23.0/24 maxlen: 24
                          94.200.131.0/24 maxlen: 24
                          5.32.27.0/24 maxlen: 24
                          5.32.32.0/19 maxlen: 19
                          5.32.36.0/24 maxlen: 24
                          94.200.145.0/24 maxlen: 24
                          94.200.148.0/24 maxlen: 24
                          94.200.156.0/24 maxlen: 24
                          87.201.14.0/24 maxlen: 24
                          91.73.16.0/20 maxlen: 20
                          91.73.32.0/20 maxlen: 20
                          87.201.40.0/24 maxlen: 24
                          94.207.239.0/24 maxlen: 24
                          87.201.46.0/24 maxlen: 24
                          91.73.48.0/20 maxlen: 20
                          91.73.64.0/20 maxlen: 20
                          80.227.200.0/22 maxlen: 22
                          5.32.111.0/24 maxlen: 24
                          94.200.227.0/24 maxlen: 24
                          94.200.231.0/24 maxlen: 24
                          91.72.229.0/24 maxlen: 24
                          94.200.240.0/24 maxlen: 24
                          94.200.248.0/22 maxlen: 22
                          91.73.0.0/20 maxlen: 20
                          5.31.96.0/19 maxlen: 19
                          94.206.148.0/22 maxlen: 22
                          94.206.152.0/23 maxlen: 23
                          94.206.164.0/24 maxlen: 24
                          5.31.128.0/20 maxlen: 20
                          5.31.128.0/19 maxlen: 19
                          94.206.183.0/24 maxlen: 24
                          94.206.181.0/24 maxlen: 24
                          94.206.182.0/24 maxlen: 24
                          5.31.144.0/20 maxlen: 20
                          94.206.84.0/24 maxlen: 24
                          94.206.92.0/24 maxlen: 24
                          94.206.97.0/24 maxlen: 24
                          5.31.64.0/19 maxlen: 19
                          94.206.106.0/24 maxlen: 24
                          94.206.112.0/23 maxlen: 23
                          94.200.0.0/13 maxlen: 19
                          5.31.208.0/20 maxlen: 20
                          5.31.224.0/20 maxlen: 20
                          5.31.224.0/19 maxlen: 19
                          5.31.240.0/20 maxlen: 20
                          87.200.0.0/15 maxlen: 19
                          94.200.17.0/24 maxlen: 24
                          5.31.160.0/19 maxlen: 19
                          5.31.160.0/20 maxlen: 20
                          80.227.0.0/16 maxlen: 19
                          94.200.29.0/24 maxlen: 24
                          5.31.176.0/20 maxlen: 20
                          91.72.0.0/14 maxlen: 19
                          94.200.25.0/24 maxlen: 24
                          5.31.192.0/20 maxlen: 20
                          5.31.192.0/19 maxlen: 19
                          94.200.47.0/24 maxlen: 24
                          94.200.51.0/24 maxlen: 24
                          5.30.160.0/19 maxlen: 19
                          94.205.204.0/22 maxlen: 22
                          5.30.96.0/19 maxlen: 19
                          5.30.128.0/19 maxlen: 19
                          94.206.31.0/24 maxlen: 24
                          94.206.40.0/22 maxlen: 22
                          5.31.0.0/19 maxlen: 19
                          94.206.51.0/24 maxlen: 24
                          213.132.32.0/19 maxlen: 19
                          94.206.61.0/24 maxlen: 24
                          5.31.32.0/19 maxlen: 19
                          94.206.74.0/23 maxlen: 23
                          5.30.192.0/19 maxlen: 19
                          94.205.240.0/24 maxlen: 24
                          94.205.254.0/24 maxlen: 24
                          5.30.224.0/19 maxlen: 19
                          94.206.16.0/23 maxlen: 23
                          94.206.21.0/24 maxlen: 24
                          94.205.8.0/22 maxlen: 22
                          5.30.32.0/19 maxlen: 19
                          5.30.64.0/19 maxlen: 19
                          5.30.0.0/19 maxlen: 19
                          5.30.8.0/22 maxlen: 22
                          5.30.0.0/15 maxlen: 15
                          94.203.200.0/22 maxlen: 22
                          94.203.204.0/22 maxlen: 22
                          94.203.228.0/22 maxlen: 22
                          94.203.44.0/23 maxlen: 23
                          94.203.62.0/23 maxlen: 23
                          91.75.85.0/24 maxlen: 24
                          91.75.84.0/24 maxlen: 24
                          91.75.86.0/24 maxlen: 24
                          94.203.90.0/23 maxlen: 23
                          91.75.87.0/24 maxlen: 24
                          91.75.16.0/24 maxlen: 24
                          91.75.18.0/24 maxlen: 24
                          91.75.24.0/24 maxlen: 24
                          94.203.156.0/22 maxlen: 22
                          91.75.177.0/24 maxlen: 24
                          94.203.199.0/24 maxlen: 24
                          94.203.92.0/22 maxlen: 22
                          91.75.130.0/23 maxlen: 23
                          94.202.82.0/23 maxlen: 23
                          94.202.103.0/24 maxlen: 24
                          94.202.54.0/23 maxlen: 23
                          91.74.56.0/24 maxlen: 24
                          91.74.70.0/24 maxlen: 24
                          91.74.68.0/23 maxlen: 23
                          91.74.78.0/23 maxlen: 23
                          94.202.192.0/22 maxlen: 22
                          2a00:f2b::/32 maxlen: 32
                          2a00:f2e::/32 maxlen: 32
                          2a00:f2c::/32 maxlen: 32
                          2a00:f2c::/36 maxlen: 36
                          2a00:f2a:5000::/36 maxlen: 36
                          2a00:f2a:2000::/36 maxlen: 36
                          2a00:f2a:3000::/36 maxlen: 36
                          2a00:f2a:8000::/36 maxlen: 36
                          2a00:f2a:4000::/36 maxlen: 36
                          2a00:f2a:1000::/36 maxlen: 36
                          2a00:f2a:6000::/36 maxlen: 36
                          2a00:f2a:7000::/36 maxlen: 36
                          2a00:f2d::/32 maxlen: 32
                          2a00:f28:2:20b::/64 maxlen: 64
                          2a00:f29::/32 maxlen: 32
                          2a00:f28:5000::/36 maxlen: 36
                          2a00:f28:2000::/36 maxlen: 36
                          2a00:f28:9000::/36 maxlen: 36
                          2a00:f28:1000::/36 maxlen: 36
                          2a00:f28:6000::/36 maxlen: 36
                          2a00:f28:e000::/36 maxlen: 36
                          2a00:f28:8000::/36 maxlen: 36
                          2a00:f28:3000::/36 maxlen: 36
                          2a00:f28:b000::/36 maxlen: 36
                          2a00:f28::/36 maxlen: 36
                          2a00:f28:a000::/36 maxlen: 36
                          2a00:f28:d000::/36 maxlen: 36
                          2a00:f28:7000::/36 maxlen: 36
                          2a00:f28:f000::/36 maxlen: 36
                          2a00:f28:c000::/36 maxlen: 36
                          2a00:f28:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 22 May 2023 12:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:43:50:6f:99:57:da:ba:88:1d:37:ff:12:51:2e:9e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: May 22 11:55:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d7207d0e2802b1cbd52ef2955603e50f228a384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:28:e3:a9:ae:15:6d:22:f5:0e:02:20:f3:
                    f6:f6:76:8e:2b:8b:c7:fd:c9:16:b6:c6:0d:c9:72:
                    fc:d6:9c:5b:a9:a6:fa:3e:c5:4e:3e:d5:81:8d:a9:
                    3a:ff:43:bc:ea:16:20:6a:95:d7:93:52:72:01:6e:
                    0b:91:0c:29:96:19:3c:05:1c:32:eb:a9:43:dd:71:
                    2c:9d:2f:91:2f:97:fc:e9:d7:a7:93:9c:5a:f3:1c:
                    8c:c0:8a:95:fb:4b:3b:50:38:3d:ff:1c:18:b6:d2:
                    dc:38:90:b5:e0:ed:c8:0e:08:6b:b9:04:73:6d:85:
                    11:80:b3:28:f8:3d:af:44:81:5b:59:67:f0:ec:4a:
                    13:b0:e0:19:be:ae:c8:9a:1f:18:51:56:4e:d4:6c:
                    ab:de:b8:66:c6:48:ab:c7:da:6e:6e:90:e5:30:bd:
                    b8:e9:63:0f:b1:62:c0:e8:98:b9:70:cb:80:1a:88:
                    06:b4:a8:0a:e7:b0:c4:d3:01:24:69:52:b0:fa:68:
                    d1:ba:a5:9e:ae:55:8f:04:56:2c:6f:6a:42:d9:b9:
                    28:a1:60:0c:fb:5a:b8:03:9a:34:94:c1:ac:a9:4e:
                    7a:6f:73:a5:fb:95:de:b9:3b:b3:24:e3:36:ea:0c:
                    a0:ad:f5:c8:4d:45:02:fe:d6:5b:ac:ca:a6:93:e5:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:72:07:D0:E2:80:2B:1C:BD:52:EF:29:55:60:3E:50:F2:28:A3:84
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/LXIH0OKAKxy9Uu8pVWA-UPIoo4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.30.0.0-5.32.127.255
                  80.227.0.0/16
                  87.200.0.0/15
                  91.72.0.0/14
                  94.200.0.0/13
                  213.132.32.0/19
                IPv6:
                  2a00:f28::/31
                  2a00:f2a:1000::-2a00:f2a:8fff:ffff:ffff:ffff:ffff:ffff
                  2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         55:56:c6:da:2d:d4:f9:e9:e7:49:f1:a0:e4:76:df:7a:14:58:
         d0:53:a1:9a:c1:d7:0a:e3:c5:ab:83:56:fe:91:14:bc:52:57:
         19:05:49:cb:00:2f:c1:b9:51:42:1d:40:7c:cd:a7:c6:9f:4e:
         75:22:5d:75:ac:ca:51:ad:84:e3:55:7b:32:50:6f:c3:69:d1:
         6c:76:eb:17:32:57:f9:ad:2a:f1:01:0c:16:ea:73:fb:8f:cd:
         d0:73:1f:b6:34:12:70:2e:b0:ec:7a:7c:99:3f:30:55:29:41:
         11:db:0b:79:a9:1a:5b:63:59:b3:b7:be:54:ce:26:3b:7a:8c:
         44:60:56:26:d0:ce:81:54:20:80:f8:ab:e6:3c:6d:d5:fc:7d:
         41:60:74:e4:de:9d:d9:f0:5a:26:fd:5c:8e:02:32:f9:6c:4c:
         09:97:b2:53:0d:6d:58:de:1d:bf:70:f5:76:1c:23:4e:98:28:
         f3:05:e7:44:86:84:0e:78:be:53:a0:d5:35:e2:88:60:c8:6c:
         18:84:aa:20:c0:09:5c:0f:a5:9e:bd:a0:5b:46:0b:a2:ec:7a:
         59:f7:f6:89:d0:d7:3d:1d:cd:1c:27:ee:1e:a7:1f:3e:18:78:
         9d:e1:5d:65:9a:58:0f:ce:1c:18:8f:3b:92:73:04:26:67:7c:
         67:c2:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:50 2024 by rpki-client on console-ams.rpki-client.org