Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/Ra27vfD7iULiG0lyI3MyADuydWs.roa
File:                     Ra27vfD7iULiG0lyI3MyADuydWs.roa (raw, json)
Hash identifier:          Gtwd1T4+sfZPkW+ltO7wvsH6lcbfZJhA1sGShmzy994=
Subject key identifier:   45:AD:BB:BD:F0:FB:89:42:E2:1B:49:72:23:73:32:00:3B:B2:75:6B
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0186C9BBCBDF2B94F45C59DF2C82D31239FF
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/Ra27vfD7iULiG0lyI3MyADuydWs.roa
Signing time:             Fri 10 Mar 2023 04:16:13 +0000
ROA not before:           Fri 10 Mar 2023 04:16:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15802
IP address blocks:        91.73.80.0/20 maxlen: 20
                          91.73.96.0/20 maxlen: 20
                          91.73.112.0/20 maxlen: 20
                          91.73.252.0/22 maxlen: 22
                          94.201.251.0/24 maxlen: 24
                          91.74.10.0/24 maxlen: 24
                          87.201.176.0/22 maxlen: 22
                          87.201.180.0/22 maxlen: 22
                          87.201.184.0/22 maxlen: 22
                          94.201.196.0/22 maxlen: 22
                          91.73.216.0/23 maxlen: 23
                          94.200.163.0/24 maxlen: 24
                          5.32.64.0/19 maxlen: 19
                          5.32.72.0/24 maxlen: 24
                          91.72.188.0/22 maxlen: 22
                          94.200.192.0/19 maxlen: 19
                          91.72.204.0/24 maxlen: 24
                          5.32.94.0/24 maxlen: 24
                          5.32.96.0/19 maxlen: 19
                          91.72.205.0/24 maxlen: 24
                          91.72.206.0/24 maxlen: 24
                          5.32.0.0/17 maxlen: 19
                          5.32.23.0/24 maxlen: 24
                          94.200.131.0/24 maxlen: 24
                          5.32.27.0/24 maxlen: 24
                          5.32.32.0/19 maxlen: 19
                          5.32.36.0/24 maxlen: 24
                          94.200.145.0/24 maxlen: 24
                          94.200.156.0/24 maxlen: 24
                          87.201.14.0/24 maxlen: 24
                          91.73.16.0/20 maxlen: 20
                          91.73.32.0/20 maxlen: 20
                          87.201.40.0/24 maxlen: 24
                          94.207.239.0/24 maxlen: 24
                          87.201.46.0/24 maxlen: 24
                          91.73.48.0/20 maxlen: 20
                          91.73.64.0/20 maxlen: 20
                          80.227.200.0/22 maxlen: 22
                          5.32.111.0/24 maxlen: 24
                          94.200.227.0/24 maxlen: 24
                          94.200.231.0/24 maxlen: 24
                          91.72.229.0/24 maxlen: 24
                          94.200.240.0/24 maxlen: 24
                          94.200.248.0/22 maxlen: 22
                          91.73.0.0/20 maxlen: 20
                          5.31.96.0/19 maxlen: 19
                          94.206.148.0/22 maxlen: 22
                          94.206.152.0/23 maxlen: 23
                          94.206.164.0/24 maxlen: 24
                          5.31.128.0/20 maxlen: 20
                          5.31.128.0/19 maxlen: 19
                          94.206.183.0/24 maxlen: 24
                          94.206.181.0/24 maxlen: 24
                          94.206.182.0/24 maxlen: 24
                          5.31.144.0/20 maxlen: 20
                          94.206.84.0/24 maxlen: 24
                          94.206.92.0/24 maxlen: 24
                          94.206.97.0/24 maxlen: 24
                          5.31.64.0/19 maxlen: 19
                          94.206.106.0/24 maxlen: 24
                          94.206.112.0/23 maxlen: 23
                          94.200.0.0/13 maxlen: 19
                          5.31.208.0/20 maxlen: 20
                          5.31.224.0/20 maxlen: 20
                          5.31.224.0/19 maxlen: 19
                          5.31.240.0/20 maxlen: 20
                          87.200.0.0/15 maxlen: 19
                          94.200.17.0/24 maxlen: 24
                          5.31.160.0/19 maxlen: 19
                          5.31.160.0/20 maxlen: 20
                          80.227.0.0/16 maxlen: 19
                          5.31.176.0/20 maxlen: 20
                          94.200.29.0/24 maxlen: 24
                          91.72.0.0/14 maxlen: 19
                          94.200.25.0/24 maxlen: 24
                          5.31.192.0/20 maxlen: 20
                          5.31.192.0/19 maxlen: 19
                          94.200.47.0/24 maxlen: 24
                          94.200.51.0/24 maxlen: 24
                          5.30.160.0/19 maxlen: 19
                          94.205.204.0/22 maxlen: 22
                          5.30.96.0/19 maxlen: 19
                          5.30.128.0/19 maxlen: 19
                          94.206.31.0/24 maxlen: 24
                          94.206.40.0/22 maxlen: 22
                          5.31.0.0/19 maxlen: 19
                          94.206.51.0/24 maxlen: 24
                          213.132.32.0/19 maxlen: 19
                          94.206.61.0/24 maxlen: 24
                          5.31.32.0/19 maxlen: 19
                          94.206.74.0/23 maxlen: 23
                          5.30.192.0/19 maxlen: 19
                          94.205.240.0/24 maxlen: 24
                          94.205.254.0/24 maxlen: 24
                          5.30.224.0/19 maxlen: 19
                          94.206.16.0/23 maxlen: 23
                          94.206.21.0/24 maxlen: 24
                          94.205.8.0/22 maxlen: 22
                          5.30.32.0/19 maxlen: 19
                          5.30.64.0/19 maxlen: 19
                          5.30.0.0/19 maxlen: 19
                          5.30.8.0/22 maxlen: 22
                          5.30.0.0/15 maxlen: 15
                          94.203.200.0/22 maxlen: 22
                          94.203.204.0/22 maxlen: 22
                          94.203.228.0/22 maxlen: 22
                          94.203.44.0/23 maxlen: 23
                          94.203.62.0/23 maxlen: 23
                          91.75.85.0/24 maxlen: 24
                          91.75.86.0/24 maxlen: 24
                          94.203.90.0/23 maxlen: 23
                          91.75.16.0/24 maxlen: 24
                          94.203.156.0/22 maxlen: 22
                          94.203.199.0/24 maxlen: 24
                          94.203.92.0/22 maxlen: 22
                          91.74.56.0/24 maxlen: 24
                          91.74.68.0/23 maxlen: 23
                          91.74.78.0/23 maxlen: 23
                          94.202.192.0/22 maxlen: 22
                          2a00:f2b::/32 maxlen: 32
                          2a00:f2e::/32 maxlen: 32
                          2a00:f2c::/32 maxlen: 32
                          2a00:f2d::/32 maxlen: 32
                          2a00:f29::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 10 Mar 2023 13:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c9:bb:cb:df:2b:94:f4:5c:59:df:2c:82:d3:12:39:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Mar 10 04:16:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45adbbbdf0fb8942e21b4972237332003bb2756b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:1c:0a:8a:a0:9a:b3:b2:4f:32:6b:f7:1f:
                    ff:d3:05:1b:8d:76:bf:85:d8:09:41:d0:16:fd:5b:
                    43:a6:36:78:8b:ac:b1:23:a2:ee:e9:4e:fb:31:94:
                    07:29:73:57:d2:e4:b7:bb:49:f8:38:45:1e:66:d5:
                    46:9c:41:a1:15:9d:6c:b5:64:a3:b3:3d:cf:ec:20:
                    9e:31:76:dc:50:f5:df:39:53:81:2f:4a:d2:90:ea:
                    2c:0f:2d:4a:c8:9a:9f:aa:ad:78:86:1c:b3:bb:1e:
                    9b:56:38:1d:21:61:64:3c:9b:a2:76:dd:5e:94:c0:
                    92:51:0a:87:5e:8d:60:6d:37:42:0d:36:02:31:8b:
                    60:57:31:8f:21:43:d7:b4:2d:d0:36:52:53:73:c0:
                    b8:61:c1:c6:50:fb:84:ea:fd:d3:b5:9a:e9:43:c8:
                    21:03:98:88:78:5e:a6:20:c9:a3:57:b9:3b:4d:39:
                    74:58:77:5a:52:57:46:d5:cb:09:a5:5e:e7:45:0c:
                    ae:3c:d2:3a:a7:7e:8f:23:f8:98:5f:d8:4e:59:25:
                    ac:6b:fa:ec:3f:00:de:f8:97:4c:ec:43:fc:d1:b8:
                    ab:62:eb:ad:e3:76:52:20:93:f2:ca:a8:36:ee:6f:
                    c7:83:f6:ce:95:b1:40:8a:04:36:4a:0d:d1:d3:cf:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AD:BB:BD:F0:FB:89:42:E2:1B:49:72:23:73:32:00:3B:B2:75:6B
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/Ra27vfD7iULiG0lyI3MyADuydWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.30.0.0-5.32.127.255
                  80.227.0.0/16
                  87.200.0.0/15
                  91.72.0.0/14
                  94.200.0.0/13
                  213.132.32.0/19
                IPv6:
                  2a00:f29::/32
                  2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         20:02:b5:e3:18:08:a3:d8:d1:01:a1:a1:23:f3:e6:79:d2:95:
         66:e2:87:f9:3e:4e:80:9c:72:80:3a:4f:7c:2d:69:4f:57:f7:
         3e:36:b6:55:4a:7e:0a:e3:17:9c:c8:35:fe:ee:8e:a5:10:f6:
         90:64:44:44:29:c4:0c:67:df:26:39:e8:1e:dd:61:21:a5:b3:
         34:ea:e0:3d:0d:fd:24:4f:e5:db:1d:38:89:fc:a8:c9:5f:53:
         67:ae:c6:7a:13:23:ef:ce:60:f1:00:03:5e:9e:cf:bc:b4:bf:
         30:aa:f6:9b:5a:fc:25:fb:8d:ab:4b:a4:4c:5a:80:f2:56:ff:
         52:df:8a:f6:13:7e:e1:93:d5:0d:7d:cf:63:a9:cf:f6:92:e5:
         fe:8b:6b:63:6b:b5:09:d1:91:11:9b:5d:57:eb:c7:c2:ee:79:
         73:3d:69:91:92:20:67:3d:00:1e:6f:45:83:08:0e:2e:af:f6:
         d3:ae:55:7e:1b:36:1d:3c:fe:dd:02:07:36:cb:d0:65:cc:23:
         d9:e5:90:ab:bb:9d:a9:84:37:4e:6d:a4:80:7c:dc:02:93:d9:
         90:39:3a:6d:92:9f:af:19:3a:2c:e0:d4:64:d7:44:ab:1b:31:
         96:00:c2:fd:f5:2e:79:bc:d8:99:00:3d:e5:5f:7b:c2:a4:b4:
         f3:5f:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org