Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/vGKnaJWG5FWKqApu3xqDWGz3l2w.roa
File:                     vGKnaJWG5FWKqApu3xqDWGz3l2w.roa (raw, json)
Hash identifier:          ChDfMshBLuurlq7cng3F5xUGfo9SlDOlxxXkfEAY7fE=
Subject key identifier:   BC:62:A7:68:95:86:E4:55:8A:A8:0A:6E:DF:1A:83:58:6C:F7:97:6C
Certificate issuer:       /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial:       0185727A2C307611A69DB943C08B7BAF38E1
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/vGKnaJWG5FWKqApu3xqDWGz3l2w.roa
Signing time:             Mon 02 Jan 2023 12:34:47 +0000
ROA not before:           Mon 02 Jan 2023 12:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203346
IP address blocks:        188.208.52.0/22 maxlen: 22
                          89.39.212.0/24 maxlen: 24
                          89.39.215.0/24 maxlen: 24
                          89.33.47.0/24 maxlen: 24
                          89.33.46.0/24 maxlen: 24
                          89.39.241.0/24 maxlen: 24
                          188.241.211.0/24 maxlen: 24
                          89.33.134.0/24 maxlen: 24
                          86.107.193.0/24 maxlen: 24
                          86.107.194.0/23 maxlen: 23
                          185.80.112.0/23 maxlen: 23
                          185.80.114.0/23 maxlen: 23
                          93.114.58.0/24 maxlen: 24
                          91.235.130.0/24 maxlen: 24
                          91.235.131.0/24 maxlen: 24
                          93.114.59.0/24 maxlen: 24
                          89.33.116.0/24 maxlen: 24
                          193.32.66.0/24 maxlen: 24
                          193.32.67.0/24 maxlen: 24
                          86.106.94.0/24 maxlen: 24
                          86.106.95.0/24 maxlen: 24
                          86.106.105.0/24 maxlen: 24
                          86.106.110.0/23 maxlen: 23
                          86.106.106.0/23 maxlen: 23
                          86.106.114.0/23 maxlen: 23
                          86.106.116.0/23 maxlen: 23
                          86.106.118.0/24 maxlen: 24
                          89.32.170.0/24 maxlen: 24
                          86.106.138.0/23 maxlen: 23
                          176.126.192.0/23 maxlen: 23
                          176.126.194.0/24 maxlen: 24
                          188.214.95.0/24 maxlen: 24
                          188.172.176.0/20 maxlen: 20
                          86.105.242.0/24 maxlen: 24
                          86.105.243.0/24 maxlen: 24
                          89.45.82.0/24 maxlen: 24
                          193.254.48.0/21 maxlen: 21
                          93.119.118.0/23 maxlen: 23
                          93.119.120.0/23 maxlen: 23
                          193.254.56.0/21 maxlen: 21
                          93.119.124.0/24 maxlen: 24
                          188.213.206.0/24 maxlen: 24
                          93.119.125.0/24 maxlen: 24
                          86.106.10.0/24 maxlen: 24
                          188.213.207.0/24 maxlen: 24
                          188.213.214.0/24 maxlen: 24
                          86.106.13.0/24 maxlen: 24
                          188.213.215.0/24 maxlen: 24
                          86.106.14.0/23 maxlen: 23
                          86.105.176.0/24 maxlen: 24
                          86.105.178.0/24 maxlen: 24
                          86.105.184.0/24 maxlen: 24
                          86.105.185.0/24 maxlen: 24
                          89.37.94.0/24 maxlen: 24
                          89.37.96.0/24 maxlen: 24
                          89.37.92.0/23 maxlen: 23
                          86.104.212.0/24 maxlen: 24
                          86.104.213.0/24 maxlen: 24
                          193.30.254.0/24 maxlen: 24
                          193.30.255.0/24 maxlen: 24
                          188.212.254.0/24 maxlen: 24
                          89.37.129.0/24 maxlen: 24
                          89.37.130.0/23 maxlen: 23
                          89.37.132.0/23 maxlen: 23
                          89.37.134.0/24 maxlen: 24
                          86.105.6.0/24 maxlen: 24
                          188.211.167.0/24 maxlen: 24
                          89.36.138.0/24 maxlen: 24
                          89.36.141.0/24 maxlen: 24
                          86.104.0.0/23 maxlen: 23
                          86.104.2.0/24 maxlen: 24
                          37.156.173.0/24 maxlen: 24
                          94.177.126.0/24 maxlen: 24
                          89.36.39.0/24 maxlen: 24
                          89.42.152.0/23 maxlen: 23
                          89.42.154.0/24 maxlen: 24
                          176.223.116.0/23 maxlen: 23
                          176.223.118.0/24 maxlen: 24
                          89.35.54.0/24 maxlen: 24
                          89.42.10.0/24 maxlen: 24
                          46.102.178.0/23 maxlen: 23
                          46.102.177.0/24 maxlen: 24
                          89.35.89.0/24 maxlen: 24
                          37.156.64.0/24 maxlen: 24
                          89.41.189.0/24 maxlen: 24
                          89.41.190.0/23 maxlen: 23
                          37.156.65.0/24 maxlen: 24
                          176.223.160.0/24 maxlen: 24
                          176.223.161.0/24 maxlen: 24
                          89.33.250.0/24 maxlen: 24
                          89.33.251.0/24 maxlen: 24
                          89.33.255.0/24 maxlen: 24
                          89.33.254.0/24 maxlen: 24
                          89.40.209.0/24 maxlen: 24
                          188.208.220.0/23 maxlen: 23
                          188.208.222.0/23 maxlen: 23
                          89.33.198.0/23 maxlen: 23
                          89.33.200.0/23 maxlen: 23
                          89.33.206.0/24 maxlen: 24
                          89.40.140.0/24 maxlen: 24
                          89.40.141.0/24 maxlen: 24
                          188.209.120.0/22 maxlen: 22
                          188.209.124.0/22 maxlen: 22
                          89.41.27.0/24 maxlen: 24
                          89.41.28.0/23 maxlen: 23
                          89.34.104.0/24 maxlen: 24
                          89.34.105.0/24 maxlen: 24
                          93.115.59.0/24 maxlen: 24
                          89.34.102.0/24 maxlen: 24
                          89.41.50.0/23 maxlen: 23
                          89.41.49.0/24 maxlen: 24
                          31.14.66.0/23 maxlen: 23
                          77.81.84.0/23 maxlen: 23
                          77.81.89.0/24 maxlen: 24
                          77.81.90.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 12 Jan 2023 09:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:7a:2c:30:76:11:a6:9d:b9:43:c0:8b:7b:af:38:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
        Validity
            Not Before: Jan  2 12:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc62a7689586e4558aa80a6edf1a83586cf7976c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:c1:e3:4d:ae:b1:c9:c2:a7:40:bf:8f:b6:
                    27:59:22:1f:cc:bc:ea:24:5c:61:a6:bc:a9:aa:ba:
                    a0:c6:37:75:15:44:8f:fc:68:3a:62:28:84:14:9b:
                    0c:38:14:19:6a:31:3c:17:d8:69:51:60:74:ed:4e:
                    1f:50:c2:e6:a9:fb:ef:91:f9:2d:df:78:ca:b8:69:
                    02:09:9b:cf:49:d4:45:0e:ec:5b:27:68:be:e3:6b:
                    30:86:42:bf:a5:7e:4c:64:6e:88:cc:4d:d2:62:8e:
                    38:ff:67:6d:7c:ee:e6:1f:a5:28:cb:43:44:19:2b:
                    79:0d:c4:a1:cc:70:b7:03:f6:23:8f:04:56:61:79:
                    5f:d7:8d:10:bd:1f:ec:82:66:2f:08:0e:58:ba:3e:
                    aa:40:69:26:72:12:22:c5:39:b8:ec:3c:00:53:78:
                    65:a7:8d:5c:5c:d2:ee:75:cf:59:63:c2:55:45:95:
                    34:65:ac:17:e0:37:8c:80:76:90:32:5b:22:17:21:
                    c7:52:9e:70:73:97:8e:43:8f:8e:84:ae:a0:1b:27:
                    7c:be:7d:1e:da:d2:c6:7e:72:e7:a3:9a:01:6a:e5:
                    44:e6:d2:88:cf:61:42:47:d9:88:86:6f:ac:37:3a:
                    53:65:29:2c:ce:22:e9:6d:6b:d8:98:00:0a:fe:4d:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:62:A7:68:95:86:E4:55:8A:A8:0A:6E:DF:1A:83:58:6C:F7:97:6C
            X509v3 Authority Key Identifier:
                keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/vGKnaJWG5FWKqApu3xqDWGz3l2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.66.0/23
                  37.156.64.0/23
                  37.156.173.0/24
                  46.102.177.0-46.102.179.255
                  77.81.84.0/23
                  77.81.89.0-77.81.91.255
                  86.104.0.0-86.104.2.255
                  86.104.212.0/23
                  86.105.6.0/24
                  86.105.176.0/24
                  86.105.178.0/24
                  86.105.184.0/23
                  86.105.242.0/23
                  86.106.10.0/24
                  86.106.13.0-86.106.15.255
                  86.106.94.0/23
                  86.106.105.0-86.106.107.255
                  86.106.110.0/23
                  86.106.114.0-86.106.118.255
                  86.106.138.0/23
                  86.107.193.0-86.107.195.255
                  89.32.170.0/24
                  89.33.46.0/23
                  89.33.116.0/24
                  89.33.134.0/24
                  89.33.198.0-89.33.201.255
                  89.33.206.0/24
                  89.33.250.0/23
                  89.33.254.0/23
                  89.34.102.0/24
                  89.34.104.0/23
                  89.35.54.0/24
                  89.35.89.0/24
                  89.36.39.0/24
                  89.36.138.0/24
                  89.36.141.0/24
                  89.37.92.0-89.37.94.255
                  89.37.96.0/24
                  89.37.129.0-89.37.134.255
                  89.39.212.0/24
                  89.39.215.0/24
                  89.39.241.0/24
                  89.40.140.0/23
                  89.40.209.0/24
                  89.41.27.0-89.41.29.255
                  89.41.49.0-89.41.51.255
                  89.41.189.0-89.41.191.255
                  89.42.10.0/24
                  89.42.152.0-89.42.154.255
                  89.45.82.0/24
                  91.235.130.0/23
                  93.114.58.0/23
                  93.115.59.0/24
                  93.119.118.0-93.119.121.255
                  93.119.124.0/23
                  94.177.126.0/24
                  176.126.192.0-176.126.194.255
                  176.223.116.0-176.223.118.255
                  176.223.160.0/23
                  185.80.112.0/22
                  188.172.176.0/20
                  188.208.52.0/22
                  188.208.220.0/22
                  188.209.120.0/21
                  188.211.167.0/24
                  188.212.254.0/24
                  188.213.206.0/23
                  188.213.214.0/23
                  188.214.95.0/24
                  188.241.211.0/24
                  193.30.254.0/23
                  193.32.66.0/23
                  193.254.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:b7:20:72:1b:cd:59:d7:47:0a:c6:f4:bc:69:94:c8:8a:
         6f:3a:e0:45:f5:84:f8:53:b3:44:88:ea:e2:f2:93:61:f1:6d:
         ea:32:f2:9b:a2:07:3a:78:06:c4:bd:06:f4:a0:04:44:52:05:
         bb:24:74:96:ed:9c:98:67:ba:5d:43:7b:b5:5a:f1:5d:1f:8f:
         47:a9:b3:8d:9b:a2:49:3e:67:37:c1:c0:2c:9c:b9:a4:95:a6:
         f3:b5:33:76:56:d6:cf:44:f7:0f:02:71:6a:10:b0:f1:26:1a:
         44:09:3e:f0:f3:28:80:7e:73:d4:41:bc:bb:70:11:ec:79:11:
         ea:3c:fc:a8:5c:ac:d3:0c:14:e5:f0:71:7b:d0:2d:bc:88:fa:
         5d:7d:c0:d2:9d:40:55:ef:8d:2e:74:d9:30:87:cf:f4:73:7b:
         f2:37:f8:b7:8a:11:16:25:02:ed:c4:7b:b7:97:98:f0:ab:6c:
         a5:84:40:17:e8:5c:43:16:8e:82:9d:61:36:a0:fd:55:aa:8a:
         46:30:76:3d:db:ab:ef:7a:e4:6f:05:ba:45:fc:8c:12:5d:2c:
         12:14:1b:1c:a3:4f:bf:c0:47:04:bb:40:ed:9f:a2:0c:ee:18:
         6b:be:47:87:aa:46:8e:ca:f6:f0:a0:d6:51:93:11:df:11:37:
         a0:d4:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org