Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Tqgs8V_mPSAsDgBu88lgesMIVK4.roa
File:                     Tqgs8V_mPSAsDgBu88lgesMIVK4.roa (raw, json)
Hash identifier:          Gu7n0uErxbSXTK+QvmJHOfAwhoIZG0/joISq8BKlGeg=
Subject key identifier:   4E:A8:2C:F1:5F:E6:3D:20:2C:0E:00:6E:F3:C9:60:7A:C3:08:54:AE
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       0186CAA540B5F3C5F5BED28B729C1C129023
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Tqgs8V_mPSAsDgBu88lgesMIVK4.roa
Signing time:             Fri 10 Mar 2023 08:31:12 +0000
ROA not before:           Fri 10 Mar 2023 08:31:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198610
IP address blocks:        45.80.68.0/22 maxlen: 22
                          45.80.68.0/24 maxlen: 24
                          45.80.69.0/24 maxlen: 24
                          45.80.70.0/24 maxlen: 24
                          45.80.71.0/24 maxlen: 24
                          45.147.176.0/22 maxlen: 22
                          45.147.176.0/24 maxlen: 24
                          45.147.177.0/24 maxlen: 24
                          45.147.178.0/24 maxlen: 24
                          45.147.179.0/24 maxlen: 24
                          5.181.109.0/24 maxlen: 24
                          5.181.110.0/24 maxlen: 24
                          5.181.111.0/24 maxlen: 24
                          5.181.108.0/24 maxlen: 24
                          5.181.108.0/22 maxlen: 22
                          45.141.77.0/24 maxlen: 24
                          45.141.76.0/22 maxlen: 22
                          45.141.78.0/24 maxlen: 24
                          45.141.76.0/24 maxlen: 24
                          45.67.57.0/24 maxlen: 24
                          45.67.58.0/24 maxlen: 24
                          45.141.79.0/24 maxlen: 24
                          45.67.56.0/24 maxlen: 24
                          45.67.56.0/22 maxlen: 22
                          45.67.59.0/24 maxlen: 24
                          185.19.204.0/22 maxlen: 22
                          185.19.204.0/24 maxlen: 24
                          185.19.205.0/24 maxlen: 24
                          185.19.206.0/24 maxlen: 24
                          185.19.207.0/24 maxlen: 24
                          193.168.46.0/24 maxlen: 24
                          193.168.46.0/23 maxlen: 23
                          193.168.47.0/24 maxlen: 24
                          193.168.48.0/23 maxlen: 23
                          193.168.48.0/24 maxlen: 24
                          193.168.49.0/24 maxlen: 24
                          45.12.16.0/24 maxlen: 24
                          45.12.17.0/24 maxlen: 24
                          45.12.16.0/22 maxlen: 22
                          45.12.18.0/24 maxlen: 24
                          45.12.19.0/24 maxlen: 24
                          95.214.61.0/24 maxlen: 24
                          95.214.62.0/24 maxlen: 24
                          95.214.63.0/24 maxlen: 24
                          95.214.60.0/24 maxlen: 24
                          95.214.60.0/22 maxlen: 22
                          81.200.112.0/24 maxlen: 24
                          81.200.113.0/24 maxlen: 24
                          213.139.208.0/22 maxlen: 22
                          81.200.112.0/21 maxlen: 21
                          213.139.208.0/24 maxlen: 24
                          81.200.114.0/24 maxlen: 24
                          213.139.209.0/24 maxlen: 24
                          81.200.115.0/24 maxlen: 24
                          81.200.116.0/24 maxlen: 24
                          81.200.118.0/24 maxlen: 24
                          81.200.117.0/24 maxlen: 24
                          213.139.210.0/24 maxlen: 24
                          213.139.211.0/24 maxlen: 24
                          81.200.119.0/24 maxlen: 24
                          45.146.164.0/24 maxlen: 24
                          45.146.165.0/24 maxlen: 24
                          45.146.166.0/24 maxlen: 24
                          45.146.164.0/22 maxlen: 22
                          45.146.167.0/24 maxlen: 24
                          91.106.206.0/24 maxlen: 24
                          91.106.200.0/21 maxlen: 21
                          91.106.200.0/24 maxlen: 24
                          91.106.201.0/24 maxlen: 24
                          91.106.202.0/24 maxlen: 24
                          91.106.203.0/24 maxlen: 24
                          91.106.204.0/24 maxlen: 24
                          91.106.205.0/24 maxlen: 24
                          91.106.207.0/24 maxlen: 24
                          62.113.97.0/24 maxlen: 24
                          62.113.98.0/24 maxlen: 24
                          62.113.96.0/20 maxlen: 20
                          62.113.96.0/24 maxlen: 24
                          62.113.104.0/24 maxlen: 24
                          62.113.105.0/24 maxlen: 24
                          62.113.99.0/24 maxlen: 24
                          62.113.100.0/24 maxlen: 24
                          62.113.101.0/24 maxlen: 24
                          62.113.102.0/24 maxlen: 24
                          62.113.103.0/24 maxlen: 24
                          62.113.110.0/24 maxlen: 24
                          62.113.111.0/24 maxlen: 24
                          62.113.106.0/24 maxlen: 24
                          62.113.107.0/24 maxlen: 24
                          62.113.108.0/24 maxlen: 24
                          62.113.109.0/24 maxlen: 24
                          193.200.72.0/22 maxlen: 22
                          193.200.72.0/24 maxlen: 24
                          193.200.73.0/24 maxlen: 24
                          193.200.74.0/24 maxlen: 24
                          193.200.75.0/24 maxlen: 24
                          217.172.24.0/22 maxlen: 22
                          217.172.24.0/24 maxlen: 24
                          217.172.27.0/24 maxlen: 24
                          217.172.25.0/24 maxlen: 24
                          217.172.26.0/24 maxlen: 24
                          185.78.30.0/24 maxlen: 24
                          185.78.28.0/22 maxlen: 22
                          185.78.31.0/24 maxlen: 24
                          185.78.28.0/24 maxlen: 24
                          185.78.29.0/24 maxlen: 24
                          45.84.224.0/24 maxlen: 24
                          45.84.225.0/24 maxlen: 24
                          45.84.224.0/22 maxlen: 22
                          45.84.226.0/24 maxlen: 24
                          45.84.227.0/24 maxlen: 24
                          185.225.34.0/24 maxlen: 24
                          185.225.32.0/22 maxlen: 22
                          185.225.35.0/24 maxlen: 24
                          185.225.32.0/24 maxlen: 24
                          185.225.33.0/24 maxlen: 24
                          185.50.24.0/24 maxlen: 24
                          185.50.24.0/22 maxlen: 22
                          45.90.32.0/24 maxlen: 24
                          45.90.33.0/24 maxlen: 24
                          45.90.34.0/24 maxlen: 24
                          45.90.35.0/24 maxlen: 24
                          45.90.32.0/22 maxlen: 22
                          5.101.153.244/32 maxlen: 32
                          87.236.17.122/32 maxlen: 32
                          5.101.153.242/32 maxlen: 32
                          185.50.25.0/24 maxlen: 24
                          185.50.26.0/24 maxlen: 24
                          185.50.27.0/24 maxlen: 24
                          45.9.40.0/22 maxlen: 24
                          45.9.40.0/24 maxlen: 24
                          62.217.177.0/24 maxlen: 24
                          62.217.178.0/24 maxlen: 24
                          62.217.179.0/24 maxlen: 24
                          62.217.176.0/24 maxlen: 24
                          62.217.176.0/21 maxlen: 21
                          62.217.183.0/24 maxlen: 24
                          62.217.180.0/24 maxlen: 24
                          62.217.181.0/24 maxlen: 24
                          62.217.182.0/24 maxlen: 24
                          45.130.42.0/24 maxlen: 24
                          45.130.43.0/24 maxlen: 24
                          45.130.40.0/22 maxlen: 22
                          45.130.40.0/24 maxlen: 24
                          45.130.41.0/24 maxlen: 24
                          193.176.76.0/24 maxlen: 24
                          193.176.77.0/24 maxlen: 24
                          193.176.78.0/24 maxlen: 24
                          193.176.76.0/22 maxlen: 22
                          193.176.79.0/24 maxlen: 24
                          5.101.154.191/32 maxlen: 32
                          31.129.96.0/20 maxlen: 20
                          31.129.98.0/24 maxlen: 24
                          31.129.96.0/24 maxlen: 24
                          87.236.16.0/24 maxlen: 24
                          87.236.17.0/24 maxlen: 24
                          87.236.16.0/21 maxlen: 21
                          87.236.21.0/24 maxlen: 24
                          87.236.22.0/24 maxlen: 24
                          87.236.23.0/24 maxlen: 24
                          87.236.18.0/24 maxlen: 24
                          87.236.19.0/24 maxlen: 24
                          87.236.20.0/24 maxlen: 24
                          185.155.118.0/24 maxlen: 24
                          5.101.152.0/24 maxlen: 24
                          5.101.152.0/21 maxlen: 21
                          5.101.153.0/24 maxlen: 24
                          5.101.154.0/24 maxlen: 24
                          5.101.155.0/24 maxlen: 24
                          5.101.156.0/24 maxlen: 24
                          5.101.157.0/24 maxlen: 24
                          5.101.158.0/24 maxlen: 24
                          5.101.159.0/24 maxlen: 24
                          2a04:bac0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ca:a5:40:b5:f3:c5:f5:be:d2:8b:72:9c:1c:12:90:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Mar 10 08:31:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ea82cf15fe63d202c0e006ef3c9607ac30854ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:a3:1b:fd:b5:88:8e:76:aa:58:69:c4:f9:
                    9d:3c:d2:10:87:98:37:ac:8a:54:65:97:88:e3:3e:
                    be:ee:3b:4f:cb:9a:65:c1:d0:3c:6b:58:d1:c4:72:
                    14:46:f8:ce:ee:2c:35:66:85:38:b2:f7:0f:aa:84:
                    89:3f:74:26:40:76:61:a7:ba:e6:80:9e:5f:05:8c:
                    ba:4f:f3:6f:9a:a5:02:74:59:ca:cf:a3:35:ae:b1:
                    99:94:6b:23:ef:0e:b5:b7:78:58:3e:95:69:d3:82:
                    18:ce:ca:ad:0f:1d:54:c1:b3:1e:cc:0a:1c:31:49:
                    f6:64:d5:1a:5f:c6:95:1c:ce:b4:49:22:fb:8d:29:
                    14:b2:f5:a3:51:09:fc:a2:3a:55:01:46:58:a7:d3:
                    f9:66:8a:0c:68:ab:db:2f:6e:62:1c:b1:16:66:f0:
                    32:98:e9:16:a4:27:af:c2:31:08:e1:41:5d:03:68:
                    b6:bc:e0:76:70:22:99:7d:f8:e8:8c:c9:90:56:e8:
                    53:88:45:51:01:26:3f:26:e6:8c:09:e4:c1:1e:07:
                    d5:e8:a6:db:b8:c7:7f:2b:9b:70:85:71:43:81:99:
                    1e:a4:22:4d:79:34:42:4a:93:8b:ba:8b:7e:98:04:
                    38:63:a0:52:52:9d:38:92:bd:00:a1:6a:e6:15:dc:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A8:2C:F1:5F:E6:3D:20:2C:0E:00:6E:F3:C9:60:7A:C3:08:54:AE
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Tqgs8V_mPSAsDgBu88lgesMIVK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.101.152.0/21
                  5.181.108.0/22
                  31.129.96.0/20
                  45.9.40.0/22
                  45.12.16.0/22
                  45.67.56.0/22
                  45.80.68.0/22
                  45.84.224.0/22
                  45.90.32.0/22
                  45.130.40.0/22
                  45.141.76.0/22
                  45.146.164.0/22
                  45.147.176.0/22
                  62.113.96.0/20
                  62.217.176.0/21
                  81.200.112.0/21
                  87.236.16.0/21
                  91.106.200.0/21
                  95.214.60.0/22
                  185.19.204.0/22
                  185.50.24.0/22
                  185.78.28.0/22
                  185.155.118.0/24
                  185.225.32.0/22
                  193.168.46.0-193.168.49.255
                  193.176.76.0/22
                  193.200.72.0/22
                  213.139.208.0/22
                  217.172.24.0/22
                IPv6:
                  2a04:bac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:04:1d:c1:ff:7a:74:79:6d:83:cf:17:72:62:9f:82:27:
         59:08:37:3c:b0:93:dc:8e:e4:3a:0d:45:06:d5:90:1a:60:9b:
         91:30:c0:b0:f2:26:e5:c6:e1:20:d9:98:c6:1e:07:fe:44:9e:
         e6:91:70:cb:72:a4:a6:d3:d3:5d:c9:f6:81:c6:cd:68:8f:84:
         80:c0:2e:b9:e9:97:a8:fe:bd:98:3c:a5:df:eb:a0:01:7a:05:
         81:63:b1:a8:3c:95:5a:05:44:1b:02:4e:c0:33:8c:6f:9d:16:
         bb:c2:13:d4:82:de:ea:58:bb:1e:78:c4:b9:3c:3d:46:e4:6a:
         7a:f4:95:bf:ed:3f:c9:f5:e4:85:23:80:c3:b4:24:33:18:f0:
         81:19:54:e6:64:46:e9:a4:cd:43:f8:89:f7:0d:6d:64:1b:30:
         50:51:9e:34:95:20:4b:7d:58:6c:c8:0b:c8:94:c2:fa:41:39:
         1b:20:7b:6c:9c:1b:ed:dc:30:63:38:dc:1d:1d:bc:78:ae:45:
         71:e0:5d:c7:28:df:dd:68:71:03:20:30:9a:49:3d:18:54:6e:
         fe:81:33:59:99:9c:a4:b5:61:14:79:42:d5:bd:1d:f8:d5:2f:
         8e:41:7b:53:14:17:7d:0b:1b:40:22:b4:58:74:ba:96:2b:2b:
         35:ec:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-ams.rpki-client.org