Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/gFkHlcLQkvLLFbyqSFR7UxsC1OU.roa
File:                     gFkHlcLQkvLLFbyqSFR7UxsC1OU.roa (raw, json)
Hash identifier:          qAaWyLBQc7gyD4WwFq9iknFfnOy6i/rTgwI2xkf/KV8=
Subject key identifier:   80:59:07:95:C2:D0:92:F2:CB:15:BC:AA:48:54:7B:53:1B:02:D4:E5
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       019199C704FF8C58608CFD5D0DA07D1EC522
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/gFkHlcLQkvLLFbyqSFR7UxsC1OU.roa
Signing time:             Wed 28 Aug 2024 16:17:22 +0000
ROA not before:           Wed 28 Aug 2024 16:17:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56630
IP address blocks:        5.182.228.0/22 maxlen: 24
                          5.188.172.0/24 maxlen: 24
                          5.188.173.0/24 maxlen: 24
                          5.188.180.0/22 maxlen: 24
                          31.40.216.0/22 maxlen: 24
                          45.135.120.0/22 maxlen: 24
                          45.141.8.0/22 maxlen: 24
                          45.150.232.0/22 maxlen: 24
                          77.72.16.0/23 maxlen: 24
                          77.72.18.0/23 maxlen: 24
                          77.72.20.0/23 maxlen: 24
                          77.72.22.0/23 maxlen: 24
                          88.210.38.0/24 maxlen: 24
                          88.210.39.0/24 maxlen: 24
                          88.218.240.0/22 maxlen: 24
                          89.34.238.0/24 maxlen: 24
                          89.36.160.0/24 maxlen: 24
                          89.36.161.0/24 maxlen: 24
                          91.192.80.0/24 maxlen: 24
                          91.192.83.0/24 maxlen: 24
                          91.201.64.0/22 maxlen: 24
                          92.119.88.0/22 maxlen: 24
                          93.189.56.0/24 maxlen: 24
                          93.189.57.0/24 maxlen: 24
                          93.189.58.0/24 maxlen: 24
                          93.189.60.0/24 maxlen: 24
                          93.189.61.0/24 maxlen: 24
                          93.189.62.0/24 maxlen: 24
                          93.189.63.0/24 maxlen: 24
                          103.82.100.0/23 maxlen: 23
                          103.97.88.0/24 maxlen: 24
                          103.97.89.0/24 maxlen: 24
                          103.97.90.0/24 maxlen: 24
                          103.253.37.0/24 maxlen: 24
                          185.6.12.0/23 maxlen: 24
                          185.6.14.0/23 maxlen: 24
                          185.35.220.0/23 maxlen: 23
                          185.110.216.0/23 maxlen: 23
                          185.131.64.0/24 maxlen: 24
                          185.131.65.0/24 maxlen: 24
                          185.131.66.0/24 maxlen: 24
                          185.131.67.0/24 maxlen: 24
                          185.135.84.0/22 maxlen: 24
                          185.140.12.0/22 maxlen: 24
                          185.140.208.0/24 maxlen: 24
                          185.140.209.0/24 maxlen: 24
                          185.224.248.0/24 maxlen: 24
                          185.224.250.0/24 maxlen: 24
                          185.246.152.0/24 maxlen: 24
                          185.246.153.0/24 maxlen: 24
                          185.246.154.0/24 maxlen: 24
                          185.246.155.0/24 maxlen: 24
                          194.59.46.0/24 maxlen: 24
                          194.59.59.0/24 maxlen: 24
                          194.59.142.0/24 maxlen: 24
                          194.59.155.0/24 maxlen: 24
                          195.238.124.0/22 maxlen: 24
                          212.23.200.0/24 maxlen: 24
                          213.183.32.0/24 maxlen: 24
                          213.183.33.0/24 maxlen: 24
                          213.183.36.0/24 maxlen: 24
                          213.183.37.0/24 maxlen: 24
                          213.183.38.0/24 maxlen: 24
                          213.183.39.0/24 maxlen: 24
                          213.183.40.0/24 maxlen: 24
                          213.183.41.0/24 maxlen: 24
                          213.183.42.0/24 maxlen: 24
                          213.183.43.0/24 maxlen: 24
                          213.183.44.0/24 maxlen: 24
                          213.183.45.0/24 maxlen: 24
                          213.183.46.0/24 maxlen: 24
                          213.183.47.0/24 maxlen: 24
                          213.183.48.0/24 maxlen: 24
                          213.183.49.0/24 maxlen: 24
                          213.183.50.0/24 maxlen: 24
                          213.183.51.0/24 maxlen: 24
                          213.183.52.0/24 maxlen: 24
                          213.183.53.0/24 maxlen: 24
                          213.183.58.0/24 maxlen: 24
                          213.183.59.0/24 maxlen: 24
                          213.183.60.0/24 maxlen: 24
                          213.183.61.0/24 maxlen: 24
                          213.183.62.0/24 maxlen: 24
                          213.183.63.0/24 maxlen: 24
                          213.226.68.0/22 maxlen: 24
                          217.30.8.0/22 maxlen: 24
                          2a06:f900::/36 maxlen: 36
                          2a06:f900:4000::/36 maxlen: 36
                          2a06:f901::/36 maxlen: 36
                          2a06:f902::/36 maxlen: 36
                          2a06:f902:c000::/36 maxlen: 36
                          2a06:f903::/36 maxlen: 36
                          2a06:f904::/36 maxlen: 36
                          2a06:f905::/36 maxlen: 36
                          2a06:f906::/36 maxlen: 36
                          2a06:f907::/36 maxlen: 36
                          2a06:f907:4000::/36 maxlen: 36
                          2a0d:8400::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 00:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:99:c7:04:ff:8c:58:60:8c:fd:5d:0d:a0:7d:1e:c5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Aug 28 16:17:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=80590795c2d092f2cb15bcaa48547b531b02d4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:8e:a7:8a:2a:38:42:ed:d0:14:de:1a:10:
                    8d:1b:3d:66:5d:35:cb:cd:6c:36:07:30:4a:72:29:
                    78:99:78:17:30:dc:e9:32:00:83:4a:db:0b:4c:2d:
                    67:09:13:93:33:29:8f:5d:0e:5b:bb:de:fe:90:64:
                    ec:4c:2b:fd:a1:a3:e4:15:03:79:c4:2c:c2:57:7b:
                    03:44:bf:4b:4f:36:50:7b:c2:50:fa:46:de:23:65:
                    f0:98:d9:fc:98:7a:82:27:15:93:c3:a0:9d:32:1e:
                    8a:cf:ab:da:51:53:fc:0e:55:c3:19:07:a2:f2:31:
                    95:72:33:69:ee:0f:ac:93:19:fe:ab:d2:68:30:8b:
                    32:30:0a:a3:1f:b7:f2:ac:b0:73:ad:3b:c2:0f:f2:
                    2a:e7:46:6e:b7:88:2c:cf:af:78:df:ad:0d:ed:21:
                    55:06:a1:49:2c:e9:23:2e:ab:b8:02:88:4c:fa:8a:
                    84:c9:00:64:e3:1b:e6:ce:b4:9f:0d:14:31:fe:54:
                    72:8e:47:40:de:a5:2f:78:b0:6a:b0:62:dd:b7:ae:
                    ba:82:6e:9d:14:f3:41:c7:c2:e3:e5:25:f7:1a:d6:
                    b3:1d:d2:e9:6b:ae:1f:70:c0:7e:0c:94:63:bf:26:
                    a6:e6:5f:00:8f:50:dd:41:a7:61:ee:8d:25:c6:9f:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:59:07:95:C2:D0:92:F2:CB:15:BC:AA:48:54:7B:53:1B:02:D4:E5
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/gFkHlcLQkvLLFbyqSFR7UxsC1OU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.228.0/22
                  5.188.172.0/23
                  5.188.180.0/22
                  31.40.216.0/22
                  45.135.120.0/22
                  45.141.8.0/22
                  45.150.232.0/22
                  77.72.16.0/21
                  88.210.38.0/23
                  88.218.240.0/22
                  89.34.238.0/24
                  89.36.160.0/23
                  91.192.80.0/24
                  91.192.83.0/24
                  91.201.64.0/22
                  92.119.88.0/22
                  93.189.56.0-93.189.58.255
                  93.189.60.0/22
                  103.82.100.0/23
                  103.97.88.0-103.97.90.255
                  103.253.37.0/24
                  185.6.12.0/22
                  185.35.220.0/23
                  185.110.216.0/23
                  185.131.64.0/22
                  185.135.84.0/22
                  185.140.12.0/22
                  185.140.208.0/23
                  185.224.248.0/24
                  185.224.250.0/24
                  185.246.152.0/22
                  194.59.46.0/24
                  194.59.59.0/24
                  194.59.142.0/24
                  194.59.155.0/24
                  195.238.124.0/22
                  212.23.200.0/24
                  213.183.32.0/23
                  213.183.36.0-213.183.53.255
                  213.183.58.0-213.183.63.255
                  213.226.68.0/22
                  217.30.8.0/22
                IPv6:
                  2a06:f900::/36
                  2a06:f900:4000::/36
                  2a06:f901::/36
                  2a06:f902::/36
                  2a06:f902:c000::/36
                  2a06:f903::/36
                  2a06:f904::/36
                  2a06:f905::/36
                  2a06:f906::/36
                  2a06:f907::/36
                  2a06:f907:4000::/36
                  2a0d:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:09:fd:0a:2f:06:01:4c:fb:52:4d:5e:7f:97:7b:e0:9b:
         12:79:dc:00:6b:54:fe:0b:bb:14:b1:1f:f8:26:f3:65:54:8a:
         25:1d:75:e7:ae:1d:05:42:c8:fa:bf:fa:ea:2a:f2:25:f4:08:
         43:f1:42:31:e3:cb:d2:80:bf:50:f2:72:22:61:ac:5e:8b:8c:
         ac:ab:56:4e:17:6e:f3:0b:68:5e:76:8e:08:7e:ca:ff:52:ac:
         4a:22:dc:d3:55:6f:e5:d7:20:a0:03:cb:b2:70:a8:b0:2c:33:
         75:8e:a7:30:cd:bb:48:a1:f8:a6:1b:94:f7:75:21:f1:71:d8:
         93:e0:99:ee:b0:7a:cc:1c:03:c9:3a:90:fc:db:03:0e:f3:c9:
         02:fc:34:45:67:dc:43:d9:11:7b:c8:b8:e4:f2:ba:dc:28:dc:
         5b:af:93:cf:8a:fb:c0:5d:31:85:80:72:d7:91:6c:29:92:93:
         a4:32:9a:97:88:74:ae:3e:67:13:c2:05:dd:6c:be:6c:21:ea:
         8e:71:fd:5e:85:e6:dd:68:5d:60:e8:76:e3:08:1c:0d:b1:d4:
         86:9c:c8:e5:7f:98:29:c4:17:79:d9:8c:2b:28:97:b4:6b:69:
         f5:5a:c0:b5:5e:5d:3a:f6:82:f3:18:8b:cd:81:d6:e1:dc:42:
         8d:2d:4f:e9
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 16 01:36:28 2024 by rpki-client on console-ams.rpki-client.org