Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QvO0yahp9vZ4Z2HT9PYvPNz9Feg.roa
File:                     QvO0yahp9vZ4Z2HT9PYvPNz9Feg.roa (raw, json)
Hash identifier:          w0EtpnmncVLJdianskzFAf3RM5NP4DS5qtSsfn3Cro0=
Subject key identifier:   42:F3:B4:C9:A8:69:F6:F6:78:67:61:D3:F4:F6:2F:3C:DC:FD:15:E8
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0185F315C8111344F6B344EB166B46AECF0B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QvO0yahp9vZ4Z2HT9PYvPNz9Feg.roa
Signing time:             Fri 27 Jan 2023 11:56:09 +0000
ROA not before:           Fri 27 Jan 2023 11:56:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29648
IP address blocks:        31.173.119.0/24 maxlen: 24
                          77.233.160.0/19 maxlen: 19
                          77.233.161.0/24 maxlen: 24
                          77.233.164.0/24 maxlen: 24
                          77.233.160.0/24 maxlen: 24
                          77.233.162.0/24 maxlen: 24
                          77.233.166.0/24 maxlen: 24
                          77.233.167.0/24 maxlen: 24
                          77.233.170.0/24 maxlen: 24
                          31.173.104.0/24 maxlen: 24
                          31.173.105.0/24 maxlen: 24
                          31.173.112.0/24 maxlen: 24
                          31.173.108.0/24 maxlen: 24
                          31.173.109.0/24 maxlen: 24
                          31.173.110.0/24 maxlen: 24
                          31.173.106.0/24 maxlen: 24
                          31.173.111.0/24 maxlen: 24
                          31.173.107.0/24 maxlen: 24
                          31.173.116.0/24 maxlen: 24
                          31.173.113.0/24 maxlen: 24
                          31.173.117.0/24 maxlen: 24
                          31.173.114.0/24 maxlen: 24
                          31.173.118.0/24 maxlen: 24
                          31.173.115.0/24 maxlen: 24
                          77.233.173.0/24 maxlen: 24
                          77.233.178.0/24 maxlen: 24
                          77.233.185.0/24 maxlen: 24
                          77.233.181.0/24 maxlen: 24
                          77.233.180.0/24 maxlen: 24
                          77.233.186.0/24 maxlen: 24
                          77.233.182.0/24 maxlen: 24
                          77.233.188.0/24 maxlen: 24
                          77.233.191.0/24 maxlen: 24
                          77.233.190.0/24 maxlen: 24
                          188.170.98.0/24 maxlen: 24
                          86.109.192.0/19 maxlen: 19
                          86.109.192.0/20 maxlen: 20
                          188.170.96.0/24 maxlen: 24
                          188.170.97.0/24 maxlen: 24
                          188.170.102.0/24 maxlen: 24
                          86.109.193.0/24 maxlen: 24
                          188.170.103.0/24 maxlen: 24
                          188.170.99.0/24 maxlen: 24
                          188.170.100.0/24 maxlen: 24
                          188.170.104.0/24 maxlen: 24
                          86.109.195.0/24 maxlen: 24
                          188.170.101.0/24 maxlen: 24
                          188.170.105.0/24 maxlen: 24
                          188.170.110.0/24 maxlen: 24
                          188.170.106.0/24 maxlen: 24
                          188.170.111.0/24 maxlen: 24
                          188.170.107.0/24 maxlen: 24
                          86.109.200.0/23 maxlen: 23
                          188.170.108.0/24 maxlen: 24
                          188.170.109.0/24 maxlen: 24
                          188.170.112.0/24 maxlen: 24
                          188.170.114.0/24 maxlen: 24
                          86.109.213.0/24 maxlen: 24
                          188.170.115.0/24 maxlen: 24
                          188.170.116.0/24 maxlen: 24
                          86.109.212.0/24 maxlen: 24
                          86.109.208.0/24 maxlen: 24
                          188.170.118.0/24 maxlen: 24
                          188.170.117.0/24 maxlen: 24
                          188.170.113.0/24 maxlen: 24
                          86.109.210.0/24 maxlen: 24
                          188.170.119.0/24 maxlen: 24
                          188.170.123.0/24 maxlen: 24
                          86.109.216.0/24 maxlen: 24
                          188.170.122.0/24 maxlen: 24
                          86.109.215.0/24 maxlen: 24
                          86.109.218.0/23 maxlen: 23
                          188.170.125.0/24 maxlen: 24
                          188.170.121.0/24 maxlen: 24
                          188.170.120.0/24 maxlen: 24
                          86.109.214.0/24 maxlen: 24
                          188.170.124.0/24 maxlen: 24
                          188.170.127.0/24 maxlen: 24
                          86.109.220.0/24 maxlen: 24
                          188.170.126.0/24 maxlen: 24
                          86.109.223.0/24 maxlen: 24
                          86.109.222.0/24 maxlen: 24
                          78.109.120.0/24 maxlen: 24
                          78.109.121.0/24 maxlen: 24
                          178.176.98.0/24 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          178.176.96.0/24 maxlen: 24
                          178.176.97.0/24 maxlen: 24
                          178.176.102.0/24 maxlen: 24
                          178.176.103.0/24 maxlen: 24
                          178.176.99.0/24 maxlen: 24
                          178.176.100.0/24 maxlen: 24
                          178.176.101.0/24 maxlen: 24
                          178.176.118.0/24 maxlen: 24
                          178.176.114.0/24 maxlen: 24
                          178.176.115.0/24 maxlen: 24
                          178.176.116.0/24 maxlen: 24
                          178.176.117.0/24 maxlen: 24
                          178.176.122.0/24 maxlen: 24
                          178.176.123.0/24 maxlen: 24
                          178.176.119.0/24 maxlen: 24
                          178.176.124.0/24 maxlen: 24
                          178.176.120.0/24 maxlen: 24
                          178.176.125.0/24 maxlen: 24
                          178.176.121.0/24 maxlen: 24
                          178.176.126.0/24 maxlen: 24
                          178.176.127.0/24 maxlen: 24
                          83.169.217.0/24 maxlen: 24
                          83.169.218.0/24 maxlen: 24
                          83.169.219.0/24 maxlen: 24
                          83.169.220.0/24 maxlen: 24
                          83.169.221.0/24 maxlen: 24
                          83.169.222.0/24 maxlen: 24
                          83.169.223.0/24 maxlen: 24
                          188.94.168.0/24 maxlen: 24
                          188.94.172.0/24 maxlen: 24
                          188.94.169.0/24 maxlen: 24
                          188.94.170.0/24 maxlen: 24
                          188.94.171.0/24 maxlen: 24
                          188.94.173.0/24 maxlen: 24
                          188.94.174.0/24 maxlen: 24
                          188.94.175.0/24 maxlen: 24
                          217.115.80.0/20 maxlen: 20
                          217.115.81.0/24 maxlen: 24
                          217.115.80.0/24 maxlen: 24
                          217.115.91.0/24 maxlen: 24
                          2a03:d005::/40 maxlen: 40
                          2a03:d000:9004::/46 maxlen: 46

Validation:               Failed, certificate revoked on Wed 01 Mar 2023 11:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f3:15:c8:11:13:44:f6:b3:44:eb:16:6b:46:ae:cf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan 27 11:56:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42f3b4c9a869f6f6786761d3f4f62f3cdcfd15e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:76:66:7d:c2:9f:f4:93:1c:16:45:3a:38:
                    c3:be:53:f4:24:88:9d:17:c7:78:9b:ec:b7:e3:c8:
                    24:5d:1b:51:ab:19:ac:51:c6:4c:39:52:da:63:94:
                    3a:4c:c4:ff:e2:66:ea:47:83:53:2c:37:bf:2b:36:
                    0f:ea:8d:d1:15:a2:1d:1c:72:e5:2e:54:9d:29:e6:
                    bc:a4:1a:7d:60:36:e7:bf:6e:4b:83:5c:1e:e4:ab:
                    58:a5:b5:bc:d8:aa:01:95:c0:48:d9:97:2d:f7:08:
                    b6:cb:65:6c:22:ca:68:eb:0d:cc:00:cd:d1:67:40:
                    d5:d2:f2:34:b0:e8:a1:ab:58:ec:64:58:72:c6:91:
                    8b:6d:4d:fc:f4:e1:c4:f5:3e:d1:76:fa:76:ab:73:
                    3c:f2:18:8d:27:2f:44:55:6e:7e:de:ab:76:69:41:
                    d9:03:2c:f2:be:49:62:97:81:23:2c:5e:64:ea:c0:
                    2f:73:ee:b6:e8:aa:e7:c9:d6:79:ca:d3:39:5a:32:
                    ba:4e:67:d7:2a:f0:8e:90:0f:88:fc:9d:00:36:b1:
                    0f:b9:f9:af:d1:23:8d:50:7a:7a:10:26:03:b1:67:
                    4d:eb:c8:23:16:4b:d1:c0:1d:8b:4a:04:68:4e:46:
                    94:ee:58:b9:7d:b4:cc:5f:b8:4c:6a:8e:e9:b7:aa:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F3:B4:C9:A8:69:F6:F6:78:67:61:D3:F4:F6:2F:3C:DC:FD:15:E8
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QvO0yahp9vZ4Z2HT9PYvPNz9Feg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.104.0-31.173.119.255
                  77.233.160.0/19
                  78.109.120.0/23
                  83.169.217.0-83.169.223.255
                  86.109.192.0/19
                  178.176.96.0/21
                  178.176.114.0-178.176.127.255
                  188.94.168.0/21
                  188.170.96.0/19
                  195.149.111.0/24
                  217.115.80.0/20
                IPv6:
                  2a03:d000:9004::/46
                  2a03:d005::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:65:4e:e0:e3:78:25:77:e2:10:f1:0a:f5:e5:03:75:bf:
         9a:d2:23:c2:7b:eb:4a:48:d0:33:79:6a:07:87:2a:4c:ff:03:
         65:c1:73:05:3c:46:d7:5f:5c:68:6e:a0:87:69:59:09:92:1c:
         2c:9d:a8:a8:42:c1:dd:1f:fd:27:a3:0e:01:8e:10:c1:63:e8:
         08:79:90:86:5b:64:fa:16:20:13:ff:77:d0:57:36:6b:20:cd:
         67:51:f2:a3:9e:97:7b:0e:e8:b7:a3:f8:4e:00:00:41:79:22:
         18:df:a6:02:6e:bc:89:bc:b7:61:bc:e8:c8:be:17:23:5c:8e:
         d2:ef:56:3d:38:7e:95:de:68:c1:f9:fc:e0:6c:ea:4b:5f:f9:
         af:4d:c5:d4:2e:cd:f8:24:92:91:c4:0f:9d:8c:7d:ff:92:09:
         44:98:1a:05:a0:6b:20:f8:1e:b2:14:e7:7d:7b:63:a5:fe:f6:
         6e:63:b4:8a:5f:aa:bb:ea:d4:ec:25:61:1e:80:86:bb:24:4e:
         33:36:4d:3a:eb:95:f6:6f:da:c2:1a:cf:4b:71:45:b5:79:b3:
         a8:c0:67:ab:b5:df:57:4a:71:bb:4e:74:4d:0a:27:b1:e5:b5:
         be:76:c0:71:43:d2:7d:73:e6:db:82:44:5d:1c:a4:78:db:31:
         6d:06:73:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org