Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/LOwVEoeyDMM6uJDgoZmaQLGjjQ4.roa
File:                     LOwVEoeyDMM6uJDgoZmaQLGjjQ4.roa (raw, json)
Hash identifier:          O3b/1+L1/HZtsxx8j4KLqUAyWcSsDljvBp+yW7ZExgw=
Subject key identifier:   2C:EC:15:12:87:B2:0C:C3:3A:B8:90:E0:A1:99:9A:40:B1:A3:8D:0E
Certificate issuer:       /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial:       0186023E60CC4560D49C170F560E1FE75C5C
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/LOwVEoeyDMM6uJDgoZmaQLGjjQ4.roa
Signing time:             Mon 30 Jan 2023 10:34:47 +0000
ROA not before:           Mon 30 Jan 2023 10:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43915
IP address blocks:        87.117.68.0/23 maxlen: 23
                          194.105.134.0/23 maxlen: 24
                          194.145.242.0/23 maxlen: 24
                          195.206.172.0/22 maxlen: 24
                          185.147.184.0/22 maxlen: 22
                          217.14.184.0/21 maxlen: 21
                          109.224.226.0/23 maxlen: 24
                          178.248.128.0/21 maxlen: 21
                          109.224.234.0/23 maxlen: 24
                          109.224.240.0/23 maxlen: 24
                          147.189.156.0/22 maxlen: 24
                          185.161.4.0/22 maxlen: 22
                          87.117.64.0/22 maxlen: 22
                          144.178.104.0/23 maxlen: 23
                          144.178.118.0/23 maxlen: 23
                          94.154.184.0/22 maxlen: 22
                          193.35.146.0/23 maxlen: 23
                          194.146.160.0/22 maxlen: 24
                          213.225.224.0/22 maxlen: 24
                          217.20.244.0/22 maxlen: 24
                          79.135.122.0/23 maxlen: 24
                          185.231.136.0/21 maxlen: 21
                          185.23.254.0/23 maxlen: 24
                          45.66.36.0/22 maxlen: 22
                          144.178.252.0/23 maxlen: 23
                          2a07:5940::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 10 Mar 2023 13:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:3e:60:cc:45:60:d4:9c:17:0f:56:0e:1f:e7:5c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
        Validity
            Not Before: Jan 30 10:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cec151287b20cc33ab890e0a1999a40b1a38d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:ac:d2:72:30:a5:f9:d6:92:b6:8a:43:dd:
                    d6:7b:3a:fc:78:15:f4:c8:18:27:28:f5:bf:dd:a7:
                    2f:f2:e5:2b:07:bf:70:27:39:e6:10:7e:10:15:09:
                    05:af:ad:2c:aa:9d:a2:47:a6:bc:b8:71:b0:8d:dc:
                    8f:a1:08:13:50:24:86:2b:30:4b:86:d1:e5:49:a3:
                    cf:2a:d1:fa:1f:18:a8:f2:ef:80:1a:ad:f8:66:39:
                    32:21:91:71:19:2a:4e:2b:6c:f9:64:e3:f5:23:24:
                    34:c9:ce:ed:7c:ce:69:70:7f:4c:9a:8f:f2:54:a7:
                    66:8d:7c:0b:0c:6e:9c:e6:6f:75:67:a5:f9:63:81:
                    b5:55:95:7a:a9:e5:cf:d5:87:e9:2e:79:89:f8:38:
                    bd:25:e4:c0:ec:94:c7:93:bc:02:e7:23:27:d6:ce:
                    bc:62:72:74:f1:bb:c0:e6:e4:77:b3:63:21:e5:50:
                    1f:63:fe:b4:eb:62:1d:db:1c:fb:6a:e7:65:de:18:
                    b3:a1:3d:f4:c7:f3:f6:1a:fd:e6:05:09:61:95:3b:
                    3f:75:44:f9:c5:44:7b:2d:0e:44:3e:b7:97:69:ea:
                    9b:85:48:fe:e3:52:5a:26:99:10:d9:62:2a:04:b9:
                    63:ca:66:a9:19:53:14:46:b2:f3:34:98:98:b7:80:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EC:15:12:87:B2:0C:C3:3A:B8:90:E0:A1:99:9A:40:B1:A3:8D:0E
            X509v3 Authority Key Identifier:
                keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/LOwVEoeyDMM6uJDgoZmaQLGjjQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.36.0/22
                  79.135.122.0/23
                  87.117.64.0-87.117.69.255
                  94.154.184.0/22
                  109.224.226.0/23
                  109.224.234.0/23
                  109.224.240.0/23
                  144.178.104.0/23
                  144.178.118.0/23
                  144.178.252.0/23
                  147.189.156.0/22
                  178.248.128.0/21
                  185.23.254.0/23
                  185.147.184.0/22
                  185.161.4.0/22
                  185.231.136.0/21
                  193.35.146.0/23
                  194.105.134.0/23
                  194.145.242.0/23
                  194.146.160.0/22
                  195.206.172.0/22
                  213.225.224.0/22
                  217.14.184.0/21
                  217.20.244.0/22
                IPv6:
                  2a07:5940::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:a2:61:f0:9b:9a:fb:98:ac:2f:0d:cf:8d:ea:59:c8:86:6f:
         13:d2:48:e9:cd:36:dc:73:0a:80:88:df:2d:3f:6e:a5:ec:2a:
         dc:f7:89:7e:d9:44:7b:aa:15:47:34:a5:7d:e2:b4:42:43:09:
         fc:b1:87:38:a0:93:1e:12:e5:cd:5d:13:6a:9c:64:57:5c:43:
         75:68:ed:66:d0:a8:a3:56:36:42:ec:04:25:a3:26:7d:1d:b6:
         b0:95:94:4c:ce:a8:f7:e1:20:bf:ba:8d:2e:33:7c:74:7e:1c:
         fb:36:79:87:33:0e:c3:3f:72:36:27:68:d7:9b:65:48:28:6a:
         16:15:e7:62:c0:9b:e6:29:78:c1:8a:d4:e4:a1:79:36:68:8b:
         f2:28:c6:bb:ba:7a:a6:19:59:97:28:a3:b9:cd:67:be:fe:ae:
         8d:66:67:87:db:11:12:da:e1:18:ad:99:47:bb:e1:8f:10:28:
         20:5e:1a:70:c8:7a:a6:f6:b0:0e:62:91:ed:56:b1:61:74:3c:
         8c:e4:3b:cb:ed:8b:5a:76:e6:2f:30:35:44:7f:ed:90:a3:5d:
         3c:68:9f:28:cc:6c:3b:a5:82:ce:33:dc:5c:6c:58:01:7c:8d:
         e3:0d:1f:91:8f:aa:11:fd:9c:0a:c6:24:cf:67:b7:97:89:d7:
         8d:3e:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org