Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Kdl2nNxtGC6_4FYS6jGNa_3xNHU.roa
File:                     Kdl2nNxtGC6_4FYS6jGNa_3xNHU.roa (raw, json)
Hash identifier:          Ng8c2R/IqbLTqZDF32l8agY3SkS8cIf2drrhmbS3rEw=
Subject key identifier:   29:D9:76:9C:DC:6D:18:2E:BF:E0:56:12:EA:31:8D:6B:FD:F1:34:75
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       018779CD7927317F4D564C2855F96EFB6551
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Kdl2nNxtGC6_4FYS6jGNa_3xNHU.roa
Signing time:             Thu 13 Apr 2023 08:48:41 +0000
ROA not before:           Thu 13 Apr 2023 08:48:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35753
IP address blocks:        77.220.116.0/22 maxlen: 24
                          2a00:5400:e327::/48 maxlen: 48
                          2a00:5400:e302::/48 maxlen: 48
                          2a00:5400:e082::/48 maxlen: 48
                          2a00:5400:e060::/48 maxlen: 48
                          2a00:5400:e260::/48 maxlen: 48
                          2a00:5400:e296::/48 maxlen: 48
                          2a00:5400:e016::/48 maxlen: 48
                          2a00:5400:e096::/48 maxlen: 48
                          2a00:5400:e071::/48 maxlen: 48
                          2a00:5400:e324::/48 maxlen: 48
                          2a00:5400:e335::/48 maxlen: 48
                          2a00:5400:e138::/48 maxlen: 48
                          2a00:5400:e338::/48 maxlen: 48
                          2a00:5400:e293::/48 maxlen: 48
                          2a00:5400:e093::/48 maxlen: 48
                          2a00:5400:e013::/48 maxlen: 48
                          2a00:5400:e057::/48 maxlen: 48
                          2a00:5400:e332::/48 maxlen: 48
                          2a00:5400:e090::/48 maxlen: 48
                          2a00:5400:e321::/48 maxlen: 48
                          2a00:5400:e054::/48 maxlen: 48
                          2a00:5400:e065::/48 maxlen: 48
                          2a00:5400:e265::/48 maxlen: 48
                          2a00:5400:e068::/48 maxlen: 48
                          2a00:5400:e268::/48 maxlen: 48
                          2a00:5400:e343::/48 maxlen: 48
                          2a00:5400:e279::/48 maxlen: 48
                          2a00:5400:e079::/48 maxlen: 48
                          2a00:5400:e287::/48 maxlen: 48
                          2a00:5400:e087::/48 maxlen: 48
                          2a00:5400:e062::/48 maxlen: 48
                          2a00:5400:e262::/48 maxlen: 48
                          2a00:5400:e140::/48 maxlen: 48
                          2a00:5400:e276::/48 maxlen: 48
                          2a00:5400:e076::/48 maxlen: 48
                          2a00:5400:e051::/48 maxlen: 48
                          2a00:5400:e284::/48 maxlen: 48
                          2a00:5400:e084::/48 maxlen: 48
                          2a00:5400:e295::/48 maxlen: 48
                          2a00:5400:e015::/48 maxlen: 48
                          2a00:5400:e115::/48 maxlen: 48
                          2a00:5400:e095::/48 maxlen: 48
                          2a00:5400:e298::/48 maxlen: 48
                          2a00:5400:e098::/48 maxlen: 48
                          2a00:5400:e073::/48 maxlen: 48
                          2a00:5400:e329::/48 maxlen: 48
                          2a00:5400:e137::/48 maxlen: 48
                          2a00:5400:e337::/48 maxlen: 48
                          2a00:5400:e092::/48 maxlen: 48
                          2a00:5400:e070::/48 maxlen: 48
                          2a00:5400:e270::/48 maxlen: 48
                          2a00:5400:e326::/48 maxlen: 48
                          2a00:5400:e301::/48 maxlen: 48
                          2a00:5400:e081::/48 maxlen: 48
                          2a00:5400:1234::/48 maxlen: 48
                          2a00:5400:e334::/48 maxlen: 48
                          2a00:5400:e323::/48 maxlen: 48
                          2a00:5400:e059::/48 maxlen: 48
                          2a00:5400:e067::/48 maxlen: 48
                          2a00:5400:e267::/48 maxlen: 48
                          2a00:5400:e342::/48 maxlen: 48
                          2a00:5400:e320::/48 maxlen: 48
                          2a00:5400:e056::/48 maxlen: 48
                          2a00:5400:e331::/48 maxlen: 48
                          2a00:5400:e064::/48 maxlen: 48
                          2a00:5400:e264::/48 maxlen: 48
                          2a00:5400:e075::/48 maxlen: 48
                          2a00:5400:e275::/48 maxlen: 48
                          2a00:5400:e278::/48 maxlen: 48
                          2a00:5400:e078::/48 maxlen: 48
                          2a00:5400:e053::/48 maxlen: 48
                          2a00:5400:e089::/48 maxlen: 48
                          2a00:5400:e297::/48 maxlen: 48
                          2a00:5400:e017::/48 maxlen: 48
                          2a00:5400:e097::/48 maxlen: 48
                          2a00:5400:e072::/48 maxlen: 48
                          2a00:5400:e050::/48 maxlen: 48
                          2a00:5400:e306::/48 maxlen: 48
                          2a00:5400:e086::/48 maxlen: 48
                          2a00:5400:e061::/48 maxlen: 48
                          2a00:5400:e261::/48 maxlen: 48
                          2a00:5400:e294::/48 maxlen: 48
                          2a00:5400:e094::/48 maxlen: 48
                          2a00:5400:e014::/48 maxlen: 48
                          2a00:5400:e325::/48 maxlen: 48
                          2a00:5400:e328::/48 maxlen: 48
                          2a00:5400:e283::/48 maxlen: 48
                          2a00:5400:e083::/48 maxlen: 48
                          2a00:5400:e039::/48 maxlen: 48
                          2a00:5400:e139::/48 maxlen: 48
                          2a00:5400:e322::/48 maxlen: 48
                          2a00:5400:e280::/48 maxlen: 48
                          2a00:5400:e300::/48 maxlen: 48
                          2a00:5400:e080::/48 maxlen: 48
                          2a00:5400:e100::/48 maxlen: 48
                          2a00:5400:e136::/48 maxlen: 48
                          2a00:5400:e336::/48 maxlen: 48
                          2a00:5400:e091::/48 maxlen: 48
                          2a00:5400:e344::/48 maxlen: 48
                          2a00:5400:e055::/48 maxlen: 48
                          2a00:5400:e058::/48 maxlen: 48
                          2a00:5400:e333::/48 maxlen: 48
                          2a00:5400:e069::/48 maxlen: 48
                          2a00:5400:e269::/48 maxlen: 48
                          2a00:5400:e277::/48 maxlen: 48
                          2a00:5400:e077::/48 maxlen: 48
                          2a00:5400:e052::/48 maxlen: 48
                          2a00:5400:e330::/48 maxlen: 48
                          2a00:5400:e066::/48 maxlen: 48
                          2a00:5400:e266::/48 maxlen: 48
                          2a00:5400:e341::/48 maxlen: 48
                          2a00:5400:e074::/48 maxlen: 48
                          2a00:5400:e305::/48 maxlen: 48
                          2a00:5400:e085::/48 maxlen: 48
                          2a00:5400:e288::/48 maxlen: 48
                          2a00:5400:e088::/48 maxlen: 48
                          2a00:5400:e063::/48 maxlen: 48
                          2a00:5400:e263::/48 maxlen: 48
                          2a00:5400:e299::/48 maxlen: 48
                          2a00:5400:e319::/48 maxlen: 48
                          2a00:5400:e099::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:cd:79:27:31:7f:4d:56:4c:28:55:f9:6e:fb:65:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: Apr 13 08:48:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=29d9769cdc6d182ebfe05612ea318d6bfdf13475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:39:4b:bb:9d:33:75:05:bf:fb:35:3f:1c:
                    fb:c4:44:bb:8e:12:12:c8:ee:08:3e:10:d9:7a:5a:
                    63:cc:9d:57:b2:be:fe:1c:a0:0d:49:87:e0:db:c3:
                    5e:22:5c:1e:39:48:f1:91:25:25:d5:be:c0:9b:e2:
                    00:2f:98:61:8c:99:3e:01:2c:94:48:af:47:97:17:
                    48:00:4b:65:32:94:ab:92:03:8b:86:5b:53:7e:c8:
                    c7:ca:27:16:3c:10:3e:e3:29:07:6d:aa:ad:b2:5e:
                    2e:6a:dc:09:b5:13:84:be:c7:24:80:42:2e:4a:75:
                    9f:70:d3:9d:0f:fe:ec:48:9b:c3:2b:f5:93:e7:7d:
                    a0:ba:3c:dc:53:6c:18:f4:94:34:7c:18:c8:ce:8f:
                    8c:29:6a:28:6f:9b:81:d4:e7:a5:ca:2d:28:4a:9c:
                    76:5a:6e:74:63:80:ad:73:3b:6a:a1:4d:d7:d7:ff:
                    1e:18:4f:61:d4:b9:46:cf:b1:cf:3b:27:31:af:57:
                    d7:27:b1:85:a5:2f:c8:52:85:28:89:40:f6:45:31:
                    30:8d:17:04:c5:e6:fb:62:03:de:2f:09:ec:85:c7:
                    f5:d4:76:bf:a4:2e:05:76:60:8f:5e:76:1e:58:0a:
                    a1:d6:4a:ee:a5:83:7f:6a:59:32:66:6c:0b:bf:66:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:76:9C:DC:6D:18:2E:BF:E0:56:12:EA:31:8D:6B:FD:F1:34:75
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Kdl2nNxtGC6_4FYS6jGNa_3xNHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.220.116.0/22
                IPv6:
                  2a00:5400:1234::/48
                  2a00:5400:e013::-2a00:5400:e017:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e039::/48
                  2a00:5400:e050::-2a00:5400:e059:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e060::-2a00:5400:e069:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e070::-2a00:5400:e079:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e080::-2a00:5400:e089:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e090::-2a00:5400:e099:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e100::/48
                  2a00:5400:e115::/48
                  2a00:5400:e136::-2a00:5400:e139:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e140::/48
                  2a00:5400:e260::-2a00:5400:e269:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e270::/48
                  2a00:5400:e275::-2a00:5400:e279:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e280::/48
                  2a00:5400:e283::-2a00:5400:e284:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e287::-2a00:5400:e288:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e293::-2a00:5400:e299:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e300::-2a00:5400:e302:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e305::-2a00:5400:e306:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e319::/48
                  2a00:5400:e320::-2a00:5400:e329:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e330::-2a00:5400:e338:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e341::-2a00:5400:e344:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         e6:0c:83:cc:94:06:54:a5:a2:cf:05:b3:85:15:12:82:9c:f4:
         62:b1:51:19:5a:2a:e2:6b:fa:62:c9:26:3b:0b:55:24:25:da:
         d1:4e:a1:e9:c4:a9:d3:41:31:63:e0:dc:54:28:57:a0:89:b2:
         ba:2e:6a:db:a8:4e:14:d5:25:c8:e8:3f:ce:14:6f:68:29:c6:
         6b:cb:18:e7:9e:17:84:19:2e:70:38:f4:4b:c0:56:06:ee:30:
         96:1a:ec:28:fc:ee:cb:a7:4e:a6:ce:2a:11:9f:9c:b7:79:5f:
         34:2d:93:d7:f6:21:e0:30:22:28:2d:0a:74:4d:bb:aa:dd:0c:
         93:d8:23:3b:9b:89:c4:fd:b3:54:44:cf:a5:12:65:12:d4:5c:
         09:b3:2b:b1:52:e6:da:be:21:1d:e6:41:78:47:7f:89:75:0d:
         06:d8:42:d5:45:2e:81:47:0e:23:f6:8d:8f:64:35:f4:12:d9:
         20:e5:34:c6:7b:3b:49:a1:74:5e:a2:fc:c5:3f:26:c1:b3:ef:
         e9:0d:4c:ba:69:2e:c3:57:2f:22:52:a3:01:23:ea:95:3b:64:
         67:ec:72:5c:4e:8d:25:63:ea:4b:06:4e:59:79:2b:a2:f7:88:
         e5:de:58:c9:60:b0:44:e5:a5:68:60:ca:04:3b:21:65:d4:f1:
         b4:a5:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:06 2023 by rpki-client on console-ams.rpki-client.org