Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/pfV8qYxgnl4rWVQFtj2dLn6oiDY.roa
File:                     pfV8qYxgnl4rWVQFtj2dLn6oiDY.roa (raw, json)
Hash identifier:          zUKS0J7F/oXiXqhIK1U0Jef2QViBwZScaB4yuF0MopQ=
Subject key identifier:   A5:F5:7C:A9:8C:60:9E:5E:2B:59:54:05:B6:3D:9D:2E:7E:A8:88:36
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       01878849FE7D0546E05356A0839CDE29E1F7
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/pfV8qYxgnl4rWVQFtj2dLn6oiDY.roa
Signing time:             Sun 16 Apr 2023 04:19:23 +0000
ROA not before:           Sun 16 Apr 2023 04:19:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35753
IP address blocks:        128.127.206.0/23 maxlen: 23
                          128.127.204.0/24 maxlen: 24
                          128.127.203.0/24 maxlen: 24
                          128.127.204.0/22 maxlen: 22
                          128.127.200.0/22 maxlen: 22
                          128.127.201.0/24 maxlen: 24
                          128.127.212.0/23 maxlen: 23
                          128.127.212.0/22 maxlen: 22
                          128.127.210.0/24 maxlen: 24
                          128.127.208.0/24 maxlen: 24
                          128.127.209.0/24 maxlen: 24
                          128.127.208.0/22 maxlen: 22
                          128.127.216.0/22 maxlen: 22
                          128.127.217.0/24 maxlen: 24
                          128.127.214.0/23 maxlen: 23
                          128.127.216.0/24 maxlen: 24
                          128.127.224.0/22 maxlen: 22
                          128.127.224.0/23 maxlen: 23
                          128.127.226.0/23 maxlen: 23
                          128.127.220.0/22 maxlen: 22
                          128.127.220.0/23 maxlen: 23
                          128.127.222.0/23 maxlen: 23
                          128.127.230.0/24 maxlen: 24
                          128.127.231.0/24 maxlen: 24
                          128.127.232.0/21 maxlen: 21
                          128.127.228.0/23 maxlen: 23
                          128.127.228.0/22 maxlen: 22
                          128.127.240.0/22 maxlen: 22
                          128.127.244.0/22 maxlen: 22
                          128.127.246.0/23 maxlen: 23
                          128.127.248.0/21 maxlen: 21
                          164.215.40.0/22 maxlen: 22
                          164.215.40.0/21 maxlen: 21
                          128.127.192.0/22 maxlen: 22
                          128.127.194.0/24 maxlen: 24
                          128.127.195.0/24 maxlen: 24
                          128.127.196.0/22 maxlen: 22
                          77.220.116.0/22 maxlen: 24
                          128.204.246.0/24 maxlen: 24
                          128.204.244.0/24 maxlen: 24
                          128.204.245.0/24 maxlen: 24
                          128.204.240.0/21 maxlen: 21
                          128.204.240.0/20 maxlen: 20
                          128.204.242.0/23 maxlen: 23
                          128.204.248.0/21 maxlen: 21
                          128.204.250.0/23 maxlen: 23
                          2a00:5400:e327::/48 maxlen: 48
                          2a00:5400:e302::/48 maxlen: 48
                          2a00:5400:e082::/48 maxlen: 48
                          2a00:5400:e060::/48 maxlen: 48
                          2a00:5400:e260::/48 maxlen: 48
                          2a00:5400:e296::/48 maxlen: 48
                          2a00:5400:e016::/48 maxlen: 48
                          2a00:5400:e096::/48 maxlen: 48
                          2a00:5400:e071::/48 maxlen: 48
                          2a00:5400:e324::/48 maxlen: 48
                          2a00:5400:e335::/48 maxlen: 48
                          2a00:5400:e138::/48 maxlen: 48
                          2a00:5400:e338::/48 maxlen: 48
                          2a00:5400:e293::/48 maxlen: 48
                          2a00:5400:e093::/48 maxlen: 48
                          2a00:5400:e013::/48 maxlen: 48
                          2a00:5400:e057::/48 maxlen: 48
                          2a00:5400:e332::/48 maxlen: 48
                          2a00:5400:e090::/48 maxlen: 48
                          2a00:5400:e321::/48 maxlen: 48
                          2a00:5400:e054::/48 maxlen: 48
                          2a00:5400:e065::/48 maxlen: 48
                          2a00:5400:e265::/48 maxlen: 48
                          2a00:5400:e068::/48 maxlen: 48
                          2a00:5400:e268::/48 maxlen: 48
                          2a00:5400:e343::/48 maxlen: 48
                          2a00:5400:e279::/48 maxlen: 48
                          2a00:5400:e079::/48 maxlen: 48
                          2a00:5400:e287::/48 maxlen: 48
                          2a00:5400:e087::/48 maxlen: 48
                          2a00:5400:e062::/48 maxlen: 48
                          2a00:5400:e262::/48 maxlen: 48
                          2a00:5400:e140::/48 maxlen: 48
                          2a00:5400:e276::/48 maxlen: 48
                          2a00:5400:e076::/48 maxlen: 48
                          2a00:5400:e051::/48 maxlen: 48
                          2a00:5400:e284::/48 maxlen: 48
                          2a00:5400:e084::/48 maxlen: 48
                          2a00:5400:e295::/48 maxlen: 48
                          2a00:5400:e015::/48 maxlen: 48
                          2a00:5400:e115::/48 maxlen: 48
                          2a00:5400:e095::/48 maxlen: 48
                          2a00:5400:e298::/48 maxlen: 48
                          2a00:5400:e098::/48 maxlen: 48
                          2a00:5400:e073::/48 maxlen: 48
                          2a00:5400:e329::/48 maxlen: 48
                          2a00:5400:e137::/48 maxlen: 48
                          2a00:5400:e337::/48 maxlen: 48
                          2a00:5400:e092::/48 maxlen: 48
                          2a00:5400:e070::/48 maxlen: 48
                          2a00:5400:e270::/48 maxlen: 48
                          2a00:5400:e326::/48 maxlen: 48
                          2a00:5400:e301::/48 maxlen: 48
                          2a00:5400:e081::/48 maxlen: 48
                          2a00:5400:1234::/48 maxlen: 48
                          2a00:5400:e334::/48 maxlen: 48
                          2a00:5400:e323::/48 maxlen: 48
                          2a00:5400:e059::/48 maxlen: 48
                          2a00:5400:e067::/48 maxlen: 48
                          2a00:5400:e267::/48 maxlen: 48
                          2a00:5400:e342::/48 maxlen: 48
                          2a00:5400:e320::/48 maxlen: 48
                          2a00:5400:e056::/48 maxlen: 48
                          2a00:5400:e331::/48 maxlen: 48
                          2a00:5400:e064::/48 maxlen: 48
                          2a00:5400:e264::/48 maxlen: 48
                          2a00:5400:e075::/48 maxlen: 48
                          2a00:5400:e275::/48 maxlen: 48
                          2a00:5400:e278::/48 maxlen: 48
                          2a00:5400:e078::/48 maxlen: 48
                          2a00:5400:e053::/48 maxlen: 48
                          2a00:5400:e089::/48 maxlen: 48
                          2a00:5400:e297::/48 maxlen: 48
                          2a00:5400:e017::/48 maxlen: 48
                          2a00:5400:e097::/48 maxlen: 48
                          2a00:5400:e072::/48 maxlen: 48
                          2a00:5400:e050::/48 maxlen: 48
                          2a00:5400:e306::/48 maxlen: 48
                          2a00:5400:e086::/48 maxlen: 48
                          2a00:5400:e061::/48 maxlen: 48
                          2a00:5400:e261::/48 maxlen: 48
                          2a00:5400:e294::/48 maxlen: 48
                          2a00:5400:e094::/48 maxlen: 48
                          2a00:5400:e014::/48 maxlen: 48
                          2a00:5400:e325::/48 maxlen: 48
                          2a00:5400:e328::/48 maxlen: 48
                          2a00:5400:e283::/48 maxlen: 48
                          2a00:5400:e083::/48 maxlen: 48
                          2a00:5400:e039::/48 maxlen: 48
                          2a00:5400:e139::/48 maxlen: 48
                          2a00:5400:e322::/48 maxlen: 48
                          2a00:5400:e280::/48 maxlen: 48
                          2a00:5400:e300::/48 maxlen: 48
                          2a00:5400:e080::/48 maxlen: 48
                          2a00:5400:e100::/48 maxlen: 48
                          2a00:5400:e136::/48 maxlen: 48
                          2a00:5400:e336::/48 maxlen: 48
                          2a00:5400:e091::/48 maxlen: 48
                          2a00:5400:e344::/48 maxlen: 48
                          2a00:5400:e055::/48 maxlen: 48
                          2a00:5400:e058::/48 maxlen: 48
                          2a00:5400:e333::/48 maxlen: 48
                          2a00:5400:e069::/48 maxlen: 48
                          2a00:5400:e269::/48 maxlen: 48
                          2a00:5400:e277::/48 maxlen: 48
                          2a00:5400:e077::/48 maxlen: 48
                          2a00:5400:e052::/48 maxlen: 48
                          2a00:5400:e330::/48 maxlen: 48
                          2a00:5400:e066::/48 maxlen: 48
                          2a00:5400:e266::/48 maxlen: 48
                          2a00:5400:e341::/48 maxlen: 48
                          2a00:5400:e074::/48 maxlen: 48
                          2a00:5400:e305::/48 maxlen: 48
                          2a00:5400:e085::/48 maxlen: 48
                          2a00:5400:e288::/48 maxlen: 48
                          2a00:5400:e088::/48 maxlen: 48
                          2a00:5400:e063::/48 maxlen: 48
                          2a00:5400:e263::/48 maxlen: 48
                          2a00:5400:e299::/48 maxlen: 48
                          2a00:5400:e319::/48 maxlen: 48
                          2a00:5400:e099::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:88:49:fe:7d:05:46:e0:53:56:a0:83:9c:de:29:e1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: Apr 16 04:19:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a5f57ca98c609e5e2b595405b63d9d2e7ea88836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:c7:f6:39:83:59:b7:ed:56:47:a6:2b:9b:
                    e3:cc:14:d5:db:6f:53:a5:ad:80:cb:5f:3f:e5:3e:
                    58:20:b7:83:22:43:3e:8a:ce:c8:d2:f0:cc:f0:65:
                    c6:c9:3d:33:50:81:6c:19:68:7a:10:8f:e2:a4:f5:
                    b3:8a:9f:85:29:76:dc:9a:ee:c5:31:a3:0f:21:b7:
                    a1:c8:b3:14:a7:39:14:bc:e3:13:14:7a:f7:12:4a:
                    30:f6:07:bd:65:a4:60:d0:a0:bc:d2:4f:f6:c0:2e:
                    39:34:4b:5a:0d:f9:c9:f4:10:9b:25:c7:3c:8d:ca:
                    23:4d:0f:34:be:81:19:c1:ee:62:c7:e1:b4:f9:1e:
                    ef:e8:55:b5:42:be:8f:70:62:d4:5c:77:32:0c:20:
                    58:b8:2c:e4:db:af:d7:a4:cb:3b:24:07:f0:f6:a4:
                    20:fc:0c:d0:d6:c4:2c:97:e6:aa:9c:50:56:11:a9:
                    6d:44:15:2c:5e:37:68:96:32:d9:86:e6:5c:b4:e9:
                    a8:7b:a0:35:2f:a2:e9:a9:b5:19:67:45:e3:ce:9d:
                    4e:04:41:15:6f:81:c3:44:0f:d2:9d:fc:a0:27:0c:
                    03:99:58:00:20:2b:6a:a1:00:89:e6:45:b4:2c:10:
                    50:ae:d4:1a:24:99:b3:d5:01:e2:02:7e:c1:8f:2e:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F5:7C:A9:8C:60:9E:5E:2B:59:54:05:B6:3D:9D:2E:7E:A8:88:36
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/pfV8qYxgnl4rWVQFtj2dLn6oiDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.220.116.0/22
                  128.127.192.0/18
                  128.204.240.0/20
                  164.215.40.0/21
                IPv6:
                  2a00:5400:1234::/48
                  2a00:5400:e013::-2a00:5400:e017:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e039::/48
                  2a00:5400:e050::-2a00:5400:e059:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e060::-2a00:5400:e069:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e070::-2a00:5400:e079:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e080::-2a00:5400:e089:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e090::-2a00:5400:e099:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e100::/48
                  2a00:5400:e115::/48
                  2a00:5400:e136::-2a00:5400:e139:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e140::/48
                  2a00:5400:e260::-2a00:5400:e269:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e270::/48
                  2a00:5400:e275::-2a00:5400:e279:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e280::/48
                  2a00:5400:e283::-2a00:5400:e284:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e287::-2a00:5400:e288:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e293::-2a00:5400:e299:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e300::-2a00:5400:e302:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e305::-2a00:5400:e306:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e319::/48
                  2a00:5400:e320::-2a00:5400:e329:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e330::-2a00:5400:e338:ffff:ffff:ffff:ffff:ffff
                  2a00:5400:e341::-2a00:5400:e344:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         69:c5:b7:d7:cf:36:9b:71:f6:ce:c7:b5:9d:ce:59:d8:ca:ee:
         b0:34:2b:b2:7d:06:3e:f8:cd:1f:0d:0f:7f:98:be:ea:00:32:
         13:48:37:fa:2e:64:bc:eb:06:64:be:ef:44:8a:3d:a2:7e:3e:
         1c:3c:e6:16:e1:10:91:86:a8:e5:d2:6d:13:7d:b2:c9:fd:e9:
         7b:58:b6:5a:4f:d4:83:4b:f3:95:5e:fe:83:fd:c9:1e:a6:3e:
         21:b6:9d:97:34:6a:0d:9f:98:f8:02:93:8f:10:e4:a1:6b:b0:
         89:2f:dc:a4:7d:f1:c4:95:ba:b8:09:3a:a4:9d:f0:25:4f:a7:
         e9:01:a6:4f:da:33:5b:be:10:08:33:07:73:71:96:e9:0a:d5:
         58:1c:37:cc:df:82:65:2a:7b:4f:c0:a8:8e:5a:60:15:d5:f4:
         a9:b5:6c:58:2a:16:c6:77:73:73:6f:6b:a8:e3:29:29:4a:6d:
         25:a6:17:19:d3:eb:e1:b1:73:96:7f:43:5e:4e:46:87:cd:d9:
         7e:9a:f7:f9:0b:22:58:9f:22:77:4f:23:f9:3a:82:b4:d9:cb:
         c3:f9:aa:38:70:22:85:31:d1:98:ad:13:91:82:aa:7e:62:7e:
         96:a9:7d:df:04:fa:83:19:11:ec:88:10:41:55:e6:05:3b:57:
         e9:48:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:14 2023 by rpki-client on console-fra.rpki-client.org