Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/gjeO1UCdxuXbFZTz5y8Sv5IG-38.roa
File:                     gjeO1UCdxuXbFZTz5y8Sv5IG-38.roa (raw, json)
Hash identifier:          wVwywtq6iQCC31MG3+/so8EsPSzk4/9dm4Qy2+ugwoY=
Subject key identifier:   82:37:8E:D5:40:9D:C6:E5:DB:15:94:F3:E7:2F:12:BF:92:06:FB:7F
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       0189B47D9631B9325B6842AEF47BCEAA7E4B
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/gjeO1UCdxuXbFZTz5y8Sv5IG-38.roa
Signing time:             Wed 02 Aug 2023 04:24:36 +0000
ROA not before:           Wed 02 Aug 2023 04:24:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41881
IP address blocks:        95.38.240.0/21 maxlen: 21
                          95.38.253.0/24 maxlen: 24
                          95.38.252.0/24 maxlen: 24
                          95.38.255.0/24 maxlen: 24
                          95.38.254.0/24 maxlen: 24
                          95.38.192.0/21 maxlen: 21
                          95.38.192.0/24 maxlen: 24
                          95.38.199.0/24 maxlen: 24
                          95.38.194.0/24 maxlen: 24
                          95.38.195.0/24 maxlen: 24
                          95.38.193.0/24 maxlen: 24
                          95.38.197.0/24 maxlen: 24
                          95.38.196.0/24 maxlen: 24
                          95.38.200.0/22 maxlen: 22
                          95.38.201.0/24 maxlen: 24
                          95.38.202.0/24 maxlen: 24
                          95.38.200.0/24 maxlen: 24
                          95.38.203.0/24 maxlen: 24
                          95.38.204.0/23 maxlen: 23
                          95.38.206.0/24 maxlen: 24
                          95.38.208.0/22 maxlen: 22
                          95.38.208.0/21 maxlen: 21
                          95.38.211.0/24 maxlen: 24
                          95.38.212.0/23 maxlen: 23
                          95.38.210.0/24 maxlen: 24
                          95.38.215.0/24 maxlen: 24
                          95.38.216.0/23 maxlen: 23
                          95.38.218.0/24 maxlen: 24
                          95.38.219.0/24 maxlen: 24
                          95.38.218.0/23 maxlen: 23
                          95.38.220.0/22 maxlen: 22
                          95.38.225.0/24 maxlen: 24
                          95.38.226.0/23 maxlen: 23
                          95.38.224.0/24 maxlen: 24
                          95.38.228.0/22 maxlen: 22
                          95.38.232.0/21 maxlen: 21
                          95.38.27.0/24 maxlen: 24
                          95.38.28.0/24 maxlen: 24
                          95.38.25.0/24 maxlen: 24
                          95.38.26.0/24 maxlen: 24
                          95.38.31.0/24 maxlen: 24
                          95.38.29.0/24 maxlen: 24
                          95.38.30.0/24 maxlen: 24
                          95.38.34.0/24 maxlen: 24
                          95.38.35.0/24 maxlen: 24
                          95.38.32.0/24 maxlen: 24
                          95.38.33.0/24 maxlen: 24
                          95.38.36.0/23 maxlen: 23
                          95.38.41.0/24 maxlen: 24
                          95.38.42.0/24 maxlen: 24
                          95.38.39.0/24 maxlen: 24
                          95.38.40.0/24 maxlen: 24
                          95.38.44.0/24 maxlen: 24
                          95.38.43.0/24 maxlen: 24
                          95.38.44.0/22 maxlen: 22
                          95.38.48.0/24 maxlen: 24
                          95.38.49.0/24 maxlen: 24
                          95.38.46.0/24 maxlen: 24
                          95.38.47.0/24 maxlen: 24
                          95.38.51.0/24 maxlen: 24
                          95.38.50.0/24 maxlen: 24
                          95.38.45.0/24 maxlen: 24
                          95.38.54.0/23 maxlen: 23
                          95.38.56.0/23 maxlen: 23
                          95.38.53.0/24 maxlen: 24
                          95.38.58.0/24 maxlen: 24
                          95.38.52.0/24 maxlen: 24
                          95.38.60.0/24 maxlen: 24
                          95.38.62.0/23 maxlen: 23
                          95.38.61.0/24 maxlen: 24
                          95.38.64.0/24 maxlen: 24
                          95.38.59.0/24 maxlen: 24
                          95.38.69.0/24 maxlen: 24
                          95.38.70.0/24 maxlen: 24
                          95.38.68.0/24 maxlen: 24
                          95.38.71.0/24 maxlen: 24
                          95.38.65.0/24 maxlen: 24
                          95.38.66.0/23 maxlen: 23
                          95.38.76.0/24 maxlen: 24
                          95.38.74.0/23 maxlen: 23
                          95.38.74.0/24 maxlen: 24
                          95.38.75.0/24 maxlen: 24
                          95.38.78.0/23 maxlen: 23
                          95.38.77.0/24 maxlen: 24
                          95.38.72.0/24 maxlen: 24
                          95.38.73.0/24 maxlen: 24
                          95.38.0.0/21 maxlen: 21
                          95.38.11.0/24 maxlen: 24
                          95.38.10.0/24 maxlen: 24
                          95.38.8.0/24 maxlen: 24
                          95.38.9.0/24 maxlen: 24
                          95.38.13.0/24 maxlen: 24
                          95.38.14.0/24 maxlen: 24
                          95.38.12.0/24 maxlen: 24
                          95.38.17.0/24 maxlen: 24
                          95.38.15.0/24 maxlen: 24
                          95.38.16.0/20 maxlen: 20
                          95.38.16.0/24 maxlen: 24
                          95.38.20.0/24 maxlen: 24
                          95.38.21.0/24 maxlen: 24
                          95.38.18.0/24 maxlen: 24
                          95.38.19.0/24 maxlen: 24
                          95.38.24.0/24 maxlen: 24
                          95.38.22.0/24 maxlen: 24
                          95.38.23.0/24 maxlen: 24
                          95.38.160.0/21 maxlen: 21
                          95.38.172.0/23 maxlen: 23
                          95.38.171.0/24 maxlen: 24
                          95.38.170.0/24 maxlen: 24
                          95.38.168.0/22 maxlen: 22
                          95.38.168.0/23 maxlen: 23
                          95.38.169.0/24 maxlen: 24
                          95.38.174.0/24 maxlen: 24
                          95.38.175.0/24 maxlen: 24
                          95.38.176.0/20 maxlen: 20
                          95.38.82.0/23 maxlen: 23
                          95.38.81.0/24 maxlen: 24
                          95.38.84.0/23 maxlen: 23
                          95.38.84.0/24 maxlen: 24
                          95.38.85.0/24 maxlen: 24
                          95.38.80.0/24 maxlen: 24
                          95.38.90.0/24 maxlen: 24
                          95.38.88.0/22 maxlen: 22
                          95.38.88.0/24 maxlen: 24
                          95.38.89.0/24 maxlen: 24
                          95.38.91.0/24 maxlen: 24
                          95.38.86.0/24 maxlen: 24
                          95.38.87.0/24 maxlen: 24
                          95.38.93.0/24 maxlen: 24
                          95.38.94.0/23 maxlen: 23
                          95.38.92.0/24 maxlen: 24
                          95.38.96.0/23 maxlen: 23
                          95.38.96.0/21 maxlen: 21
                          95.38.98.0/23 maxlen: 23
                          95.38.98.0/24 maxlen: 24
                          95.38.102.0/23 maxlen: 23
                          95.38.104.0/22 maxlen: 22
                          95.38.99.0/24 maxlen: 24
                          95.38.100.0/23 maxlen: 23
                          95.38.109.0/24 maxlen: 24
                          95.38.110.0/23 maxlen: 23
                          95.38.108.0/24 maxlen: 24
                          95.38.117.0/24 maxlen: 24
                          95.38.118.0/24 maxlen: 24
                          95.38.116.0/23 maxlen: 23
                          95.38.116.0/24 maxlen: 24
                          95.38.112.0/21 maxlen: 21
                          95.38.124.0/24 maxlen: 24
                          95.38.125.0/24 maxlen: 24
                          95.38.123.0/24 maxlen: 24
                          95.38.121.0/24 maxlen: 24
                          95.38.122.0/24 maxlen: 24
                          95.38.122.0/23 maxlen: 23
                          95.38.119.0/24 maxlen: 24
                          95.38.120.0/24 maxlen: 24
                          95.38.130.0/23 maxlen: 23
                          95.38.128.0/24 maxlen: 24
                          95.38.126.0/23 maxlen: 23
                          95.38.129.0/24 maxlen: 24
                          95.38.128.0/20 maxlen: 20
                          95.38.128.0/23 maxlen: 23
                          95.38.128.0/22 maxlen: 22
                          185.20.162.0/24 maxlen: 24
                          185.20.163.0/24 maxlen: 24
                          185.20.160.0/24 maxlen: 24
                          185.20.161.0/24 maxlen: 24
                          2a01:bd80::/29 maxlen: 29
                          2a00:52e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 02 Aug 2023 06:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b4:7d:96:31:b9:32:5b:68:42:ae:f4:7b:ce:aa:7e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Aug  2 04:24:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82378ed5409dc6e5db1594f3e72f12bf9206fb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:32:9d:d1:6f:58:91:20:d8:98:58:03:06:
                    12:52:a6:0b:3c:a5:d4:31:ce:b1:7f:66:2a:69:5d:
                    79:db:c3:97:52:74:54:be:07:54:06:c5:c7:94:18:
                    72:21:40:31:f8:36:b1:1b:21:85:b4:36:ac:f8:01:
                    27:d4:17:b7:8e:09:e7:88:1d:bc:93:93:03:43:25:
                    87:9d:ec:01:1e:39:d2:0b:03:9a:13:5b:95:6d:a7:
                    6f:e1:72:63:ef:d7:64:9f:52:1f:bf:9c:18:77:51:
                    8c:30:ed:4c:23:d7:94:2c:aa:89:27:45:68:b2:ea:
                    52:8e:29:f8:55:1b:88:e3:b4:83:7b:a9:1b:84:a9:
                    c5:b9:46:6d:73:d9:4a:f7:e3:2d:a3:65:c1:8c:22:
                    d0:0a:3b:03:a6:a2:58:5c:6e:e9:d7:c4:4d:d8:fc:
                    9c:7e:71:df:15:1a:d0:57:65:89:d2:f4:cc:5d:ff:
                    4b:cb:9c:4a:8a:e3:f2:c5:de:3d:ca:8b:61:50:5c:
                    98:26:0b:5f:ce:16:f8:88:1c:3e:a0:81:03:46:bb:
                    13:f7:76:60:4f:3d:2b:f8:94:94:03:8a:b1:71:7a:
                    b8:c4:e3:0e:cb:8a:f7:9c:f1:c3:65:62:41:ec:a8:
                    63:23:2b:c1:84:be:9e:8b:cf:b2:c9:bd:f8:25:4a:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:8E:D5:40:9D:C6:E5:DB:15:94:F3:E7:2F:12:BF:92:06:FB:7F
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/gjeO1UCdxuXbFZTz5y8Sv5IG-38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.38.0.0-95.38.37.255
                  95.38.39.0-95.38.143.255
                  95.38.160.0-95.38.206.255
                  95.38.208.0-95.38.247.255
                  95.38.252.0/22
                  185.20.160.0/22
                IPv6:
                  2a00:52e0::/32
                  2a01:bd80::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:1e:83:8f:cf:24:d0:26:40:99:d5:0d:c2:32:dd:e3:40:0b:
         b4:21:ed:b7:48:1e:16:18:71:d0:f4:9d:e9:cf:36:6c:f3:bd:
         6f:cc:1c:ef:ad:65:14:e8:95:70:96:95:0c:77:72:ea:2f:c8:
         6a:c4:78:b0:fa:2b:68:2a:7d:c9:74:70:18:2d:06:c2:e6:cd:
         d9:7f:44:a1:58:47:b8:be:fd:fe:f7:04:b4:af:82:43:5b:cf:
         7d:1f:c8:f6:73:14:ea:71:f5:b2:27:06:87:b2:c4:14:b1:1e:
         8d:b0:e6:e3:cc:b2:82:bc:3f:a5:c6:08:1e:21:ed:17:c4:5d:
         b5:e2:be:cd:8d:00:0a:a5:1a:04:48:13:66:b9:58:73:99:1f:
         8e:4e:e5:68:00:4a:95:04:fb:dc:44:af:60:a3:98:17:c8:12:
         c4:55:af:3e:4c:bb:1b:50:1f:cb:47:6e:91:bb:19:72:16:06:
         48:d8:7c:61:eb:ad:14:8f:c8:6e:08:65:46:e7:49:3e:06:7c:
         d1:b1:44:56:11:4b:57:e9:de:d6:38:d3:69:46:ea:51:9c:65:
         e0:b9:c7:c7:66:ac:8b:21:81:8f:08:b9:80:6b:57:a5:18:8f:
         b1:30:06:07:df:22:9a:38:37:ba:d2:1d:a6:2e:05:a4:6b:1b:
         a4:56:38:4f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAYm0fZYxuTJbaEKu9HvOqn5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjMwODAyMDQyNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjM3OGVkNTQwOWRjNmU1ZGIxNTk0ZjNlNzJmMTJiZjkyMDZmYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWIyndFvWJEg2JhYAwYSUqYLPKXU
Mc6xf2YqaV1528OXUnRUvgdUBsXHlBhyIUAx+DaxGyGFtDas+AEn1Be3jgnniB28
k5MDQyWHnewBHjnSCwOaE1uVbadv4XJj79dkn1Ifv5wYd1GMMO1MI9eULKqJJ0Vo
supSjin4VRuI47SDe6kbhKnFuUZtc9lK9+Mto2XBjCLQCjsDpqJYXG7p18RN2Pyc
fnHfFRrQV2WJ0vTMXf9Ly5xKiuPyxd49yothUFyYJgtfzhb4iBw+oIEDRrsT93Zg
Tz0r+JSUA4qxcXq4xOMOy4r3nPHDZWJB7KhjIyvBhL6ei8+yyb34JUp9LwIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFII3jtVAncbl2xWU8+cvEr+SBvt/MB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvZ2plTzFVQ2R4dVhiRlpUejV5OFN2NUlHLTM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBJBAIAATBDMAsDAwFfJgME
AV8mJDAMAwQAXyYnAwQEXyaAMAwDBAVfJqADBABfJs4wDAMEBF8m0AMEA18m8AME
Al8m/AMEArkUoDAUBAIAAjAOAwUAKgBS4AMFAyoBvYAwDQYJKoZIhvcNAQELBQAD
ggEBAAceg4/PJNAmQJnVDcIy3eNAC7Qh7bdIHhYYcdD0nenPNmzzvW/MHO+tZRTo
lXCWlQx3cuovyGrEeLD6K2gqfcl0cBgtBsLmzdl/RKFYR7i+/f73BLSvgkNbz30f
yPZzFOpx9bInBoeyxBSxHo2w5uPMsoK8P6XGCB4h7RfEXbXivs2NAAqlGgRIE2a5
WHOZH45O5WgASpUE+9xEr2CjmBfIEsRVrz5MuxtQH8tHbpG7GXIWBkjYfGHrrRSP
yG4IZUbnST4GfNGxRFYRS1fp3tY402lG6lGcZeC5x8dmrIshgY8IuYBrV6UYj7Ew
BgffIpo4N7rSHaYuBaRrG6RWOE8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org