Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/QhXPBgIEEqH_rLIEbgN_aCcTq3c.roa
File:                     QhXPBgIEEqH_rLIEbgN_aCcTq3c.roa (raw, json)
Hash identifier:          /qCm5m+FHf1axlud23B5U66YbkMj4aQfZ7F86e/fWcw=
Subject key identifier:   42:15:CF:06:02:04:12:A1:FF:AC:B2:04:6E:03:7F:68:27:13:AB:77
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       0192433C8FEC795A0B9BD359A6E26FD31185
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/QhXPBgIEEqH_rLIEbgN_aCcTq3c.roa
Signing time:             Mon 30 Sep 2024 14:01:35 +0000
ROA not before:           Mon 30 Sep 2024 14:01:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5089
IP address blocks:        62.30.0.0/15 maxlen: 15
                          62.30.0.0/16 maxlen: 16
                          62.31.0.0/16 maxlen: 16
                          62.252.0.0/14 maxlen: 18
                          62.252.0.0/17 maxlen: 17
                          62.252.0.0/18 maxlen: 18
                          62.252.64.0/18 maxlen: 18
                          62.252.128.0/17 maxlen: 17
                          62.252.128.0/18 maxlen: 18
                          62.252.192.0/18 maxlen: 18
                          62.253.0.0/17 maxlen: 17
                          62.253.128.0/17 maxlen: 17
                          62.254.0.0/17 maxlen: 17
                          62.254.0.0/18 maxlen: 18
                          62.254.64.0/18 maxlen: 18
                          62.254.128.0/17 maxlen: 17
                          62.254.128.0/18 maxlen: 18
                          62.254.192.0/18 maxlen: 18
                          62.255.0.0/17 maxlen: 17
                          62.255.0.0/18 maxlen: 18
                          62.255.64.0/18 maxlen: 18
                          62.255.128.0/17 maxlen: 17
                          62.255.128.0/18 maxlen: 18
                          62.255.192.0/18 maxlen: 18
                          77.96.0.0/13 maxlen: 13
                          77.96.0.0/16 maxlen: 16
                          77.96.0.0/17 maxlen: 17
                          77.96.128.0/17 maxlen: 17
                          77.97.0.0/16 maxlen: 16
                          77.98.0.0/15 maxlen: 15
                          77.98.0.0/16 maxlen: 16
                          77.99.0.0/16 maxlen: 16
                          77.100.0.0/15 maxlen: 15
                          77.100.0.0/16 maxlen: 16
                          77.101.0.0/16 maxlen: 16
                          77.102.0.0/15 maxlen: 15
                          77.102.0.0/16 maxlen: 16
                          77.103.0.0/16 maxlen: 16
                          80.0.0.0/13 maxlen: 17
                          80.192.0.0/14 maxlen: 14
                          80.192.0.0/15 maxlen: 15
                          80.194.0.0/15 maxlen: 15
                          80.235.128.0/17 maxlen: 17
                          80.235.128.0/18 maxlen: 18
                          80.235.192.0/18 maxlen: 18
                          80.255.192.0/19 maxlen: 19
                          81.96.0.0/12 maxlen: 12
                          81.96.0.0/14 maxlen: 14
                          81.96.0.0/15 maxlen: 15
                          81.98.0.0/15 maxlen: 15
                          81.100.0.0/14 maxlen: 14
                          81.100.0.0/15 maxlen: 15
                          81.102.0.0/15 maxlen: 15
                          81.104.0.0/14 maxlen: 14
                          81.104.0.0/15 maxlen: 15
                          81.106.0.0/15 maxlen: 15
                          81.108.0.0/14 maxlen: 14
                          81.108.0.0/15 maxlen: 15
                          81.110.0.0/15 maxlen: 15
                          82.0.0.0/11 maxlen: 11
                          82.0.0.0/12 maxlen: 12
                          82.0.0.0/13 maxlen: 13
                          82.0.0.0/14 maxlen: 14
                          82.4.0.0/14 maxlen: 14
                          82.8.0.0/13 maxlen: 13
                          82.8.0.0/14 maxlen: 14
                          82.12.0.0/14 maxlen: 14
                          82.16.0.0/14 maxlen: 14
                          82.16.0.0/15 maxlen: 15
                          82.18.0.0/15 maxlen: 15
                          82.20.0.0/16 maxlen: 16
                          82.20.0.0/17 maxlen: 17
                          82.20.128.0/17 maxlen: 17
                          82.28.0.0/16 maxlen: 16
                          82.28.0.0/17 maxlen: 17
                          82.28.128.0/17 maxlen: 17
                          82.30.0.0/15 maxlen: 15
                          82.30.0.0/16 maxlen: 16
                          82.31.0.0/16 maxlen: 16
                          82.32.0.0/12 maxlen: 12
                          82.32.0.0/15 maxlen: 15
                          82.32.0.0/16 maxlen: 16
                          82.33.0.0/16 maxlen: 16
                          82.34.0.0/15 maxlen: 15
                          82.34.0.0/16 maxlen: 16
                          82.35.0.0/16 maxlen: 16
                          82.36.0.0/15 maxlen: 15
                          82.36.0.0/16 maxlen: 16
                          82.37.0.0/16 maxlen: 16
                          82.38.0.0/15 maxlen: 15
                          82.38.0.0/16 maxlen: 16
                          82.39.0.0/16 maxlen: 16
                          82.40.0.0/15 maxlen: 15
                          82.40.0.0/16 maxlen: 16
                          82.41.0.0/16 maxlen: 16
                          82.42.0.0/15 maxlen: 15
                          82.42.0.0/16 maxlen: 16
                          82.43.0.0/16 maxlen: 16
                          82.44.0.0/15 maxlen: 15
                          82.44.0.0/16 maxlen: 16
                          82.45.0.0/16 maxlen: 16
                          82.46.0.0/15 maxlen: 15
                          86.0.0.0/11 maxlen: 11
                          86.0.0.0/13 maxlen: 13
                          86.0.0.0/14 maxlen: 14
                          86.0.0.0/15 maxlen: 15
                          86.0.0.0/16 maxlen: 16
                          86.1.0.0/16 maxlen: 16
                          86.2.0.0/15 maxlen: 15
                          86.4.0.0/16 maxlen: 16
                          86.5.0.0/16 maxlen: 16
                          86.5.0.0/17 maxlen: 17
                          86.5.128.0/17 maxlen: 17
                          86.6.0.0/16 maxlen: 16
                          86.6.0.0/17 maxlen: 17
                          86.6.128.0/17 maxlen: 17
                          86.7.0.0/16 maxlen: 16
                          86.8.0.0/13 maxlen: 13
                          86.8.0.0/16 maxlen: 16
                          86.8.0.0/17 maxlen: 17
                          86.8.128.0/17 maxlen: 17
                          86.9.0.0/16 maxlen: 16
                          86.10.0.0/16 maxlen: 16
                          86.10.0.0/17 maxlen: 17
                          86.10.128.0/17 maxlen: 17
                          86.11.0.0/16 maxlen: 16
                          86.12.0.0/16 maxlen: 16
                          86.12.0.0/17 maxlen: 17
                          86.12.128.0/17 maxlen: 17
                          86.13.0.0/16 maxlen: 16
                          86.14.0.0/15 maxlen: 15
                          86.16.0.0/13 maxlen: 13
                          86.16.0.0/14 maxlen: 14
                          86.20.0.0/16 maxlen: 16
                          86.21.0.0/16 maxlen: 16
                          86.21.0.0/17 maxlen: 17
                          86.21.128.0/17 maxlen: 17
                          86.22.0.0/15 maxlen: 15
                          86.24.0.0/13 maxlen: 13
                          92.232.0.0/15 maxlen: 15
                          92.232.0.0/16 maxlen: 16
                          92.233.0.0/16 maxlen: 16
                          92.234.0.0/16 maxlen: 16
                          92.234.0.0/17 maxlen: 17
                          92.234.128.0/17 maxlen: 17
                          92.236.0.0/14 maxlen: 14
                          92.236.0.0/15 maxlen: 15
                          92.238.0.0/15 maxlen: 15
                          94.173.0.0/16 maxlen: 16
                          94.173.0.0/17 maxlen: 17
                          94.173.128.0/17 maxlen: 17
                          94.174.0.0/15 maxlen: 15
                          94.174.0.0/16 maxlen: 16
                          94.175.0.0/16 maxlen: 16
                          193.38.64.0/18 maxlen: 18
                          193.38.64.0/19 maxlen: 19
                          193.38.96.0/19 maxlen: 19
                          193.39.32.0/19 maxlen: 19
                          193.39.32.0/20 maxlen: 20
                          193.39.48.0/20 maxlen: 20
                          193.39.64.0/24 maxlen: 24
                          193.193.96.0/19 maxlen: 19
                          193.193.96.0/20 maxlen: 20
                          193.193.112.0/20 maxlen: 20
                          194.117.128.0/19 maxlen: 19
                          194.117.128.0/20 maxlen: 20
                          194.117.144.0/20 maxlen: 20
                          194.117.146.0/24 maxlen: 24
                          194.168.0.0/16 maxlen: 16
                          194.168.0.0/17 maxlen: 17
                          194.168.128.0/17 maxlen: 17
                          195.188.0.0/16 maxlen: 16
                          195.188.0.0/17 maxlen: 17
                          195.188.128.0/17 maxlen: 17
                          212.24.64.0/19 maxlen: 19
                          212.24.64.0/20 maxlen: 20
                          212.24.80.0/20 maxlen: 20
                          212.250.0.0/16 maxlen: 16
                          212.250.0.0/17 maxlen: 17
                          212.250.128.0/17 maxlen: 17
                          213.48.0.0/16 maxlen: 16
                          213.48.0.0/17 maxlen: 17
                          213.48.0.0/18 maxlen: 18
                          213.48.64.0/18 maxlen: 18
                          213.48.128.0/17 maxlen: 17
                          213.48.128.0/18 maxlen: 18
                          213.48.192.0/18 maxlen: 18
                          213.81.0.0/17 maxlen: 17
                          213.81.0.0/18 maxlen: 18
                          213.81.64.0/18 maxlen: 18
                          213.104.0.0/14 maxlen: 14
                          213.104.0.0/16 maxlen: 16
                          213.104.0.0/17 maxlen: 17
                          213.104.128.0/17 maxlen: 17
                          213.105.0.0/16 maxlen: 16
                          213.105.0.0/17 maxlen: 17
                          213.105.128.0/17 maxlen: 17
                          213.106.0.0/16 maxlen: 16
                          213.106.0.0/17 maxlen: 17
                          213.106.128.0/17 maxlen: 17
                          213.107.0.0/16 maxlen: 16
                          213.107.0.0/17 maxlen: 17
                          213.107.128.0/17 maxlen: 17
                          213.148.32.0/19 maxlen: 19
                          213.148.32.0/20 maxlen: 20
                          213.148.48.0/20 maxlen: 20
                          217.137.0.0/16 maxlen: 16
                          217.137.0.0/17 maxlen: 17
                          217.137.128.0/17 maxlen: 17
                          2a02:8801::/32 maxlen: 32
                          2a02:8880::/25 maxlen: 25

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:43:3c:8f:ec:79:5a:0b:9b:d3:59:a6:e2:6f:d3:11:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Sep 30 14:01:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4215cf06020412a1ffacb2046e037f682713ab77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:d7:f2:64:97:7c:90:de:d5:00:d4:a1:8c:
                    5c:4a:eb:d3:b2:f8:d3:f4:6a:03:b1:ee:be:b3:0d:
                    06:c6:0f:fc:dc:14:1c:80:b9:84:3f:0d:be:36:bb:
                    e8:e8:16:b4:cc:f3:a9:cc:ff:de:85:3a:97:01:60:
                    a6:17:7b:4b:f5:12:e1:a9:18:96:d6:81:41:5c:84:
                    d2:e0:a7:09:3a:36:1b:d3:7c:a5:2d:ea:0a:44:4a:
                    80:82:a9:52:5e:2b:56:23:4a:00:6e:8d:a1:4e:5e:
                    f9:ca:7a:0d:ab:e7:0d:ed:c0:04:bb:75:96:74:61:
                    d1:a5:d9:9b:31:c2:e4:ff:95:16:30:1f:70:00:69:
                    67:3c:e7:c0:1c:3e:0d:c6:78:dd:d3:94:bd:92:6d:
                    bf:30:e4:03:3e:ba:d8:b4:47:a9:b0:a0:72:df:06:
                    66:be:e9:19:e2:b0:c2:53:bc:f1:d0:21:dd:a7:4a:
                    3b:29:c1:7c:53:2b:5c:c0:b6:ca:65:8f:0d:e4:c2:
                    a0:8b:3b:34:98:15:44:da:02:d7:21:7e:c1:e6:1b:
                    0d:80:af:7b:21:a0:9a:70:ee:10:6c:c9:b1:0f:c9:
                    ff:d7:a0:40:55:1f:a5:94:fe:ec:fc:70:a3:9e:3e:
                    1e:87:59:30:c0:70:0f:0c:5c:f1:ba:18:c4:6c:a0:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:CF:06:02:04:12:A1:FF:AC:B2:04:6E:03:7F:68:27:13:AB:77
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/QhXPBgIEEqH_rLIEbgN_aCcTq3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.30.0.0/15
                  62.252.0.0/14
                  77.96.0.0/13
                  80.0.0.0/13
                  80.192.0.0/14
                  80.235.128.0/17
                  80.255.192.0/19
                  81.96.0.0/12
                  82.0.0.0-82.47.255.255
                  86.0.0.0/11
                  92.232.0.0-92.234.255.255
                  92.236.0.0/14
                  94.173.0.0-94.175.255.255
                  193.38.64.0/18
                  193.39.32.0-193.39.64.255
                  193.193.96.0/19
                  194.117.128.0/19
                  194.168.0.0/16
                  195.188.0.0/16
                  212.24.64.0/19
                  212.250.0.0/16
                  213.48.0.0/16
                  213.81.0.0/17
                  213.104.0.0/14
                  213.148.32.0/19
                  217.137.0.0/16
                IPv6:
                  2a02:8801::/32
                  2a02:8880::/25

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:12:91:00:e8:bc:78:e3:1c:f1:74:d3:57:5f:33:c7:e5:
         62:93:db:a2:53:76:4b:dc:a4:61:fa:96:f6:19:b4:fc:88:e8:
         8b:9f:0d:d6:a5:e2:ac:2a:40:30:fa:27:e5:c2:3a:4a:b9:4d:
         a8:f7:e8:9f:66:76:67:d7:fd:8d:a8:75:19:39:5e:99:2b:c3:
         f5:93:a5:13:ca:56:05:6b:21:33:91:5e:99:64:fd:e3:85:ba:
         06:dc:9d:0d:2c:cd:30:6c:5e:cc:ee:53:81:f9:32:a3:c6:ba:
         cd:9f:d4:d0:a7:21:b2:23:d0:fd:c6:b2:5d:db:15:c1:62:b0:
         2c:b2:43:e2:af:f1:ba:da:07:be:41:84:1a:6a:a1:90:bb:40:
         d8:71:59:5e:be:b3:e9:d6:63:d1:43:67:0f:72:12:ed:94:cb:
         c7:8d:3c:7c:04:4d:45:d9:76:23:fc:00:ef:69:4d:15:ec:3d:
         78:3a:f4:12:d3:6c:5e:80:f3:da:17:f4:df:0e:78:29:08:24:
         da:b6:4a:41:a9:82:de:c0:17:86:1d:7f:c4:06:86:64:88:15:
         5f:f8:c7:78:43:c3:57:82:cb:4b:96:90:db:2a:f6:05:14:50:
         07:c1:42:2b:51:74:97:bc:da:46:9b:6f:cf:da:37:7f:bd:be:
         bd:a7:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 10:03:07 2024 by rpki-client on console-fra.rpki-client.org