Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/o_VwcZ01n64bFKzzKkJydzP1XWo.roa
File:                     o_VwcZ01n64bFKzzKkJydzP1XWo.roa (raw, json)
Hash identifier:          6uJ+qrSFYGdtEZg88AyYuRrKEqeGH0XvIfFC41N3n7o=
Subject key identifier:   A3:F5:70:71:9D:35:9F:AE:1B:14:AC:F3:2A:42:72:77:33:F5:5D:6A
Certificate issuer:       /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial:       019209E09F2BB6655F540206021174F66AE3
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/o_VwcZ01n64bFKzzKkJydzP1XWo.roa
Signing time:             Thu 19 Sep 2024 10:42:48 +0000
ROA not before:           Thu 19 Sep 2024 10:42:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29256
IP address blocks:        5.0.0.0/19 maxlen: 19
                          5.0.32.0/19 maxlen: 19
                          5.0.32.0/21 maxlen: 21
                          5.0.40.0/21 maxlen: 21
                          5.0.48.0/21 maxlen: 21
                          5.0.56.0/21 maxlen: 21
                          5.0.64.0/18 maxlen: 18
                          5.0.128.0/19 maxlen: 19
                          5.0.160.0/19 maxlen: 19
                          5.0.160.0/21 maxlen: 21
                          5.0.168.0/21 maxlen: 21
                          5.0.176.0/21 maxlen: 21
                          5.0.184.0/21 maxlen: 21
                          5.0.192.0/18 maxlen: 18
                          5.155.0.0/19 maxlen: 19
                          5.155.0.0/21 maxlen: 21
                          5.155.8.0/21 maxlen: 21
                          5.155.16.0/21 maxlen: 21
                          5.155.24.0/21 maxlen: 21
                          5.155.32.0/19 maxlen: 19
                          5.155.64.0/19 maxlen: 19
                          5.155.96.0/19 maxlen: 19
                          5.155.128.0/19 maxlen: 19
                          5.155.128.0/21 maxlen: 21
                          5.155.136.0/21 maxlen: 21
                          5.155.144.0/21 maxlen: 21
                          5.155.152.0/21 maxlen: 21
                          5.155.160.0/19 maxlen: 19
                          5.155.192.0/19 maxlen: 19
                          5.155.224.0/19 maxlen: 19
                          31.9.48.0/22 maxlen: 22
                          31.9.56.0/21 maxlen: 21
                          31.9.64.0/20 maxlen: 20
                          31.9.80.0/20 maxlen: 20
                          31.9.96.0/19 maxlen: 19
                          31.9.128.0/20 maxlen: 20
                          31.9.144.0/20 maxlen: 20
                          31.9.160.0/19 maxlen: 19
                          31.9.192.0/19 maxlen: 19
                          31.9.224.0/19 maxlen: 19
                          46.40.128.0/18 maxlen: 18
                          80.70.120.0/21 maxlen: 21
                          82.100.128.0/19 maxlen: 19
                          82.137.192.0/20 maxlen: 20
                          82.137.208.0/20 maxlen: 20
                          82.137.224.0/20 maxlen: 20
                          82.137.240.0/24 maxlen: 24
                          82.137.242.0/24 maxlen: 24
                          82.137.243.0/24 maxlen: 24
                          82.137.244.0/23 maxlen: 23
                          82.137.246.0/23 maxlen: 23
                          82.137.248.0/24 maxlen: 24
                          82.137.249.0/24 maxlen: 24
                          82.137.250.0/24 maxlen: 24
                          82.137.251.0/24 maxlen: 24
                          82.137.252.0/24 maxlen: 24
                          82.137.253.0/24 maxlen: 24
                          82.137.254.0/24 maxlen: 24
                          82.137.255.0/24 maxlen: 24
                          91.144.0.0/20 maxlen: 20
                          91.144.16.0/20 maxlen: 20
                          91.144.32.0/20 maxlen: 20
                          94.47.0.0/19 maxlen: 19
                          94.47.0.0/21 maxlen: 21
                          94.47.8.0/21 maxlen: 21
                          94.47.16.0/21 maxlen: 21
                          94.47.24.0/21 maxlen: 21
                          94.47.32.0/19 maxlen: 19
                          94.47.32.0/21 maxlen: 21
                          94.47.40.0/21 maxlen: 21
                          94.47.48.0/21 maxlen: 21
                          94.47.56.0/21 maxlen: 21
                          94.47.64.0/19 maxlen: 19
                          94.47.96.0/19 maxlen: 19
                          94.47.128.0/20 maxlen: 20
                          94.47.144.0/20 maxlen: 20
                          94.47.160.0/19 maxlen: 19
                          94.47.160.0/21 maxlen: 21
                          94.47.168.0/21 maxlen: 21
                          94.47.176.0/21 maxlen: 21
                          94.47.184.0/21 maxlen: 21
                          94.47.192.0/18 maxlen: 18
                          178.253.64.0/19 maxlen: 19
                          178.253.96.0/23 maxlen: 23
                          178.253.98.0/24 maxlen: 24
                          178.253.99.0/24 maxlen: 24
                          178.253.100.0/23 maxlen: 23
                          178.253.102.0/24 maxlen: 24
                          178.253.103.0/24 maxlen: 24
                          178.253.104.0/22 maxlen: 22
                          178.253.108.0/23 maxlen: 23
                          178.253.110.0/23 maxlen: 23
                          178.253.112.0/22 maxlen: 22
                          185.92.88.0/22 maxlen: 22
                          185.99.100.0/22 maxlen: 22
                          185.109.212.0/22 maxlen: 22
                          188.133.0.0/20 maxlen: 20
                          188.133.16.0/20 maxlen: 20
                          188.133.32.0/19 maxlen: 19
                          188.133.64.0/19 maxlen: 19
                          188.133.96.0/19 maxlen: 19
                          193.124.10.0/23 maxlen: 23
                          193.124.12.0/23 maxlen: 23
                          193.124.26.0/23 maxlen: 23
                          193.124.28.0/23 maxlen: 23
                          193.124.38.0/23 maxlen: 23
                          193.124.52.0/23 maxlen: 23
                          193.124.62.0/23 maxlen: 23
                          193.124.68.0/23 maxlen: 23
                          193.124.86.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 08:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:09:e0:9f:2b:b6:65:5f:54:02:06:02:11:74:f6:6a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
        Validity
            Not Before: Sep 19 10:42:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a3f570719d359fae1b14acf32a42727733f55d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:92:48:b9:ad:66:d9:68:1c:16:7a:b9:77:2c:
                    b0:ed:dc:5f:ca:f7:09:24:e5:8b:e4:9b:18:a7:37:
                    d3:56:2e:e6:bf:68:3b:b0:8e:fe:56:3d:83:27:a1:
                    b8:23:14:9d:96:f1:e1:d5:7b:6c:3f:c4:c0:a3:db:
                    78:8b:0a:e8:20:96:d3:f6:65:77:5b:c1:fa:8a:7e:
                    79:1c:6d:b8:e1:d1:be:bd:8a:47:7f:0b:27:9c:3f:
                    f9:0e:b4:99:bd:fc:81:70:6d:ff:19:55:8b:4d:4c:
                    01:30:61:83:e8:da:0f:6c:5b:7e:cd:c6:18:9c:da:
                    a3:6a:c4:cd:dd:57:be:1a:98:6c:88:c7:fb:aa:c6:
                    86:5f:2b:d6:ed:77:66:10:c7:b2:60:e1:3f:8e:1a:
                    df:da:0a:f2:cb:91:e2:d5:8c:50:63:46:06:c8:64:
                    24:97:32:19:17:89:0c:ec:c3:de:9e:9a:25:99:fb:
                    61:4c:76:8a:69:67:3d:ea:65:2c:82:eb:e5:9f:bb:
                    20:14:a4:c4:bf:9e:a1:92:ec:b3:68:cd:2e:88:e3:
                    5d:a3:cc:5f:0e:9f:2a:c6:d5:cf:48:1a:d2:35:b0:
                    d6:0e:d3:5f:ca:32:d2:b3:85:c7:ac:0c:cd:0e:31:
                    cc:ba:c8:c4:f1:ae:d8:12:bb:ae:2c:25:7e:1f:92:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F5:70:71:9D:35:9F:AE:1B:14:AC:F3:2A:42:72:77:33:F5:5D:6A
            X509v3 Authority Key Identifier:
                keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/o_VwcZ01n64bFKzzKkJydzP1XWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.0.0.0/16
                  5.155.0.0/16
                  31.9.48.0/22
                  31.9.56.0-31.9.255.255
                  46.40.128.0/18
                  80.70.120.0/21
                  82.100.128.0/19
                  82.137.192.0-82.137.240.255
                  82.137.242.0-82.137.255.255
                  91.144.0.0-91.144.47.255
                  94.47.0.0/16
                  178.253.64.0-178.253.115.255
                  185.92.88.0/22
                  185.99.100.0/22
                  185.109.212.0/22
                  188.133.0.0/17
                  193.124.10.0-193.124.13.255
                  193.124.26.0-193.124.29.255
                  193.124.38.0/23
                  193.124.52.0/23
                  193.124.62.0/23
                  193.124.68.0/23
                  193.124.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:28:ff:4b:be:5f:0f:9e:6c:6b:85:f0:04:47:3e:73:29:
         24:36:cc:ba:7e:9b:db:96:30:5a:aa:13:11:b5:7d:66:08:ab:
         5a:53:d0:cb:78:13:db:d0:f5:5e:b1:d3:ce:87:f4:16:25:0a:
         4e:df:d6:87:23:33:e3:c7:e9:b3:1f:ec:fa:da:9b:09:74:5b:
         6f:78:be:29:84:a6:f6:c5:ae:49:ac:ec:c9:d3:eb:7f:4f:fb:
         a9:eb:17:19:35:20:d4:3b:ec:9d:2f:69:4b:48:72:09:db:5b:
         73:9b:25:a2:fb:17:29:44:0e:c5:61:0b:34:da:c7:ef:6d:5f:
         e3:09:7a:58:1f:11:ec:91:6f:e4:20:56:76:b2:99:89:34:99:
         31:14:58:75:93:f8:77:44:cf:2a:50:8d:d0:3d:8b:ce:01:5f:
         1a:da:36:b3:d5:95:60:d4:3f:22:4b:ab:9a:be:a7:e8:d6:a8:
         d5:c7:02:de:23:d5:89:76:df:d4:be:6b:b8:14:05:73:f3:ee:
         90:b8:fe:32:ab:81:df:a1:ec:47:58:9f:9e:13:d6:ab:b0:fc:
         fa:23:3f:d2:7f:ea:c7:9a:cb:d2:8e:35:d6:d8:a1:5c:c1:0c:
         ee:79:d6:1b:a7:9c:e9:ef:a6:68:b6:d4:2d:e4:5e:aa:12:0f:
         e1:da:e7:c4
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 22 10:38:21 2024 by rpki-client on console-ams.rpki-client.org