Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/62V_kRnOPABH0FNv6lp7JWtVjWk.roa
File:                     62V_kRnOPABH0FNv6lp7JWtVjWk.roa (raw, json)
Hash identifier:          mqtXIw4IDvevohLzrcS42diWDdQVtFjRrXQj7fY/Hsg=
Subject key identifier:   EB:65:7F:91:19:CE:3C:00:47:D0:53:6F:EA:5A:7B:25:6B:55:8D:69
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       0190E165272278A8BC3F3950107943078EA0
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/62V_kRnOPABH0FNv6lp7JWtVjWk.roa
Signing time:             Tue 23 Jul 2024 21:00:21 +0000
ROA not before:           Tue 23 Jul 2024 21:00:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198949
IP address blocks:        92.40.0.0/20 maxlen: 20
                          92.40.16.0/20 maxlen: 20
                          92.40.32.0/20 maxlen: 20
                          92.40.48.0/20 maxlen: 20
                          92.40.64.0/20 maxlen: 20
                          92.40.80.0/20 maxlen: 20
                          92.40.96.0/20 maxlen: 20
                          92.40.112.0/20 maxlen: 20
                          92.40.128.0/19 maxlen: 19
                          92.40.160.0/21 maxlen: 21
                          92.40.168.0/23 maxlen: 23
                          92.40.170.0/23 maxlen: 23
                          92.40.172.0/23 maxlen: 23
                          92.40.174.0/23 maxlen: 23
                          92.40.176.0/23 maxlen: 23
                          92.40.178.0/23 maxlen: 23
                          92.40.180.0/23 maxlen: 23
                          92.40.182.0/23 maxlen: 23
                          92.40.184.0/23 maxlen: 23
                          92.40.186.0/23 maxlen: 23
                          92.40.188.0/23 maxlen: 23
                          92.40.190.0/23 maxlen: 23
                          92.40.192.0/23 maxlen: 23
                          92.40.194.0/23 maxlen: 23
                          92.40.196.0/23 maxlen: 23
                          92.40.198.0/23 maxlen: 23
                          92.40.200.0/23 maxlen: 23
                          92.40.202.0/23 maxlen: 23
                          92.40.204.0/23 maxlen: 23
                          92.40.208.0/23 maxlen: 23
                          92.40.210.0/23 maxlen: 23
                          92.40.212.0/23 maxlen: 23
                          92.40.214.0/23 maxlen: 23
                          92.40.216.0/23 maxlen: 23
                          92.40.218.0/23 maxlen: 23
                          92.41.0.0/20 maxlen: 20
                          92.41.16.0/20 maxlen: 20
                          92.41.32.0/20 maxlen: 20
                          92.41.48.0/20 maxlen: 20
                          92.41.64.0/20 maxlen: 20
                          92.41.80.0/22 maxlen: 22
                          92.41.84.0/22 maxlen: 22
                          92.41.88.0/22 maxlen: 22
                          92.41.92.0/22 maxlen: 22
                          92.41.96.0/19 maxlen: 19
                          92.41.128.0/20 maxlen: 20
                          92.41.144.0/21 maxlen: 21
                          92.41.156.0/22 maxlen: 22
                          92.41.160.0/21 maxlen: 21
                          92.41.176.0/20 maxlen: 20
                          92.41.208.0/20 maxlen: 20
                          92.41.224.0/20 maxlen: 20
                          92.41.251.0/24 maxlen: 24
                          94.196.0.0/18 maxlen: 18
                          94.196.64.0/20 maxlen: 20
                          94.196.80.0/20 maxlen: 20
                          94.196.96.0/20 maxlen: 20
                          94.196.112.0/20 maxlen: 20
                          94.196.128.0/20 maxlen: 20
                          94.196.144.0/20 maxlen: 20
                          94.196.160.0/19 maxlen: 19
                          94.196.192.0/20 maxlen: 20
                          94.196.208.0/20 maxlen: 20
                          94.196.224.0/19 maxlen: 19
                          94.197.0.0/19 maxlen: 19
                          94.197.32.0/20 maxlen: 20
                          94.197.48.0/20 maxlen: 20
                          94.197.64.0/19 maxlen: 19
                          94.197.96.0/21 maxlen: 21
                          94.197.104.0/21 maxlen: 21
                          94.197.112.0/21 maxlen: 21
                          94.197.128.0/21 maxlen: 21
                          94.197.136.0/21 maxlen: 21
                          94.197.144.0/21 maxlen: 21
                          94.197.152.0/21 maxlen: 21
                          94.197.160.0/21 maxlen: 21
                          94.197.168.0/21 maxlen: 21
                          94.197.176.0/21 maxlen: 21
                          94.197.184.0/21 maxlen: 21
                          94.197.192.0/18 maxlen: 18
                          188.28.192.0/18 maxlen: 18
                          188.29.32.0/20 maxlen: 20
                          188.29.48.0/20 maxlen: 20
                          188.30.8.0/21 maxlen: 21
                          188.30.16.0/21 maxlen: 21
                          188.30.160.0/19 maxlen: 19
                          188.30.224.0/20 maxlen: 20
                          188.31.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 20:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e1:65:27:22:78:a8:bc:3f:39:50:10:79:43:07:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Jul 23 21:00:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb657f9119ce3c0047d0536fea5a7b256b558d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:04:0e:83:c2:7a:60:11:5c:88:be:31:94:
                    6e:58:73:13:2b:67:f4:44:82:03:76:2f:30:b7:6d:
                    73:2c:51:b2:47:af:53:34:fa:17:7e:6e:05:87:d0:
                    60:a7:ef:23:52:29:3e:44:b4:05:fe:c7:6b:b0:bf:
                    bb:0b:3b:39:dc:d4:98:ab:86:a1:dc:32:57:5e:7f:
                    a3:f4:44:cc:f4:7f:4c:5a:ee:7c:49:e0:a9:9d:a9:
                    31:01:39:af:15:28:3d:5c:23:d6:3d:d3:fd:5f:be:
                    75:e9:15:37:cd:2e:ee:74:5c:73:81:01:e8:46:2f:
                    b7:0d:5a:39:2e:83:c7:ea:64:c5:48:47:ba:b3:d6:
                    b9:f6:a1:d9:0e:7e:63:c1:be:2a:89:e8:99:fc:85:
                    b1:57:30:16:92:7a:6c:1e:90:af:b6:f7:32:e3:e7:
                    4e:02:4b:ae:b9:56:69:70:62:69:3b:40:24:01:e8:
                    3d:60:91:25:05:1a:de:e1:bc:42:98:0b:f0:93:0b:
                    d1:ef:2f:93:96:d7:b1:4c:f1:4f:6d:52:cc:c3:00:
                    d1:72:42:60:7b:55:6c:e1:7d:e2:a6:28:2d:e1:28:
                    93:54:64:90:97:a8:72:1a:e7:89:4f:92:c2:e6:03:
                    98:31:e6:fc:86:b5:f7:19:48:dc:70:a6:cb:89:58:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:7F:91:19:CE:3C:00:47:D0:53:6F:EA:5A:7B:25:6B:55:8D:69
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/62V_kRnOPABH0FNv6lp7JWtVjWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.40.0.0-92.40.205.255
                  92.40.208.0-92.40.219.255
                  92.41.0.0-92.41.151.255
                  92.41.156.0-92.41.167.255
                  92.41.176.0/20
                  92.41.208.0-92.41.239.255
                  92.41.251.0/24
                  94.196.0.0-94.197.119.255
                  94.197.128.0/17
                  188.28.192.0/18
                  188.29.32.0/19
                  188.30.8.0-188.30.23.255
                  188.30.160.0/19
                  188.30.224.0/20
                  188.31.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:66:07:e0:8d:a3:3b:13:81:db:fa:7a:9b:a6:4d:97:e5:55:
         9b:48:65:69:9c:d4:94:42:6c:85:47:2f:cb:e4:47:44:fa:5f:
         2e:25:01:ef:72:46:55:ba:ce:7d:f9:82:fc:1d:8d:be:3c:7f:
         4e:91:56:86:58:52:5e:db:3d:9d:16:87:cf:ff:78:0f:f6:87:
         14:0b:14:fe:33:a4:6b:d4:a4:6a:c3:18:03:dc:78:2e:e3:f3:
         75:a0:cb:06:29:35:7f:e6:d4:2e:b5:e1:20:71:0a:35:b9:24:
         19:99:f9:9d:e1:70:68:90:c7:c1:8c:12:3f:09:79:34:72:a4:
         d3:40:82:fa:a4:68:11:cf:37:f6:d8:eb:53:e8:88:aa:1a:a2:
         1c:1c:3c:90:78:6d:b6:2b:0d:e3:24:cf:ea:db:de:a5:4a:16:
         3c:49:c7:3f:1d:a0:81:1a:e7:b5:42:cd:aa:a9:2a:0b:7d:1d:
         ff:95:3e:93:a2:4c:4a:30:47:a4:95:d1:2b:9e:a6:86:5b:e5:
         88:d0:fc:cf:a5:12:17:dd:74:3c:b4:c4:be:c9:fe:39:51:9e:
         ff:9a:e4:72:de:af:ce:ee:80:36:21:96:64:dd:e8:b4:97:b0:
         ce:4c:d5:0f:35:a5:68:bc:54:0f:37:df:4b:d9:b2:98:b5:58:
         36:66:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:20 2024 by rpki-client on console-ams.rpki-client.org