Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/fnaiD0eOrpYshPbCH0YJn7Jxj5Y.roa
File:                     fnaiD0eOrpYshPbCH0YJn7Jxj5Y.roa (raw, json)
Hash identifier:          pcvpPf+VqnkyyHPJYvAzqTP1rdNWdMCFFMYu8WBO0Vc=
Subject key identifier:   7E:76:A2:0F:47:8E:AE:96:2C:84:F6:C2:1F:46:09:9F:B2:71:8F:96
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       018A4F49B2B248D24B065CFC336097DD891A
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/fnaiD0eOrpYshPbCH0YJn7Jxj5Y.roa
Signing time:             Fri 01 Sep 2023 05:49:04 +0000
ROA not before:           Fri 01 Sep 2023 05:49:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206067
IP address blocks:        188.31.96.0/20 maxlen: 20
                          188.31.92.0/22 maxlen: 22
                          188.31.112.0/20 maxlen: 20
                          188.31.128.0/19 maxlen: 19
                          188.31.64.0/22 maxlen: 22
                          188.31.68.0/22 maxlen: 22
                          188.31.72.0/22 maxlen: 22
                          188.31.76.0/22 maxlen: 22
                          188.31.84.0/22 maxlen: 22
                          188.31.80.0/22 maxlen: 22
                          188.31.88.0/22 maxlen: 22
                          188.31.200.0/21 maxlen: 21
                          188.31.208.0/21 maxlen: 21
                          188.31.224.0/20 maxlen: 20
                          188.31.248.0/23 maxlen: 23
                          188.31.160.0/20 maxlen: 20
                          188.31.176.0/20 maxlen: 20
                          188.31.192.0/21 maxlen: 21
                          188.30.136.0/21 maxlen: 21
                          188.30.144.0/21 maxlen: 21
                          188.30.152.0/21 maxlen: 21
                          188.30.160.0/19 maxlen: 19
                          188.30.80.0/22 maxlen: 22
                          188.30.84.0/22 maxlen: 22
                          188.30.96.0/19 maxlen: 19
                          188.30.128.0/21 maxlen: 21
                          188.30.240.0/21 maxlen: 21
                          188.31.0.0/21 maxlen: 21
                          188.31.8.0/21 maxlen: 21
                          188.31.16.0/21 maxlen: 21
                          188.31.24.0/21 maxlen: 21
                          188.31.32.0/19 maxlen: 19
                          188.30.192.0/21 maxlen: 21
                          188.30.200.0/21 maxlen: 21
                          188.30.208.0/20 maxlen: 20
                          188.30.224.0/20 maxlen: 20
                          188.29.184.0/21 maxlen: 21
                          188.29.192.0/20 maxlen: 20
                          188.29.208.0/20 maxlen: 20
                          188.29.224.0/20 maxlen: 20
                          188.29.128.0/19 maxlen: 19
                          188.29.160.0/22 maxlen: 22
                          188.30.32.0/19 maxlen: 19
                          188.30.64.0/22 maxlen: 22
                          188.30.68.0/22 maxlen: 22
                          188.30.76.0/22 maxlen: 22
                          188.30.72.0/22 maxlen: 22
                          188.29.240.0/21 maxlen: 21
                          188.29.248.0/22 maxlen: 22
                          188.30.0.0/21 maxlen: 21
                          188.30.8.0/21 maxlen: 21
                          188.30.16.0/21 maxlen: 21
                          188.30.0.0/15 maxlen: 15
                          188.30.24.0/21 maxlen: 21
                          188.29.0.0/20 maxlen: 20
                          188.28.160.0/19 maxlen: 19
                          188.28.192.0/18 maxlen: 18
                          188.29.80.0/20 maxlen: 20
                          188.29.96.0/20 maxlen: 20
                          188.29.112.0/20 maxlen: 20
                          188.29.16.0/20 maxlen: 20
                          188.29.32.0/20 maxlen: 20
                          188.29.48.0/20 maxlen: 20
                          188.29.64.0/20 maxlen: 20
                          188.28.0.0/20 maxlen: 20
                          92.41.128.0/20 maxlen: 20
                          188.28.16.0/20 maxlen: 20
                          188.28.0.0/15 maxlen: 15
                          92.41.144.0/21 maxlen: 21
                          92.41.156.0/22 maxlen: 22
                          188.28.32.0/20 maxlen: 20
                          92.41.160.0/21 maxlen: 21
                          188.28.48.0/20 maxlen: 20
                          92.41.84.0/22 maxlen: 22
                          92.41.80.0/22 maxlen: 22
                          92.41.88.0/22 maxlen: 22
                          92.41.92.0/22 maxlen: 22
                          92.41.96.0/19 maxlen: 19
                          188.28.112.0/20 maxlen: 20
                          188.28.128.0/19 maxlen: 19
                          92.41.176.0/20 maxlen: 20
                          188.28.64.0/20 maxlen: 20
                          188.28.80.0/20 maxlen: 20
                          92.41.208.0/20 maxlen: 20
                          188.28.96.0/20 maxlen: 20
                          92.41.224.0/20 maxlen: 20
                          92.40.160.0/21 maxlen: 21
                          92.40.168.0/23 maxlen: 23
                          92.40.170.0/23 maxlen: 23
                          92.40.172.0/23 maxlen: 23
                          92.40.174.0/23 maxlen: 23
                          92.40.176.0/23 maxlen: 23
                          92.40.178.0/23 maxlen: 23
                          92.40.186.0/23 maxlen: 23
                          92.40.180.0/23 maxlen: 23
                          92.40.182.0/23 maxlen: 23
                          92.40.184.0/23 maxlen: 23
                          92.40.188.0/23 maxlen: 23
                          92.40.190.0/23 maxlen: 23
                          92.40.192.0/23 maxlen: 23
                          92.40.194.0/23 maxlen: 23
                          92.40.196.0/23 maxlen: 23
                          92.40.198.0/23 maxlen: 23
                          92.40.200.0/23 maxlen: 23
                          92.40.202.0/23 maxlen: 23
                          92.40.204.0/23 maxlen: 23
                          92.40.208.0/23 maxlen: 23
                          92.40.210.0/23 maxlen: 23
                          92.40.212.0/23 maxlen: 23
                          92.40.112.0/20 maxlen: 20
                          92.40.128.0/19 maxlen: 19
                          92.41.16.0/20 maxlen: 20
                          92.41.32.0/20 maxlen: 20
                          92.41.48.0/20 maxlen: 20
                          92.41.64.0/20 maxlen: 20
                          92.40.214.0/23 maxlen: 23
                          92.40.216.0/23 maxlen: 23
                          92.40.218.0/23 maxlen: 23
                          92.40.240.0/21 maxlen: 21
                          92.40.248.0/21 maxlen: 21
                          92.41.0.0/20 maxlen: 20
                          92.40.64.0/20 maxlen: 20
                          92.40.80.0/20 maxlen: 20
                          92.40.96.0/20 maxlen: 20
                          92.40.0.0/20 maxlen: 20
                          92.40.16.0/20 maxlen: 20
                          92.40.0.0/15 maxlen: 15
                          92.40.32.0/20 maxlen: 20
                          92.40.48.0/20 maxlen: 20
                          185.153.236.0/24 maxlen: 24
                          185.153.237.0/24 maxlen: 24
                          185.153.238.0/24 maxlen: 24
                          185.153.239.0/24 maxlen: 24
                          188.31.251.0/24 maxlen: 24
                          188.31.250.0/24 maxlen: 24
                          217.171.128.0/20 maxlen: 20
                          94.197.96.0/21 maxlen: 21
                          94.197.104.0/21 maxlen: 21
                          94.197.112.0/21 maxlen: 21
                          94.197.32.0/20 maxlen: 20
                          94.197.48.0/20 maxlen: 20
                          94.197.64.0/19 maxlen: 19
                          94.197.176.0/21 maxlen: 21
                          94.197.184.0/21 maxlen: 21
                          94.197.192.0/18 maxlen: 18
                          94.197.128.0/21 maxlen: 21
                          94.197.136.0/21 maxlen: 21
                          94.197.144.0/21 maxlen: 21
                          94.197.152.0/21 maxlen: 21
                          94.197.160.0/21 maxlen: 21
                          94.197.168.0/21 maxlen: 21
                          94.196.112.0/20 maxlen: 20
                          94.196.128.0/20 maxlen: 20
                          94.196.144.0/20 maxlen: 20
                          94.196.64.0/20 maxlen: 20
                          94.196.80.0/20 maxlen: 20
                          94.196.96.0/20 maxlen: 20
                          94.196.224.0/19 maxlen: 19
                          92.41.251.0/24 maxlen: 24
                          94.197.0.0/19 maxlen: 19
                          94.196.160.0/19 maxlen: 19
                          94.196.192.0/20 maxlen: 20
                          94.196.208.0/20 maxlen: 20
                          94.196.0.0/18 maxlen: 18
                          94.196.0.0/15 maxlen: 15
                          92.40.245.0/24 maxlen: 24
                          92.40.248.0/24 maxlen: 24
                          2a04:4a45:b::/48 maxlen: 48
                          2a04:4a45:f::/48 maxlen: 48
                          2a04:4a45:c::/48 maxlen: 48
                          2a04:4a45:9::/48 maxlen: 48
                          2a04:4a43:4000::/34 maxlen: 34
                          2a04:4a43:4000::/39 maxlen: 39
                          2a04:4a43:4200::/39 maxlen: 39
                          2a04:4a43:8000::/34 maxlen: 34
                          2a04:4a45::/32 maxlen: 32
                          2a04:4a45:d::/48 maxlen: 48
                          2a04:4a45:a::/48 maxlen: 48
                          2a04:4a43:4d00::/40 maxlen: 40
                          2a04:4a43:4500::/40 maxlen: 40
                          2a04:4a43:4600::/40 maxlen: 40
                          2a04:4a43:9000::/40 maxlen: 40
                          2a04:4a43:9600::/40 maxlen: 40
                          2a04:4a43:4c00::/40 maxlen: 40
                          2a04:4a43:4900::/40 maxlen: 40
                          2a04:4a43:4f00::/40 maxlen: 40
                          2a04:4a43:5700::/40 maxlen: 40
                          2a04:4a43:8900::/40 maxlen: 40
                          2a04:4a43:5600::/40 maxlen: 40
                          2a04:4a43:5300::/40 maxlen: 40
                          2a04:4a43:8c00::/40 maxlen: 40
                          2a04:4a43:5000::/40 maxlen: 40
                          2a04:4a43:9700::/40 maxlen: 40
                          2a04:4a43:9400::/40 maxlen: 40
                          2a04:4a43:4700::/40 maxlen: 40
                          2a04:4a43:4a00::/40 maxlen: 40
                          2a04:4a43:4400::/40 maxlen: 40
                          2a04:4a43:5500::/40 maxlen: 40
                          2a04:4a43:8800::/40 maxlen: 40
                          2a04:4a43:5200::/40 maxlen: 40
                          2a04:4a43:8b00::/40 maxlen: 40
                          2a04:4a43:4e00::/40 maxlen: 40
                          2a04:4a43:5400::/40 maxlen: 40
                          2a04:4a43:5100::/40 maxlen: 40
                          2a04:4a43:9800::/40 maxlen: 40
                          2a04:4a43:9200::/40 maxlen: 40
                          2a04:4a43:8f00::/40 maxlen: 40
                          2a04:4a43:4800::/40 maxlen: 40
                          2a04:4a43:4b00::/40 maxlen: 40
                          2a04:4a43:9500::/40 maxlen: 40
                          2a04:4a43:5800::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4f:49:b2:b2:48:d2:4b:06:5c:fc:33:60:97:dd:89:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Sep  1 05:49:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e76a20f478eae962c84f6c21f46099fb2718f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:4a:da:b9:10:21:cb:1b:f3:52:79:6e:38:
                    6b:ff:e2:f5:dd:e2:5c:3d:85:b5:b8:a0:70:05:dd:
                    71:3e:55:d4:f8:da:b5:bd:93:3a:34:b0:87:f0:a8:
                    9c:7c:85:eb:ff:15:03:e9:c2:61:e1:13:58:ab:3b:
                    91:19:a9:57:cb:b9:ed:3e:ff:2e:4c:89:f0:60:2a:
                    31:93:7c:53:b7:a8:34:85:d5:07:4a:3b:5d:a6:50:
                    0e:75:d4:f4:64:1d:41:09:68:02:a0:92:c1:bd:9a:
                    3b:40:a6:d2:5a:63:b2:d4:54:8a:0b:4c:35:ca:d8:
                    63:a8:6e:e0:dd:91:81:cc:c3:1a:39:62:fa:b4:d5:
                    b9:81:b0:a5:a1:ad:f1:15:62:c7:c7:cf:3f:ef:c5:
                    ea:d5:b5:62:3c:ed:10:b7:61:a1:c5:e2:28:d4:ce:
                    5a:7d:0c:bd:78:af:21:57:7b:a0:b3:3c:00:c8:93:
                    75:b1:5f:96:4a:cf:27:e7:b1:7a:93:85:27:0d:ba:
                    8e:9a:8c:7b:1a:77:e1:a2:04:7e:9c:0c:1f:25:ae:
                    bd:f7:4f:d1:f0:c0:42:68:34:47:52:e5:9e:90:68:
                    91:bc:67:41:de:b5:de:de:f0:c3:f6:30:fe:86:8e:
                    bb:57:2a:b4:6d:fd:37:89:0f:72:1b:f8:8c:a8:c9:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:A2:0F:47:8E:AE:96:2C:84:F6:C2:1F:46:09:9F:B2:71:8F:96
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/fnaiD0eOrpYshPbCH0YJn7Jxj5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.40.0.0/15
                  94.196.0.0/15
                  185.153.236.0/22
                  188.28.0.0/14
                  217.171.128.0/20
                IPv6:
                  2a04:4a43:4000::-2a04:4a43:bfff:ffff:ffff:ffff:ffff:ffff
                  2a04:4a45::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:e1:33:5d:49:88:53:25:d8:66:52:24:e1:c6:2e:95:71:a3:
         a8:c9:07:37:c1:8e:58:25:c6:14:0b:e5:29:85:36:fa:3d:e1:
         17:ec:4e:77:d7:01:59:d8:85:03:80:f5:dc:14:5d:ed:1e:75:
         09:9a:fc:f3:9a:bc:74:58:f0:79:6f:09:d5:23:47:86:d5:db:
         0d:c7:af:0e:3c:c1:8a:b6:d4:91:74:83:15:98:b6:5f:8d:05:
         ee:77:ec:b4:45:6a:84:b7:1c:dc:1e:87:ac:b5:f7:97:40:f0:
         b4:2c:25:78:23:ab:4b:94:da:7d:e5:ce:48:d8:aa:ae:3c:37:
         f7:29:a9:02:de:74:e4:e0:32:43:18:58:11:e8:e0:9a:fd:97:
         1b:8e:a6:b4:e1:69:5c:7d:71:b6:e8:b7:f3:99:f8:4b:e3:4f:
         4a:ef:8e:30:e3:ad:fa:6f:9c:75:72:44:45:89:f2:35:a5:ef:
         2e:a9:82:cb:43:90:92:16:37:1e:fe:a4:f8:8f:ba:f3:32:ed:
         78:83:c6:e6:16:02:06:6c:79:20:80:6b:9c:f0:ce:ac:a5:3e:
         65:b1:8a:c9:0d:13:67:c9:53:12:ec:24:6d:1d:5f:5c:e3:b2:
         34:4e:45:c5:dd:b0:ab:c2:ab:ca:bd:ad:43:bc:10:8f:a7:e5:
         0a:f9:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 12:27:49 2023 by rpki-client on console-fra.rpki-client.org