Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/_W91kmwhMls6JnV8pW-xmn1ByE4.roa
File:                     _W91kmwhMls6JnV8pW-xmn1ByE4.roa (raw, json)
Hash identifier:          25oZvkqPH5jqeN88FK73nldlVuvXN20PVa+5B0Yk6L0=
Subject key identifier:   FD:6F:75:92:6C:21:32:5B:3A:26:75:7C:A5:6F:B1:9A:7D:41:C8:4E
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       018A6ACFB6A513024111BC2D5E7533019CE2
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/_W91kmwhMls6JnV8pW-xmn1ByE4.roa
Signing time:             Wed 06 Sep 2023 14:05:12 +0000
ROA not before:           Wed 06 Sep 2023 14:05:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8492
IP address blocks:        37.221.206.0/24 maxlen: 24
                          37.221.203.0/24 maxlen: 24
                          37.221.204.0/23 maxlen: 23
                          37.221.200.0/23 maxlen: 23
                          85.114.0.0/19 maxlen: 19
                          92.255.44.0/24 maxlen: 24
                          92.255.41.0/24 maxlen: 24
                          185.241.176.0/22 maxlen: 22
                          92.255.40.0/24 maxlen: 24
                          92.255.45.0/24 maxlen: 24
                          92.255.51.0/24 maxlen: 24
                          92.255.46.0/24 maxlen: 24
                          92.255.47.0/24 maxlen: 24
                          95.161.144.0/21 maxlen: 21
                          145.255.232.0/24 maxlen: 24
                          145.255.233.0/24 maxlen: 24
                          95.161.152.0/22 maxlen: 24
                          95.161.156.0/22 maxlen: 22
                          145.255.236.0/22 maxlen: 22
                          145.255.234.0/23 maxlen: 23
                          95.161.164.0/22 maxlen: 22
                          87.249.55.0/24 maxlen: 24
                          62.32.64.0/24 maxlen: 24
                          62.32.66.0/23 maxlen: 23
                          62.32.70.0/24 maxlen: 24
                          62.32.68.0/23 maxlen: 23
                          62.32.75.0/24 maxlen: 24
                          62.32.76.0/24 maxlen: 24
                          62.32.73.0/24 maxlen: 24
                          62.32.74.0/24 maxlen: 24
                          62.32.83.0/24 maxlen: 24
                          62.32.91.0/24 maxlen: 24
                          62.32.89.0/24 maxlen: 24
                          62.32.90.0/24 maxlen: 24
                          62.32.88.0/24 maxlen: 24
                          62.32.94.0/24 maxlen: 24
                          80.79.64.0/21 maxlen: 21
                          80.79.76.0/24 maxlen: 24
                          80.79.72.0/22 maxlen: 22
                          80.79.79.0/24 maxlen: 24
                          185.119.0.0/22 maxlen: 22
                          217.79.4.0/23 maxlen: 23
                          217.79.0.0/22 maxlen: 22
                          217.79.10.0/23 maxlen: 23
                          217.79.8.0/24 maxlen: 24
                          217.79.9.0/24 maxlen: 24
                          217.79.6.0/23 maxlen: 23
                          217.79.15.0/24 maxlen: 24
                          217.79.14.0/24 maxlen: 24
                          217.79.12.0/23 maxlen: 23
                          149.126.16.0/22 maxlen: 22
                          149.126.22.0/24 maxlen: 24
                          149.126.23.0/24 maxlen: 24
                          149.126.20.0/23 maxlen: 23
                          37.77.132.0/24 maxlen: 24
                          37.77.130.0/23 maxlen: 23
                          89.104.118.0/24 maxlen: 24
                          89.104.115.0/24 maxlen: 24
                          37.77.129.0/24 maxlen: 24
                          37.77.133.0/24 maxlen: 24
                          37.77.134.0/23 maxlen: 23
                          185.17.84.0/23 maxlen: 23
                          46.231.208.0/24 maxlen: 24
                          46.231.209.0/24 maxlen: 24
                          46.231.212.0/23 maxlen: 23
                          46.231.210.0/23 maxlen: 23
                          46.231.215.0/24 maxlen: 24
                          46.231.214.0/23 maxlen: 23
                          46.231.214.0/24 maxlen: 24
                          93.191.58.0/24 maxlen: 24
                          93.191.63.0/24 maxlen: 24
                          93.191.60.0/24 maxlen: 24
                          185.171.192.0/22 maxlen: 22
                          89.104.97.0/24 maxlen: 24
                          178.16.144.0/22 maxlen: 22
                          178.16.152.0/22 maxlen: 22
                          178.16.150.0/24 maxlen: 24
                          178.16.151.0/24 maxlen: 24
                          178.16.148.0/23 maxlen: 23
                          178.16.158.0/23 maxlen: 23
                          178.16.156.0/24 maxlen: 24
                          80.250.80.0/24 maxlen: 24
                          80.250.88.0/21 maxlen: 21
                          80.250.87.0/24 maxlen: 24
                          185.7.232.0/22 maxlen: 22
                          46.34.136.0/21 maxlen: 21
                          79.142.80.0/21 maxlen: 21
                          46.34.134.0/24 maxlen: 24
                          79.142.88.0/22 maxlen: 22
                          46.34.148.0/22 maxlen: 22
                          79.142.92.0/24 maxlen: 24
                          185.102.10.0/24 maxlen: 24
                          185.102.8.0/22 maxlen: 22
                          185.81.220.0/22 maxlen: 22
                          95.161.232.0/22 maxlen: 22
                          95.161.228.0/22 maxlen: 22
                          95.161.236.0/22 maxlen: 22
                          79.134.192.0/24 maxlen: 24
                          79.134.196.0/23 maxlen: 23
                          79.134.198.0/23 maxlen: 23
                          79.134.194.0/23 maxlen: 23
                          79.134.193.0/24 maxlen: 24
                          95.161.180.0/22 maxlen: 22
                          79.134.200.0/21 maxlen: 21
                          95.161.192.0/22 maxlen: 22
                          95.161.188.0/22 maxlen: 22
                          79.134.213.0/24 maxlen: 24
                          79.134.212.0/24 maxlen: 24
                          79.134.208.0/22 maxlen: 22
                          79.134.214.0/23 maxlen: 23
                          79.134.216.0/22 maxlen: 22
                          95.161.213.0/24 maxlen: 24
                          79.134.222.0/23 maxlen: 23
                          79.134.220.0/23 maxlen: 23
                          95.161.214.0/23 maxlen: 23
                          95.161.218.0/23 maxlen: 23
                          95.161.216.0/23 maxlen: 23
                          95.161.220.0/24 maxlen: 24
                          89.223.1.0/24 maxlen: 24
                          89.223.12.0/24 maxlen: 24
                          46.229.210.0/23 maxlen: 23
                          46.229.210.0/24 maxlen: 24
                          46.229.211.0/24 maxlen: 24
                          46.229.208.0/23 maxlen: 23
                          46.229.208.0/22 maxlen: 22
                          2a05:a407::/32 maxlen: 32
                          2a05:a406::/32 maxlen: 32
                          2a01:590::/32 maxlen: 32
                          2a05:a400::/29 maxlen: 29

Validation:               Failed, certificate revoked on Wed 06 Sep 2023 14:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6a:cf:b6:a5:13:02:41:11:bc:2d:5e:75:33:01:9c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Sep  6 14:05:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd6f75926c21325b3a26757ca56fb19a7d41c84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:44:ad:17:21:fb:50:52:b1:f5:e4:84:91:e5:
                    72:49:35:be:a1:b6:2d:a7:32:f3:ea:82:31:0a:96:
                    c6:de:d9:1f:8f:7e:e4:db:fa:ce:bb:60:62:ff:ee:
                    b3:b8:f9:8f:8e:7a:d8:74:f3:0d:91:3c:7e:cf:4a:
                    bc:9e:41:26:44:12:97:b6:39:7d:a5:e1:37:29:51:
                    93:4f:5b:7a:ff:2a:33:4b:2b:4a:f8:d0:cf:d8:7b:
                    3b:1f:ec:03:67:c2:d0:75:37:3c:9e:06:0a:8b:49:
                    48:82:e2:37:2d:fc:2d:8b:4a:96:9e:a4:f7:32:9f:
                    88:e7:6d:29:ea:f5:7e:60:9d:26:b7:bc:90:92:b8:
                    56:13:3a:42:e7:5d:a1:37:a7:40:3c:7a:dc:ba:84:
                    b3:4b:06:f9:2b:a8:c3:0f:1d:c9:e7:db:86:6c:e1:
                    c2:59:60:03:ee:0a:d3:1a:93:42:8e:c0:4b:cd:50:
                    30:8c:7c:6e:ee:dd:76:87:b4:e7:a0:78:8d:b9:e7:
                    ce:7b:16:44:b7:83:74:17:18:a2:fe:8a:0d:d8:2c:
                    3c:de:59:04:12:7a:54:63:23:64:14:67:f6:44:f7:
                    92:68:b5:25:19:e6:77:47:04:c2:21:dc:00:92:8d:
                    79:2e:dc:8d:1e:34:df:2a:81:77:83:72:88:aa:17:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:75:92:6C:21:32:5B:3A:26:75:7C:A5:6F:B1:9A:7D:41:C8:4E
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/_W91kmwhMls6JnV8pW-xmn1ByE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.129.0-37.77.135.255
                  37.221.200.0/23
                  37.221.203.0-37.221.206.255
                  46.34.134.0/24
                  46.34.136.0/21
                  46.34.148.0/22
                  46.229.208.0/22
                  46.231.208.0/21
                  62.32.64.0/24
                  62.32.66.0-62.32.70.255
                  62.32.73.0-62.32.76.255
                  62.32.83.0/24
                  62.32.88.0/22
                  62.32.94.0/24
                  79.134.192.0/19
                  79.142.80.0-79.142.92.255
                  80.79.64.0-80.79.76.255
                  80.79.79.0/24
                  80.250.80.0/24
                  80.250.87.0-80.250.95.255
                  85.114.0.0/19
                  87.249.55.0/24
                  89.104.97.0/24
                  89.104.115.0/24
                  89.104.118.0/24
                  89.223.1.0/24
                  89.223.12.0/24
                  92.255.40.0/23
                  92.255.44.0/22
                  92.255.51.0/24
                  93.191.58.0/24
                  93.191.60.0/24
                  93.191.63.0/24
                  95.161.144.0/20
                  95.161.164.0/22
                  95.161.180.0/22
                  95.161.188.0-95.161.195.255
                  95.161.213.0-95.161.220.255
                  95.161.228.0-95.161.239.255
                  145.255.232.0/21
                  149.126.16.0/21
                  178.16.144.0-178.16.156.255
                  178.16.158.0/23
                  185.7.232.0/22
                  185.17.84.0/23
                  185.81.220.0/22
                  185.102.8.0/22
                  185.119.0.0/22
                  185.171.192.0/22
                  185.241.176.0/22
                  217.79.0.0/20
                IPv6:
                  2a01:590::/32
                  2a05:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:f6:f9:36:9a:c0:e8:7c:8e:7c:89:07:2d:7c:54:2e:c7:
         22:4e:c5:c2:9f:eb:e2:e2:87:8e:6e:a1:93:57:43:07:80:a8:
         e4:dc:90:7d:57:f9:37:49:3c:98:23:aa:f8:e1:a0:6f:42:0e:
         7b:39:31:70:71:c5:42:c9:a7:2d:b2:11:03:d1:e5:06:59:c6:
         4c:b5:71:91:8c:34:16:2c:11:a9:30:b0:92:24:eb:07:79:e2:
         dd:48:37:94:97:9b:a3:31:0d:7d:ec:45:c2:d5:1e:fa:29:a8:
         88:a6:ed:26:47:32:cf:33:a7:34:84:3a:87:39:00:e5:eb:ea:
         b5:aa:86:f1:ba:6e:35:41:2f:2c:48:4b:81:2e:17:c6:8f:23:
         6e:19:51:28:d6:b6:c4:0a:9d:39:cd:2b:b2:1e:f5:77:81:40:
         f3:f5:02:ea:f3:8e:07:48:aa:e7:49:fe:1b:cd:af:21:b0:cd:
         ab:39:c2:59:b5:26:49:88:ac:91:8e:4a:d9:64:6c:26:1b:60:
         3b:c1:60:c8:68:03:2f:0e:31:f9:b1:26:05:7b:97:31:e2:9f:
         a5:5c:5c:2f:dd:4e:4d:e3:f7:d9:cf:49:b0:ec:24:d5:b3:b0:
         35:ac:07:bf:c1:d7:cc:09:ca:be:d9:92:75:31:cb:81:e7:2f:
         7e:a3:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org