Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/RwoBm2bgXGrCyGZlpU5lpekBCLY.roa
File:                     RwoBm2bgXGrCyGZlpU5lpekBCLY.roa (raw, json)
Hash identifier:          dfx7HHOTt5AIcaZjxy7Mq5pUCFXcWX6xe6jO2Ns7b7o=
Subject key identifier:   47:0A:01:9B:66:E0:5C:6A:C2:C8:66:65:A5:4E:65:A5:E9:01:08:B6
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       0189EF62D50D1888EEA37140E87EED8CCCB1
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/RwoBm2bgXGrCyGZlpU5lpekBCLY.roa
Signing time:             Sun 13 Aug 2023 14:52:58 +0000
ROA not before:           Sun 13 Aug 2023 14:52:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          77.81.102.0/24 maxlen: 24
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 18 Aug 2023 15:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ef:62:d5:0d:18:88:ee:a3:71:40:e8:7e:ed:8c:cc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Aug 13 14:52:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=470a019b66e05c6ac2c86665a54e65a5e90108b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:ef:36:c3:40:1f:7c:8b:5c:bc:4a:4d:1b:
                    d9:e6:f8:80:34:a6:b1:54:0e:5c:73:8e:38:fb:2d:
                    bb:1e:a8:e2:02:b7:45:71:3f:3b:88:04:39:03:6b:
                    7f:06:87:fc:c1:e8:70:7a:b9:fe:ac:08:2b:06:d8:
                    b0:74:1c:3b:2b:74:a5:c6:31:72:30:a9:d8:f1:82:
                    3e:39:45:13:86:80:b6:75:f0:cb:5c:c6:19:06:0a:
                    46:9a:87:bc:5e:ba:bb:7d:8f:68:4e:e7:20:e2:13:
                    ac:61:0d:65:14:f5:5c:0b:c7:da:70:dd:e7:01:8d:
                    b1:93:ee:5b:ad:6c:5c:b7:55:6b:ad:d1:3f:79:88:
                    c5:5a:5f:e7:a6:f0:1b:bc:95:d3:61:ba:b8:ad:95:
                    d1:05:9e:a4:41:e2:d9:ca:40:d5:03:4e:b7:50:15:
                    4f:60:55:c3:75:10:5d:da:39:10:91:3f:87:9b:45:
                    b9:e3:dd:38:25:9a:8a:00:fc:5f:17:6b:19:13:88:
                    8a:2b:cb:67:52:33:02:2e:89:dd:1a:2e:80:98:2e:
                    54:a5:84:39:8e:8d:15:74:c3:62:70:e1:ee:89:f0:
                    5f:46:28:95:e9:1b:05:8d:a8:0d:9f:5b:dd:57:ac:
                    41:61:e7:b8:82:ef:a4:40:74:dc:5b:75:c1:0b:c5:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0A:01:9B:66:E0:5C:6A:C2:C8:66:65:A5:4E:65:A5:E9:01:08:B6
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/RwoBm2bgXGrCyGZlpU5lpekBCLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.102.0/24
                  77.81.124.0/22
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:c8:0f:46:29:a1:34:4e:46:4b:ed:8d:a9:a3:fe:f8:1d:
         a1:41:bf:0e:10:e3:49:97:49:81:3d:44:f0:89:fc:73:b9:9b:
         59:55:5f:c5:05:f7:b7:5e:9b:41:eb:82:8a:6c:c3:b2:6d:5e:
         dc:50:c4:76:51:1c:68:6c:73:e7:f6:74:dd:47:cd:7d:b8:a5:
         61:3e:62:37:7d:e9:89:f0:cc:73:ef:64:c5:76:62:cf:70:60:
         37:9a:7a:8f:51:e9:5b:c0:3a:48:ec:b9:9c:4a:a7:f6:2e:a4:
         5e:0f:21:09:6f:4e:a8:1b:fa:8b:5a:fc:9b:42:a8:71:51:36:
         a4:11:49:77:1a:24:4c:62:38:93:1b:12:5c:d0:1a:97:2b:86:
         ba:a8:f2:28:c3:69:c0:28:cc:f7:c8:37:86:c6:57:5c:df:43:
         29:7d:23:94:f9:f9:5d:5a:71:99:a9:65:d4:d8:06:6b:29:39:
         cf:82:9b:73:83:7a:76:d3:82:3a:74:ec:45:1c:eb:68:f1:7e:
         cf:15:09:4f:cd:76:ed:e7:15:8d:e4:0b:f3:94:d5:2c:60:3f:
         9e:fe:e6:8e:6f:10:fd:be:3e:35:e5:30:a3:d9:ed:62:7a:6d:
         2c:44:97:b2:c2:c1:3e:f6:bf:73:bb:88:a8:59:e1:ce:05:df:
         56:ae:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org