Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/VQBJIL3hIaX0t_D3mNxvIaokK0g.roa
File:                     VQBJIL3hIaX0t_D3mNxvIaokK0g.roa (raw, json)
Hash identifier:          Zzr9Cp9NyutzMjxMgWJKT1NihmmqwQ8Y/aTt3UOlDBM=
Subject key identifier:   55:00:49:20:BD:E1:21:A5:F4:B7:F0:F7:98:DC:6F:21:AA:24:2B:48
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01898E5202F41EF5AC3BFDCD440B4E1B90E0
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/VQBJIL3hIaX0t_D3mNxvIaokK0g.roa
Signing time:             Tue 25 Jul 2023 18:31:26 +0000
ROA not before:           Tue 25 Jul 2023 18:31:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.31.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.35.25.0/24 maxlen: 24
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          77.81.102.0/24 maxlen: 24
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 16:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:8e:52:02:f4:1e:f5:ac:3b:fd:cd:44:0b:4e:1b:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jul 25 18:31:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55004920bde121a5f4b7f0f798dc6f21aa242b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:00:a6:e1:18:bc:de:fb:06:6c:91:2b:8d:33:
                    fd:a5:25:06:2a:9a:79:0b:4b:67:b3:a3:73:e9:8f:
                    a3:99:ca:a8:2b:e6:70:6c:b7:e8:10:03:91:6e:80:
                    83:17:b5:99:dc:b1:dd:f0:f0:03:b9:06:31:f1:b4:
                    aa:e3:73:51:ad:5b:ca:5b:e3:91:f9:19:ec:df:24:
                    71:10:f6:0f:3a:47:42:02:c0:14:40:d1:42:44:ed:
                    3a:15:ba:f0:6b:91:c0:1f:b1:2c:53:64:b3:a8:1c:
                    60:1f:f9:98:b5:69:55:76:f2:b5:4f:f7:b2:96:47:
                    6f:2d:05:59:d5:aa:20:3c:12:52:89:0a:3e:8b:c3:
                    de:47:e3:e5:9f:fe:95:9e:00:a8:c2:18:b2:c2:f1:
                    78:2a:ec:2b:b7:b2:bb:ef:81:d3:86:60:15:08:4e:
                    85:df:21:3e:2b:3a:60:1f:34:51:6c:cf:fc:f6:17:
                    e1:ad:65:32:f2:b3:79:d2:4b:4d:f3:86:eb:53:2b:
                    fc:b1:1f:25:74:7b:2e:88:89:3f:60:d4:23:3c:e5:
                    95:50:aa:2e:a2:90:33:d6:1f:81:5d:4d:99:6a:9d:
                    05:63:a6:77:c8:9e:f3:89:e0:d8:7f:97:e1:9b:95:
                    57:ce:8e:53:f6:3f:a0:70:81:31:52:35:4a:a3:1e:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:49:20:BD:E1:21:A5:F4:B7:F0:F7:98:DC:6F:21:AA:24:2B:48
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/VQBJIL3hIaX0t_D3mNxvIaokK0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.102.0/24
                  77.81.124.0/22
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         15:91:88:e1:3e:86:26:d4:46:f0:24:52:87:0f:e7:4e:e4:14:
         67:97:49:59:0e:27:8d:cb:9c:de:21:86:0a:a0:76:b0:d5:5c:
         bb:72:6c:21:b1:7a:5c:c8:d8:5a:31:0a:33:a9:63:86:7f:0e:
         ca:70:19:b7:18:b2:e3:3b:45:d7:77:d0:7f:b4:64:aa:68:7f:
         68:87:26:98:fa:08:a9:d0:1a:98:48:5d:c6:1f:a5:c9:2f:56:
         81:c7:9f:0d:c6:c3:0a:23:26:71:65:e4:ba:e4:9a:7b:d7:b4:
         50:e6:d0:8b:b8:1b:1b:fc:6d:47:83:cd:3c:fc:15:0e:c3:1f:
         a9:71:7d:88:e4:7e:1a:11:f8:d3:89:13:60:6f:0d:70:72:2b:
         55:07:11:f0:8f:48:c7:24:e8:ae:41:03:9d:1b:1b:28:3f:93:
         1c:8d:6e:c6:d6:47:eb:dc:0d:f4:17:7b:91:f7:d3:69:9d:82:
         8b:df:6b:b8:66:46:38:56:f6:80:45:07:5d:c6:a1:77:13:8b:
         1d:99:02:b7:dd:ec:91:75:1a:33:9b:86:ec:45:a6:da:23:1b:
         8a:97:9a:57:c6:3a:00:fe:3d:5b:7a:af:27:a8:db:33:01:d0:
         54:16:61:6a:2b:4c:03:ca:f1:3b:19:f3:b5:01:8e:46:d8:2a:
         e1:64:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org