Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y6gWIvOGLhfNZEx9JxBG0sB7mfA.roa
File:                     Y6gWIvOGLhfNZEx9JxBG0sB7mfA.roa (raw, json)
Hash identifier:          nOlyEsbFUxjEjqzK5mNV7q9R6cpgQDyRfDZRkZPA+GI=
Subject key identifier:   63:A8:16:22:F3:86:2E:17:CD:64:4C:7D:27:10:46:D2:C0:7B:99:F0
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018A8A6D7AA839B7E3D59BC101CAEA62CD7C
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y6gWIvOGLhfNZEx9JxBG0sB7mfA.roa
Signing time:             Tue 12 Sep 2023 17:25:45 +0000
ROA not before:           Tue 12 Sep 2023 17:25:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          79.139.84.0/22 maxlen: 22
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          77.81.102.0/24 maxlen: 24
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 21 Sep 2023 18:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8a:6d:7a:a8:39:b7:e3:d5:9b:c1:01:ca:ea:62:cd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Sep 12 17:25:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=63a81622f3862e17cd644c7d271046d2c07b99f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:5e:99:c6:ca:4f:23:11:83:c6:24:fa:2a:
                    31:41:30:4d:f7:09:8d:3c:a8:ee:3b:50:b9:7c:9b:
                    77:f0:e5:49:65:f1:fb:32:0f:13:45:b7:15:db:cd:
                    3f:44:be:29:5f:47:9e:87:4b:84:5a:f7:8e:2b:f9:
                    cd:ee:12:a3:d2:fc:09:36:da:ca:1e:8a:70:ed:32:
                    1e:4c:8a:7c:65:d6:59:c2:2b:1e:0b:f5:a6:6d:2e:
                    71:a6:a9:f9:e2:4d:79:90:a9:98:fc:58:9d:03:8d:
                    b4:13:b5:fb:5d:84:5a:c4:4e:2b:eb:68:81:33:62:
                    1f:ca:a4:12:6c:47:de:4b:76:6d:ef:08:f4:06:cf:
                    ce:3f:43:52:f3:05:26:67:04:aa:62:e4:ca:53:fb:
                    65:3d:0e:20:12:b6:89:dd:da:45:70:e4:80:31:aa:
                    05:ff:d8:5d:5d:41:47:11:0e:85:58:95:8d:dc:38:
                    8b:28:84:c4:93:4f:54:79:13:95:ec:0f:60:ab:77:
                    02:26:b4:38:90:c0:e9:d3:f9:3d:78:38:83:6f:e7:
                    19:da:fa:a0:d2:78:fc:a0:6a:d7:27:c3:2a:29:59:
                    07:c5:db:13:01:ba:60:a3:de:60:5f:cd:51:c1:90:
                    dd:2b:ad:ec:1b:1c:34:d8:15:66:ee:f1:06:90:4a:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:16:22:F3:86:2E:17:CD:64:4C:7D:27:10:46:D2:C0:7B:99:F0
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y6gWIvOGLhfNZEx9JxBG0sB7mfA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.102.0/24
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:c9:95:33:ca:e7:99:d5:31:e6:e2:77:94:90:74:61:69:
         83:80:50:b9:67:1a:6f:09:45:a8:57:8c:2c:56:f3:2d:b6:1c:
         da:6e:38:2e:54:21:a3:b7:ef:9e:6f:ed:77:92:5b:e8:4e:58:
         1b:15:f8:7e:bc:58:5e:0d:58:68:e2:50:eb:f1:c5:e1:04:97:
         16:06:18:44:c1:66:a4:60:61:dd:fa:62:be:af:8b:6c:7b:ac:
         2d:4c:77:95:0c:09:7b:ca:d8:af:2b:d7:9a:9f:60:90:65:f2:
         34:66:b0:97:d9:d5:0f:e2:7e:9c:40:b9:bc:01:ff:cd:fe:bb:
         20:24:ef:da:0f:ad:c2:88:ca:1d:d2:f3:8f:75:b2:33:4b:f4:
         64:0d:19:0b:80:59:20:f5:89:91:c8:ef:99:cf:7d:00:3a:cd:
         ae:ad:e3:0f:ef:7e:60:5d:df:10:8e:80:65:8b:ea:ba:4c:fc:
         0e:57:03:53:ec:3c:2d:6d:41:93:21:08:4e:20:ce:27:9c:f7:
         2f:d3:3e:b6:e5:f2:4f:93:b3:45:c1:21:5b:fa:b4:31:21:ad:
         1d:82:a2:9c:f7:69:b5:99:90:69:15:8b:93:ac:43:f7:6f:22:
         8b:ea:c3:05:e4:e7:e7:a5:de:9d:22:e9:0b:1f:3c:fb:84:5a:
         0c:e9:fc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org