Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/dBkL2SeDAACjpFyadLcoQbwmsco.roa
File:                     dBkL2SeDAACjpFyadLcoQbwmsco.roa (raw, json)
Hash identifier:          HTfyqxepnwlOnzanVTZSDFej2EMn97wms7EF8YzRuwQ=
Subject key identifier:   74:19:0B:D9:27:83:00:00:A3:A4:5C:9A:74:B7:28:41:BC:26:B1:CA
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01892C04DCD5E814BF7E8A233CF5FBAB9667
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/dBkL2SeDAACjpFyadLcoQbwmsco.roa
Signing time:             Thu 06 Jul 2023 16:24:23 +0000
ROA not before:           Thu 06 Jul 2023 16:24:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.31.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.35.25.0/24 maxlen: 24
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 13 Jul 2023 01:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2c:04:dc:d5:e8:14:bf:7e:8a:23:3c:f5:fb:ab:96:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jul  6 16:24:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=74190bd927830000a3a45c9a74b72841bc26b1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:a2:74:71:a3:b2:81:72:66:d8:e9:d2:a1:
                    64:eb:8b:51:a5:4c:ae:c3:26:f6:69:07:59:63:63:
                    9e:f7:db:e3:61:77:5e:93:69:fe:09:be:70:a7:03:
                    64:fe:6c:d4:61:22:af:b5:e9:c2:d6:d4:f6:8d:8a:
                    40:35:df:02:24:ef:21:8b:88:71:ba:99:7b:f6:55:
                    d5:c4:31:d1:f1:1b:55:ba:07:bb:be:0c:db:4e:0c:
                    6a:c5:96:61:11:21:16:b2:cf:4d:59:16:e4:fc:02:
                    50:e2:39:83:16:8c:0b:fe:67:3a:37:9f:dc:d9:b2:
                    72:a3:ab:f3:5f:3c:30:a9:0e:d1:2b:bf:b6:15:fb:
                    f5:4a:88:6a:24:a3:f3:30:3c:45:20:d6:14:27:1c:
                    5e:c3:c3:9f:c9:51:f3:f0:8e:61:dc:1a:e8:b6:26:
                    ec:f1:94:d0:dd:7e:36:ff:68:4f:fd:31:8f:e6:2c:
                    86:98:7d:60:78:3c:3b:17:10:73:58:62:c0:03:72:
                    9c:71:d8:5c:a2:04:7d:82:fa:54:3b:ca:8c:df:2b:
                    2c:43:da:ed:a2:c2:7c:f0:90:40:94:82:91:48:d0:
                    0e:53:6a:16:41:1e:ea:ab:27:f4:39:7c:b3:af:bd:
                    3f:13:95:08:69:38:d0:86:27:25:b9:78:51:ad:55:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:19:0B:D9:27:83:00:00:A3:A4:5C:9A:74:B7:28:41:BC:26:B1:CA
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/dBkL2SeDAACjpFyadLcoQbwmsco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  37.10.113.0-37.10.114.255
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:80:8c:18:e9:81:91:28:39:4a:0d:91:27:ca:a3:20:77:
         c6:90:f1:70:32:e6:c8:42:1d:04:63:8e:48:26:ef:57:85:b2:
         39:fb:64:65:d9:92:78:d1:05:be:44:fe:8f:89:b9:ec:e3:2f:
         e9:2c:23:9a:f5:2e:f2:a9:87:0b:b4:70:d5:a8:7f:f3:76:3b:
         55:72:4a:f3:b1:d7:06:58:7f:40:1b:20:87:b0:56:9d:7d:60:
         0f:89:a7:86:2f:3c:a1:ca:83:6c:3a:bd:1c:1c:5a:0e:0f:a9:
         ac:a8:dc:b8:8b:92:6b:4e:0e:57:81:fb:90:18:ab:57:c3:4e:
         47:0c:9f:57:58:b8:45:87:fc:64:a9:cf:f5:7a:11:ad:e5:19:
         c8:c8:36:78:3c:1b:6b:f1:3f:57:0c:5d:f9:44:20:22:6f:94:
         bd:e9:b4:64:8b:a2:f1:96:d0:63:cb:ee:89:a7:1b:7b:8b:1c:
         fe:49:73:1f:29:a6:b7:0c:7b:ca:bd:7e:62:f7:53:db:7f:64:
         b5:21:39:bf:73:ed:a4:ed:e0:0f:e7:27:e5:e1:54:4a:0e:9f:
         3a:1f:08:a3:a5:41:b5:2b:50:01:67:f4:b1:ac:f6:18:f3:5b:
         3c:29:e1:ca:ad:0f:72:7d:c7:08:2a:6c:68:9c:45:1a:9e:62:
         b4:43:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org