Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/dzhCH3vllqjJ81jF_0ZwcaL_j90.roa
File:                     dzhCH3vllqjJ81jF_0ZwcaL_j90.roa (raw, json)
Hash identifier:          jxRvh5JKUYr0d/zn7DznuJfsovQoUCT/yZcYJlRblZ0=
Subject key identifier:   77:38:42:1F:7B:E5:96:A8:C9:F3:58:C5:FF:46:70:71:A2:FF:8F:DD
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       018998365D7064068FFC9A0D1DDA61E6CE80
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/dzhCH3vllqjJ81jF_0ZwcaL_j90.roa
Signing time:             Thu 27 Jul 2023 16:37:26 +0000
ROA not before:           Thu 27 Jul 2023 16:37:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        188.241.246.0/24 maxlen: 24
                          93.113.175.0/24 maxlen: 24
                          185.134.20.0/22 maxlen: 22
                          195.140.212.0/22 maxlen: 22
                          93.114.83.0/24 maxlen: 24
                          134.255.243.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          89.46.223.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.124.0/23 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          195.234.127.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          193.32.208.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          86.106.135.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          84.247.0.0/24 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          185.125.204.0/22 maxlen: 22
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          89.38.68.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          5.226.136.0/21 maxlen: 21
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          185.38.148.0/22 maxlen: 22
                          217.146.92.0/24 maxlen: 24
                          46.247.142.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          213.166.84.0/22 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          188.212.154.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          89.37.64.0/22 maxlen: 22
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          89.37.173.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          185.44.76.0/22 maxlen: 22
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.158.240.0/22 maxlen: 24
                          89.37.172.0/22 maxlen: 22
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          185.16.204.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.22.0/23 maxlen: 24
                          94.177.17.0/24 maxlen: 24
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          185.137.36.0/24 maxlen: 24
                          185.137.36.0/22 maxlen: 22
                          85.204.70.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          77.81.191.0/24 maxlen: 24
                          31.14.102.0/24 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          185.216.144.0/22 maxlen: 22
                          185.61.157.0/24 maxlen: 24
                          185.61.156.0/24 maxlen: 24
                          185.61.156.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          31.14.254.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          176.223.172.0/23 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.174.0/23 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          195.20.108.0/24 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          185.121.136.0/22 maxlen: 22
                          185.114.224.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          77.81.124.0/22 maxlen: 22
                          89.34.96.0/22 maxlen: 22
                          77.81.102.0/24 maxlen: 24
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a0b:b840::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 17:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:98:36:5d:70:64:06:8f:fc:9a:0d:1d:da:61:e6:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jul 27 16:37:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7738421f7be596a8c9f358c5ff467071a2ff8fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:6d:d5:a4:9c:53:c6:2c:ef:14:bb:92:26:
                    23:d4:eb:fc:e6:4d:12:74:f3:57:e1:a3:ff:0c:66:
                    a1:12:7a:4b:90:b0:95:57:72:4a:28:26:2e:71:bc:
                    62:c4:d0:b4:1c:d9:23:07:50:f9:c7:d0:9e:3b:8e:
                    67:51:e6:21:ae:02:98:9e:ba:95:2e:91:86:6d:8e:
                    c9:59:db:04:f8:85:23:a9:aa:25:ac:e6:4c:31:33:
                    b6:ec:04:05:69:61:68:1c:34:a4:c0:c2:39:d2:30:
                    e9:56:90:6f:99:1c:74:31:f1:8b:e0:a2:77:15:41:
                    0b:66:4c:ae:0f:01:51:97:67:33:e1:ee:3b:09:d9:
                    83:c8:d9:79:53:81:e6:3e:59:8a:da:6b:0e:a3:37:
                    00:10:88:8d:94:b3:35:59:e2:df:7e:c1:a9:5a:91:
                    1e:d9:6b:65:63:45:aa:be:da:ca:2a:a0:32:9b:57:
                    4c:81:8b:35:90:15:e8:a9:26:29:09:27:97:a6:17:
                    d9:22:26:45:e9:6e:04:c3:52:fa:e4:1f:d0:0d:37:
                    67:3f:ac:d5:a5:8d:e3:35:ef:c4:a3:7c:fe:69:5b:
                    a6:91:7e:f6:a6:f7:d0:15:51:8c:36:54:b4:c9:19:
                    b1:bb:1f:a4:f3:41:e2:73:ab:43:69:e3:02:af:be:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:38:42:1F:7B:E5:96:A8:C9:F3:58:C5:FF:46:70:71:A2:FF:8F:DD
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/dzhCH3vllqjJ81jF_0ZwcaL_j90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.102.0/24
                  77.81.124.0/22
                  77.81.191.0/24
                  81.19.208.0/20
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  94.177.17.0/24
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.176.28.0/22
                  194.50.234.0/23
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         e0:45:97:02:7a:b1:4c:78:94:fc:31:32:f6:6f:6f:be:b7:f9:
         b9:89:c4:33:d3:78:c4:6d:c7:e3:01:f6:d2:9c:9c:cf:f4:24:
         14:35:d9:86:5b:02:51:2e:85:0c:02:41:75:78:dd:82:cb:4a:
         3c:e6:8e:4b:eb:30:2d:f0:d7:db:31:11:ba:6c:29:2a:33:f6:
         c8:62:45:4c:75:76:4e:fe:d6:17:67:1e:65:93:b4:5c:2b:2f:
         a4:0f:c1:3b:88:d7:73:a5:75:5a:01:57:44:ef:57:81:0c:d0:
         ac:98:d7:38:82:6f:cf:8c:76:eb:f8:d0:d1:d6:1e:0e:b9:a8:
         c3:e9:61:18:e6:be:2b:76:89:b3:f4:02:d6:2d:a9:1a:1d:b9:
         2d:0e:fd:bb:fc:69:35:01:4e:dd:58:20:8c:f0:be:89:1e:00:
         ee:c3:70:ee:d7:9a:0b:52:4e:ce:69:44:c2:ff:7d:90:1f:53:
         63:e9:fd:f0:e6:7f:5e:8e:bc:9d:a6:6a:f4:fa:b5:5e:28:8e:
         f9:9b:08:0d:04:15:75:d9:51:dc:56:3c:87:23:19:59:d7:71:
         28:9e:24:ef:02:93:5f:13:43:3d:54:1f:8a:d7:e0:42:19:6d:
         ce:64:b6:de:c3:34:fa:19:ab:f8:47:bd:e0:2d:82:0e:8d:ab:
         a5:2c:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org