Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/la1QnYuSbDs1SMrToRq1z_G7P8A.roa
File:                     la1QnYuSbDs1SMrToRq1z_G7P8A.roa (raw, json)
Hash identifier:          vhf/uub6Yeq1H27Q4qd5Eoyp0Sh8plzrHuEzWvMmpSk=
Subject key identifier:   95:AD:50:9D:8B:92:6C:3B:35:48:CA:D3:A1:1A:B5:CF:F1:BB:3F:C0
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       018E7A766E2037889DBE26845501A06943A2
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/la1QnYuSbDs1SMrToRq1z_G7P8A.roa
Signing time:             Tue 26 Mar 2024 11:12:45 +0000
ROA not before:           Tue 26 Mar 2024 11:12:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34164
IP address blocks:        2.16.49.0/24 maxlen: 24
                          2.18.25.0/24 maxlen: 24
                          2.20.48.0/24 maxlen: 24
                          2.21.236.0/24 maxlen: 24
                          2.21.237.0/24 maxlen: 24
                          80.67.81.0/24 maxlen: 24
                          84.53.176.0/24 maxlen: 24
                          84.53.186.0/24 maxlen: 24
                          88.221.54.0/23 maxlen: 23
                          88.221.56.0/24 maxlen: 24
                          88.221.91.0/24 maxlen: 24
                          88.221.108.0/24 maxlen: 24
                          88.221.146.0/23 maxlen: 23
                          88.221.199.0/24 maxlen: 24
                          88.221.212.0/24 maxlen: 24
                          88.221.219.0/24 maxlen: 24
                          92.122.112.0/24 maxlen: 24
                          92.122.113.0/24 maxlen: 24
                          92.122.120.0/23 maxlen: 23
                          92.122.124.0/24 maxlen: 24
                          92.122.152.0/24 maxlen: 24
                          92.122.180.0/24 maxlen: 24
                          92.122.181.0/24 maxlen: 24
                          92.122.189.0/24 maxlen: 24
                          92.122.191.0/24 maxlen: 24
                          92.122.204.0/23 maxlen: 23
                          95.100.38.0/24 maxlen: 24
                          95.100.89.0/24 maxlen: 24
                          95.100.90.0/24 maxlen: 24
                          95.100.91.0/24 maxlen: 24
                          95.100.92.0/24 maxlen: 24
                          95.101.12.0/24 maxlen: 24
                          95.101.37.0/24 maxlen: 24
                          95.101.52.0/23 maxlen: 23
                          95.101.112.0/24 maxlen: 24
                          95.101.116.0/24 maxlen: 24
                          95.101.121.0/24 maxlen: 24
                          95.101.138.0/23 maxlen: 23
                          193.108.152.0/24 maxlen: 24
                          195.245.126.0/24 maxlen: 24
                          2a02:26f0:a::/48 maxlen: 48
                          2a02:26f0:1d::/48 maxlen: 48
                          2a02:26f0:33::/48 maxlen: 48
                          2a02:26f0:36::/48 maxlen: 48
                          2a02:26f0:74::/48 maxlen: 48
                          2a02:26f0:77::/48 maxlen: 48
                          2a02:26f0:88::/48 maxlen: 48
                          2a02:26f0:96::/48 maxlen: 48
                          2a02:26f0:9c::/48 maxlen: 48
                          2a02:26f0:9d::/48 maxlen: 48
                          2a02:26f0:a5::/48 maxlen: 48
                          2a02:26f0:a6::/48 maxlen: 48
                          2a02:26f0:a7::/48 maxlen: 48
                          2a02:26f0:bb::/48 maxlen: 48
                          2a02:26f0:bc::/48 maxlen: 48
                          2a02:26f0:bd::/48 maxlen: 48
                          2a02:26f0:c0::/48 maxlen: 48
                          2a02:26f0:f9::/48 maxlen: 48
                          2a02:26f0:106::/48 maxlen: 48
                          2a02:26f0:107::/48 maxlen: 48
                          2a02:26f0:110::/48 maxlen: 48
                          2a02:26f0:124::/48 maxlen: 48
                          2a02:26f0:125::/48 maxlen: 48
                          2a02:26f0:126::/48 maxlen: 48
                          2a02:26f0:1600::/48 maxlen: 48
                          2a02:26f0:1a00::/48 maxlen: 48
                          2a02:26f0:1e00::/48 maxlen: 48
                          2a02:26f0:3600::/48 maxlen: 48
                          2a02:26f0:4500::/48 maxlen: 48
                          2a02:26f0:4a00::/48 maxlen: 48
                          2a02:26f0:4d00::/48 maxlen: 48
                          2a02:26f0:4e00::/48 maxlen: 48
                          2a02:26f0:5400::/48 maxlen: 48
                          2a02:26f0:5600::/48 maxlen: 48
                          2a02:26f0:6200::/48 maxlen: 48
                          2a02:26f0:6300::/48 maxlen: 48
                          2a02:26f0:7e00::/48 maxlen: 48
                          2a02:26f0:8200::/48 maxlen: 48
                          2a02:26f0:8600::/48 maxlen: 48
                          2a02:26f0:8a00::/48 maxlen: 48
                          2a02:26f0:8e00::/48 maxlen: 48
                          2a02:26f0:9600::/48 maxlen: 48
                          2a02:26f0:9a00::/48 maxlen: 48
                          2a02:26f0:9e00::/48 maxlen: 48
                          2a02:26f0:a200::/48 maxlen: 48
                          2a02:26f0:a800::/48 maxlen: 48
                          2a02:26f0:af00::/48 maxlen: 48
                          2a02:26f0:b000::/48 maxlen: 48
                          2a02:26f0:bb00::/48 maxlen: 48
                          2a02:26f0:bd00::/48 maxlen: 48
                          2a02:26f0:bf00::/48 maxlen: 48
                          2a02:26f0:c100::/48 maxlen: 48
                          2a02:26f0:c200::/48 maxlen: 48
                          2a02:26f0:c500::/48 maxlen: 48
                          2a02:26f0:cd00::/48 maxlen: 48
                          2a02:26f0:ce00::/48 maxlen: 48
                          2a02:26f0:cf00::/48 maxlen: 48
                          2a02:26f0:d500::/48 maxlen: 48
                          2a02:26f0:d600::/48 maxlen: 48
                          2a02:26f0:d700::/48 maxlen: 48
                          2a02:26f0:da00::/48 maxlen: 48
                          2a02:26f0:dc00::/48 maxlen: 48
                          2a02:26f0:e400::/48 maxlen: 48
                          2a02:26f0:ec00::/48 maxlen: 48
                          2a02:26f0:f400::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 11:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7a:76:6e:20:37:88:9d:be:26:84:55:01:a0:69:43:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Mar 26 11:12:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=95ad509d8b926c3b3548cad3a11ab5cff1bb3fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:7a:5f:72:d3:06:50:69:9d:65:ab:35:f3:
                    6e:77:33:f8:1a:32:d2:88:e9:b7:54:c1:4c:f3:fd:
                    7d:68:c8:f0:3f:4b:68:66:40:f8:f9:7b:19:6d:d6:
                    bb:85:68:6b:19:cf:a9:fb:59:63:a0:b0:b3:8d:17:
                    d3:47:01:e6:b8:f4:b3:1b:89:39:c7:62:7f:bc:fe:
                    90:6d:26:a1:bd:7b:31:55:b8:aa:d1:97:5e:de:6c:
                    34:ff:99:a1:f2:53:b8:db:80:f2:c8:4e:0b:69:2e:
                    c0:90:b3:b0:45:35:49:08:fa:d6:63:25:92:68:7e:
                    3a:9c:8a:f4:99:cc:8c:2f:ca:61:24:8a:f5:1e:ee:
                    a3:71:b7:b1:f4:e4:51:14:7a:d9:65:6e:7d:c9:bf:
                    ed:91:5c:f3:5b:89:24:45:04:31:4f:a7:1f:00:f5:
                    b2:ad:d0:bb:f8:f4:f5:1d:f0:3a:52:61:8f:7d:b1:
                    1b:8c:8f:ca:f4:ab:84:6d:8a:36:30:7d:b5:37:c3:
                    51:62:90:38:6c:f8:28:cd:a8:bd:49:5c:cb:c2:76:
                    53:5b:31:41:9d:05:f1:32:be:a2:15:bc:28:fb:1a:
                    0f:1a:27:17:f0:a0:b4:a1:a2:0c:cf:fd:35:c5:b7:
                    9b:e0:bf:de:43:bf:7c:49:d5:8b:57:d7:7f:22:dd:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:50:9D:8B:92:6C:3B:35:48:CA:D3:A1:1A:B5:CF:F1:BB:3F:C0
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/la1QnYuSbDs1SMrToRq1z_G7P8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.16.49.0/24
                  2.18.25.0/24
                  2.20.48.0/24
                  2.21.236.0/23
                  80.67.81.0/24
                  84.53.176.0/24
                  84.53.186.0/24
                  88.221.54.0-88.221.56.255
                  88.221.91.0/24
                  88.221.108.0/24
                  88.221.146.0/23
                  88.221.199.0/24
                  88.221.212.0/24
                  88.221.219.0/24
                  92.122.112.0/23
                  92.122.120.0/23
                  92.122.124.0/24
                  92.122.152.0/24
                  92.122.180.0/23
                  92.122.189.0/24
                  92.122.191.0/24
                  92.122.204.0/23
                  95.100.38.0/24
                  95.100.89.0-95.100.92.255
                  95.101.12.0/24
                  95.101.37.0/24
                  95.101.52.0/23
                  95.101.112.0/24
                  95.101.116.0/24
                  95.101.121.0/24
                  95.101.138.0/23
                  193.108.152.0/24
                  195.245.126.0/24
                IPv6:
                  2a02:26f0:a::/48
                  2a02:26f0:1d::/48
                  2a02:26f0:33::/48
                  2a02:26f0:36::/48
                  2a02:26f0:74::/48
                  2a02:26f0:77::/48
                  2a02:26f0:88::/48
                  2a02:26f0:96::/48
                  2a02:26f0:9c::/47
                  2a02:26f0:a5::-2a02:26f0:a7:ffff:ffff:ffff:ffff:ffff
                  2a02:26f0:bb::-2a02:26f0:bd:ffff:ffff:ffff:ffff:ffff
                  2a02:26f0:c0::/48
                  2a02:26f0:f9::/48
                  2a02:26f0:106::/47
                  2a02:26f0:110::/48
                  2a02:26f0:124::-2a02:26f0:126:ffff:ffff:ffff:ffff:ffff
                  2a02:26f0:1600::/48
                  2a02:26f0:1a00::/48
                  2a02:26f0:1e00::/48
                  2a02:26f0:3600::/48
                  2a02:26f0:4500::/48
                  2a02:26f0:4a00::/48
                  2a02:26f0:4d00::/48
                  2a02:26f0:4e00::/48
                  2a02:26f0:5400::/48
                  2a02:26f0:5600::/48
                  2a02:26f0:6200::/48
                  2a02:26f0:6300::/48
                  2a02:26f0:7e00::/48
                  2a02:26f0:8200::/48
                  2a02:26f0:8600::/48
                  2a02:26f0:8a00::/48
                  2a02:26f0:8e00::/48
                  2a02:26f0:9600::/48
                  2a02:26f0:9a00::/48
                  2a02:26f0:9e00::/48
                  2a02:26f0:a200::/48
                  2a02:26f0:a800::/48
                  2a02:26f0:af00::/48
                  2a02:26f0:b000::/48
                  2a02:26f0:bb00::/48
                  2a02:26f0:bd00::/48
                  2a02:26f0:bf00::/48
                  2a02:26f0:c100::/48
                  2a02:26f0:c200::/48
                  2a02:26f0:c500::/48
                  2a02:26f0:cd00::/48
                  2a02:26f0:ce00::/48
                  2a02:26f0:cf00::/48
                  2a02:26f0:d500::/48
                  2a02:26f0:d600::/48
                  2a02:26f0:d700::/48
                  2a02:26f0:da00::/48
                  2a02:26f0:dc00::/48
                  2a02:26f0:e400::/48
                  2a02:26f0:ec00::/48
                  2a02:26f0:f400::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:af:31:ec:1b:68:ec:17:24:e4:99:b4:4c:a8:e9:ce:4c:16:
         9a:d4:75:85:33:e1:7c:7c:e0:c3:54:1c:82:b2:b2:0e:d6:f6:
         65:e1:0f:9c:ae:a6:7a:bb:ca:44:e5:c6:fd:e8:80:bb:09:bc:
         eb:2e:f1:b3:a5:57:b9:1b:fb:00:25:ad:76:ed:0c:ba:7e:ce:
         50:81:cb:7e:04:53:9b:fa:fb:a4:cd:0e:74:ab:a3:ba:28:63:
         0e:6f:2a:ec:a2:4d:fd:dc:5b:35:b6:99:12:0b:73:2a:32:05:
         f2:85:1d:43:1c:2a:c5:07:50:d8:e4:21:82:6a:b5:21:35:89:
         c7:7e:c8:b7:b3:10:1f:18:12:da:03:e3:df:7d:3e:91:6a:ed:
         03:24:dd:b3:40:ab:2c:d4:54:58:38:06:bd:bf:4e:de:89:87:
         9c:1a:0e:6b:25:8a:35:70:0e:94:25:60:d1:9f:bc:32:a9:15:
         42:1a:7b:5a:5e:ec:8a:81:dd:b4:58:2f:27:75:1b:d0:16:db:
         00:60:aa:28:4f:35:2b:eb:5e:84:af:98:c8:63:09:78:81:04:
         8b:98:9e:51:b9:c0:dd:d8:f1:54:17:62:4f:1e:49:2e:0e:bc:
         bf:d0:47:b5:57:2f:13:06:8f:85:12:83:cd:d2:7d:07:c2:59:
         e0:0b:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 17:48:04 2024 by rpki-client on console.sobornost.net