Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/V9ueVEtHmjHqprtF7OT19V3Gdjg.roa
File:                     V9ueVEtHmjHqprtF7OT19V3Gdjg.roa (raw, json)
Hash identifier:          iwZ04gh6iDReS0lmWfuqodyXdd96XuuIYHTF7EkHqLQ=
Subject key identifier:   57:DB:9E:54:4B:47:9A:31:EA:A6:BB:45:EC:E4:F5:F5:5D:C6:76:38
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018EA2F89ACF338BF21264234C151EB629E1
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/V9ueVEtHmjHqprtF7OT19V3Gdjg.roa
Signing time:             Wed 03 Apr 2024 07:59:45 +0000
ROA not before:           Wed 03 Apr 2024 07:59:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31549
IP address blocks:        31.56.0.0/14 maxlen: 24
                          31.56.16.0/20 maxlen: 20
                          31.56.32.0/20 maxlen: 20
                          31.56.80.0/20 maxlen: 20
                          37.148.0.0/17 maxlen: 18
                          37.148.0.0/18 maxlen: 24
                          37.148.78.0/24 maxlen: 24
                          37.202.128.0/17 maxlen: 17
                          37.202.128.0/18 maxlen: 18
                          37.202.136.0/24 maxlen: 24
                          37.202.192.0/18 maxlen: 18
                          84.241.0.0/18 maxlen: 24
                          85.15.0.0/18 maxlen: 24
                          94.182.0.0/15 maxlen: 24
                          94.182.64.0/20 maxlen: 20
                          94.182.80.0/20 maxlen: 20
                          94.182.96.0/20 maxlen: 20
                          94.182.112.0/20 maxlen: 20
                          94.182.128.0/20 maxlen: 20
                          94.182.144.0/20 maxlen: 20
                          94.182.160.0/20 maxlen: 20
                          94.182.176.0/20 maxlen: 20
                          94.183.176.0/21 maxlen: 21
                          151.238.0.0/15 maxlen: 24
                          151.240.0.0/13 maxlen: 24
                          151.244.96.0/23 maxlen: 23
                          151.244.98.0/23 maxlen: 23
                          151.244.100.0/23 maxlen: 23
                          151.244.102.0/23 maxlen: 23
                          151.244.104.0/23 maxlen: 23
                          151.244.106.0/23 maxlen: 23
                          151.244.108.0/23 maxlen: 23
                          151.244.110.0/23 maxlen: 23
                          151.244.112.0/23 maxlen: 23
                          151.244.114.0/23 maxlen: 23
                          151.244.116.0/23 maxlen: 23
                          151.244.118.0/23 maxlen: 23
                          151.244.120.0/23 maxlen: 23
                          151.244.122.0/23 maxlen: 23
                          151.244.124.0/23 maxlen: 23
                          151.244.126.0/23 maxlen: 23
                          151.244.128.0/19 maxlen: 19
                          151.244.128.0/22 maxlen: 22
                          151.244.132.0/22 maxlen: 22
                          151.244.136.0/22 maxlen: 22
                          151.244.140.0/22 maxlen: 22
                          151.244.148.0/22 maxlen: 22
                          151.244.152.0/22 maxlen: 22
                          151.244.156.0/22 maxlen: 22
                          151.244.160.0/22 maxlen: 22
                          151.244.164.0/22 maxlen: 22
                          151.244.168.0/22 maxlen: 22
                          151.244.172.0/22 maxlen: 22
                          151.244.176.0/22 maxlen: 22
                          151.244.180.0/22 maxlen: 22
                          151.244.184.0/22 maxlen: 22
                          151.244.188.0/22 maxlen: 22
                          151.244.192.0/22 maxlen: 22
                          151.244.196.0/22 maxlen: 22
                          151.244.200.0/22 maxlen: 22
                          151.244.204.0/22 maxlen: 22
                          151.244.208.0/22 maxlen: 22
                          151.244.212.0/22 maxlen: 22
                          151.244.216.0/23 maxlen: 23
                          151.244.218.0/23 maxlen: 23
                          151.244.220.0/23 maxlen: 23
                          151.244.222.0/23 maxlen: 23
                          151.244.224.0/23 maxlen: 23
                          151.244.226.0/23 maxlen: 23
                          151.245.248.0/21 maxlen: 21
                          151.245.248.0/22 maxlen: 22
                          151.245.252.0/22 maxlen: 22
                          151.247.64.0/18 maxlen: 18
                          185.73.0.0/22 maxlen: 22
                          185.73.0.0/23 maxlen: 23
                          185.73.2.0/23 maxlen: 23
                          185.73.2.0/24 maxlen: 24
                          185.73.3.0/24 maxlen: 24
                          217.60.0.0/16 maxlen: 16
                          217.60.0.0/18 maxlen: 18
                          217.60.0.0/19 maxlen: 19
                          217.60.24.0/21 maxlen: 21
                          217.60.32.0/20 maxlen: 20
                          217.60.32.0/22 maxlen: 22
                          217.60.36.0/22 maxlen: 22
                          217.60.36.0/23 maxlen: 23
                          217.60.38.0/23 maxlen: 23
                          217.60.40.0/21 maxlen: 21
                          217.60.48.0/20 maxlen: 20
                          217.60.64.0/18 maxlen: 18
                          217.60.64.0/20 maxlen: 20
                          217.60.80.0/20 maxlen: 20
                          217.60.96.0/21 maxlen: 21
                          217.60.104.0/22 maxlen: 22
                          217.60.108.0/22 maxlen: 22
                          217.60.128.0/18 maxlen: 18
                          217.60.128.0/19 maxlen: 19
                          217.60.150.0/24 maxlen: 24
                          217.60.160.0/19 maxlen: 19
                          217.60.160.0/20 maxlen: 20
                          217.60.160.0/21 maxlen: 21
                          217.60.161.0/24 maxlen: 24
                          217.60.168.0/23 maxlen: 23
                          217.60.170.0/24 maxlen: 24
                          217.60.171.0/24 maxlen: 24
                          217.60.176.0/21 maxlen: 21
                          217.60.176.0/24 maxlen: 24
                          217.60.184.0/22 maxlen: 22
                          217.60.188.0/22 maxlen: 22
                          217.60.192.0/18 maxlen: 18
                          217.60.192.0/20 maxlen: 20
                          217.60.192.0/22 maxlen: 22
                          217.60.196.0/22 maxlen: 22
                          217.60.200.0/22 maxlen: 22
                          217.60.207.0/24 maxlen: 24
                          217.60.208.0/20 maxlen: 20
                          217.60.208.0/23 maxlen: 23
                          217.60.209.0/24 maxlen: 24
                          217.60.212.0/22 maxlen: 22
                          217.60.216.0/21 maxlen: 21
                          217.60.219.0/24 maxlen: 24
                          217.60.224.0/20 maxlen: 20
                          217.60.230.0/24 maxlen: 24
                          217.60.231.0/24 maxlen: 24
                          217.60.240.0/20 maxlen: 20
                          2a0e::/26 maxlen: 26
                          2a0e:0:1::/52 maxlen: 52
                          2a0e:0:1:1000::/52 maxlen: 52
                          2a0e:0:1:2000::/52 maxlen: 52
                          2a0e:0:1:3000::/52 maxlen: 52

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 06:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a2:f8:9a:cf:33:8b:f2:12:64:23:4c:15:1e:b6:29:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Apr  3 07:59:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57db9e544b479a31eaa6bb45ece4f5f55dc67638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:e9:5f:27:8c:5e:fd:30:c9:29:99:aa:f9:
                    98:a7:d9:51:63:01:58:13:dd:7d:e6:c3:d3:80:9e:
                    f2:0f:db:e9:f9:23:76:a8:0a:2f:87:a1:04:0f:21:
                    89:5c:d4:3c:bd:aa:b4:62:04:8d:0e:97:dd:ca:2f:
                    4e:c9:0f:bb:9b:71:7b:7a:28:9e:ad:a3:6a:0e:e9:
                    91:f3:0a:2b:3e:7a:fc:9f:5f:a1:6e:48:b9:84:4e:
                    c0:95:d6:4b:f3:6e:64:9a:6c:22:4e:98:1a:09:fa:
                    be:fd:de:ac:27:6b:1f:9c:9b:f6:d6:1d:61:91:ce:
                    ff:eb:d7:32:02:27:50:6a:ef:19:62:59:cf:2a:b3:
                    b2:98:5d:72:12:80:0d:f2:4f:c9:b1:65:25:c0:5e:
                    b1:a1:7e:7c:69:c8:c9:3f:9c:31:51:f0:fc:65:b6:
                    d2:8e:77:7f:87:9e:4a:3f:2b:ba:21:ed:86:ae:c4:
                    23:cc:c4:12:ab:b3:8c:84:aa:fb:56:7a:2e:ad:82:
                    54:27:f5:d3:a5:c8:2d:6d:d2:1d:56:90:27:c7:4a:
                    0d:44:9d:e3:ae:97:7d:84:06:ae:92:89:1d:2d:4d:
                    28:a8:03:25:1f:1f:7d:75:e5:cb:2b:14:fe:cd:93:
                    3d:31:84:99:55:9b:44:6e:3c:a5:94:0c:50:e4:69:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DB:9E:54:4B:47:9A:31:EA:A6:BB:45:EC:E4:F5:F5:5D:C6:76:38
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/V9ueVEtHmjHqprtF7OT19V3Gdjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.0.0/14
                  37.148.0.0/17
                  37.202.128.0/17
                  84.241.0.0/18
                  85.15.0.0/18
                  94.182.0.0/15
                  151.238.0.0-151.247.255.255
                  185.73.0.0/22
                  217.60.0.0/16
                IPv6:
                  2a0e::/26

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:57:7c:38:32:25:5c:38:d0:ce:38:97:19:92:d4:db:c4:
         78:cd:5c:81:4d:9f:a3:a6:3d:92:1b:97:02:cb:3a:6a:64:b2:
         2e:f0:56:f5:f3:3e:ab:21:52:a1:f4:56:46:63:0d:a2:fb:57:
         0c:97:c6:19:a7:29:9c:11:a2:41:e1:74:80:92:2a:98:f6:f7:
         a5:52:4c:cb:6b:b3:c3:cd:21:78:f7:9c:ed:7d:e1:28:c0:cb:
         e1:18:44:db:61:61:fe:9b:46:34:2a:ff:f4:da:a7:d2:a4:72:
         14:eb:23:e2:6b:18:0b:59:91:69:55:a6:99:40:74:8d:39:8a:
         a4:0e:4c:0e:83:0f:9c:fa:bc:45:3a:a8:35:c9:ec:e6:73:01:
         86:e2:11:91:05:98:6e:48:5f:c0:9e:a7:f4:aa:5b:3d:53:9d:
         e4:a0:ae:2a:d5:bb:68:d5:40:52:9a:5a:71:11:1a:c8:71:f0:
         88:8c:87:c6:76:0b:d9:5c:4d:8b:24:04:41:aa:99:ca:9a:5f:
         86:a5:d8:d8:77:62:56:22:c8:79:a5:c9:7a:9a:8c:52:2b:ac:
         77:62:27:33:19:ee:58:a1:83:5b:fa:f6:95:85:5a:f5:d8:26:
         d4:73:f1:64:b7:ec:21:e7:7a:ce:04:00:63:82:af:c1:2b:f7:
         e1:c9:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 12:58:58 2024 by rpki-client on console.sobornost.net