Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/mFvaHDyILv3rIY_HJeIjLO_5WCA.roa
File:                     mFvaHDyILv3rIY_HJeIjLO_5WCA.roa (raw, json)
Hash identifier:          hm7hsjr2gaPMw6TJeJWLL8mfQUkBw2LjJq915hfnC+c=
Subject key identifier:   98:5B:DA:1C:3C:88:2E:FD:EB:21:8F:C7:25:E2:23:2C:EF:F9:58:20
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       0189721A7F17642B839CEA155471BCA8F833
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/mFvaHDyILv3rIY_HJeIjLO_5WCA.roa
Signing time:             Thu 20 Jul 2023 07:01:26 +0000
ROA not before:           Thu 20 Jul 2023 07:01:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47123
IP address blocks:        185.44.192.0/24 maxlen: 24
                          185.44.193.0/24 maxlen: 24
                          185.44.194.0/24 maxlen: 24
                          185.44.195.0/24 maxlen: 24
                          195.155.64.0/24 maxlen: 24
                          195.155.71.0/24 maxlen: 24
                          195.155.65.0/24 maxlen: 24
                          195.155.66.0/24 maxlen: 24
                          195.155.67.0/24 maxlen: 24
                          195.155.68.0/24 maxlen: 24
                          195.155.69.0/24 maxlen: 24
                          195.155.70.0/24 maxlen: 24
                          195.155.78.0/24 maxlen: 24
                          195.155.72.0/24 maxlen: 24
                          195.155.73.0/24 maxlen: 24
                          195.155.74.0/24 maxlen: 24
                          195.155.75.0/24 maxlen: 24
                          195.155.76.0/24 maxlen: 24
                          195.155.77.0/24 maxlen: 24
                          195.155.79.0/24 maxlen: 24
                          195.155.80.0/24 maxlen: 24
                          195.155.81.0/24 maxlen: 24
                          195.155.82.0/24 maxlen: 24
                          195.155.83.0/24 maxlen: 24
                          195.155.84.0/24 maxlen: 24
                          195.155.85.0/24 maxlen: 24
                          195.155.86.0/24 maxlen: 24
                          195.155.87.0/24 maxlen: 24
                          195.155.88.0/24 maxlen: 24
                          195.155.89.0/24 maxlen: 24
                          195.155.90.0/24 maxlen: 24
                          195.155.91.0/24 maxlen: 24
                          93.94.249.0/24 maxlen: 24
                          93.94.250.0/24 maxlen: 24
                          93.94.251.0/24 maxlen: 24
                          93.94.252.0/23 maxlen: 23
                          93.94.248.0/24 maxlen: 24
                          93.94.254.0/24 maxlen: 24
                          93.94.255.0/24 maxlen: 24
                          195.155.92.0/24 maxlen: 24
                          195.155.93.0/24 maxlen: 24
                          195.155.94.0/24 maxlen: 24
                          195.155.95.0/24 maxlen: 24
                          2a04:c5::/32 maxlen: 32
                          2a04:c2::/32 maxlen: 32
                          2a04:c3::/32 maxlen: 32
                          2a04:c1::/32 maxlen: 32
                          2a04:c4::/32 maxlen: 32
                          2a04:c0::/32 maxlen: 32
                          2a04:c6::/32 maxlen: 32
                          2a04:c7::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:1a:7f:17:64:2b:83:9c:ea:15:54:71:bc:a8:f8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: Jul 20 07:01:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=985bda1c3c882efdeb218fc725e2232ceff95820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:85:f6:b3:3d:f8:ef:7a:2f:1b:4f:1e:5f:
                    c2:05:8b:8b:c1:9c:08:4e:41:fb:23:a3:04:3c:d0:
                    9a:1b:f5:58:1d:f2:91:62:f8:3f:f0:a9:9a:01:4e:
                    7a:80:74:9b:9e:c3:80:0e:e8:66:44:12:39:38:45:
                    09:75:33:21:92:23:36:c9:ac:4d:c2:d2:72:ed:1c:
                    80:b6:dd:3c:54:f6:d0:e5:ee:b9:df:02:e3:ef:d6:
                    67:db:19:b6:9e:21:ca:aa:49:6a:37:f2:0b:f9:be:
                    2f:ab:10:90:da:9b:9c:1a:20:48:cd:70:b8:67:84:
                    0e:f5:e3:58:40:b1:5c:0f:0c:7d:4d:e7:61:52:a2:
                    89:a0:9f:99:b0:1f:8b:80:28:d3:c5:22:fc:f9:6f:
                    ea:55:01:84:2b:fc:9d:31:5c:c6:ed:61:30:fa:d3:
                    26:f4:17:a3:b0:8d:41:96:be:f5:f0:12:57:fb:35:
                    7a:31:6c:b0:c0:2f:32:79:b6:7f:59:f6:5d:34:ac:
                    42:ed:12:6d:cc:07:44:31:b4:0a:1d:ec:f0:8b:59:
                    cc:f5:f9:d8:f9:93:d4:c8:3d:87:0f:69:19:6a:f7:
                    31:59:27:a8:be:98:42:8d:0f:b9:5b:52:ff:85:88:
                    87:ff:42:3b:eb:d2:be:44:7d:9a:59:c7:08:d3:68:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:DA:1C:3C:88:2E:FD:EB:21:8F:C7:25:E2:23:2C:EF:F9:58:20
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/mFvaHDyILv3rIY_HJeIjLO_5WCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.94.248.0/21
                  185.44.192.0/22
                  195.155.64.0/19
                IPv6:
                  2a04:c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         65:73:31:c3:cd:33:49:48:5c:c8:f1:09:c2:70:7c:9c:78:b1:
         52:8e:32:42:8c:e3:a0:cc:23:13:40:eb:93:88:16:35:10:fb:
         55:07:22:35:15:ed:a5:64:96:db:ae:39:dd:c3:12:08:ad:6f:
         f9:75:da:ef:4d:86:83:01:75:08:f2:f7:d0:af:7d:45:b0:15:
         d6:79:de:41:c0:8d:1d:d7:ff:12:30:c9:3b:79:04:09:14:12:
         a3:84:cb:f7:b8:b6:51:be:ba:7b:89:29:2b:d9:df:cf:60:64:
         ec:d1:d6:13:2d:44:be:83:19:38:5d:91:52:94:df:ac:58:5b:
         10:3e:9f:c9:9e:49:be:59:8a:1b:02:75:30:bf:5d:46:12:cd:
         5f:de:05:b5:cd:66:fc:68:bf:ec:64:d1:72:6a:a4:a5:aa:5c:
         a5:15:cf:ca:cb:a6:de:b2:36:d2:da:7f:b3:fc:22:79:06:32:
         8d:00:eb:cc:d1:ec:aa:19:60:63:ae:c2:f2:31:f0:64:5e:34:
         f3:ee:af:f3:7e:a6:90:2f:a1:6f:4d:41:eb:1e:98:92:c1:0d:
         1d:3d:00:21:cc:42:55:96:f3:3c:a6:67:56:5d:6c:6e:81:57:
         5a:45:03:41:c0:66:37:3b:dd:7d:b7:79:b2:d1:6d:f6:57:a6:
         0d:71:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:28 2024 by rpki-client on console-ams.rpki-client.org