Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/q1u9yvSvySelo4lV98cSWQ8CgbY.roa
File:                     q1u9yvSvySelo4lV98cSWQ8CgbY.roa (raw, json)
Hash identifier:          sw2QB4I4a+GKos5TmyPjxVKe5k2VbKhZAzHP1Xu+61I=
Subject key identifier:   AB:5B:BD:CA:F4:AF:C9:27:A5:A3:89:55:F7:C7:12:59:0F:02:81:B6
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       0189F7CAC64DD4501E08B7EBB86842BD43F1
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/q1u9yvSvySelo4lV98cSWQ8CgbY.roa
Signing time:             Tue 15 Aug 2023 06:03:28 +0000
ROA not before:           Tue 15 Aug 2023 06:03:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20911
IP address blocks:        178.254.246.0/24 maxlen: 24
                          178.254.245.0/24 maxlen: 24
                          178.254.244.0/24 maxlen: 24
                          178.254.243.0/24 maxlen: 24
                          178.254.242.0/24 maxlen: 24
                          178.254.241.0/24 maxlen: 24
                          178.254.240.0/20 maxlen: 20
                          178.254.248.0/24 maxlen: 24
                          178.254.247.0/24 maxlen: 24
                          178.254.253.0/24 maxlen: 24
                          178.254.252.0/24 maxlen: 24
                          178.254.251.0/24 maxlen: 24
                          178.254.250.0/24 maxlen: 24
                          178.254.249.0/24 maxlen: 24
                          178.254.255.0/24 maxlen: 24
                          178.254.254.0/24 maxlen: 24
                          178.254.192.0/24 maxlen: 24
                          178.254.194.0/24 maxlen: 24
                          178.254.199.0/24 maxlen: 24
                          178.254.193.0/24 maxlen: 24
                          178.254.198.0/23 maxlen: 23
                          178.254.198.0/24 maxlen: 24
                          178.254.197.0/24 maxlen: 24
                          178.254.196.0/23 maxlen: 23
                          178.254.196.0/24 maxlen: 24
                          178.254.195.0/24 maxlen: 24
                          178.254.194.0/23 maxlen: 23
                          178.254.200.0/24 maxlen: 24
                          178.254.206.0/23 maxlen: 23
                          178.254.206.0/24 maxlen: 24
                          178.254.205.0/24 maxlen: 24
                          178.254.204.0/22 maxlen: 22
                          178.254.204.0/24 maxlen: 24
                          178.254.203.0/24 maxlen: 24
                          178.254.202.0/24 maxlen: 24
                          178.254.201.0/24 maxlen: 24
                          178.254.200.0/23 maxlen: 23
                          178.254.212.0/23 maxlen: 23
                          178.254.213.0/24 maxlen: 24
                          178.254.212.0/24 maxlen: 24
                          178.254.211.0/24 maxlen: 24
                          178.254.210.0/24 maxlen: 24
                          178.254.209.0/24 maxlen: 24
                          178.254.208.0/24 maxlen: 24
                          178.254.208.0/22 maxlen: 22
                          178.254.207.0/24 maxlen: 24
                          178.254.219.0/24 maxlen: 24
                          178.254.218.0/24 maxlen: 24
                          178.254.217.0/24 maxlen: 24
                          178.254.216.0/24 maxlen: 24
                          178.254.216.0/21 maxlen: 21
                          178.254.215.0/24 maxlen: 24
                          178.254.214.0/24 maxlen: 24
                          178.254.226.0/24 maxlen: 24
                          178.254.225.0/24 maxlen: 24
                          178.254.224.0/23 maxlen: 23
                          178.254.224.0/24 maxlen: 24
                          178.254.223.0/24 maxlen: 24
                          178.254.222.0/24 maxlen: 24
                          178.254.221.0/24 maxlen: 24
                          178.254.220.0/24 maxlen: 24
                          178.254.228.0/24 maxlen: 24
                          178.254.233.0/24 maxlen: 24
                          178.254.232.0/24 maxlen: 24
                          178.254.232.0/21 maxlen: 21
                          178.254.231.0/24 maxlen: 24
                          178.254.230.0/24 maxlen: 24
                          178.254.229.0/24 maxlen: 24
                          178.254.228.0/22 maxlen: 22
                          178.254.227.0/24 maxlen: 24
                          178.254.240.0/24 maxlen: 24
                          178.254.239.0/24 maxlen: 24
                          178.254.238.0/24 maxlen: 24
                          178.254.237.0/24 maxlen: 24
                          178.254.236.0/24 maxlen: 24
                          178.254.235.0/24 maxlen: 24
                          178.254.234.0/24 maxlen: 24
                          93.152.229.0/24 maxlen: 24
                          93.152.228.0/24 maxlen: 24
                          93.152.228.0/23 maxlen: 23
                          93.152.253.0/24 maxlen: 24
                          93.152.252.0/23 maxlen: 23
                          93.152.252.0/24 maxlen: 24
                          93.152.251.0/24 maxlen: 24
                          93.152.250.0/24 maxlen: 24
                          93.152.249.0/24 maxlen: 24
                          93.152.248.0/24 maxlen: 24
                          93.152.248.0/22 maxlen: 22
                          93.152.255.0/24 maxlen: 24
                          93.152.254.0/24 maxlen: 24
                          93.152.254.0/23 maxlen: 23
                          46.229.207.128/25 maxlen: 25
                          46.229.206.128/25 maxlen: 25
                          185.95.251.0/24 maxlen: 24
                          185.95.250.0/24 maxlen: 24
                          185.95.249.0/24 maxlen: 24
                          185.95.248.0/24 maxlen: 24
                          46.229.192.0/24 maxlen: 24
                          46.229.192.0/23 maxlen: 23
                          46.229.192.0/20 maxlen: 20
                          46.229.194.0/24 maxlen: 24
                          46.229.193.0/24 maxlen: 24
                          46.229.199.0/24 maxlen: 24
                          46.229.198.0/24 maxlen: 24
                          46.229.197.0/24 maxlen: 24
                          46.229.196.0/24 maxlen: 24
                          46.229.196.0/22 maxlen: 22
                          46.229.195.0/24 maxlen: 24
                          46.229.205.0/24 maxlen: 24
                          46.229.204.0/24 maxlen: 24
                          46.229.203.0/24 maxlen: 24
                          46.229.202.0/24 maxlen: 24
                          46.229.201.0/24 maxlen: 24
                          46.229.200.0/22 maxlen: 22
                          46.229.200.0/24 maxlen: 24
                          46.229.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f7:ca:c6:4d:d4:50:1e:08:b7:eb:b8:68:42:bd:43:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Aug 15 06:03:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab5bbdcaf4afc927a5a38955f7c712590f0281b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:fc:97:6e:cd:20:67:c5:d0:99:9d:76:80:
                    5f:d8:33:9b:a7:aa:34:47:f3:aa:9f:eb:ca:59:e3:
                    e7:41:68:2b:06:68:82:f9:d2:14:5a:98:a2:cf:f6:
                    f1:74:88:78:4a:7e:46:4d:c4:39:04:f8:af:73:b2:
                    40:22:9b:6d:9d:04:7c:cd:f9:80:e6:ba:6c:de:99:
                    dd:18:26:37:44:45:f9:5f:05:ad:e1:7d:ff:5e:e9:
                    b4:b0:45:e4:37:79:7d:a2:36:77:b0:f3:3e:7b:91:
                    d3:74:b3:48:28:7f:b5:8e:81:38:43:ed:01:24:05:
                    b6:76:fc:43:87:95:9e:a3:38:c8:2c:3e:37:c0:fa:
                    41:c3:ab:62:68:a1:b8:1a:b1:d7:76:8d:26:d7:97:
                    e0:54:12:92:2a:19:f8:1f:c3:5e:a6:41:8d:98:89:
                    14:5d:38:5f:dd:11:1f:76:aa:4d:ae:29:87:48:4d:
                    25:1f:bf:28:09:6d:ed:3c:d8:55:a9:cd:36:2f:32:
                    74:97:1e:60:ad:2c:c8:e5:b4:ef:95:c7:d4:d6:02:
                    9f:1e:0e:c0:92:42:75:3d:23:f0:96:3b:0e:11:4d:
                    c5:2e:39:f3:f6:ea:46:36:d1:9a:92:46:0e:f8:7a:
                    d6:cf:9b:5f:f4:cd:0f:9a:6b:2e:80:7a:60:63:99:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5B:BD:CA:F4:AF:C9:27:A5:A3:89:55:F7:C7:12:59:0F:02:81:B6
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/q1u9yvSvySelo4lV98cSWQ8CgbY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.192.0/20
                  93.152.228.0/23
                  93.152.248.0/21
                  178.254.192.0/18
                  185.95.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:25:fe:3f:c6:53:36:e7:9e:59:33:6e:92:fe:9d:09:c2:
         1c:8f:4b:48:a4:de:89:8a:1b:ef:5a:ba:52:f8:58:09:46:21:
         b0:0c:11:6a:34:a5:a9:97:d7:aa:12:97:4c:49:32:6e:f1:92:
         e2:c9:e1:f3:8d:6c:59:46:b3:aa:f4:66:32:92:06:b0:7d:7e:
         b8:5e:b9:68:a6:0f:46:3e:32:1e:95:1b:26:77:3a:78:86:45:
         ab:39:04:38:72:38:aa:68:ea:2f:91:c7:db:ad:9c:93:bc:6b:
         09:02:d5:ba:dd:bc:87:45:1f:5e:09:e9:2b:34:6f:5d:83:6f:
         0c:04:6a:90:94:57:4f:ff:f9:a4:98:dd:b2:8f:38:97:13:9f:
         12:1b:bd:b7:ab:c8:a4:f7:85:16:22:9e:c8:b8:0f:25:ba:a8:
         31:bd:2a:16:99:8b:aa:21:c3:60:e8:cb:26:bd:e6:b2:47:65:
         56:aa:b7:31:51:4f:2e:19:bd:01:e7:6b:eb:b9:25:c5:a3:ba:
         8c:a6:a0:21:9a:2a:99:11:40:88:25:dd:eb:5c:80:a0:42:69:
         3c:d2:a2:8a:fc:45:9a:61:4b:6e:be:65:4a:d4:b3:42:60:56:
         b2:21:93:02:55:ba:2b:d3:a2:13:0e:37:00:32:3e:b7:2a:d2:
         ed:17:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:18 2024 by rpki-client on console-ams.rpki-client.org