Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EYC7Rs2CUUgKyNkL6mIvvigINFo.roa
File:                     EYC7Rs2CUUgKyNkL6mIvvigINFo.roa (raw, json)
Hash identifier:          CopUCTAvsJLUptSXt8rL1dw0rGOAgBv5n64BC0eNGmk=
Subject key identifier:   11:80:BB:46:CD:82:51:48:0A:C8:D9:0B:EA:62:2F:BE:28:08:34:5A
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       018978EB7F2002C600317D7178DEFFC7A53A
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EYC7Rs2CUUgKyNkL6mIvvigINFo.roa
Signing time:             Fri 21 Jul 2023 14:47:26 +0000
ROA not before:           Fri 21 Jul 2023 14:47:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198949
IP address blocks:        95.174.160.0/19 maxlen: 24
                          87.255.128.0/19 maxlen: 24
                          217.19.192.0/20 maxlen: 24
                          159.20.8.0/21 maxlen: 24
                          213.222.64.0/18 maxlen: 24
                          95.168.0.0/19 maxlen: 24
                          79.80.0.0/12 maxlen: 24
                          185.147.204.0/22 maxlen: 24
                          79.174.192.0/18 maxlen: 24
                          185.147.232.0/22 maxlen: 24
                          85.168.0.0/14 maxlen: 24
                          194.6.128.0/19 maxlen: 24
                          195.146.192.0/19 maxlen: 24
                          62.39.0.0/16 maxlen: 24
                          77.140.0.0/14 maxlen: 24
                          62.106.128.0/17 maxlen: 24
                          217.112.224.0/20 maxlen: 24
                          194.153.89.0/24 maxlen: 24
                          194.153.90.0/24 maxlen: 24
                          194.153.88.0/23 maxlen: 24
                          194.153.97.0/24 maxlen: 24
                          194.153.92.0/24 maxlen: 24
                          178.18.176.0/20 maxlen: 24
                          87.100.0.0/17 maxlen: 24
                          212.39.128.0/19 maxlen: 24
                          62.241.64.0/18 maxlen: 24
                          178.19.0.0/20 maxlen: 24
                          81.220.0.0/16 maxlen: 24
                          77.233.96.0/19 maxlen: 24
                          78.112.0.0/12 maxlen: 24
                          62.85.128.0/19 maxlen: 24
                          37.64.0.0/13 maxlen: 24
                          46.165.64.0/18 maxlen: 24
                          89.185.160.0/19 maxlen: 24
                          84.205.128.0/19 maxlen: 24
                          212.23.160.0/19 maxlen: 24
                          212.30.96.0/19 maxlen: 24
                          91.91.0.0/16 maxlen: 24
                          88.219.0.0/16 maxlen: 24
                          81.64.0.0/14 maxlen: 24
                          80.118.0.0/15 maxlen: 24
                          195.132.0.0/16 maxlen: 24
                          195.98.96.0/19 maxlen: 24
                          78.159.0.0/19 maxlen: 24
                          84.4.0.0/14 maxlen: 24
                          85.192.192.0/18 maxlen: 24
                          79.132.32.0/19 maxlen: 24
                          77.192.0.0/12 maxlen: 24
                          86.64.0.0/12 maxlen: 24
                          80.70.32.0/20 maxlen: 24
                          80.124.0.0/15 maxlen: 24
                          82.151.0.0/19 maxlen: 24
                          95.157.192.0/18 maxlen: 24
                          95.157.128.0/18 maxlen: 24
                          212.198.0.0/16 maxlen: 24
                          93.191.80.0/21 maxlen: 24
                          77.84.0.0/16 maxlen: 24
                          91.151.112.0/20 maxlen: 24
                          86.63.224.0/19 maxlen: 24
                          213.144.192.0/19 maxlen: 24
                          77.144.0.0/12 maxlen: 24
                          217.70.80.0/20 maxlen: 24
                          85.117.128.0/19 maxlen: 24
                          195.3.0.0/18 maxlen: 24
                          77.137.196.0/22 maxlen: 24
                          77.137.200.0/21 maxlen: 24
                          95.171.128.0/19 maxlen: 24
                          77.137.208.0/20 maxlen: 24
                          80.185.0.0/16 maxlen: 24
                          81.185.0.0/16 maxlen: 24
                          77.137.224.0/19 maxlen: 24
                          84.96.0.0/13 maxlen: 24
                          87.231.0.0/16 maxlen: 24
                          62.62.169.0/24 maxlen: 24
                          89.2.0.0/15 maxlen: 24
                          188.224.0.0/17 maxlen: 24
                          95.136.128.0/17 maxlen: 24
                          194.183.192.0/19 maxlen: 24
                          62.62.128.0/17 maxlen: 24
                          89.157.88.0/21 maxlen: 24
                          89.157.96.0/19 maxlen: 24
                          141.170.216.0/21 maxlen: 24
                          213.245.0.0/16 maxlen: 24
                          185.150.120.0/22 maxlen: 24
                          213.203.64.0/18 maxlen: 24
                          89.156.0.0/14 maxlen: 24
                          213.169.160.0/19 maxlen: 24
                          93.0.0.0/11 maxlen: 24
                          109.0.0.0/11 maxlen: 24
                          93.182.192.0/18 maxlen: 24
                          81.1.0.0/18 maxlen: 24
                          88.136.0.0/13 maxlen: 24
                          213.176.192.0/19 maxlen: 24
                          84.55.128.0/18 maxlen: 24
                          89.170.0.0/16 maxlen: 24
                          62.129.160.0/19 maxlen: 24
                          62.8.0.0/19 maxlen: 24
                          77.136.0.0/16 maxlen: 24
                          46.35.0.0/19 maxlen: 24
                          80.236.0.0/17 maxlen: 24
                          77.128.0.0/13 maxlen: 24
                          188.7.0.0/16 maxlen: 24
                          212.94.160.0/19 maxlen: 24
                          130.0.96.0/19 maxlen: 24
                          83.141.128.0/17 maxlen: 24
                          188.141.128.0/17 maxlen: 24
                          213.128.32.0/19 maxlen: 24
                          194.242.176.0/20 maxlen: 24
                          195.7.96.0/19 maxlen: 24
                          92.88.0.0/13 maxlen: 24
                          85.68.0.0/15 maxlen: 24
                          213.223.0.0/16 maxlen: 24
                          91.68.0.0/14 maxlen: 24
                          91.88.0.0/16 maxlen: 24
                          82.216.0.0/16 maxlen: 24
                          95.175.160.0/19 maxlen: 24
                          195.115.0.0/16 maxlen: 24
                          78.155.128.0/19 maxlen: 24
                          2a00:8d80::/32 maxlen: 48
                          2a00:ec80::/32 maxlen: 48
                          2a00:5e80::/32 maxlen: 48
                          2a00:ec81::/32 maxlen: 48
                          2a00:6200::/29 maxlen: 48
                          2a00:8380::/32 maxlen: 48
                          2a00:7180::/32 maxlen: 48
                          2a02:8400::/25 maxlen: 48
                          2a00:9380::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Sep 2023 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:78:eb:7f:20:02:c6:00:31:7d:71:78:de:ff:c7:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Jul 21 14:47:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1180bb46cd8251480ac8d90bea622fbe2808345a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:e0:1b:1c:4e:55:d4:74:87:b8:ff:94:61:
                    6d:16:51:a6:d2:c0:f8:9d:18:3c:80:be:16:5a:d9:
                    af:2e:8d:23:77:77:dc:91:e2:fb:a3:48:60:82:5b:
                    10:20:44:2d:2d:c4:46:41:e3:d0:4f:48:41:00:29:
                    94:ba:8b:f1:dc:6c:fe:04:fb:02:a1:b1:4e:c9:b3:
                    98:5e:05:10:ae:93:cb:f6:d6:5d:99:74:b5:06:06:
                    c9:2b:81:c8:f1:a7:b9:bf:bb:ca:64:c7:56:c8:ce:
                    58:44:03:a7:3c:fb:6c:b3:a6:38:05:0e:ef:fe:1d:
                    aa:08:3e:8a:a2:6f:44:22:30:b4:c2:fa:56:23:da:
                    58:90:f7:87:cd:cb:f6:f6:8f:cc:45:c7:4a:7c:57:
                    55:63:98:cc:71:b7:90:56:42:80:2a:19:26:f8:7c:
                    81:fb:b6:8c:d1:ec:66:99:f4:95:4d:a1:3c:f9:8f:
                    f8:9d:8d:79:0d:1f:5c:3b:38:a3:3b:b9:17:df:62:
                    96:21:e8:d5:fb:84:6d:98:e6:9a:56:0d:be:da:b8:
                    e8:79:80:94:23:a1:e3:d8:b4:a4:cf:6c:d3:10:d9:
                    9d:d2:e3:c5:92:3f:a1:b0:2d:d4:14:12:46:54:1d:
                    7e:19:12:44:0e:42:d4:8c:db:b4:fe:af:c5:63:25:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:BB:46:CD:82:51:48:0A:C8:D9:0B:EA:62:2F:BE:28:08:34:5A
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EYC7Rs2CUUgKyNkL6mIvvigINFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.64.0.0/13
                  46.35.0.0/19
                  46.165.64.0/18
                  62.8.0.0/19
                  62.39.0.0/16
                  62.62.128.0/17
                  62.85.128.0/19
                  62.106.128.0/17
                  62.129.160.0/19
                  62.241.64.0/18
                  77.84.0.0/16
                  77.128.0.0-77.136.255.255
                  77.137.196.0-77.137.255.255
                  77.140.0.0-77.159.255.255
                  77.192.0.0/12
                  77.233.96.0/19
                  78.112.0.0/12
                  78.155.128.0/19
                  78.159.0.0/19
                  79.80.0.0/12
                  79.132.32.0/19
                  79.174.192.0/18
                  80.70.32.0/20
                  80.118.0.0/15
                  80.124.0.0/15
                  80.185.0.0/16
                  80.236.0.0/17
                  81.1.0.0/18
                  81.64.0.0/14
                  81.185.0.0/16
                  81.220.0.0/16
                  82.151.0.0/19
                  82.216.0.0/16
                  83.141.128.0/17
                  84.4.0.0/14
                  84.55.128.0/18
                  84.96.0.0/13
                  84.205.128.0/19
                  85.68.0.0/15
                  85.117.128.0/19
                  85.168.0.0/14
                  85.192.192.0/18
                  86.63.224.0-86.79.255.255
                  87.100.0.0/17
                  87.231.0.0/16
                  87.255.128.0/19
                  88.136.0.0/13
                  88.219.0.0/16
                  89.2.0.0/15
                  89.156.0.0/14
                  89.170.0.0/16
                  89.185.160.0/19
                  91.68.0.0/14
                  91.88.0.0/16
                  91.91.0.0/16
                  91.151.112.0/20
                  92.88.0.0/13
                  93.0.0.0/11
                  93.182.192.0/18
                  93.191.80.0/21
                  95.136.128.0/17
                  95.157.128.0/17
                  95.168.0.0/19
                  95.171.128.0/19
                  95.174.160.0/19
                  95.175.160.0/19
                  109.0.0.0/11
                  130.0.96.0/19
                  141.170.216.0/21
                  159.20.8.0/21
                  178.18.176.0/20
                  178.19.0.0/20
                  185.147.204.0/22
                  185.147.232.0/22
                  185.150.120.0/22
                  188.7.0.0/16
                  188.141.128.0/17
                  188.224.0.0/17
                  194.6.128.0/19
                  194.153.88.0-194.153.90.255
                  194.153.92.0/24
                  194.153.97.0/24
                  194.183.192.0/19
                  194.242.176.0/20
                  195.3.0.0/18
                  195.7.96.0/19
                  195.98.96.0/19
                  195.115.0.0/16
                  195.132.0.0/16
                  195.146.192.0/19
                  212.23.160.0/19
                  212.30.96.0/19
                  212.39.128.0/19
                  212.94.160.0/19
                  212.198.0.0/16
                  213.128.32.0/19
                  213.144.192.0/19
                  213.169.160.0/19
                  213.176.192.0/19
                  213.203.64.0/18
                  213.222.64.0/18
                  213.223.0.0/16
                  213.245.0.0/16
                  217.19.192.0/20
                  217.70.80.0/20
                  217.112.224.0/20
                IPv6:
                  2a00:5e80::/32
                  2a00:6200::/29
                  2a00:7180::/32
                  2a00:8380::/32
                  2a00:8d80::/32
                  2a00:9380::/32
                  2a00:ec80::/31
                  2a02:8400::/25

    Signature Algorithm: sha256WithRSAEncryption
         02:82:27:2e:f8:a0:c3:bb:12:a1:29:10:24:f4:d9:32:eb:dd:
         04:fa:e6:99:65:26:8f:1e:81:42:be:dc:28:11:cd:5e:6b:19:
         8f:ff:b8:9b:a2:08:c9:bf:bb:c9:63:73:6f:0b:86:d2:be:c2:
         0b:82:64:65:d1:7f:cb:27:61:00:11:7a:fc:23:61:81:a9:5a:
         96:49:3a:dd:79:3a:b5:0b:4c:4d:0b:ac:5e:9f:04:c0:e2:90:
         1f:00:f8:a3:aa:d4:99:bf:0c:4c:bf:2d:c6:2d:61:67:85:d2:
         8b:6d:08:3a:ad:55:b2:30:b7:b5:a5:32:bf:15:04:dc:f1:73:
         c7:40:7e:d1:60:15:ed:2c:2b:cc:f8:b0:bd:9a:94:a5:d9:04:
         b1:ca:a4:d9:1b:d4:62:bd:d0:b7:6d:a0:33:33:2e:a4:67:5c:
         16:c8:3b:74:f5:ec:88:f6:66:b1:a6:f2:fe:cc:61:32:e8:7e:
         ba:fa:a2:99:99:e0:c0:08:17:25:65:24:c6:57:63:8a:94:63:
         1d:37:4d:21:df:cc:c3:43:e9:ea:7a:2f:1f:7c:a5:68:bc:b3:
         44:5b:9e:14:85:f0:87:90:57:cf:84:a8:0b:d7:71:e9:82:f3:
         75:61:f3:fc:a6:ce:18:a1:a1:11:e0:73:0a:97:bc:0f:0f:c9:
         38:ff:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org