Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa
File:                     JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa (raw, json)
Hash identifier:          LcHYaIBRzbN6aROsVWbMqmcJ0IcIwBkEzewl64oCohQ=
Subject key identifier:   24:E8:F3:E6:50:A4:D0:D2:81:C7:C3:04:D4:3B:29:EA:7B:C1:74:1E
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       0185C411813B49842DE3A9E36B43ABFD5DBC
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa
Signing time:             Wed 18 Jan 2023 08:49:19 +0000
ROA not before:           Wed 18 Jan 2023 08:49:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3352
IP address blocks:        83.60.0.0/16 maxlen: 16
                          83.55.0.0/16 maxlen: 16
                          88.13.0.0/16 maxlen: 16
                          79.144.0.0/16 maxlen: 16
                          88.16.0.0/16 maxlen: 16
                          88.11.0.0/16 maxlen: 16
                          81.38.0.0/16 maxlen: 16
                          83.52.0.0/16 maxlen: 16
                          83.47.0.0/16 maxlen: 16
                          88.15.0.0/16 maxlen: 16
                          88.10.0.0/16 maxlen: 16
                          83.37.0.0/16 maxlen: 16
                          81.37.0.0/16 maxlen: 16
                          88.8.0.0/16 maxlen: 16
                          81.40.0.0/16 maxlen: 16
                          83.35.0.0/16 maxlen: 16
                          80.30.0.0/16 maxlen: 16
                          83.57.0.0/16 maxlen: 16
                          88.25.0.0/16 maxlen: 16
                          81.39.0.0/16 maxlen: 16
                          83.34.0.0/16 maxlen: 16
                          81.32.0.0/16 maxlen: 16
                          83.59.0.0/16 maxlen: 16
                          83.54.0.0/16 maxlen: 16
                          79.145.0.0/16 maxlen: 16
                          81.36.0.0/16 maxlen: 16
                          80.31.0.0/16 maxlen: 16
                          83.63.0.0/16 maxlen: 16
                          83.58.0.0/16 maxlen: 16
                          83.53.0.0/16 maxlen: 16
                          88.24.0.0/16 maxlen: 16
                          79.147.0.0/16 maxlen: 16
                          88.14.0.0/16 maxlen: 16
                          88.9.0.0/16 maxlen: 16
                          2.137.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Thu 19 Jan 2023 08:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c4:11:81:3b:49:84:2d:e3:a9:e3:6b:43:ab:fd:5d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Jan 18 08:49:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24e8f3e650a4d0d281c7c304d43b29ea7bc1741e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:3b:29:62:d6:9a:be:a9:ff:b2:e2:c1:cf:
                    2b:c8:58:69:3b:2b:7f:22:a9:9b:14:6c:c6:aa:87:
                    0a:8d:27:7b:e3:7d:27:95:6d:c1:44:e0:f3:c2:07:
                    a6:7d:3c:b2:d6:74:2d:c0:c6:26:ee:c0:12:e1:72:
                    66:ea:c7:d0:fd:d6:b1:1c:e0:7d:e9:b2:15:80:08:
                    25:5c:a4:db:92:bb:06:af:f9:23:45:96:fc:32:f9:
                    20:84:84:11:83:c0:6d:81:59:c5:fb:9d:87:58:97:
                    db:8d:13:e0:32:8b:4b:3c:a9:41:3a:da:61:13:fe:
                    a6:47:bf:cc:99:10:79:4d:23:c0:29:2a:f0:bb:92:
                    c9:76:73:2d:46:d9:6a:f9:8f:38:68:46:c3:5d:e0:
                    0d:7b:aa:a1:10:22:71:7c:0f:29:62:97:82:92:a7:
                    19:14:b2:be:c5:08:a6:8e:a7:94:d4:7f:c5:c5:2d:
                    8b:ee:d9:97:ff:1a:74:a2:9f:a8:ee:28:18:87:60:
                    ff:b9:2e:c9:fe:fe:01:f5:8e:0e:e3:5c:1c:e6:00:
                    19:c8:c3:ac:e0:5a:aa:73:e6:67:f3:c8:1b:f4:ef:
                    40:a2:4f:57:19:e8:bb:a4:15:fa:af:13:02:c6:8e:
                    37:48:48:5d:63:c4:ec:59:bd:fb:0f:6a:0f:59:fb:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:F3:E6:50:A4:D0:D2:81:C7:C3:04:D4:3B:29:EA:7B:C1:74:1E
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JOjz5lCk0NKBx8ME1Dsp6nvBdB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.137.0.0/16
                  79.144.0.0/15
                  79.147.0.0/16
                  80.30.0.0/15
                  81.32.0.0/16
                  81.36.0.0-81.40.255.255
                  83.34.0.0/15
                  83.37.0.0/16
                  83.47.0.0/16
                  83.52.0.0/14
                  83.57.0.0-83.60.255.255
                  83.63.0.0/16
                  88.8.0.0/14
                  88.13.0.0-88.16.255.255
                  88.24.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         db:f1:4d:f7:a9:6b:5f:cd:92:2a:db:9c:23:d1:ab:df:1e:20:
         9a:63:05:41:f6:8a:62:2b:7f:0a:2b:cd:0e:4a:71:10:0f:05:
         0a:56:71:01:b0:f6:f5:74:ca:93:d2:dd:2a:e1:ec:f2:b3:de:
         28:7f:0c:6b:e3:29:ca:25:d0:ab:31:73:40:eb:23:f8:04:c3:
         a7:31:79:1c:6f:e3:c2:57:48:47:dc:3d:64:85:1a:43:71:db:
         b3:86:ac:e0:59:41:0a:0b:f2:ea:f4:64:5d:23:c8:ed:a2:20:
         f7:15:7a:ba:11:25:a7:e8:6a:f2:0f:9a:6c:9d:63:21:a1:7f:
         5c:a3:97:95:2b:41:cd:c8:84:e0:3c:be:d0:56:f5:6d:07:dd:
         65:ca:94:2e:bb:f3:cc:74:34:64:0d:d7:cb:ca:e1:ff:89:94:
         9c:53:9a:6c:0f:9e:26:56:41:65:4b:55:89:e5:77:91:c5:60:
         2e:b8:86:46:96:e7:d3:76:48:15:8e:50:52:2f:8f:da:2f:89:
         6e:51:4a:2f:ee:d1:80:ef:08:50:2c:88:dc:47:4c:c0:01:ac:
         51:8a:82:10:ef:25:04:65:b5:72:cc:28:1a:8f:dc:07:d1:71:
         8b:0f:f3:32:f5:97:e0:08:e1:67:91:27:fe:f8:d6:24:f1:71:
         b7:e1:3c:76
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYXEEYE7SYQt46nja0Or/V28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjMwMTE4MDg0OTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGU4ZjNlNjUwYTRkMGQyODFjN2MzMDRkNDNiMjllYTdiYzE3NDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrk7KWLWmr6p/7Liwc8ryFhpOyt/
IqmbFGzGqocKjSd7430nlW3BRODzwgemfTyy1nQtwMYm7sAS4XJm6sfQ/daxHOB9
6bIVgAglXKTbkrsGr/kjRZb8MvkghIQRg8BtgVnF+52HWJfbjRPgMotLPKlBOtph
E/6mR7/MmRB5TSPAKSrwu5LJdnMtRtlq+Y84aEbDXeANe6qhECJxfA8pYpeCkqcZ
FLK+xQimjqeU1H/FxS2L7tmX/xp0op+o7igYh2D/uS7J/v4B9Y4O41wc5gAZyMOs
4Fqqc+Zn88gb9O9Aok9XGei7pBX6rxMCxo43SEhdY8TsWb37D2oPWfv4cQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFCTo8+ZQpNDSgcfDBNQ7Kep7wXQeMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvSk9qejVsQ2swTktCeDhNRTFEc3A2bnZCZEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwMAAokDAwFP
kAMDAE+TAwMBUB4DAwBRIDAKAwMCUSQDAwBRKAMDAVMiAwMAUyUDAwBTLwMDAlM0
MAoDAwBTOQMDAFM8AwMAUz8DAwJYCDAKAwMAWA0DAwBYEAMDAVgYMA0GCSqGSIb3
DQEBCwUAA4IBAQDb8U33qWtfzZIq25wj0avfHiCaYwVB9opiK38KK80OSnEQDwUK
VnEBsPb1dMqT0t0q4ezys94ofwxr4ynKJdCrMXNA6yP4BMOnMXkcb+PCV0hH3D1k
hRpDcduzhqzgWUEKC/Lq9GRdI8jtoiD3FXq6ESWn6GryD5psnWMhoX9co5eVK0HN
yITgPL7QVvVtB91lypQuu/PMdDRkDdfLyuH/iZScU5psD54mVkFlS1WJ5XeRxWAu
uIZGlufTdkgVjlBSL4/aL4luUUov7tGA7whQLIjcR0zAAaxRioIQ7yUEZbVyzCga
j9wH0XGLD/My9ZfgCOFnkSf++NYk8XG34Tx2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org