Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/m-DWXEOLmBlJ2LPbLSLoZilDE6g.roa
File:                     m-DWXEOLmBlJ2LPbLSLoZilDE6g.roa (raw, json)
Hash identifier:          KLRbFb7vl4l9oxRSUE5TbQIhJrN1KmUmgaMIf3DBaas=
Subject key identifier:   9B:E0:D6:5C:43:8B:98:19:49:D8:B3:DB:2D:22:E8:66:29:43:13:A8
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       01870957E1EF2C6E5EE2FA8E7985AC77E306
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/m-DWXEOLmBlJ2LPbLSLoZilDE6g.roa
Signing time:             Wed 22 Mar 2023 12:42:47 +0000
ROA not before:           Wed 22 Mar 2023 12:42:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33915
IP address blocks:        213.127.128.0/17 maxlen: 17
                          213.93.128.0/17 maxlen: 17
                          213.160.252.0/22 maxlen: 22
                          213.160.248.0/21 maxlen: 21
                          213.160.248.0/22 maxlen: 22
                          213.46.128.0/17 maxlen: 17
                          62.195.0.0/16 maxlen: 16
                          212.187.64.0/18 maxlen: 18
                          62.194.0.0/16 maxlen: 16
                          62.194.0.0/15 maxlen: 15
                          213.93.0.0/17 maxlen: 17
                          213.93.0.0/16 maxlen: 16
                          212.187.0.0/18 maxlen: 18
                          212.187.0.0/17 maxlen: 17
                          80.113.0.0/17 maxlen: 17
                          80.113.0.0/16 maxlen: 16
                          213.126.128.0/18 maxlen: 18
                          213.126.128.0/17 maxlen: 17
                          80.113.128.0/17 maxlen: 17
                          213.127.0.0/17 maxlen: 17
                          213.127.0.0/16 maxlen: 16
                          213.160.192.0/19 maxlen: 19
                          213.160.192.0/20 maxlen: 20
                          213.160.208.0/20 maxlen: 20
                          213.126.192.0/18 maxlen: 18
                          77.248.0.0/15 maxlen: 15
                          77.248.0.0/14 maxlen: 14
                          213.46.0.0/17 maxlen: 17
                          213.46.0.0/16 maxlen: 16
                          24.132.128.0/17 maxlen: 17
                          80.85.32.0/20 maxlen: 20
                          217.105.240.0/20 maxlen: 20
                          89.99.0.0/16 maxlen: 16
                          217.105.224.0/20 maxlen: 20
                          217.105.224.0/19 maxlen: 19
                          213.124.224.0/19 maxlen: 19
                          217.104.192.0/18 maxlen: 18
                          89.98.0.0/16 maxlen: 16
                          89.98.0.0/15 maxlen: 15
                          213.124.160.0/20 maxlen: 20
                          213.124.160.0/19 maxlen: 19
                          213.124.176.0/20 maxlen: 20
                          217.104.128.0/18 maxlen: 18
                          217.104.128.0/17 maxlen: 17
                          213.124.192.0/19 maxlen: 19
                          213.124.192.0/18 maxlen: 18
                          24.132.0.0/17 maxlen: 17
                          24.132.0.0/16 maxlen: 16
                          217.105.32.0/19 maxlen: 19
                          178.85.0.0/16 maxlen: 16
                          217.105.0.0/18 maxlen: 18
                          217.105.0.0/19 maxlen: 19
                          31.151.0.0/17 maxlen: 17
                          31.151.0.0/16 maxlen: 16
                          217.63.128.0/18 maxlen: 18
                          217.63.128.0/19 maxlen: 19
                          95.97.0.0/16 maxlen: 16
                          178.84.0.0/16 maxlen: 16
                          178.84.0.0/15 maxlen: 15
                          31.151.128.0/17 maxlen: 17
                          212.178.32.0/19 maxlen: 19
                          212.178.32.0/20 maxlen: 20
                          217.63.160.0/19 maxlen: 19
                          212.178.48.0/20 maxlen: 20
                          185.137.202.0/23 maxlen: 23
                          185.137.200.0/23 maxlen: 23
                          185.137.200.0/22 maxlen: 22
                          80.57.0.0/16 maxlen: 16
                          217.103.0.0/17 maxlen: 17
                          217.103.0.0/16 maxlen: 16
                          95.96.0.0/16 maxlen: 16
                          95.96.0.0/15 maxlen: 15
                          62.163.128.0/17 maxlen: 17
                          212.83.64.0/19 maxlen: 19
                          212.83.64.0/20 maxlen: 20
                          217.103.128.0/17 maxlen: 17
                          212.83.80.0/20 maxlen: 20
                          80.56.0.0/16 maxlen: 16
                          80.56.0.0/15 maxlen: 15
                          92.110.0.0/15 maxlen: 15
                          217.102.64.0/18 maxlen: 18
                          217.102.0.0/18 maxlen: 18
                          217.102.0.0/17 maxlen: 17
                          46.129.0.0/17 maxlen: 17
                          46.129.0.0/16 maxlen: 16
                          46.129.128.0/17 maxlen: 17
                          62.163.0.0/17 maxlen: 17
                          62.163.0.0/16 maxlen: 16
                          81.175.96.0/19 maxlen: 19
                          62.108.0.0/20 maxlen: 20
                          62.108.0.0/19 maxlen: 19
                          62.108.16.0/20 maxlen: 20
                          92.108.0.0/15 maxlen: 15
                          92.108.0.0/14 maxlen: 14
                          213.34.0.0/19 maxlen: 19
                          213.34.0.0/20 maxlen: 20
                          213.34.16.0/20 maxlen: 20
                          81.175.64.0/19 maxlen: 19
                          81.175.64.0/18 maxlen: 18
                          77.250.0.0/15 maxlen: 15
                          2a02:a200::/28 maxlen: 28
                          2a02:a200::/27 maxlen: 27
                          2a02:a210::/28 maxlen: 28

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 13:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:57:e1:ef:2c:6e:5e:e2:fa:8e:79:85:ac:77:e3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Mar 22 12:42:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9be0d65c438b981949d8b3db2d22e866294313a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c7:2d:7c:c7:7a:a3:d3:de:33:99:52:93:b0:
                    03:4d:8b:2c:1b:81:76:07:80:8b:44:6f:53:ec:e4:
                    2c:05:5d:44:32:54:d8:4c:73:8c:29:05:8d:b5:f4:
                    98:6c:77:5b:41:92:ea:23:e5:14:e6:23:49:e0:01:
                    5c:3d:83:67:e4:40:d3:75:db:15:1e:ad:8b:fb:95:
                    7d:ab:b9:85:11:12:35:1b:1e:4b:2d:ed:5b:80:01:
                    62:89:2b:61:72:94:23:05:67:30:bf:46:44:3b:90:
                    32:0d:92:dc:da:2c:a2:77:3d:21:2f:e3:9b:0b:ef:
                    02:5a:87:e4:eb:a1:8d:ef:06:51:29:3b:64:21:83:
                    cd:4c:c4:f0:4e:21:06:37:c1:bd:c7:d8:25:78:ab:
                    f9:d1:33:72:74:52:05:54:3d:9a:af:b4:7d:77:56:
                    21:e5:89:95:b0:be:a7:7d:f0:a4:42:27:32:d3:83:
                    e7:cf:a6:85:b8:9d:26:a6:f9:27:19:e8:48:03:c5:
                    6f:d3:70:01:3f:28:11:74:fd:af:7d:4a:ff:0c:cc:
                    cf:e3:4a:31:cc:09:3e:de:52:ef:58:8c:af:f6:55:
                    db:ac:b4:f5:f3:a1:86:f3:b3:d0:05:74:2e:9a:87:
                    03:54:d2:ee:a4:c9:7a:8a:93:25:df:ab:1c:c8:ff:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E0:D6:5C:43:8B:98:19:49:D8:B3:DB:2D:22:E8:66:29:43:13:A8
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/m-DWXEOLmBlJ2LPbLSLoZilDE6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.132.0.0/16
                  31.151.0.0/16
                  46.129.0.0/16
                  62.108.0.0/19
                  62.163.0.0/16
                  62.194.0.0/15
                  77.248.0.0/14
                  80.56.0.0/15
                  80.85.32.0/20
                  80.113.0.0/16
                  81.175.64.0/18
                  89.98.0.0/15
                  92.108.0.0/14
                  95.96.0.0/15
                  178.84.0.0/15
                  185.137.200.0/22
                  212.83.64.0/19
                  212.178.32.0/19
                  212.187.0.0/17
                  213.34.0.0/19
                  213.46.0.0/16
                  213.93.0.0/16
                  213.124.160.0-213.124.255.255
                  213.126.128.0-213.127.255.255
                  213.160.192.0/19
                  213.160.248.0/21
                  217.63.128.0/18
                  217.102.0.0/17
                  217.103.0.0/16
                  217.104.128.0-217.105.63.255
                  217.105.224.0/19
                IPv6:
                  2a02:a200::/27

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:a7:81:e5:93:ed:27:42:5b:d7:4d:25:96:10:04:11:e7:
         db:46:b8:7a:cf:12:d2:3b:b3:b2:68:26:4b:85:20:9a:83:81:
         eb:fa:32:e1:3c:0b:b8:c8:46:6c:27:af:af:7a:76:fc:53:e3:
         5b:0f:67:b9:d3:93:ba:56:0d:c4:73:ca:e3:d6:1d:e4:e4:26:
         c0:e6:19:0a:75:a3:88:8e:37:37:56:e8:09:74:f7:7f:63:86:
         9c:13:cf:e3:1a:27:fc:87:1d:92:ef:a1:d1:8d:b6:45:58:15:
         a5:47:21:ed:9f:c0:a6:cd:51:01:83:90:c5:31:ed:d6:e0:fc:
         ef:9a:a6:5b:e8:e9:e1:61:bd:fa:81:d8:c2:89:53:11:3d:22:
         7a:f4:0a:05:c0:3b:15:7d:9f:c4:86:79:6d:3b:72:48:7d:56:
         80:a0:30:9e:db:eb:fd:f7:50:21:a8:05:f1:e8:c7:b4:eb:75:
         1b:3d:88:61:cc:0f:29:b6:d1:0a:39:17:e3:0e:90:67:3f:d5:
         41:9d:13:4d:ac:c3:b9:13:7b:16:8c:0e:66:4e:97:df:05:c9:
         2b:99:1f:c6:70:b4:52:67:01:80:62:3a:8d:b1:0e:4e:ed:56:
         65:66:9f:47:6c:86:3c:fa:83:4d:94:8c:ac:e4:e9:4a:bc:d7:
         2a:72:ee:9f
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAYcJV+HvLG5e4vqOeYWsd+MGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjMwMzIyMTI0MjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmUwZDY1YzQzOGI5ODE5NDlkOGIzZGIyZDIyZTg2NjI5NDMxM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78ctfMd6o9PeM5lSk7ADTYssG4F2
B4CLRG9T7OQsBV1EMlTYTHOMKQWNtfSYbHdbQZLqI+UU5iNJ4AFcPYNn5EDTddsV
Hq2L+5V9q7mFERI1Gx5LLe1bgAFiiSthcpQjBWcwv0ZEO5AyDZLc2iyidz0hL+Ob
C+8CWofk66GN7wZRKTtkIYPNTMTwTiEGN8G9x9gleKv50TNydFIFVD2ar7R9d1Yh
5YmVsL6nffCkQicy04Pnz6aFuJ0mpvknGehIA8Vv03ABPygRdP2vfUr/DMzP40ox
zAk+3lLvWIyv9lXbrLT186GG87PQBXQumocDVNLupMl6ipMl36scyP+lIQIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFJvg1lxDi5gZSdiz2y0i6GYpQxOoMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEvbS1EV1hFT0xtQmxKMkxQYkxTTG9aaWxERTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCByAQCAAEwgcEDAwAY
hAMDAB+XAwMALoEDBAU+bAADAwA+owMDAT7CAwMCTfgDAwFQOAMEBFBVIAMDAFBx
AwQGUa9AAwMBWWIDAwJcbAMDAV9gAwMBslQDBAK5icgDBAXUU0ADBAXUsiADBAfU
uwADBAXVIgADAwDVLgMDANVdMAsDBAXVfKADAwDVfDALAwQH1X6AAwMH1QADBAXV
oMADBAPVoPgDBAbZP4ADBAfZZgADAwDZZzAMAwQH2WiAAwQG2WkAAwQF2WngMA0E
AgACMAcDBQUqAqIAMA0GCSqGSIb3DQEBCwUAA4IBAQAvN6eB5ZPtJ0Jb100llhAE
EefbRrh6zxLSO7OyaCZLhSCag4Hr+jLhPAu4yEZsJ6+venb8U+NbD2e505O6Vg3E
c8rj1h3k5CbA5hkKdaOIjjc3VugJdPd/Y4acE8/jGif8hx2S76HRjbZFWBWlRyHt
n8CmzVEBg5DFMe3W4PzvmqZb6OnhYb36gdjCiVMRPSJ69AoFwDsVfZ/EhnltO3JI
fVaAoDCe2+v991AhqAXx6Me063UbPYhhzA8pttEKORfjDpBnP9VBnRNNrMO5E3sW
jA5mTpffBckrmR/GcLRSZwGAYjqNsQ5O7VZlZp9HbIY8+oNNlIys5OlKvNcqcu6f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org