Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/24MIh_d634k6Mj0d_-QOtpZpsPs.roa
File:                     24MIh_d634k6Mj0d_-QOtpZpsPs.roa (raw, json)
Hash identifier:          k6GdtAbyoDcy9ccHKkiGXrmWmz3YWJDQ1MjBBHyBz9c=
Subject key identifier:   DB:83:08:87:F7:7A:DF:89:3A:32:3D:1D:FF:E4:0E:B6:96:69:B0:FB
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018793F3D03B46A1D1274DDB659129EF4C79
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/24MIh_d634k6Mj0d_-QOtpZpsPs.roa
Signing time:             Tue 18 Apr 2023 10:40:41 +0000
ROA not before:           Tue 18 Apr 2023 10:40:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.6.0/24 maxlen: 24
                          194.87.10.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.25.0/24 maxlen: 24
                          194.87.37.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.44.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.51.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.63.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.77.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.76.0/24 maxlen: 24
                          195.133.79.0/24 maxlen: 24
                          195.133.84.0/24 maxlen: 24
                          195.133.20.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.64.0/22 maxlen: 22
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.40.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          195.58.51.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          194.58.67.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          193.124.226.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.182.0/24 maxlen: 24
                          192.124.180.0/22 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.246.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.170.0/23 maxlen: 23
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.178.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:93:f3:d0:3b:46:a1:d1:27:4d:db:65:91:29:ef:4c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Apr 18 10:40:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db830887f77adf893a323d1dffe40eb69669b0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:7f:fb:0e:ba:0c:73:aa:2d:21:f1:26:29:
                    88:f9:f3:43:9f:e2:fb:28:9d:10:6c:af:a5:8d:78:
                    6a:a1:4e:bf:61:95:44:3a:ce:6a:88:0a:7e:43:68:
                    85:0c:25:f6:91:38:c7:35:6d:7c:d7:a6:00:b3:9c:
                    3e:47:43:59:1d:45:5d:54:c5:5a:ec:71:13:b7:55:
                    04:b1:a0:09:1f:ee:00:47:f2:b4:ac:df:43:3f:02:
                    c2:c1:25:33:51:eb:4f:94:f6:c9:37:59:d4:1f:c6:
                    3b:10:44:85:8b:f6:73:dd:80:61:cc:32:0e:d9:08:
                    d6:34:b9:d6:de:db:07:f8:9e:21:d5:91:fb:12:c5:
                    68:ae:83:ac:f9:e6:a1:5e:1f:94:95:9b:8f:42:88:
                    6b:27:01:93:3c:a9:ac:d9:8b:f0:a0:ce:7f:10:98:
                    65:5a:c3:f6:f4:7a:52:3c:5b:3b:37:84:ad:9a:6f:
                    11:28:3d:75:24:35:65:5d:f1:d4:62:a8:d9:37:09:
                    47:8c:87:bd:60:ce:0e:3b:ed:b2:02:ba:eb:89:5d:
                    13:28:d2:f1:b8:19:ca:1e:94:03:dc:97:25:23:c5:
                    cb:27:67:d5:1d:64:44:77:47:15:86:97:37:f2:b5:
                    26:bf:26:db:44:5c:86:34:d2:05:40:07:cb:f6:21:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:08:87:F7:7A:DF:89:3A:32:3D:1D:FF:E4:0E:B6:96:69:B0:FB
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/24MIh_d634k6Mj0d_-QOtpZpsPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.180.0/22
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/23
                  193.124.16.0/24
                  193.124.44.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.133.0/24
                  193.124.201.0/24
                  193.124.204.0/24
                  193.124.226.0/24
                  194.58.38.0/24
                  194.58.40.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.67.0/24
                  194.58.154.0/24
                  194.87.1.0-194.87.3.255
                  194.87.6.0/23
                  194.87.10.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.37.0/24
                  194.87.43.0-194.87.44.255
                  194.87.51.0/24
                  194.87.56.0/24
                  194.87.63.0/24
                  194.87.73.0/24
                  194.87.77.0-194.87.78.255
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.170.0-194.87.172.255
                  194.87.176.0/22
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.87.246.0/24
                  194.135.18.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.51.0/24
                  195.58.54.0/24
                  195.58.56.0/24
                  195.133.0.0/24
                  195.133.20.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.64.0/22
                  195.133.74.0/24
                  195.133.76.0/24
                  195.133.79.0/24
                  195.133.84.0/24
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.10.0/24
                  212.192.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:91:4c:2c:96:64:8b:6b:ff:61:d1:fb:65:9a:0e:f8:58:
         2f:01:71:41:f0:d7:1a:61:a4:e8:5c:3a:29:d4:1f:a3:f5:62:
         e4:33:01:5d:fe:97:0d:03:52:4c:7e:10:94:d6:22:eb:3b:90:
         f7:aa:d7:84:46:0e:67:ee:87:06:a6:3c:b7:53:a7:ca:91:a2:
         7c:09:f2:15:7c:5d:c3:63:dd:83:e8:dd:bb:57:fc:20:4e:45:
         1e:17:d8:fd:9d:1f:15:88:ef:c2:5c:f3:1e:7f:cf:58:1a:ca:
         84:f9:dd:6e:67:d0:b7:2a:01:81:62:61:40:1f:f1:7d:e1:6a:
         83:86:9f:6e:13:61:f0:d8:46:0c:26:b8:9a:71:de:0e:e9:99:
         bd:8b:8e:66:03:21:37:05:9e:35:9a:2b:08:b8:27:a8:a1:41:
         cb:31:77:9f:c7:6f:eb:74:8e:e0:37:9e:d4:b0:68:3c:91:4c:
         69:50:49:63:7f:eb:f5:90:0a:2a:1d:6e:c5:44:09:7f:cf:84:
         88:03:7b:9c:ad:4c:19:8d:95:f9:e2:1f:4d:29:26:4b:fd:d6:
         f2:62:0f:cf:bd:8f:19:b9:0d:08:f3:7c:fb:f0:e5:a0:7a:82:
         37:f5:a9:2f:df:f7:15:c6:15:07:52:3e:06:83:0e:fc:f6:7c:
         ec:dc:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org