Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9eI36A0Qzm7roIPCNa5d4XRHJeA.roa
File:                     9eI36A0Qzm7roIPCNa5d4XRHJeA.roa (raw, json)
Hash identifier:          NRAV+UlNr/TfHBpUlS+6GSFj3bIo7X4tjE2nNavyPrQ=
Subject key identifier:   F5:E2:37:E8:0D:10:CE:6E:EB:A0:83:C2:35:AE:5D:E1:74:47:25:E0
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018803E61219550800E157003938E310D69A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9eI36A0Qzm7roIPCNa5d4XRHJeA.roa
Signing time:             Wed 10 May 2023 04:23:09 +0000
ROA not before:           Wed 10 May 2023 04:23:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.6.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.25.0/24 maxlen: 24
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.44.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.51.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.67.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.79.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.84.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.41.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          195.58.51.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          193.124.226.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.36.0/24 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.209.0/24 maxlen: 24
                          194.87.221.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.87.227.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.170.0/23 maxlen: 23
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:03:e6:12:19:55:08:00:e1:57:00:39:38:e3:10:d6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May 10 04:23:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5e237e80d10ce6eeba083c235ae5de1744725e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:11:bc:80:db:f7:1b:5b:df:09:8b:f2:b3:
                    f7:11:52:e8:2f:58:e8:8d:7e:20:03:a2:a8:f8:5e:
                    c4:36:99:e0:35:4a:4b:95:de:5f:c6:97:14:31:0a:
                    80:27:a9:cd:63:1e:46:0b:0d:20:eb:2e:65:a1:d5:
                    e9:86:3a:2f:25:9b:3d:1f:86:3f:2a:4c:df:5c:00:
                    34:96:cd:48:6a:2a:56:f9:7e:6d:63:b8:bb:da:cc:
                    d1:bb:69:2c:a7:0d:2c:b0:9b:cb:0a:e8:16:5c:7a:
                    e7:86:73:9e:15:36:fe:11:6b:a8:f9:b0:ef:d5:96:
                    52:bb:9d:b7:57:f0:73:e3:ee:85:d5:75:81:81:6d:
                    14:5f:73:4a:16:85:9d:04:df:f0:35:5a:af:3c:51:
                    d2:cf:86:cc:7a:2b:05:9e:40:3a:35:1d:41:0b:68:
                    b4:fb:fe:32:06:2f:d0:1c:1f:cf:be:75:e7:0a:18:
                    bb:e5:c8:ea:db:fa:6b:60:5e:a9:71:52:81:93:8f:
                    3f:3a:b7:9d:69:69:23:e2:4d:52:53:a9:3e:b7:f4:
                    aa:1a:2a:52:c2:59:09:82:63:78:ab:a0:8e:ff:96:
                    20:fa:c8:f7:62:b0:57:ee:c9:9e:da:dd:cb:ab:0a:
                    89:76:d2:c9:2e:6e:6f:5c:41:ae:24:7c:02:fc:ed:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E2:37:E8:0D:10:CE:6E:EB:A0:83:C2:35:AE:5D:E1:74:47:25:E0
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9eI36A0Qzm7roIPCNa5d4XRHJeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/23
                  193.124.16.0/24
                  193.124.36.0/24
                  193.124.44.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.201.0-193.124.202.255
                  193.124.204.0/24
                  193.124.226.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.6.0/23
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0-194.87.44.255
                  194.87.51.0/24
                  194.87.56.0/24
                  194.87.67.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.119.0/24
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.170.0-194.87.172.255
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.209.0/24
                  194.87.221.0-194.87.222.255
                  194.87.227.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.18.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.51.0/24
                  195.58.53.0-195.58.54.255
                  195.58.56.0/24
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.41.0/24
                  195.133.74.0/24
                  195.133.79.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         80:73:1c:9b:fd:e8:ca:aa:d6:e5:73:f0:2b:0b:fd:b3:27:95:
         08:00:c8:64:9e:56:d5:6c:d2:05:ee:58:64:29:bd:79:7c:fe:
         8d:f2:a2:35:63:ce:96:7b:8d:57:c4:0d:3d:66:e1:07:e3:9d:
         3e:2f:db:29:24:ed:c3:03:64:29:16:fb:4b:0b:a2:0c:da:84:
         7d:ba:53:31:44:c9:0f:7c:f4:37:6d:ae:ec:49:bb:e0:fc:eb:
         4a:5e:b2:22:7c:31:62:5b:c5:a1:88:25:11:ef:47:4a:ef:0a:
         36:2b:0c:36:25:a9:2a:67:a1:27:97:27:f7:d2:d8:89:f2:e2:
         c2:00:36:8c:74:60:a8:4f:c6:d2:3d:d8:13:a5:d3:47:54:96:
         cf:f8:8e:c4:16:67:2a:a6:2b:5f:e6:68:73:65:d4:7e:1b:b9:
         fc:f1:9e:bd:88:5a:0c:59:e1:ba:82:ee:65:ba:82:bf:6c:ce:
         ed:1b:f7:b6:88:83:20:24:81:bf:01:99:5a:02:09:0e:90:9f:
         0b:c4:2f:ab:63:be:41:2a:1b:da:bf:04:ba:21:48:f3:5e:4a:
         4d:cc:b4:24:c7:63:69:c4:19:1e:4b:c6:b6:2c:26:bd:cf:87:
         e3:77:4c:3d:98:71:8a:c6:08:60:94:0e:ee:86:cc:96:e9:4f:
         d9:fd:9e:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org