Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EwMmKdSmEEoOXsSXxQCjz2kHKfM.roa
File:                     EwMmKdSmEEoOXsSXxQCjz2kHKfM.roa (raw, json)
Hash identifier:          KAsNzUxqZLTdgcEwAzovUNo/xGwO8IIZLHy253aTJw4=
Subject key identifier:   13:03:26:29:D4:A6:10:4A:0E:5E:C4:97:C5:00:A3:CF:69:07:29:F3
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0188A9F8747E431AC13B1642F290E4DAEF23
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EwMmKdSmEEoOXsSXxQCjz2kHKfM.roa
Signing time:             Sun 11 Jun 2023 10:20:12 +0000
ROA not before:           Sun 11 Jun 2023 10:20:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          212.193.15.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.200.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a9:f8:74:7e:43:1a:c1:3b:16:42:f2:90:e4:da:ef:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun 11 10:20:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13032629d4a6104a0e5ec497c500a3cf690729f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:c9:d5:5d:8d:0f:63:82:aa:31:a5:45:8e:
                    27:b1:87:ad:fa:13:87:20:58:3a:17:26:0b:3c:1b:
                    ba:26:2d:58:d1:23:72:51:68:79:9b:17:e2:46:37:
                    95:83:09:d1:d1:30:ab:4f:06:5a:bb:68:cc:4f:f8:
                    ea:f2:21:46:5f:34:96:7b:b3:12:26:cf:99:e0:73:
                    fc:62:96:27:aa:3c:8d:a0:0a:29:8f:c1:d0:6b:c1:
                    cf:8b:88:d5:6e:37:90:3c:46:73:ab:43:75:29:d2:
                    d1:c1:71:6b:a1:09:0e:fc:96:7d:b4:3f:f3:dd:e3:
                    a4:15:f5:3a:85:30:65:fc:b6:fc:1e:40:f4:9e:77:
                    b2:a2:8d:7d:c9:c8:39:d1:34:14:1d:c0:c7:ce:d0:
                    58:be:34:b7:16:d1:fa:c0:1b:99:53:85:4d:67:12:
                    ec:8b:64:e0:35:e8:08:a8:06:76:ae:e8:db:aa:d8:
                    3b:d7:20:58:d4:22:87:9c:2a:84:d3:66:03:ae:5d:
                    01:c1:a5:60:16:7b:51:9b:71:cc:bc:9d:fe:c4:4e:
                    c0:ca:62:e4:88:8c:12:f4:cc:75:5a:c0:00:06:38:
                    40:cf:56:c3:63:72:24:8b:d3:14:6e:4c:2d:33:51:
                    d7:5f:6a:4e:8a:df:92:3a:e1:33:dd:47:b6:66:83:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:03:26:29:D4:A6:10:4A:0E:5E:C4:97:C5:00:A3:CF:69:07:29:F3
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EwMmKdSmEEoOXsSXxQCjz2kHKfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/24
                  193.124.16.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.200.0-193.124.202.255
                  193.124.204.0/24
                  194.58.38.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.7.0/24
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.105.0/24
                  194.87.114.0/23
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.172.0/24
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.36.0/24
                  195.58.53.0-195.58.54.255
                  195.58.58.0/23
                  195.58.62.0/23
                  195.133.0.0/24
                  195.133.19.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.74.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255
                  212.193.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:13:c1:6f:d7:5b:d2:24:5c:a9:8e:3b:86:09:e3:0a:78:0d:
         f5:ab:c3:82:cb:95:b3:7f:4c:e0:4f:10:f3:d9:d1:f0:f3:6f:
         0e:26:49:e1:c0:c2:e3:0f:87:e7:b7:e0:02:af:e2:55:7c:61:
         f6:63:f5:69:61:ce:2b:bb:32:e3:c4:2e:54:76:cf:3b:7a:a9:
         d5:66:27:ab:2f:4e:d1:09:4e:62:39:31:15:8a:e3:81:a4:ee:
         2f:48:1c:d7:43:87:d1:df:7e:7d:5d:a3:5c:84:6b:2e:f2:fc:
         ff:85:2d:db:c6:b6:55:79:f5:a9:a8:ef:9e:42:b8:ef:41:a4:
         9b:46:6e:40:c0:66:49:a8:c0:7c:18:b4:4a:dd:36:6c:75:e3:
         f7:de:c9:fd:71:82:65:14:33:bb:72:5a:7f:90:5f:33:76:cf:
         31:0a:4b:ea:e1:c3:d3:05:73:10:74:48:b9:47:84:8c:50:a9:
         26:80:d2:6d:01:f1:a7:27:92:a8:b4:1e:0c:28:58:09:ae:a5:
         48:11:85:54:53:a0:5d:eb:1d:2b:e1:4f:a6:2f:95:49:6e:34:
         8b:50:5f:12:9a:15:1f:4b:03:64:8a:4b:6f:8a:e1:41:c8:4f:
         68:a2:d9:49:d3:83:3d:6c:bb:50:f8:13:7d:b4:8e:92:92:42:
         3c:46:17:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org