Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fznmjqwfl2qF96YXrrfMFjhWn-Q.roa
File:                     Fznmjqwfl2qF96YXrrfMFjhWn-Q.roa (raw, json)
Hash identifier:          XaNDuwaJ2sCYqqV4SgiwJC6eIViLmTXZSiDfbWAVAss=
Subject key identifier:   17:39:E6:8E:AC:1F:97:6A:85:F7:A6:17:AE:B7:CC:16:38:56:9F:E4
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0187FA13F7B326FAA6F26C0EF07E5A7780DA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fznmjqwfl2qF96YXrrfMFjhWn-Q.roa
Signing time:             Mon 08 May 2023 06:37:05 +0000
ROA not before:           Mon 08 May 2023 06:37:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.6.0/24 maxlen: 24
                          194.87.10.0/24 maxlen: 24
                          194.87.17.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.25.0/24 maxlen: 24
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.44.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.51.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.67.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.77.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.76.0/24 maxlen: 24
                          195.133.79.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.84.0/24 maxlen: 24
                          195.133.91.0/24 maxlen: 24
                          195.133.90.0/24 maxlen: 24
                          195.133.20.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          194.85.251.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.40.0/23 maxlen: 23
                          195.133.64.0/22 maxlen: 22
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.40.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          195.58.51.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          194.58.56.0/23 maxlen: 23
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          193.124.226.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.36.0/24 maxlen: 24
                          193.124.35.0/24 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.209.0/24 maxlen: 24
                          194.87.221.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.87.227.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.170.0/23 maxlen: 23
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.87.255.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fa:13:f7:b3:26:fa:a6:f2:6c:0e:f0:7e:5a:77:80:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May  8 06:37:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1739e68eac1f976a85f7a617aeb7cc1638569fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:18:fd:fd:a2:83:3d:38:ae:94:d3:11:7d:
                    95:81:f9:4b:3e:5d:4e:e5:68:30:e5:93:e8:fe:75:
                    b8:74:9f:91:02:7c:6a:4e:62:36:0b:61:e4:ed:fb:
                    d5:f0:9b:6c:3a:82:c4:7e:89:61:6a:8d:8e:6c:56:
                    05:d1:5f:23:a5:3b:e4:30:30:44:06:1c:42:98:43:
                    3c:60:85:7d:65:12:8e:cd:76:74:7f:5b:53:a0:fb:
                    51:ac:76:b5:e8:9f:35:87:9e:34:5b:59:40:d7:f0:
                    bf:cd:01:ef:c0:b0:bc:db:15:e4:25:20:3b:3b:ab:
                    ab:de:3c:b3:ea:1d:0e:9a:76:2a:ec:67:c5:50:68:
                    c9:67:47:a6:4c:b6:1e:77:b7:c7:c6:c8:cd:c6:64:
                    b8:bc:00:4f:c2:b5:a8:68:4f:ea:ea:90:32:d7:2e:
                    3e:33:39:33:21:91:c6:f6:34:27:53:fe:36:f0:83:
                    6f:c6:a2:24:57:e8:7a:38:7d:0f:81:37:a6:be:a3:
                    e4:3b:81:f8:3f:3b:c2:35:f2:f4:e7:ff:7e:c5:2b:
                    43:8b:24:4e:41:bb:8a:30:af:13:5c:3f:3d:22:3c:
                    b5:80:2d:cc:65:16:8b:dc:e5:f7:50:ed:f4:e3:69:
                    d7:7a:1b:97:28:28:1b:33:07:07:2e:26:40:a4:a6:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:E6:8E:AC:1F:97:6A:85:F7:A6:17:AE:B7:CC:16:38:56:9F:E4
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fznmjqwfl2qF96YXrrfMFjhWn-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.6.0/24
                  193.124.8.0/23
                  193.124.16.0/24
                  193.124.35.0-193.124.36.255
                  193.124.44.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.201.0-193.124.202.255
                  193.124.204.0/24
                  193.124.226.0/24
                  194.58.40.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.56.0/23
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.85.251.0/24
                  194.87.1.0-194.87.3.255
                  194.87.6.0/23
                  194.87.10.0-194.87.12.255
                  194.87.16.0-194.87.18.255
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0-194.87.44.255
                  194.87.51.0/24
                  194.87.56.0/24
                  194.87.67.0/24
                  194.87.73.0/24
                  194.87.77.0-194.87.78.255
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.119.0/24
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.170.0-194.87.172.255
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.209.0/24
                  194.87.221.0-194.87.222.255
                  194.87.227.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.87.255.0/24
                  194.135.18.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.51.0/24
                  195.58.53.0-195.58.54.255
                  195.58.56.0/24
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0-195.133.20.255
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.40.0/23
                  195.133.64.0/22
                  195.133.74.0/24
                  195.133.76.0/24
                  195.133.79.0/24
                  195.133.84.0/23
                  195.133.90.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:bc:64:3b:e5:c9:f4:68:cc:b5:29:f7:79:2b:93:68:e4:
         e0:6c:77:46:29:80:43:26:ce:c7:07:68:b0:e9:51:2d:4f:44:
         85:0f:bf:d7:4e:19:6f:97:4d:2f:7c:c1:d5:22:45:63:20:fb:
         52:07:77:0b:ea:dc:f3:94:82:97:8c:8d:a7:bd:cf:07:00:d8:
         8b:93:ea:6c:b2:22:32:1b:c9:03:20:b3:9e:b1:8c:9d:12:5d:
         df:cc:2e:e6:4a:8e:32:3b:d1:a5:99:a0:1b:66:7d:85:bc:1b:
         91:9a:14:34:d5:50:7d:a7:dc:30:37:2b:99:20:82:db:0f:fa:
         1a:7e:3e:d9:8a:37:ae:43:f3:72:89:b1:eb:ef:3a:dd:0b:1f:
         31:f9:ee:70:bb:b5:1b:cb:65:47:cf:f1:2d:eb:db:9e:9c:1d:
         5c:cf:4d:5f:29:de:e3:1d:df:b6:db:0c:37:59:85:36:59:d0:
         9d:0e:0d:71:48:a6:49:bc:74:62:f9:47:79:68:54:56:56:fe:
         c2:c8:ee:9c:bf:4a:c7:72:ce:9c:63:a9:7b:7b:72:58:a6:45:
         cb:05:3a:34:be:e2:76:6a:c5:be:18:47:64:5d:58:92:15:67:
         25:41:76:56:15:15:c8:b6:45:bc:ff:c8:e6:61:b9:a5:dd:f4:
         01:bf:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org