Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N3rONbteGiUxa_UmbamLpGyxsUQ.roa
File:                     N3rONbteGiUxa_UmbamLpGyxsUQ.roa (raw, json)
Hash identifier:          h22DXKT8wmCDlJGZ1McU927ZglH9mJVdQnrgEa3D70Y=
Subject key identifier:   37:7A:CE:35:BB:5E:1A:25:31:6B:F5:26:6D:A9:8B:A4:6C:B1:B1:44
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0187FE98587E6060FC8D6113A8619A6B2EFA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N3rONbteGiUxa_UmbamLpGyxsUQ.roa
Signing time:             Tue 09 May 2023 03:40:09 +0000
ROA not before:           Tue 09 May 2023 03:40:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.6.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.25.0/24 maxlen: 24
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.44.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.51.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.67.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.77.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.79.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.84.0/24 maxlen: 24
                          195.133.20.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.40.0/23 maxlen: 23
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          195.58.51.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          193.124.226.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.36.0/24 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.209.0/24 maxlen: 24
                          194.87.221.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.87.227.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.170.0/23 maxlen: 23
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fe:98:58:7e:60:60:fc:8d:61:13:a8:61:9a:6b:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May  9 03:40:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=377ace35bb5e1a25316bf5266da98ba46cb1b144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:79:7d:47:34:54:7a:fb:cc:34:a7:42:10:
                    98:bf:9e:db:20:c5:9b:91:09:ae:b6:11:14:14:ee:
                    7a:62:0f:37:54:ef:66:ae:42:11:55:c5:6c:46:f4:
                    e4:0a:8f:18:d7:2e:fd:e8:33:ae:cb:8a:f9:ec:50:
                    bf:6f:31:97:f9:33:6d:5c:38:dd:b9:30:f8:46:4b:
                    11:fc:f2:e7:00:6b:d4:85:50:6c:e4:db:37:a0:77:
                    27:0a:4b:ff:04:ed:ac:79:8f:1d:d1:fe:7d:aa:f9:
                    2a:13:6b:9d:56:9e:5e:1f:ee:25:82:0e:20:27:86:
                    b9:13:ba:b7:21:3e:56:66:83:ca:e7:66:f6:bd:8b:
                    05:46:79:1c:c1:f9:80:cb:9b:0e:ea:7f:cf:0a:6f:
                    ff:53:74:a1:2e:ac:3c:3b:36:83:f1:12:f8:f6:06:
                    a0:e9:97:38:95:c3:1f:df:57:ee:23:29:e8:0f:df:
                    cf:20:f3:1b:ee:46:22:0c:01:10:58:bc:59:29:11:
                    46:b9:5f:5b:2a:63:76:49:e8:b8:0e:cd:24:2a:e0:
                    24:c9:eb:70:72:6b:fa:59:fb:3f:da:f6:f3:30:e9:
                    97:98:ef:94:a6:6d:7e:b1:db:8c:b7:63:4d:5a:a9:
                    4b:a2:42:72:cd:f7:a9:6f:7e:eb:ce:c8:8f:16:8b:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7A:CE:35:BB:5E:1A:25:31:6B:F5:26:6D:A9:8B:A4:6C:B1:B1:44
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N3rONbteGiUxa_UmbamLpGyxsUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/23
                  193.124.16.0/24
                  193.124.36.0/24
                  193.124.44.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.201.0-193.124.202.255
                  193.124.204.0/24
                  193.124.226.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.6.0/23
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0-194.87.44.255
                  194.87.51.0/24
                  194.87.56.0/24
                  194.87.67.0/24
                  194.87.73.0/24
                  194.87.77.0-194.87.78.255
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.119.0/24
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.170.0-194.87.172.255
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.209.0/24
                  194.87.221.0-194.87.222.255
                  194.87.227.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.18.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.51.0/24
                  195.58.53.0-195.58.54.255
                  195.58.56.0/24
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0-195.133.20.255
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.40.0/23
                  195.133.74.0/24
                  195.133.79.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         00:fa:cc:f9:eb:32:14:17:81:a6:a6:9e:75:1b:9a:ab:f4:3b:
         60:3a:77:69:18:6a:db:d3:ca:41:bf:d1:70:b0:2f:23:c2:ec:
         ad:84:40:af:42:20:17:94:09:dc:5f:8c:21:c1:51:36:41:25:
         76:95:22:b9:06:a6:1a:cb:6d:65:3b:9b:46:5a:58:d2:70:c0:
         c5:90:32:1a:4b:db:53:29:0a:be:96:53:b6:91:be:ac:35:95:
         61:0f:47:8f:8e:15:6d:03:d0:e2:94:ad:c0:8f:76:bb:f7:1d:
         ad:ae:18:cd:f9:08:56:ae:c8:b2:77:71:84:fb:0f:5b:62:2d:
         2d:d8:3a:1f:08:be:02:78:7a:a3:06:42:42:a8:64:e5:16:1a:
         f0:02:66:0d:b3:06:e9:b0:80:32:53:d2:fc:23:33:54:64:bf:
         be:89:69:4e:9d:db:a6:29:6c:80:3b:b4:21:23:52:3b:44:07:
         d9:62:b7:e9:2d:01:57:b6:10:62:c4:23:0c:45:07:82:0c:03:
         0e:cc:f4:14:76:38:9d:53:dd:4e:6d:1a:b9:33:79:d3:29:ba:
         ef:1a:92:27:f8:2e:7e:25:df:ec:92:7d:8d:44:85:f0:a9:77:
         78:c7:30:c7:09:62:b3:f0:ec:77:e5:e5:f6:bf:a3:3c:1c:a4:
         a8:80:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-ams.rpki-client.org