Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T9uDeWNsXrelYB-UziVAHP2leHo.roa
File:                     T9uDeWNsXrelYB-UziVAHP2leHo.roa (raw, json)
Hash identifier:          wnJCpqFBJSwD5ThADE3UYrGyQ1o2sEJccYupV/btK8A=
Subject key identifier:   4F:DB:83:79:63:6C:5E:B7:A5:60:1F:94:CE:25:40:1C:FD:A5:78:7A
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01888EE4FFEDB3FED2BF5774C6F92F4971A9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T9uDeWNsXrelYB-UziVAHP2leHo.roa
Signing time:             Tue 06 Jun 2023 04:09:12 +0000
ROA not before:           Tue 06 Jun 2023 04:09:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.200.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.46.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8e:e4:ff:ed:b3:fe:d2:bf:57:74:c6:f9:2f:49:71:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun  6 04:09:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4fdb8379636c5eb7a5601f94ce25401cfda5787a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:6b:f7:4c:42:44:ff:19:44:97:25:40:42:
                    3c:9b:c8:16:6a:37:99:b5:8a:6d:2b:3a:47:8b:14:
                    46:e7:23:a9:75:94:e3:65:6b:84:3b:e5:1e:9c:6c:
                    a2:22:93:e7:58:4b:d5:6a:af:57:0d:f7:28:27:42:
                    fe:56:26:06:b8:be:e8:b2:4d:72:84:43:bf:20:b4:
                    23:f7:2e:36:b4:1f:86:77:2c:03:b3:3a:b6:01:ea:
                    aa:b4:c3:14:dc:40:62:a1:56:88:d3:35:5d:10:b3:
                    ed:b3:f6:15:1c:13:24:fb:9f:c5:0a:ff:ce:6c:e5:
                    90:d1:55:87:2e:b4:6a:2e:41:6e:7d:13:a7:4b:c3:
                    6e:c8:fa:80:f8:fd:9d:a7:a2:0b:26:c8:7e:9a:cf:
                    56:17:10:ad:d6:b8:21:76:a1:bb:66:78:b5:62:34:
                    43:04:e5:60:1c:3a:c7:aa:37:f6:77:95:45:32:63:
                    87:7e:e5:13:b9:ca:d2:4e:67:a2:a5:87:87:28:61:
                    e0:52:a6:fc:3f:a9:7a:c4:30:1d:71:16:4b:c5:2f:
                    1f:63:68:ce:3f:27:c5:8c:59:1c:b7:a3:75:7a:d7:
                    a6:30:cb:11:ca:56:c4:d1:aa:5a:50:80:99:40:0a:
                    4d:e8:98:ef:bd:09:1c:5d:21:a4:70:ae:33:80:40:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DB:83:79:63:6C:5E:B7:A5:60:1F:94:CE:25:40:1C:FD:A5:78:7A
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T9uDeWNsXrelYB-UziVAHP2leHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/24
                  193.124.16.0/24
                  193.124.46.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.200.0-193.124.202.255
                  193.124.204.0/24
                  194.58.38.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.7.0/24
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.172.0/24
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.36.0/24
                  195.58.53.0-195.58.54.255
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.74.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         68:60:6f:6b:41:a2:20:5f:65:ff:f4:87:a0:ca:82:2a:b0:35:
         be:78:db:9d:40:7d:02:ae:43:14:c3:4b:15:82:e2:bc:c8:3a:
         87:94:31:cd:e3:a0:24:f0:c0:ac:d6:b5:42:82:ec:43:54:b2:
         64:e0:c6:dc:13:b5:dc:e4:fd:66:73:6f:ed:b5:6b:10:01:e6:
         1e:29:60:f9:e6:7f:e3:aa:ee:68:fe:03:d0:07:83:e0:c4:57:
         ae:83:2e:67:31:07:39:0a:d0:49:ff:bd:d1:ca:53:0d:b8:ce:
         f6:31:36:e0:9e:6c:fe:aa:64:11:a2:34:57:fd:67:8b:0f:41:
         64:93:0f:56:62:14:9f:78:82:21:36:e0:db:04:af:87:93:63:
         f3:5b:cc:b4:8f:9f:f5:2d:18:50:b0:1e:d1:b4:29:cc:b8:c9:
         cc:9b:c0:75:d9:42:89:3f:df:69:c9:8c:a0:a2:4c:77:58:e0:
         2f:d4:1e:ec:9b:f9:4e:41:86:2a:71:6c:5e:73:69:e4:a7:4f:
         5b:dd:fc:b2:9d:eb:ab:2d:ef:f3:78:a0:6e:95:42:0a:33:6c:
         34:a3:b4:14:7f:5f:72:ea:07:f6:53:b2:98:07:4c:ed:66:c5:
         2c:5e:b4:f2:70:a5:9f:8c:d9:39:9f:73:68:51:3e:cb:bc:a4:
         c5:c9:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org