Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UflgUBZD1PhxwB-B8Bv0JF0DAs4.roa
File:                     UflgUBZD1PhxwB-B8Bv0JF0DAs4.roa (raw, json)
Hash identifier:          w3x9cklyOkxx4Q6KcfvJefremPE7pJ3s4GMYaXqACAM=
Subject key identifier:   51:F9:60:50:16:43:D4:F8:71:C0:1F:81:F0:1B:F4:24:5D:03:02:CE
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01886BFDA4795B5967146A774C5EF6553160
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UflgUBZD1PhxwB-B8Bv0JF0DAs4.roa
Signing time:             Tue 30 May 2023 09:29:24 +0000
ROA not before:           Tue 30 May 2023 09:29:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.84.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.41.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.200.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.209.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6b:fd:a4:79:5b:59:67:14:6a:77:4c:5e:f6:55:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May 30 09:29:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51f960501643d4f871c01f81f01bf4245d0302ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:dd:fe:3b:e1:7d:01:94:57:8e:62:5f:69:
                    22:57:a7:2a:07:b6:59:61:b6:d1:98:59:10:2f:98:
                    9e:2e:e2:33:90:7c:d2:51:b8:bd:17:f4:47:46:f2:
                    11:b4:f5:40:c2:cc:1d:b8:95:f5:80:85:7c:45:7b:
                    20:bd:10:ff:34:32:50:ee:0a:5d:9f:e1:f8:08:9f:
                    7b:c0:0b:9d:31:4d:18:1e:a4:2b:01:c6:6a:2e:2b:
                    d9:66:60:07:94:c4:15:77:c1:03:d6:21:c4:c1:2a:
                    ab:b9:16:9b:55:85:6a:21:7a:cd:8e:d5:31:4d:61:
                    e5:e2:b3:4c:c2:74:96:b9:ec:c6:60:3e:d4:e5:19:
                    2f:86:97:31:b0:82:0f:35:b7:43:54:4f:63:b8:13:
                    51:a1:64:84:8d:16:e6:64:62:97:a6:e6:d2:a2:8b:
                    8f:59:fc:8f:37:a4:af:99:47:03:d6:dc:53:be:b7:
                    31:4f:71:2f:dd:c3:33:ea:97:8d:c8:fb:39:cc:07:
                    28:fb:7c:ed:4c:67:80:52:df:5a:51:57:6d:d8:e4:
                    40:55:e6:c1:78:a2:14:09:23:1e:ee:37:44:d3:97:
                    8c:d2:78:9c:89:d5:47:ce:aa:5a:4a:16:e7:1a:fb:
                    0b:ff:d7:36:11:77:e8:11:ac:89:94:8d:72:d3:8d:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:60:50:16:43:D4:F8:71:C0:1F:81:F0:1B:F4:24:5D:03:02:CE
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UflgUBZD1PhxwB-B8Bv0JF0DAs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/24
                  193.124.16.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.200.0-193.124.202.255
                  193.124.204.0/24
                  194.58.38.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.7.0/24
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.119.0/24
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.172.0/24
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.209.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.53.0-195.58.54.255
                  195.58.56.0/24
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.41.0/24
                  195.133.74.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         35:56:d7:29:b3:43:da:78:67:55:98:f9:94:2f:38:a0:b4:3d:
         3a:42:80:cf:e9:16:0b:3d:4a:13:68:a9:6c:25:61:fa:93:17:
         60:54:c8:aa:84:70:6f:e6:dc:68:e0:ee:65:90:7f:13:61:54:
         11:97:ee:4b:82:be:26:a4:1c:0c:67:e6:7f:ce:e3:3d:aa:93:
         36:da:81:de:ee:ca:30:a8:52:0e:9f:a2:51:6e:4d:e0:a5:12:
         41:01:57:11:3b:d4:b5:60:1f:60:be:22:b3:5c:63:9b:39:40:
         b0:1b:d8:25:04:ef:90:01:b2:85:54:e2:81:a0:0d:08:56:10:
         6e:6a:82:57:a6:9f:6e:43:e6:7b:39:33:10:6d:1e:80:70:a6:
         b5:d1:28:d9:db:45:59:ce:83:6d:95:51:1e:a8:22:ae:8e:17:
         43:0c:c3:f4:6a:c5:a7:2e:cd:70:fb:fa:40:be:03:89:84:90:
         8a:83:51:3a:0f:2e:e9:d9:1b:42:d2:a7:78:b5:0f:f8:b0:48:
         2c:eb:08:bc:bb:0d:c6:d6:4f:7a:00:ee:ac:b3:24:ec:16:49:
         61:f4:c2:fd:82:53:ba:5f:93:a8:a5:65:ec:9a:af:38:1f:12:
         20:95:df:a3:40:dd:15:44:ff:c8:22:b4:6b:28:b0:11:c6:d5:
         a9:d2:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org