Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UnNKxzucFpf8tdbshZfIW6B1scY.roa
File:                     UnNKxzucFpf8tdbshZfIW6B1scY.roa (raw, json)
Hash identifier:          hh1Pl7+2DHesxwCPzKQ6L8f7XP9YmG7extO1GkNWERU=
Subject key identifier:   52:73:4A:C7:3B:9C:16:97:FC:B5:D6:EC:85:97:C8:5B:A0:75:B1:C6
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01894F2106D932E00CC686D68E6CE528FE15
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UnNKxzucFpf8tdbshZfIW6B1scY.roa
Signing time:             Thu 13 Jul 2023 12:01:51 +0000
ROA not before:           Thu 13 Jul 2023 12:01:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.36.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.43.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.30.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.124.200.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Jul 2023 04:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4f:21:06:d9:32:e0:0c:c6:86:d6:8e:6c:e5:28:fe:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jul 13 12:01:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52734ac73b9c1697fcb5d6ec8597c85ba075b1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:55:39:9d:ba:74:2f:35:a2:0d:9c:80:5a:
                    f5:c8:a9:07:90:92:bb:6b:fb:6e:79:c6:bf:5a:d4:
                    55:26:0d:d6:dc:eb:a9:cb:d6:b1:35:44:dd:90:d4:
                    0d:8e:67:2b:84:34:0a:8d:97:40:e0:f6:c9:61:6c:
                    cc:d5:ed:91:c3:16:01:f4:85:9a:e5:22:2a:05:8d:
                    c1:aa:eb:7c:bd:1c:bf:44:78:3b:63:63:b9:e9:61:
                    82:77:40:dd:3c:d0:b4:7e:f8:27:c9:bf:1f:b0:47:
                    dd:10:c4:30:ba:9c:68:b9:d8:ec:4d:fe:8a:1b:b3:
                    6d:fc:c0:67:16:65:93:19:70:2a:c9:57:5a:37:2d:
                    99:59:34:6a:36:0c:12:f9:81:7c:28:da:3b:e1:a2:
                    ec:b7:45:dc:b3:c5:8f:a3:56:cd:ef:77:6f:b2:85:
                    c9:df:0d:09:0e:8e:3b:f3:c1:78:58:5c:17:5f:28:
                    09:e3:65:01:73:0c:0d:a0:29:d4:89:5e:9a:73:29:
                    3e:15:b7:4e:7f:a3:70:17:0f:ac:33:a1:93:d9:f3:
                    3b:ec:67:60:8e:84:e7:74:60:4c:2b:74:76:6b:f8:
                    ba:a7:ca:f9:7a:a0:ac:8f:2d:4d:a5:49:6e:df:21:
                    b0:bd:3b:3d:2a:eb:00:21:94:79:de:b1:44:36:dc:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:73:4A:C7:3B:9C:16:97:FC:B5:D6:EC:85:97:C8:5B:A0:75:B1:C6
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UnNKxzucFpf8tdbshZfIW6B1scY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.230.0/23
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0/24
                  192.124.191.0/24
                  193.124.16.0/24
                  193.124.80.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.200.0/24
                  193.124.204.0/24
                  194.58.47.0/24
                  194.58.223.0/24
                  194.87.1.0/24
                  194.87.3.0/24
                  194.87.7.0/24
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.23.0-194.87.27.255
                  194.87.36.0/24
                  194.87.43.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.114.0/23
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.134.0/23
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.172.0/24
                  194.87.177.0/24
                  194.87.179.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.204.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.135.24.0/24
                  195.58.54.0/24
                  195.58.58.0/23
                  195.58.62.0/23
                  195.133.0.0/24
                  195.133.30.0/24
                  195.133.35.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         55:96:c8:88:4e:07:45:bc:8d:03:4a:d5:e9:d8:20:cd:bc:15:
         de:d2:81:b0:c1:2d:ce:a4:ec:3a:bc:4e:56:88:fb:a0:ca:2f:
         dc:7b:9d:c9:df:e6:36:35:f6:8d:11:35:39:4b:86:db:43:bb:
         ae:84:d1:64:c6:83:23:bc:c6:94:86:62:05:d1:5f:71:35:b1:
         47:c8:2c:8a:c9:4b:85:7c:dd:94:ee:ef:4d:48:4b:c3:b8:a2:
         e8:9d:c2:a5:71:36:65:15:57:6e:d8:b2:9d:5c:29:a6:57:c2:
         8c:32:e2:0f:9f:ba:7b:8f:0e:cb:02:58:88:fd:eb:b7:28:86:
         7b:89:d0:25:78:38:6f:a0:56:8d:96:94:3a:aa:c0:09:dc:5d:
         e2:eb:e1:cd:25:6a:bf:da:25:aa:a3:25:f8:68:28:46:de:7e:
         fb:78:df:6c:99:f5:64:dd:8e:a4:cf:61:46:69:b0:79:04:1c:
         e7:33:85:37:82:78:99:86:f5:32:0c:b2:17:cb:2f:3b:87:5a:
         32:11:08:e4:d0:2a:60:43:86:0c:2c:6b:03:05:03:a5:f3:40:
         74:36:15:5f:c7:34:31:06:c6:68:26:4c:cb:7e:f2:8a:67:fb:
         1b:95:54:99:a1:4e:f4:f7:e9:10:d3:29:b4:fb:72:c3:9b:8d:
         3c:30:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org