Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aqguNsAcQTV1NXCBz-JunanzOKg.roa
File:                     aqguNsAcQTV1NXCBz-JunanzOKg.roa (raw, json)
Hash identifier:          UmUSsJu2V7tTn8PxS17b0DKjFQTvV67a0pr4kLDzoJk=
Subject key identifier:   6A:A8:2E:36:C0:1C:41:35:75:35:70:81:CF:E2:6E:9D:A9:F3:38:A8
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018896CC5006A9F39563747999E1B8992832
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aqguNsAcQTV1NXCBz-JunanzOKg.roa
Signing time:             Wed 07 Jun 2023 16:59:12 +0000
ROA not before:           Wed 07 Jun 2023 16:59:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.200.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:96:cc:50:06:a9:f3:95:63:74:79:99:e1:b8:99:28:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun  7 16:59:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6aa82e36c01c413575357081cfe26e9da9f338a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:47:5a:c1:9b:fd:b0:7f:e5:18:ea:fd:0b:
                    12:09:c1:18:11:80:06:ff:8b:43:e7:7f:69:8e:96:
                    5c:98:2c:5c:71:8c:b2:74:ca:07:c2:10:0c:b6:01:
                    50:d9:ff:7f:dc:0b:05:44:a1:f0:f3:77:fe:d7:6a:
                    46:5d:98:78:67:b9:34:f0:c5:84:e9:97:4e:96:e2:
                    c2:25:e4:5c:82:77:60:83:7f:6d:20:73:29:0c:07:
                    75:f0:73:fd:e2:96:37:2a:2d:fa:01:77:2d:9b:fc:
                    b6:78:fa:3c:b5:16:ec:ba:a0:71:2a:d3:87:9f:ab:
                    b2:b5:53:11:42:5e:57:1b:59:6b:f2:5b:e6:3c:20:
                    0c:30:2f:18:06:24:db:1e:04:96:88:64:5c:0b:3c:
                    82:ac:d9:61:99:86:e7:d3:08:d3:02:9f:f3:5a:dc:
                    9f:c0:28:d5:4c:96:e5:2c:3c:e2:a4:79:20:da:c3:
                    81:93:5a:e2:8e:d3:c0:05:7b:fa:b8:fb:9e:94:8b:
                    91:71:33:94:6c:98:33:f0:80:83:8f:5f:ce:e9:11:
                    54:ca:7a:c8:fa:6e:b0:21:fc:a2:e8:8d:aa:41:bd:
                    95:a0:3c:6c:16:8e:d2:47:8a:23:3e:f4:de:d9:5a:
                    61:f1:70:0c:f2:62:59:1d:10:b9:4c:37:47:17:06:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A8:2E:36:C0:1C:41:35:75:35:70:81:CF:E2:6E:9D:A9:F3:38:A8
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aqguNsAcQTV1NXCBz-JunanzOKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/24
                  193.124.16.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.200.0-193.124.202.255
                  193.124.204.0/24
                  194.58.38.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.7.0/24
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.105.0/24
                  194.87.114.0/23
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.172.0/24
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.36.0/24
                  195.58.53.0-195.58.54.255
                  195.58.58.0/23
                  195.58.62.0/23
                  195.133.0.0/24
                  195.133.19.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.74.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         34:84:5b:20:67:63:bb:77:ca:98:00:ba:50:85:bd:b8:6b:cb:
         75:e7:5d:d0:a8:cd:59:dd:a6:7a:c6:7b:37:b5:f2:01:c8:23:
         79:e2:12:70:dc:a8:bf:85:6b:bf:68:60:8c:ef:22:3d:cf:4a:
         43:b0:d4:4b:8d:82:8b:45:22:25:db:bb:14:0c:df:e0:b0:3e:
         66:96:88:de:95:da:e0:af:66:24:bf:af:a2:a6:f7:da:d2:d1:
         a9:c7:74:c0:50:b7:78:c5:2e:b3:0b:c5:87:21:45:91:5d:ef:
         67:f1:f0:14:49:4c:06:e8:51:36:5b:3c:94:49:19:06:ba:fa:
         4f:e6:b5:e7:33:bb:26:7e:bc:09:fd:55:27:db:71:87:f1:8d:
         72:97:d7:fc:d9:26:2d:41:2d:c4:78:54:fd:97:ed:e5:ef:b6:
         40:57:34:12:96:bf:68:c4:e0:44:f1:22:ea:da:c2:87:a8:2e:
         1c:b7:a0:b5:e0:22:72:b9:95:db:0a:94:3b:e7:98:a8:a5:f2:
         97:b7:f2:97:65:ff:1e:5b:86:6f:a4:b4:13:f0:3d:42:b5:7e:
         58:ba:1b:68:29:a4:3f:21:e2:42:d7:a3:a6:7a:37:61:9a:21:
         a5:a0:34:cf:94:19:48:0e:9a:e3:e3:53:8c:67:28:ea:43:47:
         c8:1d:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org