Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k805U-v0n_thpSPpMTt6g8fy_ho.roa
File:                     k805U-v0n_thpSPpMTt6g8fy_ho.roa (raw, json)
Hash identifier:          MI4lF7ascVdB827BocFLKaVHkBBSujhOh3tWGmRSEA0=
Subject key identifier:   93:CD:39:53:EB:F4:9F:FB:61:A5:23:E9:31:3B:7A:83:C7:F2:FE:1A
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0186929C51322E046C8180771B97C3EF58F2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k805U-v0n_thpSPpMTt6g8fy_ho.roa
Signing time:             Mon 27 Feb 2023 11:22:43 +0000
ROA not before:           Mon 27 Feb 2023 11:22:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        193.124.3.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          62.76.233.0/24 maxlen: 24
                          194.87.4.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.42.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.39.0/24 maxlen: 24
                          194.58.38.0/23 maxlen: 23
                          194.58.47.0/24 maxlen: 24
                          195.58.50.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          194.58.67.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.170.0/23 maxlen: 23
                          192.124.180.0/22 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.182.0/23 maxlen: 23
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.178.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.124.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:9c:51:32:2e:04:6c:81:80:77:1b:97:c3:ef:58:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Feb 27 11:22:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93cd3953ebf49ffb61a523e9313b7a83c7f2fe1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:50:ad:bf:38:15:7d:22:3f:fd:9f:c1:f0:
                    77:9b:3c:94:04:fa:c2:c7:68:85:51:75:49:84:6f:
                    86:6e:cc:b5:37:87:5e:45:79:d2:c2:89:a7:c6:06:
                    d1:e3:ea:ff:af:3e:5a:98:44:50:9c:5e:de:00:a6:
                    04:bd:da:6b:f5:56:e4:66:fb:33:87:3e:a9:9a:53:
                    e6:2f:d6:03:a5:77:a2:ab:91:09:d1:0b:08:5a:bf:
                    b8:96:a3:23:13:20:6c:47:f7:6c:e3:d3:9f:36:06:
                    68:31:78:ee:da:68:50:a5:42:35:7d:19:07:bb:5e:
                    2a:ab:1e:a1:15:80:1e:a4:88:69:6c:46:cd:0f:3b:
                    49:b6:98:4d:d8:f6:49:49:c8:e6:02:04:9e:8c:07:
                    f8:62:4c:a6:b9:33:82:db:82:a3:24:c9:e1:5c:b6:
                    6a:bc:98:27:2a:4b:8f:b6:4e:82:f8:d8:3e:54:1c:
                    2e:44:e7:dd:87:c6:7c:e1:59:86:a2:de:e7:e9:64:
                    fc:62:99:70:cb:4c:73:78:0f:dc:b4:5f:41:24:d4:
                    d7:a0:8b:d1:ab:c2:5e:25:0b:be:7f:92:6a:d2:68:
                    1a:fc:91:dd:a0:ba:27:93:55:fe:1f:0f:82:d5:d0:
                    94:fe:29:54:29:71:73:71:63:f9:ab:80:6d:ea:16:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:39:53:EB:F4:9F:FB:61:A5:23:E9:31:3B:7A:83:C7:F2:FE:1A
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k805U-v0n_thpSPpMTt6g8fy_ho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  62.76.233.0/24
                  192.124.178.0/24
                  192.124.180.0/22
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.9.0/24
                  193.124.16.0/24
                  193.124.44.0/24
                  193.124.80.0/24
                  193.124.93.0/24
                  193.124.201.0/24
                  193.124.207.0/24
                  194.58.38.0/23
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.67.0/24
                  194.87.1.0/24
                  194.87.3.0-194.87.4.255
                  194.87.7.0/24
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.24.0/22
                  194.87.36.0/23
                  194.87.42.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.83.0/24
                  194.87.104.0/24
                  194.87.114.0/23
                  194.87.122.0/24
                  194.87.130.0/23
                  194.87.149.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.170.0-194.87.172.255
                  194.87.176.0/22
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.135.18.0/24
                  194.135.23.0/24
                  195.58.35.0-195.58.36.255
                  195.58.50.0/24
                  195.58.54.0/24
                  195.58.56.0/24
                  195.133.0.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.35.0/24
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:5f:b7:e2:13:d3:83:0c:fc:6e:c7:8c:df:b1:ee:d5:c3:
         2e:da:e5:0a:1d:4b:65:45:87:6e:d1:cd:d9:01:36:64:3b:d8:
         14:4a:af:af:7d:49:ec:97:46:e7:73:7a:ef:77:cd:85:40:22:
         34:67:e8:06:55:b7:a4:7c:33:d4:eb:cd:cf:b0:df:8e:70:52:
         d7:46:bb:31:93:3f:34:b0:16:ea:2b:d8:6a:cd:e9:9e:b9:5c:
         08:e8:46:68:9d:7a:a2:45:31:91:99:bf:41:76:7b:5a:37:08:
         5c:86:af:56:f4:4a:c1:ad:d6:27:77:57:01:7b:d0:b5:ed:5b:
         59:3d:4a:53:73:f7:22:18:86:e6:17:e1:ec:c3:8c:a2:db:91:
         20:dd:03:df:2a:1a:f6:c9:26:37:9c:31:99:f1:1a:8a:12:9b:
         09:9b:64:ba:cb:e3:a6:15:28:2d:43:d9:22:01:7a:8a:25:bf:
         ff:e5:6f:da:fa:26:31:80:0f:f2:d6:e5:e3:1f:fb:40:9e:7e:
         98:b4:05:03:d7:72:f3:b9:e5:d6:c8:88:d5:8f:26:8d:d7:16:
         21:42:d7:74:ae:bd:63:dd:d7:55:55:f3:8f:85:76:24:50:0e:
         f8:98:09:34:91:93:94:61:07:7a:04:28:e3:4d:57:e8:ae:e6:
         37:0f:75:cc
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgISAYaSnFEyLgRsgYB3G5fD71jyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMjI3MTEyMjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2NkMzk1M2ViZjQ5ZmZiNjFhNTIzZTkzMTNiN2E4M2M3ZjJmZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5Qrb84FX0iP/2fwfB3mzyUBPrC
x2iFUXVJhG+Gbsy1N4deRXnSwomnxgbR4+r/rz5amERQnF7eAKYEvdpr9VbkZvsz
hz6pmlPmL9YDpXeiq5EJ0QsIWr+4lqMjEyBsR/ds49OfNgZoMXju2mhQpUI1fRkH
u14qqx6hFYAepIhpbEbNDztJtphN2PZJScjmAgSejAf4YkymuTOC24KjJMnhXLZq
vJgnKkuPtk6C+Ng+VBwuROfdh8Z84VmGot7n6WT8Yplwy0xzeA/ctF9BJNTXoIvR
q8JeJQu+f5Jq0mga/JHdoLonk1X+Hw+C1dCU/ilUKXFzcWP5q4Bt6hatHQIDAQAB
o4IDiTCCA4UwHQYDVR0OBBYEFJPNOVPr9J/7YaUj6TE7eoPH8v4aMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvazgwNVUtdjBuX3RocFNQcE1UdDZnOGZ5X2hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBnQYIKwYBBQUHAQcBAf8EggGMMIIBiDCCAYQEAgABMIIB
fAMEAD5M4QMEAT5M5gMEAD5M6QMEAMB8sgMEAsB8tAMEAMF8AwMEAMF8BgMEAMF8
CQMEAMF8EAMEAMF8LAMEAMF8UAMEAMF8XQMEAMF8yQMEAMF8zwMEAcI6JgMEAMI6
LwMEAMI6OwMEAMI6QwMEAMJXATAMAwQAwlcDAwQAwlcEAwQAwlcHMAwDBADCVwsD
BADCVwwDBADCVxADBALCVxgDBAHCVyQDBADCVyoDBADCVzgDBADCV0kDBADCV1MD
BADCV2gDBAHCV3IDBADCV3oDBAHCV4IDBADCV5UDBADCV6YDBADCV6gwDAMEAcJX
qgMEAMJXrAMEAsJXsAMEAMJXtgMEAMJXuwMEAMJXvgMEAMJXyAMEAMJXygMEAMJX
3gMEAMJX8AMEAMKHEgMEAMKHFzAMAwQAwzojAwQAwzokAwQAwzoyAwQAwzo2AwQA
wzo4AwQAw4UAAwQAw4UaAwQAw4UeAwQAw4UjAwQBw4XCAwQA1MABAwQA1MAKMA0G
CSqGSIb3DQEBCwUAA4IBAQBwK1+34hPTgwz8bseM37Hu1cMu2uUKHUtlRYdu0c3Z
ATZkO9gUSq+vfUnsl0bnc3rvd82FQCI0Z+gGVbekfDPU683PsN+OcFLXRrsxkz80
sBbqK9hqzemeuVwI6EZonXqiRTGRmb9BdntaNwhchq9W9ErBrdYnd1cBe9C17VtZ
PUpTc/ciGIbmF+Hsw4yi25Eg3QPfKhr2ySY3nDGZ8RqKEpsJm2S6y+OmFSgtQ9ki
AXqKJb//5W/a+iYxgA/y1uXjH/tAnn6YtAUD13LzueXWyIjVjyaN1xYhQtd0rr1j
3ddVVfOPhXYkUA74mAk0kZOUYQd6BCjjTVforuY3D3XM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:10 2023 by rpki-client on console-fra.rpki-client.org