Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/owYPS1KT1suhGAYdJOAsMdTntJc.roa
File:                     owYPS1KT1suhGAYdJOAsMdTntJc.roa (raw, json)
Hash identifier:          6cfFO98XwNCDtwywtsXnu/G/sEEnYbcDk1tO18szNXI=
Subject key identifier:   A3:06:0F:4B:52:93:D6:CB:A1:18:06:1D:24:E0:2C:31:D4:E7:B4:97
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0187E17FD2A5AE8DA86CEE411009AE0DC3AD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/owYPS1KT1suhGAYdJOAsMdTntJc.roa
Signing time:             Wed 03 May 2023 12:04:23 +0000
ROA not before:           Wed 03 May 2023 12:04:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.6.0/24 maxlen: 24
                          194.87.10.0/24 maxlen: 24
                          194.87.17.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.25.0/24 maxlen: 24
                          194.87.37.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.44.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.51.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.67.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.77.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.76.0/24 maxlen: 24
                          195.133.79.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.84.0/24 maxlen: 24
                          195.133.91.0/24 maxlen: 24
                          195.133.90.0/24 maxlen: 24
                          195.133.20.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          194.85.251.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.40.0/23 maxlen: 23
                          195.133.64.0/22 maxlen: 22
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.40.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          195.58.51.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          194.58.56.0/23 maxlen: 23
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          193.124.226.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.36.0/24 maxlen: 24
                          193.124.35.0/24 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.209.0/24 maxlen: 24
                          194.87.221.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.87.227.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.170.0/23 maxlen: 23
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.87.255.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 May 2023 06:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e1:7f:d2:a5:ae:8d:a8:6c:ee:41:10:09:ae:0d:c3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May  3 12:04:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3060f4b5293d6cba118061d24e02c31d4e7b497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:0d:5c:23:a4:29:36:cc:04:02:39:83:38:
                    66:ff:37:0a:84:e8:70:da:cc:75:5b:d2:3e:1a:93:
                    70:c6:5e:7e:cf:e7:5e:fa:7f:98:69:65:94:da:71:
                    bf:01:fb:d7:3a:ce:90:31:d8:31:c9:69:56:9e:d7:
                    d1:09:12:7a:03:2e:44:25:83:bb:a7:24:1d:62:4b:
                    46:6c:a5:ae:83:53:42:ff:c0:2e:02:7a:53:06:28:
                    74:f9:c2:74:aa:69:d1:f2:38:e2:53:c2:8d:dc:0c:
                    f1:2b:83:7a:5c:75:b0:8c:da:5a:c9:a4:47:c0:b8:
                    be:ac:0f:4e:ec:f0:88:15:3e:ec:97:bd:55:be:dd:
                    1f:6c:c2:32:e0:1f:31:0c:79:9e:03:1b:ba:8d:74:
                    5d:36:f5:e0:cc:bf:b6:97:3b:9f:58:87:f9:ba:bf:
                    f8:e4:de:0c:bc:de:5b:69:15:d6:fa:01:ae:86:be:
                    9e:73:b8:67:1c:42:fb:9c:b9:fb:fb:64:5b:28:d5:
                    83:1b:1b:58:14:a2:ca:0c:e6:b3:c0:2c:fd:29:a7:
                    64:fa:ad:a6:8d:ee:3c:01:ed:e2:95:08:65:2a:e1:
                    12:e3:e0:4e:a7:2e:c6:fe:99:8e:64:ab:e3:4d:08:
                    ab:42:4b:0d:c9:d4:ec:2a:66:5d:9b:9b:81:8e:4e:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:0F:4B:52:93:D6:CB:A1:18:06:1D:24:E0:2C:31:D4:E7:B4:97
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/owYPS1KT1suhGAYdJOAsMdTntJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.6.0/24
                  193.124.8.0/23
                  193.124.16.0/24
                  193.124.35.0-193.124.36.255
                  193.124.44.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.201.0-193.124.202.255
                  193.124.204.0/24
                  193.124.226.0/24
                  194.58.40.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.56.0/23
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.85.251.0/24
                  194.87.1.0-194.87.3.255
                  194.87.6.0/23
                  194.87.10.0-194.87.12.255
                  194.87.16.0-194.87.18.255
                  194.87.22.0-194.87.27.255
                  194.87.37.0/24
                  194.87.43.0-194.87.44.255
                  194.87.51.0/24
                  194.87.56.0/24
                  194.87.67.0/24
                  194.87.73.0/24
                  194.87.77.0-194.87.78.255
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.119.0/24
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.170.0-194.87.172.255
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.209.0/24
                  194.87.221.0-194.87.222.255
                  194.87.227.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.87.255.0/24
                  194.135.18.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.51.0/24
                  195.58.53.0-195.58.54.255
                  195.58.56.0/24
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0-195.133.20.255
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.40.0/23
                  195.133.64.0/22
                  195.133.74.0/24
                  195.133.76.0/24
                  195.133.79.0/24
                  195.133.84.0/23
                  195.133.90.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:06:83:62:ca:47:ff:aa:41:92:9e:c3:8c:f0:a2:45:2e:
         b9:cc:8d:f2:ad:6a:40:e2:6a:fb:ca:04:40:8a:51:bc:d8:c6:
         4f:82:f1:b3:d4:1d:21:2f:92:fd:6f:21:a6:b1:44:58:c3:23:
         4c:54:5d:13:43:55:f8:5b:32:4f:71:43:83:60:d6:78:fd:e3:
         02:20:12:b6:ca:c2:04:15:46:a8:a2:9e:cd:fe:91:ff:5b:29:
         3c:64:fe:e6:e2:9d:60:ec:33:21:a6:2a:bd:fb:c7:dd:d2:88:
         dd:c9:6e:7b:7a:08:ab:7f:25:8a:e0:29:ce:a6:05:8a:1e:5a:
         6a:1e:25:f0:ca:43:fb:9a:28:41:d6:84:91:56:7c:dd:f9:4d:
         f8:e5:78:35:b2:8c:40:e3:0f:7f:d7:67:b2:03:b9:0c:43:9a:
         2f:20:c0:48:2b:0b:18:c5:fd:58:2a:56:82:6d:25:43:56:15:
         c0:c6:e9:58:21:e4:41:d4:95:1f:ef:10:0c:56:5c:e7:4a:9e:
         fe:4e:a6:5e:f8:e0:26:82:81:32:e9:5e:59:eb:d1:d7:ef:19:
         9f:78:85:cb:94:72:39:b6:25:21:85:58:bd:76:17:a4:66:8f:
         6a:a3:da:32:d1:72:fe:03:33:b4:3e:a6:c7:e4:62:a3:72:34:
         49:cd:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:46 2024 by rpki-client on console-ams.rpki-client.org