Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbBZncJsgsgYIoB6-_AJbZljV1c.roa
File:                     qbBZncJsgsgYIoB6-_AJbZljV1c.roa (raw, json)
Hash identifier:          a9DOoPzabKc+dHgHZ62KLdn2K63/Sn2RpBNiTih9W8Q=
Subject key identifier:   A9:B0:59:9D:C2:6C:82:C8:18:22:80:7A:FB:F0:09:6D:99:63:57:57
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01889E5D922FC2233680EA090CE08531C964
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbBZncJsgsgYIoB6-_AJbZljV1c.roa
Signing time:             Fri 09 Jun 2023 04:15:12 +0000
ROA not before:           Fri 09 Jun 2023 04:15:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.37.0/24 maxlen: 24
                          194.87.36.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          194.58.38.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.53.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          194.58.223.0/24 maxlen: 24
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          192.124.189.0/24 maxlen: 24
                          192.124.191.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.200.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.124.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Jun 2023 10:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9e:5d:92:2f:c2:23:36:80:ea:09:0c:e0:85:31:c9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun  9 04:15:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a9b0599dc26c82c81822807afbf0096d99635757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:f1:2b:70:90:65:cd:29:d3:31:28:df:da:
                    48:1f:e1:c4:42:94:74:37:8f:21:f4:3f:a9:8d:3c:
                    e2:fe:d6:1a:ae:ee:73:11:32:ea:b1:6c:2a:a4:28:
                    70:54:92:f1:8e:77:c8:b7:81:53:71:4c:4e:08:7b:
                    ac:15:4b:a6:a4:e2:05:38:b9:95:56:45:00:97:79:
                    cd:8c:9e:a0:bb:7b:1b:e0:4a:d2:27:ec:59:5f:6b:
                    12:e2:a0:07:a9:83:b5:5c:8b:3a:f9:ac:a6:50:0c:
                    08:61:0a:34:af:61:55:d3:33:b9:d1:33:73:09:fa:
                    77:ba:0e:90:ea:4f:bd:ab:ac:df:ef:72:38:6d:3c:
                    cf:91:a2:19:77:3d:5c:6f:92:c1:e4:0b:75:96:6a:
                    0a:e9:ac:ba:fa:74:41:d2:11:cf:64:d4:bb:25:78:
                    66:2d:80:6a:31:03:4a:60:62:ba:0b:2c:3d:89:53:
                    a2:ff:ed:ae:78:39:9c:a2:7f:d7:cf:1f:e7:e4:4d:
                    a8:e5:86:44:a4:5f:17:23:ab:64:88:3b:30:a4:ce:
                    5b:5d:7d:a6:f1:ec:93:df:af:81:93:27:c4:04:59:
                    8e:27:7b:3e:fa:a4:23:9b:9f:5c:2d:0d:c5:15:bd:
                    b0:9a:fb:50:e9:7a:d7:eb:c3:17:67:b3:45:88:4d:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:59:9D:C2:6C:82:C8:18:22:80:7A:FB:F0:09:6D:99:63:57:57
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbBZncJsgsgYIoB6-_AJbZljV1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.189.0-192.124.191.255
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/24
                  193.124.16.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.124.0/24
                  193.124.133.0/24
                  193.124.200.0-193.124.202.255
                  193.124.204.0/24
                  194.58.38.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.58.223.0/24
                  194.87.1.0-194.87.3.255
                  194.87.7.0/24
                  194.87.11.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.36.0/23
                  194.87.43.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.78.0/24
                  194.87.83.0/24
                  194.87.105.0/24
                  194.87.114.0/23
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.172.0/24
                  194.87.176.0/23
                  194.87.179.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.36.0/24
                  195.58.53.0-195.58.54.255
                  195.58.58.0/23
                  195.58.62.0/23
                  195.133.0.0/24
                  195.133.19.0/24
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.74.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:3f:22:16:b5:ba:49:da:91:6d:bf:ea:f1:31:bc:3e:45:
         ca:e9:04:5e:d5:e1:8d:94:d4:19:b1:23:9d:d4:f8:4f:13:3b:
         94:ce:7b:a0:ff:82:d8:f7:48:e4:2f:5d:64:78:c3:e9:8d:6a:
         e4:6a:4e:42:ea:82:a7:d2:e0:90:b6:84:17:45:62:e7:ef:f4:
         68:9b:7b:06:b0:01:bc:c5:c5:1e:1f:8a:77:b1:93:02:ed:29:
         84:4e:97:01:d5:8c:fc:3d:e8:3d:f6:00:ac:63:44:59:04:bd:
         0e:b3:6f:de:ae:d0:ba:cf:16:b7:4c:7c:55:33:3c:a5:c9:f0:
         7a:66:a7:ab:44:78:86:4f:0c:de:d8:30:40:52:71:22:d2:d6:
         81:51:3d:60:3d:7a:24:bd:3a:f8:6e:63:fd:12:75:d6:49:ea:
         a3:c7:9c:81:ef:d3:6a:c7:37:8e:5f:64:a3:65:b2:e1:bc:36:
         66:91:9f:e1:f1:0f:93:b2:ff:99:22:13:3f:99:2d:17:f6:6d:
         24:1d:c6:b0:e9:f5:27:c1:54:2e:0c:12:0e:4f:94:6b:8e:35:
         52:07:8d:d4:11:8a:88:80:40:43:a3:4b:a3:70:ff:fa:dc:cc:
         cb:68:d8:b7:48:44:76:b2:f6:cd:b0:7a:8e:83:58:a7:cd:bc:
         0e:f5:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:27 2024 by rpki-client on console-fra.rpki-client.org