Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vLouzbK1_WkUxAffZNZMnRv0iUk.roa
File:                     vLouzbK1_WkUxAffZNZMnRv0iUk.roa (raw, json)
Hash identifier:          i9Ut7iUv9s/s/0dhdpzEYfiqUyfeNt79NyEIXNREMRk=
Subject key identifier:   BC:BA:2E:CD:B2:B5:FD:69:14:C4:07:DF:64:D6:4C:9D:1B:F4:89:49
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0187D1F9CFC89AE52B16F190F7EE0E641A4C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vLouzbK1_WkUxAffZNZMnRv0iUk.roa
Signing time:             Sun 30 Apr 2023 11:43:42 +0000
ROA not before:           Sun 30 Apr 2023 11:43:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        194.87.1.0/24 maxlen: 24
                          194.87.3.0/24 maxlen: 24
                          194.87.2.0/24 maxlen: 24
                          194.87.7.0/24 maxlen: 24
                          194.87.11.0/24 maxlen: 24
                          194.87.6.0/24 maxlen: 24
                          194.87.10.0/24 maxlen: 24
                          194.87.12.0/24 maxlen: 24
                          194.87.16.0/24 maxlen: 24
                          194.87.23.0/24 maxlen: 24
                          194.87.24.0/22 maxlen: 24
                          194.87.18.0/24 maxlen: 24
                          194.87.22.0/24 maxlen: 24
                          194.87.26.0/23 maxlen: 23
                          194.87.37.0/24 maxlen: 24
                          194.87.104.0/24 maxlen: 24
                          194.87.105.0/24 maxlen: 24
                          194.87.114.0/24 maxlen: 24
                          194.87.114.0/23 maxlen: 23
                          194.87.122.0/24 maxlen: 24
                          194.87.124.0/24 maxlen: 24
                          194.87.119.0/24 maxlen: 24
                          194.87.130.0/24 maxlen: 24
                          194.87.131.0/24 maxlen: 24
                          194.87.138.0/24 maxlen: 24
                          194.87.134.0/23 maxlen: 23
                          194.87.133.0/24 maxlen: 24
                          194.87.44.0/24 maxlen: 24
                          194.87.43.0/24 maxlen: 24
                          194.87.51.0/24 maxlen: 24
                          194.87.56.0/24 maxlen: 24
                          194.87.78.0/24 maxlen: 24
                          194.87.73.0/24 maxlen: 24
                          194.87.77.0/24 maxlen: 24
                          194.87.83.0/24 maxlen: 24
                          195.133.74.0/24 maxlen: 24
                          195.133.76.0/24 maxlen: 24
                          195.133.79.0/24 maxlen: 24
                          195.133.84.0/23 maxlen: 23
                          195.133.84.0/24 maxlen: 24
                          195.133.20.0/24 maxlen: 24
                          195.133.22.0/24 maxlen: 24
                          195.133.19.0/24 maxlen: 24
                          195.133.26.0/24 maxlen: 24
                          195.133.30.0/24 maxlen: 24
                          194.85.251.0/24 maxlen: 24
                          195.133.32.0/24 maxlen: 24
                          195.133.35.0/24 maxlen: 24
                          195.133.40.0/23 maxlen: 23
                          195.133.64.0/22 maxlen: 22
                          195.133.194.0/24 maxlen: 24
                          195.133.195.0/24 maxlen: 24
                          195.58.36.0/24 maxlen: 24
                          195.58.35.0/24 maxlen: 24
                          194.58.40.0/24 maxlen: 24
                          194.58.42.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          195.58.51.0/24 maxlen: 24
                          212.192.241.0/24 maxlen: 24
                          195.58.54.0/24 maxlen: 24
                          195.58.56.0/24 maxlen: 24
                          212.192.244.0/24 maxlen: 24
                          195.58.58.0/23 maxlen: 23
                          212.192.247.0/24 maxlen: 24
                          194.58.59.0/24 maxlen: 24
                          195.58.61.0/24 maxlen: 24
                          212.192.248.0/22 maxlen: 22
                          195.58.62.0/23 maxlen: 23
                          195.133.0.0/24 maxlen: 24
                          194.58.154.0/24 maxlen: 24
                          193.124.226.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24
                          192.124.170.0/24 maxlen: 24
                          212.192.8.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
                          192.124.178.0/24 maxlen: 24
                          192.124.181.0/24 maxlen: 24
                          192.124.190.0/24 maxlen: 24
                          193.124.201.0/24 maxlen: 24
                          193.124.202.0/24 maxlen: 24
                          193.124.204.0/24 maxlen: 24
                          193.124.3.0/24 maxlen: 24
                          193.124.9.0/24 maxlen: 24
                          62.76.225.0/24 maxlen: 24
                          193.124.6.0/24 maxlen: 24
                          193.124.8.0/24 maxlen: 24
                          62.76.230.0/23 maxlen: 23
                          193.124.16.0/24 maxlen: 24
                          193.124.44.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          193.124.133.0/24 maxlen: 24
                          193.124.80.0/24 maxlen: 24
                          193.124.90.0/24 maxlen: 24
                          193.124.93.0/24 maxlen: 24
                          194.87.200.0/24 maxlen: 24
                          194.87.202.0/24 maxlen: 24
                          194.87.204.0/24 maxlen: 24
                          194.87.222.0/24 maxlen: 24
                          194.135.18.0/24 maxlen: 24
                          194.135.24.0/24 maxlen: 24
                          194.135.23.0/24 maxlen: 24
                          194.87.240.0/24 maxlen: 24
                          194.87.243.0/24 maxlen: 24
                          194.87.149.0/24 maxlen: 24
                          194.87.166.0/24 maxlen: 24
                          194.87.160.0/24 maxlen: 24
                          194.87.162.0/24 maxlen: 24
                          194.87.170.0/23 maxlen: 23
                          194.87.168.0/24 maxlen: 24
                          194.87.172.0/24 maxlen: 24
                          194.87.177.0/24 maxlen: 24
                          194.87.179.0/24 maxlen: 24
                          194.87.176.0/24 maxlen: 24
                          194.87.178.0/24 maxlen: 24
                          194.87.182.0/24 maxlen: 24
                          194.87.187.0/24 maxlen: 24
                          194.87.190.0/24 maxlen: 24
                          193.108.115.0/24 maxlen: 24
                          194.135.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Apr 2023 18:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d1:f9:cf:c8:9a:e5:2b:16:f1:90:f7:ee:0e:64:1a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Apr 30 11:43:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bcba2ecdb2b5fd6914c407df64d64c9d1bf48949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:d8:7a:f5:c0:43:ba:f5:c2:d7:6d:49:24:
                    b5:60:e4:2a:e1:88:ed:3a:0d:68:1b:09:f2:57:e4:
                    4d:93:03:0a:88:8e:46:76:42:49:f9:2e:b8:00:1b:
                    31:10:8f:82:b5:71:d3:48:41:d2:10:cf:8d:7f:fd:
                    56:a5:86:33:4e:83:95:2c:d3:c2:4f:69:9f:49:6f:
                    b0:35:1b:35:80:16:51:99:4a:f7:0e:f8:e4:85:04:
                    ad:85:db:77:10:a8:fd:35:c0:5d:9a:5a:e2:6d:72:
                    93:b7:3c:32:c3:42:c9:1e:38:86:b2:bf:5e:52:ce:
                    5b:ba:00:46:e4:6d:48:25:df:76:c2:e4:db:33:cc:
                    b9:42:66:ba:8d:6b:80:11:ca:fa:f2:53:dc:00:ee:
                    77:4e:9c:67:d5:2f:c6:0f:ea:48:f8:ed:f7:bf:d5:
                    8b:ad:79:91:d3:95:cb:a6:fa:7b:a9:ad:13:3b:6a:
                    ee:65:4d:0c:b3:20:37:e5:99:50:5d:63:05:a6:ab:
                    c6:8b:cb:2b:85:b8:db:4d:77:ab:d2:37:32:fe:cd:
                    39:3a:a4:56:f2:93:96:43:fa:d4:6a:cc:37:f7:16:
                    1a:a6:9d:91:c5:6b:52:9d:9f:c4:f2:bf:1d:ec:b0:
                    11:b1:3d:ec:52:8c:89:aa:3f:e7:ae:93:3c:68:63:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:2E:CD:B2:B5:FD:69:14:C4:07:DF:64:D6:4C:9D:1B:F4:89:49
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vLouzbK1_WkUxAffZNZMnRv0iUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.225.0/24
                  62.76.230.0/23
                  192.124.170.0/24
                  192.124.178.0/24
                  192.124.181.0/24
                  192.124.190.0/24
                  193.108.115.0/24
                  193.124.3.0/24
                  193.124.6.0/24
                  193.124.8.0/23
                  193.124.16.0/24
                  193.124.44.0/24
                  193.124.49.0/24
                  193.124.80.0/24
                  193.124.90.0/24
                  193.124.93.0/24
                  193.124.133.0/24
                  193.124.201.0-193.124.202.255
                  193.124.204.0/24
                  193.124.226.0/24
                  194.58.40.0/24
                  194.58.42.0/24
                  194.58.47.0/24
                  194.58.59.0/24
                  194.58.154.0/24
                  194.85.251.0/24
                  194.87.1.0-194.87.3.255
                  194.87.6.0/23
                  194.87.10.0-194.87.12.255
                  194.87.16.0/24
                  194.87.18.0/24
                  194.87.22.0-194.87.27.255
                  194.87.37.0/24
                  194.87.43.0-194.87.44.255
                  194.87.51.0/24
                  194.87.56.0/24
                  194.87.73.0/24
                  194.87.77.0-194.87.78.255
                  194.87.83.0/24
                  194.87.104.0/23
                  194.87.114.0/23
                  194.87.119.0/24
                  194.87.122.0/24
                  194.87.124.0/24
                  194.87.130.0/23
                  194.87.133.0-194.87.135.255
                  194.87.138.0/24
                  194.87.149.0/24
                  194.87.160.0/24
                  194.87.162.0/24
                  194.87.166.0/24
                  194.87.168.0/24
                  194.87.170.0-194.87.172.255
                  194.87.176.0/22
                  194.87.182.0/24
                  194.87.187.0/24
                  194.87.190.0/24
                  194.87.200.0/24
                  194.87.202.0/24
                  194.87.204.0/24
                  194.87.222.0/24
                  194.87.240.0/24
                  194.87.243.0/24
                  194.135.18.0/24
                  194.135.23.0-194.135.24.255
                  194.135.46.0/24
                  195.58.35.0-195.58.36.255
                  195.58.51.0/24
                  195.58.54.0/24
                  195.58.56.0/24
                  195.58.58.0/23
                  195.58.61.0-195.58.63.255
                  195.133.0.0/24
                  195.133.19.0-195.133.20.255
                  195.133.22.0/24
                  195.133.26.0/24
                  195.133.30.0/24
                  195.133.32.0/24
                  195.133.35.0/24
                  195.133.40.0/23
                  195.133.64.0/22
                  195.133.74.0/24
                  195.133.76.0/24
                  195.133.79.0/24
                  195.133.84.0/23
                  195.133.194.0/23
                  212.192.1.0/24
                  212.192.8.0/24
                  212.192.10.0/24
                  212.192.241.0/24
                  212.192.244.0/24
                  212.192.247.0-212.192.251.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:f6:e0:ef:12:bb:b8:3d:c5:25:e6:fb:5a:28:e5:08:60:
         d6:52:ca:3a:27:b2:94:2a:87:ff:fc:54:5f:e7:71:8c:4f:d7:
         3f:b4:ce:e2:fa:98:9c:c9:86:2b:61:30:19:60:08:5f:94:df:
         af:19:11:69:c3:67:16:3d:cd:19:ea:03:06:eb:2c:96:a2:8e:
         28:db:9e:e8:46:01:4f:32:05:4f:89:fe:97:08:b0:68:91:17:
         d9:ad:00:ca:f1:b8:55:ef:a9:2b:d0:5a:c0:83:d1:5d:e3:22:
         0f:ac:b4:8c:c2:8d:af:46:fd:b6:85:bd:ba:73:ae:9e:f8:c7:
         e0:84:ef:e8:dd:db:0d:fe:d3:66:6f:ef:80:dc:e9:82:38:52:
         b8:51:bb:07:15:2c:92:04:30:ee:1d:c0:fa:a1:b0:74:49:73:
         98:c2:eb:e0:f2:b6:12:24:ea:ec:f6:02:97:21:86:42:92:47:
         06:ec:bb:0e:f0:2f:ad:da:a4:f4:34:71:2d:39:02:88:bd:79:
         ad:59:fe:94:aa:f8:1f:99:92:49:b5:d9:63:4b:f4:7c:d7:e0:
         e9:12:54:c4:b5:5a:36:eb:a9:15:be:c7:11:87:37:28:55:6b:
         2e:d1:9b:28:d8:ad:81:36:69:06:75:40:3b:39:2d:f3:cf:c8:
         2c:13:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:50 2024 by rpki-client on console-ams.rpki-client.org