Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0FTSYwHQYta2yPmEeAadfkLUppo.roa
File:                     0FTSYwHQYta2yPmEeAadfkLUppo.roa (raw, json)
Hash identifier:          FrRBJKe7FV1jRn/KjI1d82GvnUbUoAz+S/C+2S0eKvQ=
Subject key identifier:   D0:54:D2:63:01:D0:62:D6:B6:C8:F9:84:78:06:9D:7E:42:D4:A6:9A
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF963CFBAE25D687A7B0DB23D36A20B
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0FTSYwHQYta2yPmEeAadfkLUppo.roa
Signing time:             Mon 02 Jan 2023 00:54:53 +0000
ROA not before:           Mon 02 Jan 2023 00:54:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8717
IP address blocks:        82.147.154.0/24 maxlen: 24
                          89.215.0.0/16 maxlen: 16
                          89.215.8.0/22 maxlen: 22
                          62.221.128.0/19 maxlen: 19
                          62.221.128.0/24 maxlen: 24
                          82.147.128.0/19 maxlen: 19
                          95.140.208.0/20 maxlen: 20
                          213.222.32.0/19 maxlen: 19
                          213.222.59.0/24 maxlen: 24
                          84.242.128.0/18 maxlen: 18
                          89.215.40.0/22 maxlen: 22
                          5.53.128.0/17 maxlen: 17
                          89.215.48.0/22 maxlen: 22
                          176.12.0.0/18 maxlen: 18
                          92.247.168.0/24 maxlen: 24
                          87.227.128.0/17 maxlen: 17
                          217.18.240.0/20 maxlen: 20
                          92.247.0.0/16 maxlen: 16
                          92.247.29.0/24 maxlen: 24
                          217.10.240.0/20 maxlen: 20
                          89.253.128.0/18 maxlen: 18
                          89.186.200.0/21 maxlen: 21
                          213.240.192.0/18 maxlen: 18
                          217.79.32.0/20 maxlen: 20
                          92.247.67.0/24 maxlen: 24
                          213.226.0.0/18 maxlen: 18
                          213.226.9.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.5.0/24 maxlen: 24
                          85.118.64.0/19 maxlen: 19
                          212.91.160.0/19 maxlen: 19
                          212.91.172.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.181.0/24 maxlen: 24
                          212.91.184.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          80.253.48.0/20 maxlen: 20
                          195.24.32.0/19 maxlen: 19
                          85.91.128.0/19 maxlen: 19
                          78.83.146.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          84.252.0.0/18 maxlen: 18
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          83.97.24.0/21 maxlen: 21
                          78.83.160.0/24 maxlen: 24
                          212.50.0.0/19 maxlen: 19
                          212.50.7.0/24 maxlen: 24
                          77.70.0.0/17 maxlen: 17
                          151.251.237.0/24 maxlen: 24
                          78.83.143.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          78.83.145.0/24 maxlen: 24
                          87.97.128.0/17 maxlen: 17
                          78.90.206.0/24 maxlen: 24
                          95.111.0.0/17 maxlen: 17
                          212.104.96.0/19 maxlen: 19
                          87.97.160.0/22 maxlen: 22
                          78.83.210.0/24 maxlen: 24
                          213.191.160.0/19 maxlen: 19
                          78.83.226.0/23 maxlen: 23
                          78.83.225.0/24 maxlen: 24
                          78.83.228.0/24 maxlen: 24
                          217.9.224.0/20 maxlen: 20
                          130.204.0.0/16 maxlen: 16
                          151.251.62.0/23 maxlen: 23
                          85.130.0.0/17 maxlen: 17
                          88.203.204.0/24 maxlen: 24
                          151.251.0.0/16 maxlen: 16
                          195.149.248.0/21 maxlen: 21
                          88.203.237.0/24 maxlen: 24
                          212.36.0.0/19 maxlen: 19
                          212.36.6.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          85.130.95.0/24 maxlen: 24
                          82.103.109.0/24 maxlen: 24
                          85.130.96.0/23 maxlen: 23
                          37.63.0.0/17 maxlen: 17
                          62.204.128.0/19 maxlen: 19
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          82.103.120.0/24 maxlen: 24
                          78.90.0.0/16 maxlen: 16
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          85.130.120.0/23 maxlen: 23
                          89.190.192.0/19 maxlen: 19
                          78.83.0.0/16 maxlen: 16
                          78.83.7.0/24 maxlen: 24
                          82.103.64.0/18 maxlen: 18
                          46.238.0.0/18 maxlen: 18
                          46.238.14.0/24 maxlen: 24
                          82.103.91.0/24 maxlen: 24
                          85.196.128.0/18 maxlen: 18
                          77.236.160.0/19 maxlen: 19
                          77.236.178.0/23 maxlen: 23
                          88.203.147.0/24 maxlen: 24
                          212.95.161.0/24 maxlen: 24
                          212.95.160.0/19 maxlen: 19
                          88.203.128.0/17 maxlen: 17
                          88.203.128.0/24 maxlen: 24
                          88.203.129.0/24 maxlen: 24
                          88.203.128.0/23 maxlen: 23
                          89.215.214.0/24 maxlen: 24
                          84.242.176.0/24 maxlen: 24
                          195.34.96.0/19 maxlen: 19
                          213.169.32.0/19 maxlen: 19
                          195.34.101.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          2a01:288::/32 maxlen: 32
                          2a00:4800::/29 maxlen: 29
                          2a01:288:400b::/48 maxlen: 48
                          2a01:288:400c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 26 Jan 2023 07:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:63:cf:ba:e2:5d:68:7a:7b:0d:b2:3d:36:a2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:54:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d054d26301d062d6b6c8f98478069d7e42d4a69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:98:6a:4b:9c:ca:e3:1e:6f:95:81:84:4a:
                    02:eb:9d:be:95:b7:27:ea:4e:74:49:2e:c0:f5:aa:
                    42:b1:0b:88:3a:c5:85:c8:1f:b5:06:4c:19:af:21:
                    6d:a7:17:05:d0:c6:aa:30:d8:5f:87:65:9f:2b:c2:
                    f5:65:59:85:02:b0:24:8d:a0:b2:5f:fd:e2:ec:2a:
                    11:96:8d:c3:09:d1:57:83:18:17:77:e3:c9:90:d9:
                    cf:81:ae:2c:3a:9a:dc:46:2b:3f:27:27:eb:e4:52:
                    01:a5:de:a3:36:bc:81:3f:03:72:bd:71:14:68:4a:
                    b7:23:60:78:e0:cd:e7:2c:2b:b4:b3:03:96:a5:65:
                    f7:58:3c:90:05:88:40:d8:45:db:b1:74:cf:d9:68:
                    2f:44:01:be:7f:8d:21:5a:fc:10:c9:06:b2:b4:1d:
                    ce:5f:d7:17:91:6c:e9:13:f8:e7:fa:0c:2d:de:d5:
                    81:c5:d5:d0:51:17:d8:59:cf:cb:6a:68:b2:7e:08:
                    ec:26:67:f6:48:06:40:a4:3b:1e:6b:2e:2a:9c:97:
                    cd:1a:12:11:2f:f6:56:bd:3c:05:ea:e0:43:ec:63:
                    ae:82:d7:df:10:43:f0:0b:ea:f9:57:c1:73:89:a4:
                    59:60:24:37:90:b1:44:b1:1e:25:df:17:6a:e0:d1:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:D2:63:01:D0:62:D6:B6:C8:F9:84:78:06:9D:7E:42:D4:A6:9A
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0FTSYwHQYta2yPmEeAadfkLUppo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.53.128.0/17
                  37.63.0.0/17
                  46.238.0.0/18
                  62.204.128.0/19
                  62.221.128.0/19
                  77.70.0.0/17
                  77.236.160.0/19
                  78.83.0.0/16
                  78.90.0.0/16
                  80.253.48.0/20
                  82.103.64.0/18
                  82.147.128.0/19
                  83.97.24.0/21
                  84.242.128.0/18
                  84.252.0.0/18
                  85.91.128.0/19
                  85.118.64.0/19
                  85.130.0.0/17
                  85.196.128.0/18
                  87.97.128.0/17
                  87.227.128.0/17
                  88.203.128.0/17
                  89.186.200.0/21
                  89.190.192.0/19
                  89.215.0.0/16
                  89.253.128.0/18
                  92.247.0.0/16
                  95.111.0.0/17
                  95.140.208.0/20
                  130.204.0.0/16
                  151.251.0.0/16
                  176.12.0.0/18
                  195.24.32.0/19
                  195.34.96.0/19
                  195.149.248.0/21
                  212.36.0.0/19
                  212.50.0.0/19
                  212.91.160.0/19
                  212.95.160.0/19
                  212.104.96.0/19
                  213.169.32.0/19
                  213.191.160.0/19
                  213.222.32.0/19
                  213.226.0.0/18
                  213.240.192.0/18
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20
                IPv6:
                  2a00:4800::/29
                  2a01:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:6b:91:ea:61:5a:0b:46:62:be:ec:33:99:62:69:3e:54:
         53:4c:c5:20:f7:52:dc:3c:c5:e2:d1:4f:4f:af:b4:fc:90:55:
         d3:78:d9:b9:a9:c5:e2:76:11:65:a5:9c:00:85:90:22:47:d7:
         09:72:54:b6:8f:9b:4b:68:43:59:46:00:43:4e:11:69:4c:d5:
         9e:62:2f:86:d9:9b:f5:e0:25:d9:1a:fb:67:c3:04:ee:26:a7:
         8f:11:02:48:be:50:62:a1:48:6c:ff:e4:6a:9c:10:74:c1:0c:
         3f:cc:6d:03:41:04:9e:25:57:5d:c8:b1:ff:0e:6e:57:fb:65:
         68:1b:af:fd:31:98:04:4a:9c:97:cf:4c:25:3c:28:e8:79:f9:
         fe:a0:31:e6:ba:54:84:d5:ac:bd:95:85:57:3b:43:c8:4a:2c:
         9b:15:c2:31:f2:9b:3f:08:0f:d9:4c:16:f1:68:32:f5:71:96:
         d6:a7:78:13:d7:a2:d3:95:74:81:a9:48:9f:3c:a8:bd:84:ca:
         44:10:4e:18:f2:c4:40:46:ef:56:7e:5a:34:82:de:4b:c0:db:
         01:1a:47:75:74:92:cf:aa:0a:44:a1:6d:50:ba:02:57:a1:fa:
         3e:51:8d:06:eb:c6:84:22:c8:86:95:b0:56:d0:21:bb:69:11:
         2a:b4:7e:49
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAYVv+WPPuuJdaHp7DbI9NqILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDU0ZDI2MzAxZDA2MmQ2YjZjOGY5ODQ3ODA2OWQ3ZTQyZDRhNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA6YakucyuMeb5WBhEoC652+lbcn
6k50SS7A9apCsQuIOsWFyB+1BkwZryFtpxcF0MaqMNhfh2WfK8L1ZVmFArAkjaCy
X/3i7CoRlo3DCdFXgxgXd+PJkNnPga4sOprcRis/Jyfr5FIBpd6jNryBPwNyvXEU
aEq3I2B44M3nLCu0swOWpWX3WDyQBYhA2EXbsXTP2WgvRAG+f40hWvwQyQaytB3O
X9cXkWzpE/jn+gwt3tWBxdXQURfYWc/LamiyfgjsJmf2SAZApDseay4qnJfNGhIR
L/ZWvTwF6uBD7GOugtffEEPwC+r5V8FziaRZYCQ3kLFEsR4l3xdq4NEM3QIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFNBU0mMB0GLWtsj5hHgGnX5C1KaaMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvMEZUU1l3SFFZdGEyeVBtRWVBYWRma0xVcHBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCASgEAgABMIIB
IAMEBwU1gAMEByU/AAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3soAMDAE5T
AwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AADBAVVW4AD
BAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgDBAVZvsAD
AwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAMAAMEBcMY
IAMEBcMiYAMEA8OV+AMEBdQkAAMEBdQyAAMEBdRboAMEBdRfoAMEBdRoYAMEBdWp
IAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ4AMEBNkK8AMEBNkS8AMEBNlP
IDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZIhvcNAQELBQADggEBAAiPa5Hq
YVoLRmK+7DOZYmk+VFNMxSD3Utw8xeLRT0+vtPyQVdN42bmpxeJ2EWWlnACFkCJH
1wlyVLaPm0toQ1lGAENOEWlM1Z5iL4bZm/XgJdka+2fDBO4mp48RAki+UGKhSGz/
5GqcEHTBDD/MbQNBBJ4lV13Isf8Oblf7ZWgbr/0xmARKnJfPTCU8KOh5+f6gMea6
VITVrL2VhVc7Q8hKLJsVwjHymz8ID9lMFvFoMvVxltaneBPXotOVdIGpSJ88qL2E
ykQQThjyxEBG71Z+WjSC3kvA2wEaR3V0ks+qCkShbVC6Aleh+j5RjQbrxoQiyIaV
sFbQIbtpESq0fkk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:06 2024 by rpki-client on console-fra.rpki-client.org