Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-gxnDDmh2GwlrqynCMrnuhB_sRU.roa
File:                     1-gxnDDmh2GwlrqynCMrnuhB_sRU.roa (raw, json)
Hash identifier:          8sTDBNruK/GcH/agS4P9O2/CzlZ20K51JiNsOVUC8yE=
Subject key identifier:   FA:0C:67:0C:39:A1:D8:6C:25:AE:AC:A7:08:CA:E7:BA:10:7F:B1:15
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       018577EF2F55E013C494561D05E686B13CD4
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-gxnDDmh2GwlrqynCMrnuhB_sRU.roa
Signing time:             Tue 03 Jan 2023 14:00:41 +0000
ROA not before:           Tue 03 Jan 2023 14:00:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        185.100.232.0/24 maxlen: 24
                          185.100.232.0/22 maxlen: 22
                          185.100.233.0/24 maxlen: 24
                          185.100.235.0/24 maxlen: 24
                          185.100.234.0/24 maxlen: 24
                          193.200.164.0/24 maxlen: 24
                          185.173.160.0/22 maxlen: 22
                          185.173.161.0/24 maxlen: 24
                          185.173.160.0/24 maxlen: 24
                          185.173.163.0/24 maxlen: 24
                          185.173.162.0/24 maxlen: 24
                          185.180.222.0/24 maxlen: 24
                          185.180.221.0/24 maxlen: 24
                          185.180.220.0/24 maxlen: 24
                          185.180.220.0/22 maxlen: 22
                          89.39.104.0/24 maxlen: 24
                          89.39.104.0/22 maxlen: 22
                          185.180.223.0/24 maxlen: 24
                          89.39.105.0/24 maxlen: 24
                          89.39.107.0/24 maxlen: 24
                          89.39.106.0/24 maxlen: 24
                          2.59.168.0/22 maxlen: 22
                          2.59.168.0/24 maxlen: 24
                          2.59.171.0/24 maxlen: 24
                          2.59.170.0/24 maxlen: 24
                          2.59.169.0/24 maxlen: 24
                          185.132.132.0/24 maxlen: 24
                          185.132.132.0/22 maxlen: 22
                          185.132.135.0/24 maxlen: 24
                          185.132.134.0/24 maxlen: 24
                          185.132.133.0/24 maxlen: 24
                          62.112.8.0/24 maxlen: 24
                          62.112.8.0/22 maxlen: 24
                          185.165.240.0/22 maxlen: 22
                          185.165.240.0/24 maxlen: 24
                          62.112.11.0/24 maxlen: 24
                          62.112.10.0/24 maxlen: 24
                          62.112.9.0/24 maxlen: 24
                          185.165.243.0/24 maxlen: 24
                          185.165.242.0/24 maxlen: 24
                          185.165.241.0/24 maxlen: 24
                          80.79.4.0/22 maxlen: 22
                          80.79.4.0/24 maxlen: 24
                          80.79.7.0/24 maxlen: 24
                          80.79.6.0/24 maxlen: 24
                          80.79.5.0/24 maxlen: 24
                          89.38.96.0/24 maxlen: 24
                          185.132.179.0/24 maxlen: 24
                          89.38.98.0/24 maxlen: 24
                          89.38.97.0/24 maxlen: 24
                          185.132.178.0/24 maxlen: 24
                          185.132.176.0/22 maxlen: 22
                          185.132.177.0/24 maxlen: 24
                          89.38.96.0/22 maxlen: 22
                          185.132.176.0/24 maxlen: 24
                          89.38.99.0/24 maxlen: 24
                          178.132.3.0/24 maxlen: 24
                          178.132.2.0/24 maxlen: 24
                          178.132.0.0/21 maxlen: 21
                          178.132.1.0/24 maxlen: 24
                          178.132.0.0/24 maxlen: 24
                          178.132.4.0/24 maxlen: 24
                          178.132.6.0/24 maxlen: 24
                          178.132.5.0/24 maxlen: 24
                          178.132.7.0/24 maxlen: 24
                          185.172.90.0/24 maxlen: 24
                          185.172.89.0/24 maxlen: 24
                          185.172.88.0/24 maxlen: 24
                          185.172.88.0/22 maxlen: 22
                          185.172.91.0/24 maxlen: 24
                          217.23.0.0/24 maxlen: 24
                          217.23.3.0/24 maxlen: 24
                          217.23.0.0/20 maxlen: 20
                          217.23.2.0/24 maxlen: 24
                          217.23.1.0/24 maxlen: 24
                          217.23.4.0/24 maxlen: 24
                          217.23.7.0/24 maxlen: 24
                          217.23.6.0/24 maxlen: 24
                          217.23.5.0/24 maxlen: 24
                          217.23.10.0/24 maxlen: 24
                          217.23.9.0/24 maxlen: 24
                          217.23.8.0/24 maxlen: 24
                          217.23.11.0/24 maxlen: 24
                          217.23.14.0/24 maxlen: 24
                          217.23.13.0/24 maxlen: 24
                          217.23.12.0/24 maxlen: 24
                          185.184.192.0/22 maxlen: 22
                          217.23.15.0/24 maxlen: 24
                          178.218.198.0/24 maxlen: 24
                          178.218.196.0/22 maxlen: 22
                          178.218.197.0/24 maxlen: 24
                          178.218.196.0/24 maxlen: 24
                          178.218.199.0/24 maxlen: 24
                          185.185.48.0/24 maxlen: 24
                          185.185.48.0/22 maxlen: 22
                          185.185.51.0/24 maxlen: 24
                          185.185.50.0/24 maxlen: 24
                          185.185.49.0/24 maxlen: 24
                          91.232.105.0/24 maxlen: 24
                          93.190.138.0/24 maxlen: 24
                          93.190.137.0/24 maxlen: 24
                          93.190.136.0/24 maxlen: 24
                          93.190.136.0/21 maxlen: 22
                          93.190.139.0/24 maxlen: 24
                          93.190.141.0/24 maxlen: 24
                          93.190.140.0/22 maxlen: 22
                          93.190.140.0/24 maxlen: 24
                          93.190.143.0/24 maxlen: 24
                          93.190.142.0/24 maxlen: 24
                          185.2.80.0/24 maxlen: 24
                          185.2.80.0/22 maxlen: 22
                          185.177.124.0/24 maxlen: 24
                          185.2.83.0/24 maxlen: 24
                          185.177.124.0/22 maxlen: 22
                          185.2.82.0/24 maxlen: 24
                          185.2.81.0/24 maxlen: 24
                          185.177.125.0/24 maxlen: 24
                          185.177.127.0/24 maxlen: 24
                          185.177.126.0/24 maxlen: 24
                          185.191.0.0/24 maxlen: 24
                          185.191.0.0/22 maxlen: 22
                          185.191.3.0/24 maxlen: 24
                          185.191.2.0/24 maxlen: 24
                          185.191.1.0/24 maxlen: 24
                          212.8.240.0/24 maxlen: 24
                          212.8.242.0/23 maxlen: 23
                          212.8.243.0/24 maxlen: 24
                          212.8.242.0/24 maxlen: 24
                          212.8.248.0/24 maxlen: 24
                          212.8.248.0/23 maxlen: 23
                          212.8.250.0/24 maxlen: 24
                          212.8.249.0/24 maxlen: 24
                          212.8.253.0/24 maxlen: 24
                          212.8.252.0/23 maxlen: 23
                          212.8.252.0/24 maxlen: 24
                          45.14.134.0/24 maxlen: 24
                          45.14.133.0/24 maxlen: 24
                          45.14.135.0/24 maxlen: 24
                          185.183.35.0/24 maxlen: 24
                          185.183.34.0/24 maxlen: 24
                          185.183.32.0/22 maxlen: 22
                          185.183.33.0/24 maxlen: 24
                          185.183.32.0/24 maxlen: 24
                          194.88.107.0/24 maxlen: 24
                          194.88.106.0/24 maxlen: 24
                          185.182.192.0/22 maxlen: 22
                          185.182.192.0/24 maxlen: 24
                          185.182.193.0/24 maxlen: 24
                          185.182.195.0/24 maxlen: 24
                          185.182.194.0/24 maxlen: 24
                          185.21.60.0/24 maxlen: 24
                          185.21.60.0/22 maxlen: 22
                          185.21.63.0/24 maxlen: 24
                          185.21.62.0/24 maxlen: 24
                          185.21.61.0/24 maxlen: 24
                          45.14.132.0/22 maxlen: 22
                          45.14.132.0/24 maxlen: 24
                          45.82.64.0/22 maxlen: 22
                          91.229.23.0/24 maxlen: 24
                          194.88.105.0/24 maxlen: 24
                          194.88.104.0/24 maxlen: 24
                          194.88.104.0/22 maxlen: 22
                          109.236.83.0/24 maxlen: 24
                          109.236.82.0/24 maxlen: 24
                          109.236.81.0/24 maxlen: 24
                          109.236.80.0/20 maxlen: 20
                          109.236.80.0/24 maxlen: 24
                          109.236.85.0/24 maxlen: 24
                          109.236.84.0/24 maxlen: 24
                          109.236.91.0/24 maxlen: 24
                          109.236.86.0/24 maxlen: 24
                          109.236.90.0/24 maxlen: 24
                          109.236.89.0/24 maxlen: 24
                          109.236.88.0/24 maxlen: 24
                          109.236.87.0/24 maxlen: 24
                          109.236.93.0/24 maxlen: 24
                          109.236.92.0/24 maxlen: 24
                          109.236.95.0/24 maxlen: 24
                          109.236.94.0/24 maxlen: 24
                          2a00:7c80::/29 maxlen: 32
                          2a00:7c82::/32 maxlen: 32
                          2a00:7c81::/32 maxlen: 32
                          2a00:7c83::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:77:ef:2f:55:e0:13:c4:94:56:1d:05:e6:86:b1:3c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Jan  3 14:00:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa0c670c39a1d86c25aeaca708cae7ba107fb115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:65:ca:94:c0:a4:ad:75:9a:73:ad:d1:86:
                    34:29:19:0f:5e:c8:9b:16:54:d6:bf:d6:56:1d:04:
                    cd:6d:ed:66:e1:9c:fa:bc:88:24:15:f3:05:52:81:
                    45:68:fa:f2:26:16:25:96:c1:1a:9f:54:f7:11:4a:
                    23:0a:57:5a:41:f5:d9:7b:a7:59:63:d4:3a:67:58:
                    47:21:bb:d4:81:71:93:a7:e5:0b:d0:3c:b9:f8:b8:
                    bf:2b:5c:10:1b:4f:e7:61:ce:21:39:73:b5:21:4e:
                    f5:12:17:a7:c2:b2:a6:28:31:75:ba:49:30:90:40:
                    8f:00:42:d8:5c:88:d6:6f:c7:21:e3:0f:1e:ec:3d:
                    c4:63:2c:89:2b:d4:b3:86:6d:a2:40:d5:27:a1:70:
                    81:5d:5b:b6:39:a4:d2:e8:21:17:f3:f9:04:01:da:
                    82:a2:98:23:35:76:c8:6f:4d:77:b5:5f:92:44:e2:
                    6c:d3:0d:59:cc:78:f0:53:f3:e2:38:e3:2c:d4:bb:
                    ea:03:ba:27:99:2a:62:4e:a3:d9:6d:8a:7a:aa:fb:
                    70:68:e9:8f:68:1f:55:7a:95:5b:27:88:11:51:ab:
                    eb:30:cf:1e:1d:30:82:68:a0:c9:f9:48:75:25:6e:
                    3f:57:a5:fc:1d:97:63:4b:d7:b4:2b:91:94:ff:8b:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0C:67:0C:39:A1:D8:6C:25:AE:AC:A7:08:CA:E7:BA:10:7F:B1:15
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/1-gxnDDmh2GwlrqynCMrnuhB_sRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.168.0/22
                  45.14.132.0/22
                  45.82.64.0/22
                  62.112.8.0/22
                  80.79.4.0/22
                  89.38.96.0/22
                  89.39.104.0/22
                  91.229.23.0/24
                  91.232.105.0/24
                  93.190.136.0/21
                  109.236.80.0/20
                  178.132.0.0/21
                  178.218.196.0/22
                  185.2.80.0/22
                  185.21.60.0/22
                  185.100.232.0/22
                  185.132.132.0/22
                  185.132.176.0/22
                  185.165.240.0/22
                  185.172.88.0/22
                  185.173.160.0/22
                  185.177.124.0/22
                  185.180.220.0/22
                  185.182.192.0/22
                  185.183.32.0/22
                  185.184.192.0/22
                  185.185.48.0/22
                  185.191.0.0/22
                  193.200.164.0/24
                  194.88.104.0/22
                  212.8.240.0/24
                  212.8.242.0/23
                  212.8.248.0-212.8.250.255
                  212.8.252.0/23
                  217.23.0.0/20
                IPv6:
                  2a00:7c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:11:bf:2a:67:aa:bd:2c:7e:e3:ee:1c:50:7e:bd:e8:ee:
         a0:ba:e3:27:b8:8c:c4:3d:1e:46:41:df:78:19:b2:f3:13:f4:
         87:59:c5:a6:c9:b8:5f:ab:70:07:14:3a:32:e7:89:a5:50:dd:
         83:2d:87:2a:8b:0f:c6:ae:c1:fe:1d:ec:c7:9c:2c:24:b8:82:
         9a:76:5c:2c:9b:38:35:27:36:8f:fb:09:f5:1e:c5:d9:f4:dd:
         e5:85:07:a8:25:90:d8:d2:44:6f:73:d1:4d:60:63:4f:bd:76:
         e3:92:18:05:14:25:65:a9:a9:91:4c:16:29:62:8d:bd:b0:cc:
         d8:04:88:b0:62:36:8f:a1:96:ae:ce:3e:70:96:50:a0:6c:00:
         2b:12:c7:6c:cc:01:b0:aa:52:c8:f7:a4:12:78:44:1f:27:90:
         0d:ea:51:fd:29:b4:c2:71:60:f1:48:e8:61:08:43:32:4b:69:
         da:36:eb:15:cc:60:9e:84:3b:d5:9e:e2:eb:02:6f:64:6f:85:
         bf:7d:0b:a9:b0:e2:30:95:2a:76:39:b6:73:09:4a:b7:45:e1:
         94:77:6a:c0:94:b2:ff:32:5f:85:df:0b:02:5c:d7:41:ed:7f:
         d5:19:e3:8b:00:9b:d9:cc:0b:50:73:6f:81:98:02:d6:62:1f:
         ed:06:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:07 2023 by rpki-client on console-ams.rpki-client.org