Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oKTsf3rigjyJiwRDHRu4UobUIcU.roa
File:                     oKTsf3rigjyJiwRDHRu4UobUIcU.roa (raw, json)
Hash identifier:          HwaSL5xYMRy6ieYHBDyya7EJc4ztpZLp/Z8ij4l15ho=
Subject key identifier:   A0:A4:EC:7F:7A:E2:82:3C:89:8B:04:43:1D:1B:B8:52:86:D4:21:C5
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       018627234990DED30DD320E2973ECA22712D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oKTsf3rigjyJiwRDHRu4UobUIcU.roa
Signing time:             Mon 06 Feb 2023 14:31:09 +0000
ROA not before:           Mon 06 Feb 2023 14:31:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        185.100.232.0/22 maxlen: 22
                          193.200.164.0/24 maxlen: 24
                          185.173.161.0/24 maxlen: 24
                          185.173.160.0/24 maxlen: 24
                          185.173.163.0/24 maxlen: 24
                          185.173.162.0/24 maxlen: 24
                          185.180.220.0/22 maxlen: 22
                          89.39.104.0/24 maxlen: 24
                          89.39.105.0/24 maxlen: 24
                          89.39.107.0/24 maxlen: 24
                          89.39.106.0/24 maxlen: 24
                          2.59.168.0/22 maxlen: 22
                          185.132.132.0/24 maxlen: 24
                          185.132.135.0/24 maxlen: 24
                          185.132.134.0/24 maxlen: 24
                          185.132.133.0/24 maxlen: 24
                          62.112.8.0/22 maxlen: 24
                          185.165.240.0/22 maxlen: 22
                          80.79.4.0/24 maxlen: 24
                          80.79.7.0/24 maxlen: 24
                          80.79.6.0/24 maxlen: 24
                          80.79.5.0/24 maxlen: 24
                          185.132.179.0/24 maxlen: 24
                          89.38.98.0/24 maxlen: 24
                          89.38.97.0/24 maxlen: 24
                          185.132.178.0/24 maxlen: 24
                          185.132.177.0/24 maxlen: 24
                          89.38.96.0/24 maxlen: 24
                          185.132.176.0/24 maxlen: 24
                          89.38.99.0/24 maxlen: 24
                          178.132.3.0/24 maxlen: 24
                          178.132.2.0/24 maxlen: 24
                          178.132.1.0/24 maxlen: 24
                          178.132.0.0/24 maxlen: 24
                          178.132.4.0/24 maxlen: 24
                          178.132.6.0/24 maxlen: 24
                          178.132.5.0/24 maxlen: 24
                          178.132.7.0/24 maxlen: 24
                          185.172.90.0/24 maxlen: 24
                          185.172.89.0/24 maxlen: 24
                          185.172.88.0/24 maxlen: 24
                          185.172.91.0/24 maxlen: 24
                          217.23.0.0/24 maxlen: 24
                          217.23.3.0/24 maxlen: 24
                          217.23.2.0/24 maxlen: 24
                          217.23.1.0/24 maxlen: 24
                          217.23.4.0/24 maxlen: 24
                          217.23.7.0/24 maxlen: 24
                          217.23.6.0/24 maxlen: 24
                          217.23.5.0/24 maxlen: 24
                          217.23.10.0/24 maxlen: 24
                          217.23.9.0/24 maxlen: 24
                          217.23.8.0/24 maxlen: 24
                          217.23.11.0/24 maxlen: 24
                          185.184.192.0/24 maxlen: 24
                          217.23.15.0/24 maxlen: 24
                          217.23.14.0/24 maxlen: 24
                          217.23.13.0/24 maxlen: 24
                          217.23.12.0/24 maxlen: 24
                          185.184.195.0/24 maxlen: 24
                          185.184.194.0/24 maxlen: 24
                          185.184.193.0/24 maxlen: 24
                          175.110.112.0/20 maxlen: 20
                          178.218.196.0/22 maxlen: 22
                          185.185.48.0/24 maxlen: 24
                          185.185.51.0/24 maxlen: 24
                          185.185.50.0/24 maxlen: 24
                          185.185.49.0/24 maxlen: 24
                          93.190.136.0/21 maxlen: 22
                          93.190.140.0/22 maxlen: 22
                          185.2.80.0/22 maxlen: 22
                          185.177.124.0/22 maxlen: 22
                          185.191.0.0/22 maxlen: 22
                          212.8.240.0/24 maxlen: 24
                          212.8.243.0/24 maxlen: 24
                          212.8.242.0/24 maxlen: 24
                          212.8.248.0/24 maxlen: 24
                          212.8.250.0/24 maxlen: 24
                          212.8.249.0/24 maxlen: 24
                          212.8.253.0/24 maxlen: 24
                          212.8.252.0/24 maxlen: 24
                          185.183.35.0/24 maxlen: 24
                          185.183.34.0/24 maxlen: 24
                          185.183.33.0/24 maxlen: 24
                          185.183.32.0/24 maxlen: 24
                          194.88.107.0/24 maxlen: 24
                          194.88.106.0/24 maxlen: 24
                          185.182.192.0/24 maxlen: 24
                          185.182.193.0/24 maxlen: 24
                          185.182.195.0/24 maxlen: 24
                          185.182.194.0/24 maxlen: 24
                          185.21.60.0/24 maxlen: 24
                          185.21.63.0/24 maxlen: 24
                          185.21.62.0/24 maxlen: 24
                          185.21.61.0/24 maxlen: 24
                          45.14.132.0/22 maxlen: 22
                          45.82.64.0/22 maxlen: 22
                          194.88.105.0/24 maxlen: 24
                          194.88.104.0/24 maxlen: 24
                          109.236.83.0/24 maxlen: 24
                          109.236.82.0/24 maxlen: 24
                          109.236.81.0/24 maxlen: 24
                          109.236.80.0/24 maxlen: 24
                          109.236.85.0/24 maxlen: 24
                          109.236.84.0/24 maxlen: 24
                          109.236.91.0/24 maxlen: 24
                          109.236.86.0/24 maxlen: 24
                          109.236.90.0/24 maxlen: 24
                          109.236.89.0/24 maxlen: 24
                          109.236.88.0/24 maxlen: 24
                          109.236.87.0/24 maxlen: 24
                          109.236.93.0/24 maxlen: 24
                          109.236.92.0/24 maxlen: 24
                          109.236.95.0/24 maxlen: 24
                          109.236.94.0/24 maxlen: 24
                          185.100.232.0/24 maxlen: 24
                          185.100.233.0/24 maxlen: 24
                          185.100.235.0/24 maxlen: 24
                          185.100.234.0/24 maxlen: 24
                          185.173.160.0/22 maxlen: 22
                          185.180.222.0/24 maxlen: 24
                          185.180.221.0/24 maxlen: 24
                          185.180.220.0/24 maxlen: 24
                          89.39.104.0/22 maxlen: 22
                          185.180.223.0/24 maxlen: 24
                          2.59.168.0/24 maxlen: 24
                          2.59.171.0/24 maxlen: 24
                          2.59.170.0/24 maxlen: 24
                          2.59.169.0/24 maxlen: 24
                          185.132.132.0/22 maxlen: 22
                          62.112.8.0/24 maxlen: 24
                          185.165.240.0/24 maxlen: 24
                          62.112.11.0/24 maxlen: 24
                          62.112.10.0/24 maxlen: 24
                          62.112.9.0/24 maxlen: 24
                          185.165.243.0/24 maxlen: 24
                          185.165.242.0/24 maxlen: 24
                          185.165.241.0/24 maxlen: 24
                          80.79.4.0/22 maxlen: 22
                          185.132.176.0/22 maxlen: 22
                          89.38.96.0/22 maxlen: 22
                          178.132.0.0/21 maxlen: 21
                          185.172.88.0/22 maxlen: 22
                          217.23.0.0/20 maxlen: 20
                          185.184.192.0/22 maxlen: 22
                          175.110.112.0/24 maxlen: 24
                          175.110.113.0/24 maxlen: 24
                          175.110.117.0/24 maxlen: 24
                          175.110.116.0/24 maxlen: 24
                          175.110.115.0/24 maxlen: 24
                          175.110.114.0/24 maxlen: 24
                          175.110.118.0/24 maxlen: 24
                          175.110.120.0/24 maxlen: 24
                          175.110.119.0/24 maxlen: 24
                          175.110.124.0/24 maxlen: 24
                          175.110.123.0/24 maxlen: 24
                          175.110.122.0/24 maxlen: 24
                          175.110.121.0/24 maxlen: 24
                          175.110.125.0/24 maxlen: 24
                          175.110.127.0/24 maxlen: 24
                          175.110.126.0/24 maxlen: 24
                          178.218.198.0/24 maxlen: 24
                          178.218.197.0/24 maxlen: 24
                          178.218.196.0/24 maxlen: 24
                          178.218.199.0/24 maxlen: 24
                          185.185.48.0/22 maxlen: 22
                          91.232.105.0/24 maxlen: 24
                          93.190.138.0/24 maxlen: 24
                          93.190.137.0/24 maxlen: 24
                          93.190.136.0/24 maxlen: 24
                          93.190.139.0/24 maxlen: 24
                          93.190.141.0/24 maxlen: 24
                          93.190.140.0/24 maxlen: 24
                          93.190.143.0/24 maxlen: 24
                          93.190.142.0/24 maxlen: 24
                          185.2.80.0/24 maxlen: 24
                          185.177.124.0/24 maxlen: 24
                          185.2.83.0/24 maxlen: 24
                          185.2.82.0/24 maxlen: 24
                          185.2.81.0/24 maxlen: 24
                          185.177.125.0/24 maxlen: 24
                          185.177.127.0/24 maxlen: 24
                          185.177.126.0/24 maxlen: 24
                          185.191.0.0/24 maxlen: 24
                          185.191.3.0/24 maxlen: 24
                          185.191.2.0/24 maxlen: 24
                          185.191.1.0/24 maxlen: 24
                          212.8.242.0/23 maxlen: 23
                          212.8.248.0/23 maxlen: 23
                          212.8.252.0/23 maxlen: 23
                          45.14.134.0/24 maxlen: 24
                          45.14.133.0/24 maxlen: 24
                          45.14.135.0/24 maxlen: 24
                          185.183.32.0/22 maxlen: 22
                          185.182.192.0/22 maxlen: 22
                          185.21.60.0/22 maxlen: 22
                          45.14.132.0/24 maxlen: 24
                          91.229.23.0/24 maxlen: 24
                          194.88.104.0/22 maxlen: 22
                          109.236.80.0/20 maxlen: 20
                          2a00:7c80::/29 maxlen: 32
                          2a00:7c82::/32 maxlen: 32
                          2a00:7c81::/32 maxlen: 32
                          2a00:7c83::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 01 Dec 2023 21:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:27:23:49:90:de:d3:0d:d3:20:e2:97:3e:ca:22:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Feb  6 14:31:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0a4ec7f7ae2823c898b04431d1bb85286d421c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:5f:2c:2f:2b:a5:1b:e3:bb:a4:b8:8f:d8:
                    92:05:c7:32:e9:2b:d4:88:ac:e8:26:12:ea:0e:68:
                    81:56:d8:41:06:fc:7f:c1:61:6b:b5:dd:6e:43:c6:
                    32:bb:c3:8c:9d:61:de:02:0f:69:54:de:a0:31:8b:
                    12:78:55:67:ad:dd:59:7c:dc:f7:36:91:eb:c5:d4:
                    6d:a3:47:db:8e:6a:8a:14:90:5e:33:18:74:7d:5b:
                    68:2e:8e:65:10:8e:f6:fa:c2:c2:ee:e3:28:a8:a0:
                    d9:c2:1b:d8:c6:85:be:e6:83:b3:6e:22:d6:07:b4:
                    71:64:42:49:88:8e:f3:8a:1b:08:ca:aa:76:b9:37:
                    81:d3:c2:52:0e:f6:bd:3f:e8:f7:80:97:e8:91:7f:
                    c8:76:3c:48:77:16:76:0e:d0:66:73:2e:69:fc:16:
                    1f:33:ea:9f:2a:2d:ca:83:37:c1:ca:0f:61:73:22:
                    a0:cd:23:6a:6b:aa:ca:48:a7:39:b9:40:79:3e:5c:
                    e1:88:e6:10:ae:89:96:a1:8c:42:09:39:9f:87:19:
                    c1:6a:6c:a0:23:0d:66:f0:58:82:a1:77:1e:26:75:
                    fd:24:bc:ae:12:9e:ea:b9:ab:a3:8e:44:d3:85:79:
                    08:48:99:0c:fc:2f:e7:f1:29:4a:b6:91:91:38:1e:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:EC:7F:7A:E2:82:3C:89:8B:04:43:1D:1B:B8:52:86:D4:21:C5
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oKTsf3rigjyJiwRDHRu4UobUIcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.168.0/22
                  45.14.132.0/22
                  45.82.64.0/22
                  62.112.8.0/22
                  80.79.4.0/22
                  89.38.96.0/22
                  89.39.104.0/22
                  91.229.23.0/24
                  91.232.105.0/24
                  93.190.136.0/21
                  109.236.80.0/20
                  175.110.112.0/20
                  178.132.0.0/21
                  178.218.196.0/22
                  185.2.80.0/22
                  185.21.60.0/22
                  185.100.232.0/22
                  185.132.132.0/22
                  185.132.176.0/22
                  185.165.240.0/22
                  185.172.88.0/22
                  185.173.160.0/22
                  185.177.124.0/22
                  185.180.220.0/22
                  185.182.192.0/22
                  185.183.32.0/22
                  185.184.192.0/22
                  185.185.48.0/22
                  185.191.0.0/22
                  193.200.164.0/24
                  194.88.104.0/22
                  212.8.240.0/24
                  212.8.242.0/23
                  212.8.248.0-212.8.250.255
                  212.8.252.0/23
                  217.23.0.0/20
                IPv6:
                  2a00:7c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         19:52:f6:bd:d8:f7:85:a8:47:5c:51:ec:09:b1:25:df:9d:ea:
         f1:8a:ff:3a:8f:6e:3a:95:98:8a:2e:fa:9e:d4:ad:87:fd:f7:
         84:f5:0b:ff:e0:54:53:8e:bc:0f:a6:d4:27:28:ec:c9:c7:7c:
         ed:ac:ad:bb:ca:ea:3e:c7:42:99:89:7e:2b:45:fe:aa:53:ed:
         67:a7:2d:d1:f4:1c:a6:63:ec:ba:eb:32:db:5f:f1:0e:a1:c5:
         33:ba:d0:d1:fb:4e:ec:14:67:3f:04:24:eb:25:f3:37:9f:5c:
         19:4f:e9:52:6d:48:3c:76:cd:81:63:95:1e:22:f8:80:2c:48:
         4a:ae:c9:d4:da:98:d1:75:ad:11:a2:c8:f6:6b:53:6b:93:7f:
         65:72:15:02:64:63:5e:10:93:60:c4:25:21:2c:ce:1e:ec:0c:
         60:d1:7e:a2:d9:27:42:19:b3:a4:a9:c8:cc:64:9a:18:ff:c1:
         09:03:0d:8a:c2:26:30:4b:69:b1:bb:56:8d:c5:07:59:09:3e:
         ff:6d:af:cc:80:19:8c:b1:fe:9c:19:50:2b:6c:03:b2:89:99:
         c7:a0:bc:53:fc:a0:27:a2:3a:aa:6f:47:f4:93:1a:dc:36:96:
         93:2a:2b:63:ad:fe:78:53:6e:a9:af:f8:94:0e:35:0b:2b:06:
         8f:a9:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org