Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tz1rboxtSzAi3XjM8GGkM22UjFc.roa
File:                     tz1rboxtSzAi3XjM8GGkM22UjFc.roa (raw, json)
Hash identifier:          keGmj02rGAcTn4RWGgsWT60Ji8/vfhDQamXucA0io8M=
Subject key identifier:   B7:3D:6B:6E:8C:6D:4B:30:22:DD:78:CC:F0:61:A4:33:6D:94:8C:57
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       0185782274AF4895256AA0CBD002DC76B8EA
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tz1rboxtSzAi3XjM8GGkM22UjFc.roa
Signing time:             Tue 03 Jan 2023 14:56:42 +0000
ROA not before:           Tue 03 Jan 2023 14:56:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        185.100.232.0/24 maxlen: 24
                          185.100.232.0/22 maxlen: 22
                          185.100.233.0/24 maxlen: 24
                          185.100.235.0/24 maxlen: 24
                          185.100.234.0/24 maxlen: 24
                          193.200.164.0/24 maxlen: 24
                          185.173.160.0/22 maxlen: 22
                          185.173.161.0/24 maxlen: 24
                          185.173.160.0/24 maxlen: 24
                          185.173.163.0/24 maxlen: 24
                          185.173.162.0/24 maxlen: 24
                          185.180.222.0/24 maxlen: 24
                          185.180.221.0/24 maxlen: 24
                          185.180.220.0/24 maxlen: 24
                          185.180.220.0/22 maxlen: 22
                          89.39.104.0/24 maxlen: 24
                          89.39.104.0/22 maxlen: 22
                          185.180.223.0/24 maxlen: 24
                          89.39.105.0/24 maxlen: 24
                          89.39.107.0/24 maxlen: 24
                          89.39.106.0/24 maxlen: 24
                          2.59.168.0/22 maxlen: 22
                          2.59.168.0/24 maxlen: 24
                          2.59.171.0/24 maxlen: 24
                          2.59.170.0/24 maxlen: 24
                          2.59.169.0/24 maxlen: 24
                          185.132.132.0/24 maxlen: 24
                          185.132.132.0/22 maxlen: 22
                          185.132.135.0/24 maxlen: 24
                          185.132.134.0/24 maxlen: 24
                          185.132.133.0/24 maxlen: 24
                          62.112.8.0/24 maxlen: 24
                          62.112.8.0/22 maxlen: 24
                          185.165.240.0/22 maxlen: 22
                          185.165.240.0/24 maxlen: 24
                          62.112.11.0/24 maxlen: 24
                          62.112.10.0/24 maxlen: 24
                          62.112.9.0/24 maxlen: 24
                          185.165.243.0/24 maxlen: 24
                          185.165.242.0/24 maxlen: 24
                          185.165.241.0/24 maxlen: 24
                          80.79.4.0/22 maxlen: 22
                          80.79.4.0/24 maxlen: 24
                          80.79.7.0/24 maxlen: 24
                          80.79.6.0/24 maxlen: 24
                          80.79.5.0/24 maxlen: 24
                          89.38.96.0/24 maxlen: 24
                          185.132.179.0/24 maxlen: 24
                          89.38.98.0/24 maxlen: 24
                          89.38.97.0/24 maxlen: 24
                          185.132.178.0/24 maxlen: 24
                          185.132.176.0/22 maxlen: 22
                          185.132.177.0/24 maxlen: 24
                          89.38.96.0/22 maxlen: 22
                          185.132.176.0/24 maxlen: 24
                          89.38.99.0/24 maxlen: 24
                          178.132.3.0/24 maxlen: 24
                          178.132.2.0/24 maxlen: 24
                          178.132.0.0/21 maxlen: 21
                          178.132.1.0/24 maxlen: 24
                          178.132.0.0/24 maxlen: 24
                          178.132.4.0/24 maxlen: 24
                          178.132.6.0/24 maxlen: 24
                          178.132.5.0/24 maxlen: 24
                          178.132.7.0/24 maxlen: 24
                          185.172.90.0/24 maxlen: 24
                          185.172.89.0/24 maxlen: 24
                          185.172.88.0/24 maxlen: 24
                          185.172.88.0/22 maxlen: 22
                          185.172.91.0/24 maxlen: 24
                          217.23.0.0/24 maxlen: 24
                          217.23.3.0/24 maxlen: 24
                          217.23.0.0/20 maxlen: 20
                          217.23.2.0/24 maxlen: 24
                          217.23.1.0/24 maxlen: 24
                          217.23.4.0/24 maxlen: 24
                          217.23.7.0/24 maxlen: 24
                          217.23.6.0/24 maxlen: 24
                          217.23.5.0/24 maxlen: 24
                          217.23.10.0/24 maxlen: 24
                          217.23.9.0/24 maxlen: 24
                          217.23.8.0/24 maxlen: 24
                          217.23.11.0/24 maxlen: 24
                          217.23.14.0/24 maxlen: 24
                          217.23.13.0/24 maxlen: 24
                          217.23.12.0/24 maxlen: 24
                          185.184.192.0/22 maxlen: 22
                          185.184.192.0/24 maxlen: 24
                          217.23.15.0/24 maxlen: 24
                          185.184.195.0/24 maxlen: 24
                          185.184.194.0/24 maxlen: 24
                          185.184.193.0/24 maxlen: 24
                          178.218.198.0/24 maxlen: 24
                          178.218.196.0/22 maxlen: 22
                          178.218.197.0/24 maxlen: 24
                          178.218.196.0/24 maxlen: 24
                          178.218.199.0/24 maxlen: 24
                          185.185.48.0/24 maxlen: 24
                          185.185.48.0/22 maxlen: 22
                          185.185.51.0/24 maxlen: 24
                          185.185.50.0/24 maxlen: 24
                          185.185.49.0/24 maxlen: 24
                          91.232.105.0/24 maxlen: 24
                          93.190.138.0/24 maxlen: 24
                          93.190.137.0/24 maxlen: 24
                          93.190.136.0/24 maxlen: 24
                          93.190.136.0/21 maxlen: 22
                          93.190.139.0/24 maxlen: 24
                          93.190.141.0/24 maxlen: 24
                          93.190.140.0/22 maxlen: 22
                          93.190.140.0/24 maxlen: 24
                          93.190.143.0/24 maxlen: 24
                          93.190.142.0/24 maxlen: 24
                          185.2.80.0/24 maxlen: 24
                          185.2.80.0/22 maxlen: 22
                          185.177.124.0/24 maxlen: 24
                          185.2.83.0/24 maxlen: 24
                          185.177.124.0/22 maxlen: 22
                          185.2.82.0/24 maxlen: 24
                          185.2.81.0/24 maxlen: 24
                          185.177.125.0/24 maxlen: 24
                          185.177.127.0/24 maxlen: 24
                          185.177.126.0/24 maxlen: 24
                          185.191.0.0/24 maxlen: 24
                          185.191.0.0/22 maxlen: 22
                          185.191.3.0/24 maxlen: 24
                          185.191.2.0/24 maxlen: 24
                          185.191.1.0/24 maxlen: 24
                          212.8.240.0/24 maxlen: 24
                          212.8.242.0/23 maxlen: 23
                          212.8.243.0/24 maxlen: 24
                          212.8.242.0/24 maxlen: 24
                          212.8.248.0/24 maxlen: 24
                          212.8.248.0/23 maxlen: 23
                          212.8.250.0/24 maxlen: 24
                          212.8.249.0/24 maxlen: 24
                          212.8.253.0/24 maxlen: 24
                          212.8.252.0/23 maxlen: 23
                          212.8.252.0/24 maxlen: 24
                          45.14.134.0/24 maxlen: 24
                          45.14.133.0/24 maxlen: 24
                          45.14.135.0/24 maxlen: 24
                          185.183.35.0/24 maxlen: 24
                          185.183.34.0/24 maxlen: 24
                          185.183.32.0/22 maxlen: 22
                          185.183.33.0/24 maxlen: 24
                          185.183.32.0/24 maxlen: 24
                          194.88.107.0/24 maxlen: 24
                          194.88.106.0/24 maxlen: 24
                          185.182.192.0/22 maxlen: 22
                          185.182.192.0/24 maxlen: 24
                          185.182.193.0/24 maxlen: 24
                          185.182.195.0/24 maxlen: 24
                          185.182.194.0/24 maxlen: 24
                          185.21.60.0/24 maxlen: 24
                          185.21.60.0/22 maxlen: 22
                          185.21.63.0/24 maxlen: 24
                          185.21.62.0/24 maxlen: 24
                          185.21.61.0/24 maxlen: 24
                          45.14.132.0/22 maxlen: 22
                          45.14.132.0/24 maxlen: 24
                          45.82.64.0/22 maxlen: 22
                          91.229.23.0/24 maxlen: 24
                          194.88.105.0/24 maxlen: 24
                          194.88.104.0/24 maxlen: 24
                          194.88.104.0/22 maxlen: 22
                          109.236.83.0/24 maxlen: 24
                          109.236.82.0/24 maxlen: 24
                          109.236.81.0/24 maxlen: 24
                          109.236.80.0/20 maxlen: 20
                          109.236.80.0/24 maxlen: 24
                          109.236.85.0/24 maxlen: 24
                          109.236.84.0/24 maxlen: 24
                          109.236.91.0/24 maxlen: 24
                          109.236.86.0/24 maxlen: 24
                          109.236.90.0/24 maxlen: 24
                          109.236.89.0/24 maxlen: 24
                          109.236.88.0/24 maxlen: 24
                          109.236.87.0/24 maxlen: 24
                          109.236.93.0/24 maxlen: 24
                          109.236.92.0/24 maxlen: 24
                          109.236.95.0/24 maxlen: 24
                          109.236.94.0/24 maxlen: 24
                          2a00:7c80::/29 maxlen: 32
                          2a00:7c82::/32 maxlen: 32
                          2a00:7c81::/32 maxlen: 32
                          2a00:7c83::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 06 Feb 2023 14:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:78:22:74:af:48:95:25:6a:a0:cb:d0:02:dc:76:b8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Jan  3 14:56:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b73d6b6e8c6d4b3022dd78ccf061a4336d948c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:f7:d6:e1:a8:88:a5:33:20:4f:b3:d6:82:
                    42:99:8e:66:5d:6a:9b:77:f7:90:e9:28:01:1a:3e:
                    8e:e8:e4:dc:a0:eb:74:63:a8:1b:76:c9:9f:29:7f:
                    f0:37:32:ff:a1:50:2c:9a:cb:eb:ec:d0:84:55:d3:
                    f5:91:28:d8:3b:d4:53:3d:19:82:13:3c:76:eb:91:
                    bc:a1:d5:8a:d3:c3:21:81:8a:67:a1:01:ca:3b:38:
                    4d:51:2f:9c:61:56:de:32:08:07:76:d0:6a:4c:0d:
                    9c:16:53:a9:ac:b8:b0:30:e0:ff:de:9b:83:d5:2a:
                    b4:60:16:e6:4d:4d:81:38:b6:28:aa:04:64:52:99:
                    86:69:2f:83:9c:de:5f:3c:9b:6c:cf:66:0a:10:fe:
                    1e:0c:c7:0d:62:62:70:1c:2e:76:66:f1:62:d7:dc:
                    94:b2:6f:9b:d6:bf:a0:95:0d:df:88:2e:13:89:49:
                    b7:01:89:03:20:75:03:e6:1d:11:de:a6:71:69:0e:
                    07:46:72:40:c6:a3:04:61:5e:c5:1d:3d:9c:43:11:
                    aa:51:3b:c8:08:99:bb:29:04:f8:78:2d:e8:5c:b8:
                    c4:bd:b7:18:ae:d8:b5:92:16:74:4a:80:83:cc:90:
                    a0:6a:0c:31:24:62:67:14:f1:04:33:f8:30:3b:8e:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:6B:6E:8C:6D:4B:30:22:DD:78:CC:F0:61:A4:33:6D:94:8C:57
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tz1rboxtSzAi3XjM8GGkM22UjFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.168.0/22
                  45.14.132.0/22
                  45.82.64.0/22
                  62.112.8.0/22
                  80.79.4.0/22
                  89.38.96.0/22
                  89.39.104.0/22
                  91.229.23.0/24
                  91.232.105.0/24
                  93.190.136.0/21
                  109.236.80.0/20
                  178.132.0.0/21
                  178.218.196.0/22
                  185.2.80.0/22
                  185.21.60.0/22
                  185.100.232.0/22
                  185.132.132.0/22
                  185.132.176.0/22
                  185.165.240.0/22
                  185.172.88.0/22
                  185.173.160.0/22
                  185.177.124.0/22
                  185.180.220.0/22
                  185.182.192.0/22
                  185.183.32.0/22
                  185.184.192.0/22
                  185.185.48.0/22
                  185.191.0.0/22
                  193.200.164.0/24
                  194.88.104.0/22
                  212.8.240.0/24
                  212.8.242.0/23
                  212.8.248.0-212.8.250.255
                  212.8.252.0/23
                  217.23.0.0/20
                IPv6:
                  2a00:7c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:da:dd:20:55:15:02:3d:d7:96:b0:38:90:b8:98:40:7a:e4:
         b0:dd:53:31:cb:6c:d7:37:c9:60:77:87:64:6d:75:1d:d1:3c:
         4c:91:53:b6:a3:a5:fe:ad:d8:87:0e:e7:2a:75:bb:73:eb:16:
         df:d7:64:b5:d8:46:05:3b:79:84:d4:4a:f6:a3:23:b5:99:2a:
         c0:29:05:b4:5a:83:56:80:28:a5:f5:12:76:83:a4:90:51:0c:
         b4:83:06:fb:43:48:44:fd:f7:df:30:40:85:82:5c:2e:c6:a6:
         a8:30:bc:43:83:3c:c8:d0:d5:e6:8b:ff:c5:5e:0c:ec:0a:25:
         cc:9d:df:b9:b4:3d:99:47:a0:b2:9f:44:d0:ba:5f:be:3c:31:
         b3:e5:86:c7:9d:28:f6:9b:18:14:55:45:f2:2e:54:89:2c:aa:
         b7:8d:cc:95:ca:ca:14:ce:4c:8b:df:05:0d:d8:11:61:9e:74:
         32:c5:c6:4b:92:ca:ff:10:6a:b7:d6:20:98:f2:21:c9:3a:30:
         52:a7:0f:a5:f3:5a:d6:c6:67:10:6d:20:94:2f:ed:f7:10:d3:
         63:68:43:4e:2c:0f:82:a3:de:58:bb:e6:1c:1b:03:fd:99:ce:
         5b:fa:a6:d1:82:8a:e2:b4:01:e1:b9:cc:2e:ae:c0:92:8c:dc:
         6b:9e:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:26 2024 by rpki-client on console-ams.rpki-client.org