Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-k-ryDYC6kF4u5N67TU77yBEoIg.roa
File:                     1-k-ryDYC6kF4u5N67TU77yBEoIg.roa (raw, json)
Hash identifier:          J5MbEiZrQ4um+psr3RmUAZn7er0aEu5X4IaI/wIXpR4=
Subject key identifier:   FA:4F:AB:C8:36:02:EA:41:78:BB:93:7A:ED:35:3B:EF:20:44:A0:88
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       0186025D826681248A493B06C319148B52A7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-k-ryDYC6kF4u5N67TU77yBEoIg.roa
Signing time:             Mon 30 Jan 2023 11:08:47 +0000
ROA not before:           Mon 30 Jan 2023 11:08:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.156.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          81.180.192.0/21 maxlen: 21
                          85.120.42.0/24 maxlen: 24
                          80.97.176.0/23 maxlen: 23
                          193.226.81.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.120.0/24 maxlen: 24
                          193.226.123.0/24 maxlen: 24
                          193.226.27.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          193.231.164.0/23 maxlen: 23
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          194.62.122.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          193.231.48.0/20 maxlen: 20
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          217.156.107.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          85.122.192.0/18 maxlen: 18
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          194.102.183.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          194.102.106.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.181.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.252.0/22 maxlen: 22
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22
                          2a03:5e80::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:5d:82:66:81:24:8a:49:3b:06:c3:19:14:8b:52:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan 30 11:08:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa4fabc83602ea4178bb937aed353bef2044a088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:71:f4:25:19:12:83:54:86:f2:d0:6b:82:
                    74:22:a0:d8:67:6e:7e:9e:1d:31:86:eb:01:2a:b4:
                    fd:cd:50:e9:cb:63:a9:1d:59:c9:42:eb:0f:2a:a9:
                    98:00:c4:44:a4:21:f6:f1:16:e4:a7:fa:86:42:84:
                    54:45:b7:5a:97:0b:70:9a:6e:f3:a3:eb:17:40:67:
                    41:0e:94:4d:9a:91:f3:65:b6:e7:6f:99:d4:cb:c0:
                    56:1e:47:cb:db:c8:90:74:5f:7a:6a:da:1a:f4:70:
                    1d:0f:1a:80:08:f9:6c:75:df:62:7e:92:86:6c:f7:
                    db:3a:29:7b:22:9d:3a:3b:c5:07:5d:6d:6c:d2:fa:
                    61:24:4a:61:a6:60:b1:0c:e4:ba:68:22:f1:36:f1:
                    58:3a:e1:48:13:81:e6:69:25:35:8a:19:c3:68:86:
                    c3:b1:3f:f7:54:35:72:b3:eb:f8:bf:15:5d:70:e2:
                    65:0d:93:6d:8d:43:66:4b:1f:de:a9:0b:a9:a9:5e:
                    6c:a6:89:a3:6c:c6:be:80:97:fe:91:60:eb:d4:cd:
                    c3:6d:d1:8f:8d:51:9c:0d:ea:24:36:84:07:aa:37:
                    76:fe:64:2f:a4:26:20:4a:44:8a:6e:06:d2:fe:43:
                    98:f3:dd:5d:7f:f5:f0:51:f2:f9:e0:df:8a:1b:eb:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4F:AB:C8:36:02:EA:41:78:BB:93:7A:ED:35:3B:EF:20:44:A0:88
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-k-ryDYC6kF4u5N67TU77yBEoIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.192.0/21
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0-81.181.156.255
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.121.252.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.181.0-85.122.183.255
                  85.122.192.0/18
                  192.162.16.0/24
                  193.226.27.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.226.120.0/24
                  193.226.123.0/24
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.48.0/20
                  193.231.81.0/24
                  193.231.112.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0-193.231.165.255
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.62.122.0/24
                  194.102.65.0/24
                  194.102.106.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.183.0/24
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0-217.156.108.255
                  217.156.119.0/24
                IPv6:
                  2a03:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:10:e5:8c:d2:b3:a6:03:bd:b0:e2:ab:2b:95:47:aa:5b:
         47:3d:90:d4:65:73:ee:99:1a:18:9d:98:ef:a5:fa:b8:62:80:
         c4:f8:69:26:19:8a:c7:b6:15:2b:9f:65:04:71:e2:2b:fa:35:
         26:fd:48:8a:7c:57:b6:23:d1:ff:39:eb:d9:2b:4b:59:93:4f:
         9b:b9:b8:15:47:a2:06:53:98:69:e5:c0:86:84:84:2d:76:78:
         ff:20:a7:53:cc:60:c7:4b:29:f4:6c:10:a1:7d:82:7b:6b:de:
         bb:40:be:76:0a:df:a3:0e:00:7b:90:ca:04:bd:d7:51:b2:f8:
         8c:68:95:5d:f6:ed:57:4f:92:57:1e:43:b1:81:04:0f:f8:fc:
         98:f7:cc:f0:08:dc:c0:19:97:4a:c3:0a:f6:7e:a4:51:4a:e8:
         f3:7d:1a:0b:cb:2c:0e:0e:ea:13:74:24:7d:fa:d1:2f:00:05:
         44:fd:46:fe:56:cf:b2:74:c6:fc:e6:71:93:61:ab:bb:6b:de:
         c1:2e:5c:86:ad:2b:27:c9:2c:c6:3d:0f:90:80:a4:ca:49:55:
         b1:8f:d4:7b:cb:1a:bd:23:66:39:e0:41:4b:b5:15:33:bf:1b:
         89:7e:31:4a:3b:41:2b:67:66:c9:70:f1:af:9b:1d:e1:bd:bb:
         fc:38:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org