Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fa7Qkq7T7dcAKZgNfF-BcNeEZh4.roa
File:                     Fa7Qkq7T7dcAKZgNfF-BcNeEZh4.roa (raw, json)
Hash identifier:          HbjIxtuXffH2B7hPGkHOEKi/NbT7/WUztrkW4pGlbWk=
Subject key identifier:   15:AE:D0:92:AE:D3:ED:D7:00:29:98:0D:7C:5F:81:70:D7:84:66:1E
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       018A07786219A052710F0A21738039788BD3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fa7Qkq7T7dcAKZgNfF-BcNeEZh4.roa
Signing time:             Fri 18 Aug 2023 07:07:24 +0000
ROA not before:           Fri 18 Aug 2023 07:07:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.156.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          85.120.40.0/23 maxlen: 23
                          80.97.176.0/23 maxlen: 23
                          193.226.81.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.120.0/24 maxlen: 24
                          193.226.123.0/24 maxlen: 24
                          193.226.27.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.45.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          193.230.192.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.207.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          194.62.122.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          217.156.107.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.181.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          85.121.160.0/22 maxlen: 22
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.252.0/22 maxlen: 22
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22
                          2a03:5e80::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:07:78:62:19:a0:52:71:0f:0a:21:73:80:39:78:8b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Aug 18 07:07:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15aed092aed3edd70029980d7c5f8170d784661e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:ab:84:3a:96:a4:76:c4:f0:e8:94:5f:21:
                    fb:ab:f6:6e:f3:76:1a:b9:d9:6f:12:70:a2:e4:55:
                    4d:7f:cb:b6:bf:eb:39:ef:e2:03:00:18:f5:5f:0f:
                    e1:e7:79:e0:ea:44:f8:c5:a1:5d:db:44:f6:52:11:
                    04:28:eb:27:67:69:36:e4:07:d2:9d:da:50:b3:97:
                    ec:e4:a4:6d:73:91:53:9b:67:d7:a1:79:ca:e2:c9:
                    e0:6f:67:ab:ce:f3:cf:5c:52:6e:33:02:46:37:8c:
                    a3:54:b0:4c:24:ed:13:a6:04:83:d7:88:2c:d9:e1:
                    7f:6d:9c:b8:c7:95:75:5e:e4:7b:95:51:03:5f:be:
                    de:e4:ac:4b:a5:9c:22:e5:4a:70:f1:1f:45:b3:b9:
                    fb:a4:a4:ba:b4:fc:45:1a:90:4d:be:ca:eb:d6:b1:
                    4b:a3:41:ec:a9:b9:04:de:21:07:2c:b3:d3:0d:3c:
                    f1:53:7f:3c:10:5a:f9:f1:c8:47:16:c5:98:b0:25:
                    92:1e:a6:98:04:c3:e3:c6:74:f1:02:e9:c0:10:5d:
                    af:81:1c:33:46:8d:34:35:0c:60:e7:46:28:9b:ea:
                    26:c3:fa:ff:6d:99:5e:a3:51:16:bf:1b:64:2c:40:
                    c3:f3:5d:1f:7b:b7:cb:c9:e5:1d:cf:46:f4:a2:52:
                    ca:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:D0:92:AE:D3:ED:D7:00:29:98:0D:7C:5F:81:70:D7:84:66:1E
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fa7Qkq7T7dcAKZgNfF-BcNeEZh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0-81.181.156.255
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.40.0-85.120.42.255
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0-85.121.163.255
                  85.121.198.0/24
                  85.121.220.0/22
                  85.121.252.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.181.0-85.122.183.255
                  192.162.16.0/24
                  193.226.27.0/24
                  193.226.35.0/24
                  193.226.45.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.226.120.0/24
                  193.226.123.0/24
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.192.0/24
                  193.230.207.0-193.230.208.255
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.112.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.62.122.0/24
                  194.102.65.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0-217.156.108.255
                  217.156.119.0/24
                IPv6:
                  2a03:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:15:b6:9b:19:6e:23:36:21:8d:e0:ba:77:6e:d2:94:9b:
         00:2a:6b:ba:23:93:00:1f:a1:34:dc:99:31:b5:cf:5f:93:3d:
         3c:32:b1:f4:c8:69:c1:af:90:3a:c9:72:8a:d5:ab:57:70:1d:
         4e:4f:cf:ab:56:c5:6e:dd:d7:33:c5:d7:23:7b:fb:e4:2e:fd:
         78:63:60:6a:75:30:3b:e2:44:fc:c1:8f:ea:bc:7f:cf:87:42:
         0d:6e:30:09:57:da:2b:ee:97:81:f9:92:72:8f:a8:7e:22:f0:
         f7:f9:24:00:f3:ae:8c:f9:39:4f:db:6c:42:c8:9f:27:94:53:
         9c:37:df:37:96:ee:9a:65:af:e8:2a:2e:0b:67:b3:cc:6d:98:
         92:e9:ee:b6:cd:4a:bb:88:cf:01:cc:9f:80:f3:3b:37:7b:7f:
         6f:50:c8:7d:ab:6a:35:8f:54:ba:5c:ba:e0:c9:5b:db:e7:16:
         e4:e6:be:b1:fc:c8:75:f2:61:10:1c:1a:82:79:d0:bb:c1:15:
         ed:f5:f1:89:d4:1d:03:ca:67:1a:41:fc:c3:dc:e0:80:c1:c0:
         4d:a2:5f:ac:d3:af:59:2e:36:1f:f4:6b:e2:84:1d:96:59:eb:
         c5:3a:51:bb:aa:ed:19:30:e9:44:5c:db:b2:f4:25:9c:0f:74:
         4b:7a:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 18:10:00 2023 by rpki-client on console-ams.rpki-client.org