Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IWdSbFGs_plFRIXHKg531kgAgt4.roa
File:                     IWdSbFGs_plFRIXHKg531kgAgt4.roa (raw, json)
Hash identifier:          u4srH/yjhc5y7YQXpDjwYA6akgqSaG/MM+NkT5JULtI=
Subject key identifier:   21:67:52:6C:51:AC:FE:99:45:44:85:C7:2A:0E:77:D6:48:00:82:DE
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       018756A31A956C303A82858693D0D50B2922
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IWdSbFGs_plFRIXHKg531kgAgt4.roa
Signing time:             Thu 06 Apr 2023 12:55:42 +0000
ROA not before:           Thu 06 Apr 2023 12:55:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.156.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          80.97.176.0/23 maxlen: 23
                          193.226.81.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.120.0/24 maxlen: 24
                          193.226.123.0/24 maxlen: 24
                          193.226.27.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.45.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          194.62.122.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          217.156.107.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.181.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.252.0/22 maxlen: 22
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22
                          2a03:5e80::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:56:a3:1a:95:6c:30:3a:82:85:86:93:d0:d5:0b:29:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Apr  6 12:55:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2167526c51acfe99454485c72a0e77d6480082de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:71:ff:e8:8f:0e:64:4a:4c:27:2c:9a:71:
                    df:38:2c:1d:16:cf:5d:7b:fb:7e:f8:91:47:a4:2c:
                    4d:49:66:8c:f3:8b:3c:c0:e7:fd:51:cd:8e:fc:ca:
                    e0:5d:90:78:6e:4b:12:e9:33:69:9f:67:ae:20:15:
                    45:74:45:a1:ce:98:d3:fe:c7:6c:f0:b8:1a:72:75:
                    40:a7:1d:c4:ed:46:b5:bf:56:cc:26:30:7d:9b:67:
                    40:ce:22:2f:cf:48:70:76:5d:47:69:77:13:48:de:
                    ef:12:bb:ff:81:35:08:6f:52:ef:dd:01:19:53:df:
                    10:18:5e:c3:ae:54:30:09:9d:0c:c4:4d:3c:1f:fc:
                    31:c7:d3:f4:e5:aa:de:c2:be:6c:d5:96:aa:d3:83:
                    d1:be:1b:cd:36:a6:f5:a8:7b:ac:c4:9f:a9:54:bb:
                    e2:cd:1b:91:3a:b2:a4:2a:e8:63:d4:4b:06:95:7e:
                    2a:da:dc:c8:57:b4:74:84:b8:ca:d3:0e:11:70:52:
                    f2:cc:69:0e:ad:41:ee:35:1f:a0:55:b4:d6:15:62:
                    59:91:f1:7b:ff:24:f2:32:14:8c:87:8b:5d:11:60:
                    6a:1e:ea:b3:bf:62:dc:42:60:f2:70:27:b2:c9:d5:
                    af:69:99:10:8d:28:7e:c0:f1:82:69:15:f0:2d:54:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:67:52:6C:51:AC:FE:99:45:44:85:C7:2A:0E:77:D6:48:00:82:DE
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IWdSbFGs_plFRIXHKg531kgAgt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0-81.181.156.255
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.121.252.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.181.0-85.122.183.255
                  192.162.16.0/24
                  193.226.27.0/24
                  193.226.35.0/24
                  193.226.45.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.226.120.0/24
                  193.226.123.0/24
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.112.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.62.122.0/24
                  194.102.65.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0-217.156.108.255
                  217.156.119.0/24
                IPv6:
                  2a03:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:a1:f8:4e:12:78:d2:4d:62:64:6a:f6:e5:7f:9a:0e:a3:
         70:20:4c:c3:21:2f:fd:21:06:e5:3f:86:4f:44:54:38:06:f3:
         0b:88:f3:90:75:24:60:02:0d:82:78:5b:0a:2a:40:f5:0f:d1:
         da:4b:38:7d:38:79:ba:f2:00:34:28:39:71:81:63:78:57:0c:
         4a:9b:a6:13:52:44:53:36:35:61:da:90:d3:13:d6:6b:4c:fe:
         e8:a4:b3:88:20:0d:ba:a9:37:35:a0:eb:b2:6c:58:fe:4a:ac:
         b0:a7:10:e1:9d:ce:b7:5d:32:47:3f:2a:c0:06:f2:ae:5d:a4:
         ad:5a:21:be:de:c8:18:0a:cb:1e:3a:51:23:28:22:a6:79:fb:
         51:70:76:7c:a7:70:e8:17:f8:c0:93:f8:0b:d6:3c:93:26:af:
         0e:d9:7a:cd:c3:a7:c6:33:ff:5a:a1:85:50:e3:7b:f4:ad:5b:
         b3:1f:f9:46:82:51:23:61:a6:95:ab:cd:2e:2a:79:de:47:d3:
         28:02:6c:d2:bb:30:66:18:f3:8e:25:0c:61:5f:48:a5:0a:a7:
         24:11:ba:91:e7:fe:f9:34:9e:6a:50:78:ce:5f:e6:38:c7:d3:
         b6:d5:4e:63:8f:d4:7e:2f:04:f3:62:2b:32:38:04:63:66:8a:
         20:56:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org