Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SIDvpWrjfEyw5eeYCl0z-fklnr4.roa
File:                     SIDvpWrjfEyw5eeYCl0z-fklnr4.roa (raw, json)
Hash identifier:          8/DIXog7ADHLHGg57G0EwFEym0Xkb5uu3dtG7z4Qrfo=
Subject key identifier:   48:80:EF:A5:6A:E3:7C:4C:B0:E5:E7:98:0A:5D:33:F9:F9:25:9E:BE
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       018603C551888118DD120A00947423C48396
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SIDvpWrjfEyw5eeYCl0z-fklnr4.roa
Signing time:             Mon 30 Jan 2023 17:41:48 +0000
ROA not before:           Mon 30 Jan 2023 17:41:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.156.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          80.97.176.0/23 maxlen: 23
                          193.226.81.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.120.0/24 maxlen: 24
                          193.226.123.0/24 maxlen: 24
                          193.226.27.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          194.62.122.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          217.156.107.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          85.122.192.0/18 maxlen: 18
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          194.102.183.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          194.102.106.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.181.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.252.0/22 maxlen: 22
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22
                          2a03:5e80::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:03:c5:51:88:81:18:dd:12:0a:00:94:74:23:c4:83:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan 30 17:41:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4880efa56ae37c4cb0e5e7980a5d33f9f9259ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:e3:08:ad:4b:49:12:65:ac:bb:01:d8:20:
                    33:d6:0e:f1:eb:d5:b2:a8:20:3e:25:77:3b:48:51:
                    d2:24:69:c8:6f:bf:c6:92:7f:d2:79:ab:cb:77:1b:
                    c0:24:21:53:39:7e:e3:0f:6e:47:d8:26:d5:3b:f9:
                    33:5f:41:6c:fa:1e:9e:b9:9e:ed:4c:88:28:47:71:
                    83:a0:dc:54:50:44:50:56:a1:d7:db:6b:e5:78:92:
                    03:9b:83:2c:83:d3:92:84:38:1e:39:50:6d:11:7e:
                    55:8e:8f:bc:8a:57:d3:52:0c:fd:65:0b:82:1f:8d:
                    8c:1f:80:87:9e:67:7b:04:db:6e:29:a9:2e:4a:2d:
                    15:61:c5:b7:5e:30:97:a8:93:74:b4:5b:cf:19:e5:
                    3a:5e:55:8d:b0:8a:8f:ce:67:89:a5:e6:7d:53:9d:
                    91:57:81:84:e5:01:22:d8:72:01:24:57:f0:a2:d1:
                    aa:8e:4c:47:d1:a3:3f:bb:fb:66:c2:6b:dc:87:55:
                    53:d6:98:1c:98:31:0a:31:1c:e7:b2:76:69:9f:d3:
                    46:11:8b:5b:6f:ef:3e:f5:0c:1d:3e:4d:ee:7a:9b:
                    eb:fe:de:f3:45:e6:eb:6e:74:56:9d:d1:c2:26:40:
                    28:fa:05:e1:6e:de:92:d6:77:96:c1:26:33:cb:56:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:EF:A5:6A:E3:7C:4C:B0:E5:E7:98:0A:5D:33:F9:F9:25:9E:BE
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SIDvpWrjfEyw5eeYCl0z-fklnr4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0-81.181.156.255
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.121.252.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.181.0-85.122.183.255
                  85.122.192.0/18
                  192.162.16.0/24
                  193.226.27.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.226.120.0/24
                  193.226.123.0/24
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.112.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.62.122.0/24
                  194.102.65.0/24
                  194.102.106.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.183.0/24
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0-217.156.108.255
                  217.156.119.0/24
                IPv6:
                  2a03:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:3b:09:c7:ee:81:f3:44:d3:13:be:b8:66:b7:74:94:f0:
         6b:34:ef:c4:4a:1b:9b:77:03:8a:c9:2a:ec:6b:7a:b9:52:b8:
         4c:4c:ed:7e:06:f5:2c:f0:9c:eb:44:f3:84:0e:9d:97:66:87:
         fd:ee:9f:bb:fc:d6:1f:ba:e0:45:28:cd:14:fe:e5:73:70:f5:
         9a:4a:da:53:b3:b8:ba:cb:1e:4d:57:d2:1c:8a:3e:ae:8d:9a:
         a3:87:4e:de:93:ab:1c:b5:be:2a:72:2b:e6:d0:dd:a2:30:4a:
         5a:6c:58:89:df:9e:86:a9:f5:5b:f8:30:f7:ef:5e:74:63:1f:
         4a:76:79:14:85:ae:e4:66:e6:89:5d:db:39:d1:f0:05:a3:00:
         75:2b:c9:a3:b7:c2:19:f9:0c:0a:2d:87:1b:d3:38:9c:69:ff:
         31:5c:d9:e1:19:e9:7f:a4:63:11:35:40:a0:10:ba:3c:ac:e4:
         21:26:ad:ac:46:15:dd:ca:65:55:db:ce:ee:44:6a:ab:08:9a:
         82:be:49:ec:c8:c0:de:b3:fc:f0:a4:a5:a8:d5:2b:3f:bc:38:
         7f:6f:d3:91:59:19:47:42:a9:c8:aa:6c:e8:90:3f:cd:c3:e9:
         d9:be:fc:dc:23:d9:9f:b5:d0:ab:b8:bf:c6:9e:46:a0:c6:c7:
         fa:0d:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org