Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZIMrZCrAyIr6BdNTM_63pTokIXs.roa
File:                     ZIMrZCrAyIr6BdNTM_63pTokIXs.roa (raw, json)
Hash identifier:          k6FR5PJXdPEFxUH6wXXSFGaAC3BoJ1UOI+6SH9qWHLQ=
Subject key identifier:   64:83:2B:64:2A:C0:C8:8A:FA:05:D3:53:33:FE:B7:A5:3A:24:21:7B
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01898178864E9067F1D82D5858B519650996
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZIMrZCrAyIr6BdNTM_63pTokIXs.roa
Signing time:             Sun 23 Jul 2023 06:38:26 +0000
ROA not before:           Sun 23 Jul 2023 06:38:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.156.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          85.120.40.0/23 maxlen: 23
                          80.97.176.0/23 maxlen: 23
                          193.226.81.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.120.0/24 maxlen: 24
                          193.226.123.0/24 maxlen: 24
                          193.226.27.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.45.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          193.230.192.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.207.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          194.62.122.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          217.156.107.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.181.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.252.0/22 maxlen: 22
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22
                          2a03:5e80::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:81:78:86:4e:90:67:f1:d8:2d:58:58:b5:19:65:09:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jul 23 06:38:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64832b642ac0c88afa05d35333feb7a53a24217b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:70:2e:08:18:a0:a9:b1:88:74:8f:b0:2f:
                    bc:91:9e:50:6e:90:92:18:ac:4c:ee:48:cc:65:28:
                    70:51:cc:63:91:0b:a7:69:20:99:70:3f:bb:d4:2b:
                    8c:7c:6d:03:ea:20:f4:86:a4:07:28:86:00:c3:85:
                    79:2d:56:27:fb:e5:6e:dd:41:fd:01:25:9f:76:e0:
                    cf:e1:45:e2:e2:ed:ef:b3:35:d0:e1:1f:97:96:91:
                    70:a9:5b:c2:fc:57:1b:f9:6c:5f:19:88:80:46:e3:
                    94:d3:8b:a4:85:ad:4c:ee:82:b2:ad:4d:e8:19:ad:
                    64:fd:e6:59:5e:f0:a9:73:dc:dd:b2:f6:14:eb:82:
                    fd:f1:04:fb:9c:f3:dc:00:47:dc:fb:7c:b1:60:8c:
                    e5:42:43:4d:98:ae:87:44:7f:c8:8d:21:14:21:e6:
                    01:f0:ee:d5:12:0a:d2:57:d6:85:bd:50:49:d2:c2:
                    54:af:37:a5:c4:1b:89:44:9b:43:7d:c5:9f:95:9e:
                    07:32:1b:f9:16:b3:7e:6e:86:86:da:66:26:f5:07:
                    9d:86:83:24:e8:d6:82:45:5b:66:ef:69:71:89:b8:
                    50:6e:91:90:ba:60:04:83:af:2b:13:f5:01:de:d8:
                    b3:74:1a:be:55:a7:93:b7:0a:44:7b:f5:a7:1d:1d:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:83:2B:64:2A:C0:C8:8A:FA:05:D3:53:33:FE:B7:A5:3A:24:21:7B
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZIMrZCrAyIr6BdNTM_63pTokIXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0-81.181.156.255
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.40.0-85.120.42.255
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.121.252.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.181.0-85.122.183.255
                  192.162.16.0/24
                  193.226.27.0/24
                  193.226.35.0/24
                  193.226.45.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.226.120.0/24
                  193.226.123.0/24
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.192.0/24
                  193.230.207.0-193.230.208.255
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.112.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.62.122.0/24
                  194.102.65.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0-217.156.108.255
                  217.156.119.0/24
                IPv6:
                  2a03:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:e0:df:4b:6b:60:8d:4c:c2:94:22:6f:6b:ed:2f:92:50:
         41:97:aa:88:ca:e5:2b:b8:95:20:74:a0:1c:89:0e:41:ab:0d:
         e4:8e:f4:4b:d1:aa:05:09:21:1e:bd:63:11:2c:c5:c7:6f:2e:
         d4:2a:35:04:26:13:34:ab:59:ac:68:18:52:57:5b:17:d4:5d:
         57:12:80:c1:46:bd:51:ac:ed:c1:c5:59:68:d9:ab:98:de:90:
         22:7c:e1:55:15:ee:ef:98:8e:23:9c:ae:b3:69:be:a7:ca:fd:
         03:70:56:b0:70:95:68:e0:12:e4:1b:e5:9d:d6:4c:29:90:80:
         b6:66:6a:e1:56:e1:da:a8:74:3a:b6:6d:cb:49:3f:a4:68:06:
         eb:ce:ee:1e:b0:70:31:71:d6:b9:43:a0:95:2c:f6:be:50:e1:
         2f:1f:bc:4a:c1:43:ae:88:23:12:28:2d:3b:d7:27:fb:fd:17:
         ef:9a:fc:71:79:05:f7:c8:53:b6:51:c2:3f:58:36:77:56:75:
         74:6c:d6:56:59:5f:74:b2:50:9e:80:e2:0f:c3:ad:43:d7:8d:
         9d:37:a6:f6:29:5e:21:32:dc:f7:2f:ae:12:30:86:06:4f:86:
         ed:ed:ef:2e:c9:e7:eb:c2:07:56:10:3f:44:4c:69:75:4c:df:
         8f:85:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 07:51:37 2023 by rpki-client on console-ams.rpki-client.org