Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lo0fPRMReH4oSoZViVzB_keUHdk.roa
File:                     lo0fPRMReH4oSoZViVzB_keUHdk.roa (raw, json)
Hash identifier:          4wHs9Dv4n3wr5wGzd7nlGMR8Pylyv87Dx8lvapqHwsM=
Subject key identifier:   96:8D:1F:3D:13:11:78:7E:28:4A:86:55:89:5C:C1:FE:47:94:1D:D9
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01865930277C17A1515AF78638DE55E2C7F4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lo0fPRMReH4oSoZViVzB_keUHdk.roa
Signing time:             Thu 16 Feb 2023 07:46:13 +0000
ROA not before:           Thu 16 Feb 2023 07:46:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3233
IP address blocks:        85.120.170.0/24 maxlen: 24
                          81.181.74.0/24 maxlen: 24
                          85.120.178.0/24 maxlen: 24
                          81.181.86.0/24 maxlen: 24
                          85.120.192.0/21 maxlen: 21
                          81.181.100.0/24 maxlen: 24
                          85.120.155.0/24 maxlen: 24
                          81.181.192.0/24 maxlen: 24
                          81.181.199.0/24 maxlen: 24
                          85.121.38.0/24 maxlen: 24
                          85.121.40.0/21 maxlen: 21
                          81.181.213.0/24 maxlen: 24
                          81.181.212.0/24 maxlen: 24
                          85.121.60.0/22 maxlen: 22
                          81.181.152.0/24 maxlen: 24
                          81.181.148.0/24 maxlen: 24
                          81.181.156.0/24 maxlen: 24
                          81.181.155.0/24 maxlen: 24
                          85.121.6.0/23 maxlen: 23
                          81.180.143.0/24 maxlen: 24
                          81.180.96.0/22 maxlen: 22
                          194.153.238.0/24 maxlen: 24
                          194.153.234.0/24 maxlen: 24
                          194.153.242.0/23 maxlen: 23
                          194.153.245.0/24 maxlen: 24
                          85.120.66.0/23 maxlen: 23
                          81.180.239.0/24 maxlen: 24
                          194.153.247.0/24 maxlen: 24
                          81.180.234.0/24 maxlen: 24
                          81.181.0.0/24 maxlen: 24
                          85.120.42.0/24 maxlen: 24
                          80.97.176.0/23 maxlen: 23
                          193.226.81.0/24 maxlen: 24
                          193.226.84.0/24 maxlen: 24
                          193.226.80.0/24 maxlen: 24
                          193.226.99.0/24 maxlen: 24
                          193.226.101.0/24 maxlen: 24
                          193.226.112.0/24 maxlen: 24
                          193.226.111.0/24 maxlen: 24
                          193.226.120.0/24 maxlen: 24
                          193.226.123.0/24 maxlen: 24
                          193.226.27.0/24 maxlen: 24
                          193.226.35.0/24 maxlen: 24
                          193.226.65.0/24 maxlen: 24
                          194.105.6.0/24 maxlen: 24
                          193.231.204.0/24 maxlen: 24
                          193.231.240.0/24 maxlen: 24
                          193.231.244.0/24 maxlen: 24
                          80.97.54.0/24 maxlen: 24
                          193.231.247.0/24 maxlen: 24
                          193.231.249.0/24 maxlen: 24
                          80.96.216.0/24 maxlen: 24
                          80.96.220.0/24 maxlen: 24
                          80.96.228.0/24 maxlen: 24
                          193.231.163.0/24 maxlen: 24
                          193.231.168.0/24 maxlen: 24
                          80.96.238.0/24 maxlen: 24
                          193.231.192.0/24 maxlen: 24
                          80.96.255.0/24 maxlen: 24
                          80.97.144.0/24 maxlen: 24
                          80.97.171.0/24 maxlen: 24
                          193.231.254.0/24 maxlen: 24
                          193.230.244.0/24 maxlen: 24
                          194.102.247.0/24 maxlen: 24
                          80.96.75.0/24 maxlen: 24
                          80.96.76.0/24 maxlen: 24
                          80.96.17.0/24 maxlen: 24
                          193.230.212.0/24 maxlen: 24
                          193.230.208.0/24 maxlen: 24
                          193.230.211.0/24 maxlen: 24
                          193.230.219.0/24 maxlen: 24
                          193.230.225.0/24 maxlen: 24
                          194.62.122.0/24 maxlen: 24
                          80.96.170.0/24 maxlen: 24
                          193.231.112.0/24 maxlen: 24
                          80.96.181.0/24 maxlen: 24
                          193.231.114.0/24 maxlen: 24
                          193.231.116.0/23 maxlen: 23
                          80.96.190.0/24 maxlen: 24
                          193.231.119.0/24 maxlen: 24
                          80.96.207.0/24 maxlen: 24
                          80.96.209.0/24 maxlen: 24
                          80.96.109.0/24 maxlen: 24
                          80.96.108.0/24 maxlen: 24
                          80.96.136.0/24 maxlen: 24
                          193.231.81.0/24 maxlen: 24
                          217.156.0.0/24 maxlen: 24
                          217.156.2.0/24 maxlen: 24
                          85.122.83.0/24 maxlen: 24
                          217.156.6.0/24 maxlen: 24
                          217.156.11.0/24 maxlen: 24
                          217.156.7.0/24 maxlen: 24
                          217.156.15.0/24 maxlen: 24
                          217.156.13.0/24 maxlen: 24
                          217.156.19.0/24 maxlen: 24
                          85.122.106.0/24 maxlen: 24
                          85.122.114.0/24 maxlen: 24
                          217.156.35.0/24 maxlen: 24
                          217.156.37.0/24 maxlen: 24
                          194.102.65.0/24 maxlen: 24
                          217.156.50.0/24 maxlen: 24
                          217.156.49.0/24 maxlen: 24
                          217.156.51.0/24 maxlen: 24
                          193.230.0.0/17 maxlen: 17
                          217.156.106.0/24 maxlen: 24
                          217.156.107.0/24 maxlen: 24
                          193.230.134.0/23 maxlen: 23
                          217.156.108.0/24 maxlen: 24
                          194.102.135.0/24 maxlen: 24
                          193.230.143.0/24 maxlen: 24
                          193.230.141.0/24 maxlen: 24
                          194.102.143.0/24 maxlen: 24
                          217.156.119.0/24 maxlen: 24
                          194.102.154.0/24 maxlen: 24
                          194.102.157.0/24 maxlen: 24
                          193.230.164.0/23 maxlen: 23
                          194.102.163.0/24 maxlen: 24
                          194.102.176.0/24 maxlen: 24
                          194.102.177.0/24 maxlen: 24
                          193.230.185.0/24 maxlen: 24
                          193.230.184.0/24 maxlen: 24
                          194.102.183.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.59.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.71.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.77.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
                          85.122.181.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          217.156.101.0/24 maxlen: 24
                          85.121.156.0/22 maxlen: 22
                          192.162.16.0/24 maxlen: 24
                          81.181.244.0/24 maxlen: 24
                          85.121.88.0/21 maxlen: 21
                          85.121.252.0/22 maxlen: 22
                          85.121.198.0/24 maxlen: 24
                          85.121.220.0/22 maxlen: 22
                          2a03:5e80::/29 maxlen: 32

Validation:               Failed, certificate revoked on Thu 09 Mar 2023 07:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:59:30:27:7c:17:a1:51:5a:f7:86:38:de:55:e2:c7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Feb 16 07:46:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=968d1f3d1311787e284a8655895cc1fe47941dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:3a:85:11:ac:33:e5:43:d9:db:a2:a9:5d:
                    70:43:72:b9:6d:ce:5f:22:70:13:75:eb:95:0b:1a:
                    36:c1:a6:33:4f:8f:35:3f:ad:47:da:5d:da:93:51:
                    fe:0e:f2:2b:07:fa:b6:2e:a0:b9:de:36:4d:62:43:
                    5f:71:08:5b:07:af:f8:f2:0b:68:8b:2b:6b:32:a8:
                    57:1d:6c:79:83:2e:6d:0c:52:75:be:55:75:f6:53:
                    26:fd:f6:cd:0e:7c:59:26:46:ac:e0:93:ba:43:ee:
                    6a:68:b5:ec:81:21:ec:a0:b4:75:9a:e2:8a:39:77:
                    7f:2e:b1:fa:33:bd:11:dc:7e:18:f5:df:75:15:3f:
                    f6:92:9c:f9:09:e6:be:ab:84:a1:b3:9e:45:f0:d8:
                    a1:5a:3d:0d:43:c9:e2:2f:a3:9e:98:87:b7:13:84:
                    7f:70:f7:3c:d9:8b:fa:1f:83:ac:92:0a:01:f9:9c:
                    51:85:c9:04:65:14:fb:d8:8e:b6:ec:e8:d7:a7:3e:
                    e8:67:af:ca:75:d5:68:d6:1d:ea:f8:80:4d:37:4f:
                    54:af:aa:10:c3:78:66:85:31:0f:84:f2:50:ca:36:
                    13:e7:b1:0d:6d:1c:de:18:a7:7a:c1:b4:57:4a:71:
                    56:84:d9:36:4b:2c:9a:49:a5:40:f1:f3:aa:af:f9:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8D:1F:3D:13:11:78:7E:28:4A:86:55:89:5C:C1:FE:47:94:1D:D9
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lo0fPRMReH4oSoZViVzB_keUHdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.17.0/24
                  80.96.75.0-80.96.76.255
                  80.96.108.0/23
                  80.96.136.0/24
                  80.96.170.0/24
                  80.96.181.0/24
                  80.96.190.0/24
                  80.96.207.0/24
                  80.96.209.0/24
                  80.96.216.0/24
                  80.96.220.0/24
                  80.96.228.0/24
                  80.96.238.0/24
                  80.96.255.0/24
                  80.97.54.0/24
                  80.97.144.0/24
                  80.97.171.0/24
                  80.97.176.0/23
                  81.180.96.0/22
                  81.180.143.0/24
                  81.180.234.0/24
                  81.180.239.0/24
                  81.181.0.0/24
                  81.181.74.0/24
                  81.181.86.0/24
                  81.181.100.0/24
                  81.181.148.0/24
                  81.181.152.0/24
                  81.181.155.0-81.181.156.255
                  81.181.192.0/24
                  81.181.199.0/24
                  81.181.212.0/23
                  81.181.244.0/24
                  85.120.42.0/24
                  85.120.66.0/23
                  85.120.155.0/24
                  85.120.170.0/24
                  85.120.178.0/24
                  85.120.192.0/21
                  85.121.6.0/23
                  85.121.38.0/24
                  85.121.40.0/21
                  85.121.60.0/22
                  85.121.88.0/21
                  85.121.156.0/22
                  85.121.198.0/24
                  85.121.220.0/22
                  85.121.252.0/22
                  85.122.83.0/24
                  85.122.106.0/24
                  85.122.114.0/24
                  85.122.181.0-85.122.183.255
                  192.162.16.0/24
                  193.226.27.0/24
                  193.226.35.0/24
                  193.226.65.0/24
                  193.226.80.0/23
                  193.226.84.0/24
                  193.226.99.0/24
                  193.226.101.0/24
                  193.226.111.0-193.226.112.255
                  193.226.120.0/24
                  193.226.123.0/24
                  193.230.0.0/17
                  193.230.134.0/23
                  193.230.141.0/24
                  193.230.143.0/24
                  193.230.164.0/23
                  193.230.184.0/23
                  193.230.208.0/24
                  193.230.211.0-193.230.212.255
                  193.230.219.0/24
                  193.230.225.0/24
                  193.230.244.0/24
                  193.231.81.0/24
                  193.231.112.0/24
                  193.231.114.0/24
                  193.231.116.0/23
                  193.231.119.0/24
                  193.231.163.0/24
                  193.231.168.0/24
                  193.231.192.0/24
                  193.231.204.0/24
                  193.231.240.0/24
                  193.231.244.0/24
                  193.231.247.0/24
                  193.231.249.0/24
                  193.231.254.0/24
                  194.62.122.0/24
                  194.102.65.0/24
                  194.102.135.0/24
                  194.102.143.0/24
                  194.102.154.0/24
                  194.102.157.0/24
                  194.102.163.0/24
                  194.102.176.0/23
                  194.102.183.0/24
                  194.102.247.0/24
                  194.105.6.0/24
                  194.153.234.0/24
                  194.153.238.0/24
                  194.153.242.0/23
                  194.153.245.0/24
                  194.153.247.0/24
                  217.156.0.0/24
                  217.156.2.0/24
                  217.156.6.0/23
                  217.156.11.0/24
                  217.156.13.0/24
                  217.156.15.0/24
                  217.156.19.0/24
                  217.156.35.0/24
                  217.156.37.0/24
                  217.156.49.0-217.156.51.255
                  217.156.57.0/24
                  217.156.59.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.71.0/24
                  217.156.77.0/24
                  217.156.93.0/24
                  217.156.101.0/24
                  217.156.106.0-217.156.108.255
                  217.156.119.0/24
                IPv6:
                  2a03:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         38:be:3c:98:d1:d8:80:ee:67:06:98:38:39:e0:08:8b:d8:ff:
         b1:ad:97:6d:f3:ac:0d:c2:07:97:c2:b9:24:3b:34:e4:c1:44:
         c9:a2:86:5f:5f:aa:ad:26:9e:64:13:28:fd:3d:8e:ed:ac:a5:
         49:74:31:b0:07:90:ba:da:81:0b:81:3f:91:be:f4:43:44:61:
         91:8a:54:8b:3e:5b:5d:72:ac:32:30:40:69:26:17:67:68:79:
         42:fd:32:e3:83:de:30:92:53:be:8a:13:80:28:51:27:cb:3f:
         5e:03:b2:19:35:83:75:8d:34:91:34:f4:7d:ba:90:fd:46:2a:
         cc:aa:9a:40:c8:dc:0a:c4:4f:8d:e6:43:22:c1:ac:3b:ed:eb:
         9c:1a:8e:da:22:b6:b3:d0:90:f4:03:ee:68:19:1a:ca:b7:c4:
         79:58:37:dd:52:fc:e5:c8:6e:1a:ab:9c:9f:05:5e:e7:2d:de:
         e4:e3:57:a7:4a:58:f4:d6:08:78:bd:98:45:62:9e:1d:3e:ef:
         16:98:d2:73:b5:16:5c:1a:b9:1b:47:2a:88:c9:06:a9:42:e2:
         3f:13:aa:d8:90:e3:54:57:06:77:b6:92:2f:69:1f:66:92:14:
         d2:1a:d4:72:ae:3b:27:0c:fe:6f:7e:9e:74:a8:e3:9c:07:1d:
         89:30:39:46
-----BEGIN CERTIFICATE-----
MIIIMDCCBxigAwIBAgISAYZZMCd8F6FRWveGON5V4sf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMjE2MDc0NjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjhkMWYzZDEzMTE3ODdlMjg0YTg2NTU4OTVjYzFmZTQ3OTQxZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHk6hRGsM+VD2duiqV1wQ3K5bc5f
InATdeuVCxo2waYzT481P61H2l3ak1H+DvIrB/q2LqC53jZNYkNfcQhbB6/48gto
iytrMqhXHWx5gy5tDFJ1vlV19lMm/fbNDnxZJkas4JO6Q+5qaLXsgSHsoLR1muKK
OXd/LrH6M70R3H4Y9d91FT/2kpz5Cea+q4Shs55F8NihWj0NQ8niL6OemIe3E4R/
cPc82Yv6H4OskgoB+ZxRhckEZRT72I627OjXpz7oZ6/KddVo1h3q+IBNN09Ur6oQ
w3hmhTEPhPJQyjYT57ENbRzeGKd6wbRXSnFWhNk2SyyaSaVA8fOqr/lRxQIDAQAB
o4IFPDCCBTgwHQYDVR0OBBYEFJaNHz0TEXh+KEqGVYlcwf5HlB3ZMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvbG8wZlBSTVJlSDRvU29aVmlWekJfa2VVSGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDUAYIKwYBBQUHAQcBAf8EggM/MIIDOzCCAygEAgABMIID
IAMEAFBgETAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGCIAwQAUGCqAwQAUGC1AwQA
UGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQAUGDcAwQAUGDkAwQAUGDuAwQAUGD/AwQA
UGE2AwQAUGGQAwQAUGGrAwQBUGGwAwQCUbRgAwQAUbSPAwQAUbTqAwQAUbTvAwQA
UbUAAwQAUbVKAwQAUbVWAwQAUbVkAwQAUbWUAwQAUbWYMAwDBABRtZsDBABRtZwD
BABRtcADBABRtccDBAFRtdQDBABRtfQDBABVeCoDBAFVeEIDBABVeJsDBABVeKoD
BABVeLIDBANVeMADBAFVeQYDBABVeSYDBANVeSgDBAJVeTwDBANVeVgDBAJVeZwD
BABVecYDBAJVedwDBAJVefwDBABVelMDBABVemoDBABVenIwDAMEAFV6tQMEA1V6
sAMEAMCiEAMEAMHiGwMEAMHiIwMEAMHiQQMEAcHiUAMEAMHiVAMEAMHiYwMEAMHi
ZTAMAwQAweJvAwQAweJwAwQAweJ4AwQAweJ7AwQHweYAAwQBweaGAwQAweaNAwQA
weaPAwQBweakAwQBwea4AwQAwebQMAwDBADB5tMDBADB5tQDBADB5tsDBADB5uED
BADB5vQDBADB51EDBADB53ADBADB53IDBAHB53QDBADB53cDBADB56MDBADB56gD
BADB58ADBADB58wDBADB5/ADBADB5/QDBADB5/cDBADB5/kDBADB5/4DBADCPnoD
BADCZkEDBADCZocDBADCZo8DBADCZpoDBADCZp0DBADCZqMDBAHCZrADBADCZrcD
BADCZvcDBADCaQYDBADCmeoDBADCme4DBAHCmfIDBADCmfUDBADCmfcDBADZnAAD
BADZnAIDBAHZnAYDBADZnAsDBADZnA0DBADZnA8DBADZnBMDBADZnCMDBADZnCUw
DAMEANmcMQMEAtmcMAMEANmcOQMEANmcOwMEANmcPgMEAdmcQgMEANmcRwMEANmc
TQMEANmcXQMEANmcZTAMAwQB2ZxqAwQA2ZxsAwQA2Zx3MA0EAgACMAcDBQMqA16A
MA0GCSqGSIb3DQEBCwUAA4IBAQA4vjyY0diA7mcGmDg54AiL2P+xrZdt86wNwgeX
wrkkOzTkwUTJooZfX6qtJp5kEyj9PY7trKVJdDGwB5C62oELgT+RvvRDRGGRilSL
PltdcqwyMEBpJhdnaHlC/TLjg94wklO+ihOAKFEnyz9eA7IZNYN1jTSRNPR9upD9
RirMqppAyNwKxE+N5kMiwaw77eucGo7aIraz0JD0A+5oGRrKt8R5WDfdUvzlyG4a
q5yfBV7nLd7k41enSlj01gh4vZhFYp4dPu8WmNJztRZcGrkbRyqIyQapQuI/E6rY
kONUVwZ3tpIvaR9mkhTSGtRyrjsnDP5vfp50qOOcBx2JMDlG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org