Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3VP6GAUVtXMonABHbP9CDlLyiW8.roa
File:                     3VP6GAUVtXMonABHbP9CDlLyiW8.roa (raw, json)
Hash identifier:          LD9+ZtiEUtB3rfPsnMk03kGW4H2cZw11iYv3HmGvBy0=
Subject key identifier:   DD:53:FA:18:05:15:B5:73:28:9C:00:47:6C:FF:42:0E:52:F2:89:6F
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018967EA8C9D7C35990A1888DC166B5BE33A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3VP6GAUVtXMonABHbP9CDlLyiW8.roa
Signing time:             Tue 18 Jul 2023 07:32:51 +0000
ROA not before:           Tue 18 Jul 2023 07:32:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.12.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.9.0/24 maxlen: 24
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.51.0/24 maxlen: 24
                          37.139.48.0/24 maxlen: 24
                          37.139.49.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.244.0/23 maxlen: 23
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.52.0/23 maxlen: 23
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.56.0/24 maxlen: 24
                          5.8.57.0/24 maxlen: 24
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.19.0/24 maxlen: 24
                          5.189.248.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/22 maxlen: 22
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.220.0/23 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.222.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.188.194.0/23 maxlen: 23
                          5.188.204.0/23 maxlen: 23
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.62.0/23 maxlen: 23
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked on Mon 24 Jul 2023 17:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:67:ea:8c:9d:7c:35:99:0a:18:88:dc:16:6b:5b:e3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jul 18 07:32:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd53fa180515b573289c00476cff420e52f2896f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:91:d8:82:16:27:29:df:4e:6d:84:a3:a1:
                    64:1c:87:4d:19:fc:fb:cf:b8:76:2d:ca:b1:d7:68:
                    fd:ec:40:c4:eb:82:e7:d1:15:e7:2f:c2:c9:9c:4f:
                    cf:bb:c9:3f:20:46:b8:8d:2a:04:f9:20:0d:cb:9a:
                    10:ad:ec:bd:ad:07:31:23:fa:04:18:54:64:13:ba:
                    96:d7:f1:e6:c5:95:2d:c9:52:48:93:2c:5c:84:57:
                    1a:3c:2e:e3:6b:a0:b9:2d:0a:70:4b:9d:3f:d9:85:
                    c3:ce:3d:53:16:e3:19:a3:02:d9:b5:c0:ca:17:5d:
                    17:7e:52:56:a7:1c:ba:31:53:5f:7e:63:84:a3:b9:
                    ef:f6:d2:ee:05:35:43:e8:0d:fc:a6:91:3d:0d:c7:
                    c3:1b:2c:6b:13:26:b4:90:ee:23:e0:99:4e:f8:09:
                    a1:aa:42:22:8a:ff:ef:85:45:43:0c:9a:3f:86:a8:
                    64:db:f9:62:ac:1c:b6:7e:33:77:95:92:fa:75:3d:
                    d1:53:4b:87:53:14:73:41:0e:ac:13:07:1f:0e:38:
                    08:1f:da:39:04:53:55:e6:99:50:c2:1c:59:38:da:
                    a2:b8:31:e0:5a:cc:f0:61:78:3b:ad:e4:23:cd:3c:
                    d5:af:36:ae:a1:e2:d6:8c:39:34:01:09:d0:f0:36:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:53:FA:18:05:15:B5:73:28:9C:00:47:6C:FF:42:0E:52:F2:89:6F
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3VP6GAUVtXMonABHbP9CDlLyiW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.19.0/24
                  5.8.48.0-5.8.57.255
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.194.0/23
                  5.188.204.0/23
                  5.188.207.0-5.188.211.255
                  5.188.220.0/22
                  5.188.233.0-5.188.235.255
                  5.189.248.0/22
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.48.0/23
                  37.139.51.0/24
                  37.139.53.0-37.139.59.255
                  46.161.8.0-46.161.10.255
                  46.161.12.0/22
                  46.161.20.0-46.161.25.255
                  46.161.32.0/22
                  46.161.42.0/24
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/22
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  146.185.244.0/23
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:9d:1d:fa:28:cb:cd:66:be:f2:0c:26:8c:38:a0:a8:65:
         c0:88:4e:3d:c9:4a:ce:c7:94:8a:d4:4c:c7:ae:be:c7:85:b2:
         e8:db:08:fa:1c:e0:6a:a0:1a:9e:57:88:9e:1c:76:0c:a9:7c:
         f5:b1:d3:a0:6a:13:3f:fb:c1:4f:b2:1f:5d:24:f5:1b:78:ee:
         0a:68:8e:12:e2:49:1f:7f:2a:13:76:d0:f3:80:2c:5c:44:15:
         67:a9:3f:e6:0a:07:ca:f0:ad:03:10:e2:25:4f:7d:ac:5a:a5:
         a3:33:e6:2d:42:b3:c8:a1:3f:8e:3f:46:57:c4:4b:da:bb:bb:
         03:3a:cf:61:85:6c:6b:2d:0e:b6:f0:49:92:34:0e:1a:3f:f9:
         7c:fd:d7:c6:e8:ab:e1:91:5c:82:80:e2:34:20:76:dc:1a:e2:
         3c:16:34:7f:a1:9c:2a:08:7b:70:c0:5f:a8:1d:37:3a:fa:74:
         f5:44:a9:8d:0a:93:c7:a7:90:cb:bc:47:40:90:88:60:00:9b:
         e2:70:2b:d3:c4:9f:0e:02:29:57:45:1e:7a:4b:c7:8d:c7:a1:
         22:f4:5b:77:a5:45:9b:a9:d6:f5:ae:3a:52:22:63:61:8b:63:
         70:d6:94:0e:99:90:8b:94:e5:3d:5b:b5:4a:d8:86:00:3f:52:
         cb:fe:48:f3
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISAYln6oydfDWZChiI3BZrW+M6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwNzE4MDczMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDUzZmExODA1MTViNTczMjg5YzAwNDc2Y2ZmNDIwZTUyZjI4OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEuR2IIWJynfTm2Eo6FkHIdNGfz7
z7h2Lcqx12j97EDE64Ln0RXnL8LJnE/Pu8k/IEa4jSoE+SANy5oQrey9rQcxI/oE
GFRkE7qW1/HmxZUtyVJIkyxchFcaPC7ja6C5LQpwS50/2YXDzj1TFuMZowLZtcDK
F10XflJWpxy6MVNffmOEo7nv9tLuBTVD6A38ppE9DcfDGyxrEya0kO4j4JlO+Amh
qkIiiv/vhUVDDJo/hqhk2/lirBy2fjN3lZL6dT3RU0uHUxRzQQ6sEwcfDjgIH9o5
BFNV5plQwhxZONqiuDHgWszwYXg7reQjzTzVrzauoeLWjDk0AQnQ8DaedwIDAQAB
o4IDdjCCA3IwHQYDVR0OBBYEFN1T+hgFFbVzKJwAR2z/Qg5S8olvMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvM1ZQNkdBVVZ0WE1vbkFCSGJQOUNEbEx5aVc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBigYIKwYBBQUHAQcBAf8EggF5MIIBdTCCAV4EAgABMIIB
VgMEAwUICAMEAAUIEzAMAwQEBQgwAwQBBQg4MAwDBAAFCDsDBAAFCD4DBAAFCEED
BAMFZQADBAIFZSADBAIFZUADBAMFZVADBAIFvCwDBAAFvDEDBAAFvD4DBAAFvKYD
BAEFvMIDBAEFvMwwDAMEAAW8zwMEAgW80AMEAgW83DAMAwQABbzpAwQCBbzoAwQC
Bb34AwQAHyy4AwQCHyy8AwQDH7jAAwQBH7jkAwQAH7jnAwQBH7juAwQAH7jzAwQA
JQkwAwQBJYswAwQAJYszMAwDBAAlizUDBAIlizgwDAMEAy6hCAMEAC6hCgMEAi6h
DDAMAwQCLqEUAwQBLqEYAwQCLqEgAwQALqEqMAwDBAIuoSwDBAIuoTADBAJb8zAD
BAJb8zwDBAFb81oDBABb810DBAJf1wAwDAMEAJK53wMEA5K54AMEAZK59AMEAryP
6AMEAcMC8DARBAIAAjALAwkGKgAdeAEAAcAwDQYJKoZIhvcNAQELBQADggEBAF5w
nR36KMvNZr7yDCaMOKCoZcCITj3JSs7HlIrUTMeuvseFsujbCPoc4GqgGp5XiJ4c
dgypfPWx06BqEz/7wU+yH10k9Rt47gpojhLiSR9/KhN20POALFxEFWepP+YKB8rw
rQMQ4iVPfaxapaMz5i1Cs8ihP44/RlfES9q7uwM6z2GFbGstDrbwSZI0Dho/+Xz9
18boq+GRXIKA4jQgdtwa4jwWNH+hnCoIe3DAX6gdNzr6dPVEqY0Kk8enkMu8R0CQ
iGAAm+JwK9PEnw4CKVdFHnpLx43HoSL0W3elRZup1vWuOlIiY2GLY3DWlA6ZkIuU
5T1btUrYhgA/Usv+SPM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org