Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/B1Ts1689lEXhm7BPMlC9VHrKQyk.roa
File:                     B1Ts1689lEXhm7BPMlC9VHrKQyk.roa (raw, json)
Hash identifier:          QZAZXUWJG+FCpxHW9whVD0bCeOWaIpOD03bbJnzYYyU=
Subject key identifier:   07:54:EC:D7:AF:3D:94:45:E1:9B:B0:4F:32:50:BD:54:7A:CA:43:29
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0189CE3BE4B720492C0C83268241461C77FE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/B1Ts1689lEXhm7BPMlC9VHrKQyk.roa
Signing time:             Mon 07 Aug 2023 04:22:58 +0000
ROA not before:           Mon 07 Aug 2023 04:22:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.12.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.51.0/24 maxlen: 24
                          37.139.48.0/24 maxlen: 24
                          37.139.49.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.244.0/23 maxlen: 23
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.52.0/23 maxlen: 23
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.56.0/24 maxlen: 24
                          5.8.57.0/24 maxlen: 24
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.19.0/24 maxlen: 24
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/22 maxlen: 22
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.220.0/23 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.222.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.62.0/23 maxlen: 23
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ce:3b:e4:b7:20:49:2c:0c:83:26:82:41:46:1c:77:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Aug  7 04:22:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0754ecd7af3d9445e19bb04f3250bd547aca4329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:9c:5d:d0:85:17:8b:31:90:a3:87:de:09:
                    cb:0d:cd:e6:b1:cb:fc:1f:5d:35:15:26:f8:b4:0f:
                    c7:c0:24:69:31:a2:7e:52:89:67:2e:d3:18:30:ae:
                    44:2a:f2:f8:66:da:22:94:e7:76:a5:9e:a8:9b:b0:
                    a2:1a:5b:d0:65:b9:8d:04:b6:6c:53:f1:d6:b9:64:
                    d7:56:b3:c6:b0:5f:e9:42:40:2e:6c:76:4f:88:96:
                    d3:a8:b2:1d:7b:39:e4:4d:36:bc:63:91:8c:6b:e2:
                    58:ea:78:9b:c6:ea:3c:0a:01:fa:77:1e:09:c1:20:
                    55:7d:10:77:37:64:11:64:07:ec:02:ce:b7:e7:5e:
                    2b:69:d1:df:a0:d3:b1:9f:21:50:af:e5:26:62:43:
                    21:07:ff:a2:ef:b1:9f:e7:d9:38:dc:b8:14:75:2b:
                    2e:bf:a0:63:f5:c3:26:a7:75:ae:ff:0c:b0:b7:73:
                    a6:86:f9:7b:e2:53:e7:49:c3:14:ad:db:20:9e:3a:
                    67:5a:47:71:71:2c:07:68:53:73:03:66:eb:a4:af:
                    02:6f:e8:73:6c:7d:6a:fc:70:e6:bb:21:f0:23:7d:
                    3a:f5:f4:b9:e2:b5:68:70:a7:2e:62:cd:74:bb:4f:
                    4b:6f:71:6a:a4:4c:5b:e9:09:d8:ad:17:1d:82:03:
                    f6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:EC:D7:AF:3D:94:45:E1:9B:B0:4F:32:50:BD:54:7A:CA:43:29
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/B1Ts1689lEXhm7BPMlC9VHrKQyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.19.0/24
                  5.8.48.0-5.8.57.255
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0-5.188.211.255
                  5.188.220.0/22
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.48.0/23
                  37.139.51.0/24
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.12.0/22
                  46.161.20.0-46.161.25.255
                  46.161.32.0/22
                  46.161.42.0/24
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/22
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  146.185.244.0/23
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         7a:63:a5:68:33:1b:f8:2a:cd:ba:10:cd:92:a9:82:1d:90:b7:
         8b:f1:6b:5e:e4:69:c7:7a:dc:fc:78:f6:ad:d7:8b:33:42:47:
         ad:ee:78:41:cf:30:db:66:f7:60:a0:01:27:c4:af:a0:a7:94:
         31:e7:12:26:5c:b1:78:31:c9:84:01:b9:f8:e3:83:6e:a3:6f:
         83:cd:2d:1f:2b:be:ab:90:bb:08:a5:1a:17:e0:83:56:f4:e8:
         43:4e:c8:8d:1e:d4:ec:c9:bd:9a:42:1f:e4:e7:87:69:28:21:
         92:e0:55:48:d5:22:4b:f6:01:30:72:46:14:0a:a3:15:7e:b4:
         07:8a:4e:d5:09:82:bc:52:f8:55:e2:59:b0:90:af:fd:ac:6e:
         05:06:a6:46:c9:63:ff:b6:cc:ae:45:28:f9:a0:5b:08:f7:b1:
         45:45:19:48:96:4b:be:58:3f:86:92:35:95:e2:57:0d:f5:9e:
         e3:60:7c:6a:36:3d:73:49:c3:27:a8:cf:22:7e:80:17:69:32:
         0a:8d:b7:72:11:f3:b0:19:60:16:21:9a:9a:84:24:6a:8d:3b:
         6f:5c:7f:00:c9:f1:cc:12:5e:dd:1c:3d:97:37:f7:5f:55:f3:
         10:a8:95:64:05:ac:7d:16:a5:40:6d:73:f8:b9:d2:d1:c5:6c:
         64:c4:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 16:51:11 2023 by rpki-client on console-ams.rpki-client.org