Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/M1zi6GnoY6gljegKBXcj-5hYhh4.roa
File:                     M1zi6GnoY6gljegKBXcj-5hYhh4.roa (raw, json)
Hash identifier:          vpT+S/jdA0VzxParwReLI4YmGyoXM9QL9oIwx6TJ+s0=
Subject key identifier:   33:5C:E2:E8:69:E8:63:A8:25:8D:E8:0A:05:77:23:FB:98:58:86:1E
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0189AFF1CD1E881059B9182C3A48ADC0B151
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/M1zi6GnoY6gljegKBXcj-5hYhh4.roa
Signing time:             Tue 01 Aug 2023 07:13:26 +0000
ROA not before:           Tue 01 Aug 2023 07:13:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.12.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.48.0/23 maxlen: 23
                          46.161.48.0/22 maxlen: 22
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.51.0/24 maxlen: 24
                          37.139.48.0/24 maxlen: 24
                          37.139.49.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.244.0/23 maxlen: 23
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.52.0/23 maxlen: 23
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.56.0/24 maxlen: 24
                          5.8.57.0/24 maxlen: 24
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.8.0/23 maxlen: 23
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.19.0/24 maxlen: 24
                          5.8.48.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.220.0/23 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.222.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.48.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.62.0/23 maxlen: 23
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked on Mon 07 Aug 2023 04:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:af:f1:cd:1e:88:10:59:b9:18:2c:3a:48:ad:c0:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Aug  1 07:13:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=335ce2e869e863a8258de80a057723fb9858861e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:7c:bb:77:4e:1f:33:87:c5:6e:d7:b5:cf:
                    7c:0a:36:e9:b5:76:a1:29:a2:b3:e4:1d:00:61:c0:
                    6d:57:c1:96:a5:1b:26:0b:66:4f:f2:bb:4a:1d:f1:
                    1a:72:68:bb:7f:36:77:77:d1:a3:f6:1e:5e:15:ee:
                    2e:cf:0d:63:50:5d:3c:95:23:1d:a6:55:e9:ea:65:
                    a9:46:08:ff:12:63:7f:b2:97:10:c4:a6:f5:cb:d5:
                    a9:88:26:30:f9:9a:0e:81:ca:07:6f:ad:d7:b7:c9:
                    e8:af:f2:1e:ab:46:3c:22:9f:a9:17:f4:e2:d0:5c:
                    f8:6d:23:b3:bf:4e:10:bf:50:2d:16:17:78:a1:91:
                    70:99:8b:63:f9:d6:08:d0:0a:f8:7f:f3:c0:a3:e3:
                    a9:20:84:46:dd:d2:77:c5:db:c5:d3:23:6d:17:e2:
                    e9:1f:da:ea:f6:e9:5f:f6:38:eb:a1:78:1f:64:c5:
                    33:14:30:2c:df:88:0b:0c:90:61:81:75:49:c9:60:
                    40:8d:d0:1f:4d:d9:3e:be:71:77:e1:12:50:75:7b:
                    50:64:6f:b7:be:09:39:8e:17:36:1e:a7:f2:68:60:
                    58:d6:59:c9:37:79:5e:e1:62:e3:58:98:46:9d:46:
                    91:aa:ec:23:d3:fa:49:c4:81:22:e1:5d:5d:6e:07:
                    75:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5C:E2:E8:69:E8:63:A8:25:8D:E8:0A:05:77:23:FB:98:58:86:1E
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/M1zi6GnoY6gljegKBXcj-5hYhh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.19.0/24
                  5.8.48.0-5.8.57.255
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0-5.188.211.255
                  5.188.220.0/22
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.48.0/23
                  37.139.51.0/24
                  37.139.53.0-37.139.59.255
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.12.0/22
                  46.161.20.0-46.161.25.255
                  46.161.32.0/22
                  46.161.42.0/24
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/22
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  146.185.244.0/23
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:41:56:16:2f:b7:75:9a:d6:55:da:b4:df:fb:e2:ab:9f:
         a0:6c:0e:7b:87:60:cb:57:d9:39:42:83:63:0f:89:0a:c0:be:
         a3:b2:36:88:41:70:7a:9c:84:65:ff:fa:0a:ff:74:9f:01:74:
         75:8a:05:36:07:e2:61:4c:0a:92:75:cf:7c:6b:31:19:25:18:
         00:69:0b:75:f9:c6:97:38:8a:f8:79:d7:12:d1:2e:2f:e2:a0:
         1d:03:f3:c1:a8:e8:ba:65:ee:5a:19:8c:71:69:18:35:1d:a9:
         63:cc:58:8f:94:0d:16:0f:38:fb:7b:1f:d2:72:a4:4d:58:f6:
         c3:eb:bd:23:95:e5:47:15:94:9a:1f:5d:a2:81:85:e9:7e:0c:
         4b:c7:71:01:67:25:01:65:a5:87:11:9d:94:36:5a:1c:ae:80:
         09:d5:aa:ef:83:2c:be:90:b6:ac:57:5e:d3:92:79:9f:f6:5d:
         81:99:57:e7:49:02:fa:43:e4:4c:ee:55:6c:54:23:7e:d5:92:
         05:f1:e7:a2:a9:3e:0f:49:ca:0f:c7:da:de:2d:52:48:56:cb:
         98:f9:8e:9c:08:a0:26:b9:4f:a7:c0:c0:f7:e9:a3:21:7e:54:
         8e:02:a4:67:95:ae:46:a6:93:f5:76:22:03:0f:be:1f:b1:4d:
         68:e3:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org