Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Mz2KQ_cxdWfA1cXAqzaEUTY675Y.roa
File:                     Mz2KQ_cxdWfA1cXAqzaEUTY675Y.roa (raw, json)
Hash identifier:          PFKacp+Ys7M8fPgC1qqYInIuWwgH36hzOPKqmdSdRa4=
Subject key identifier:   33:3D:8A:43:F7:31:75:67:C0:D5:C5:C0:AB:36:84:51:36:3A:EF:96
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018A3BDA3B909583A7D4C458B10858FDCB3C
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Mz2KQ_cxdWfA1cXAqzaEUTY675Y.roa
Signing time:             Mon 28 Aug 2023 11:14:32 +0000
ROA not before:           Mon 28 Aug 2023 11:14:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        46.161.14.0/23 maxlen: 23
                          46.161.12.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.24.0/23 maxlen: 23
                          95.215.2.0/23 maxlen: 23
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.3.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/24 maxlen: 24
                          95.215.0.0/24 maxlen: 24
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.42.0/24 maxlen: 24
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.50.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/24 maxlen: 24
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.49.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.46.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.10.0/24 maxlen: 24
                          46.161.8.0/24 maxlen: 24
                          5.101.4.0/24 maxlen: 24
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.7.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.188.62.0/24 maxlen: 24
                          37.139.48.0/24 maxlen: 24
                          37.139.49.0/24 maxlen: 24
                          37.139.58.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.56.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.54.0/23 maxlen: 23
                          37.139.59.0/24 maxlen: 24
                          31.44.184.0/24 maxlen: 24
                          31.44.188.0/22 maxlen: 32
                          146.185.244.0/23 maxlen: 23
                          146.185.224.0/21 maxlen: 21
                          146.185.223.0/24 maxlen: 24
                          31.184.192.0/24 maxlen: 24
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/22 maxlen: 22
                          31.184.193.0/24 maxlen: 24
                          31.184.196.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          31.184.231.0/24 maxlen: 24
                          31.184.228.0/23 maxlen: 23
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/22 maxlen: 22
                          37.9.48.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          5.8.52.0/23 maxlen: 23
                          5.8.54.0/23 maxlen: 23
                          5.8.52.0/22 maxlen: 22
                          5.8.56.0/24 maxlen: 24
                          5.8.57.0/24 maxlen: 24
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.52.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.62.0/24 maxlen: 24
                          5.8.59.0/24 maxlen: 24
                          5.8.65.0/24 maxlen: 24
                          5.8.8.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/22 maxlen: 22
                          5.8.11.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.19.0/24 maxlen: 24
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/22 maxlen: 22
                          5.8.50.0/23 maxlen: 23
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/24 maxlen: 24
                          5.8.48.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.188.220.0/23 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.222.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          5.101.90.0/23 maxlen: 23
                          5.188.166.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.188.211.0/24 maxlen: 24
                          5.188.210.0/24 maxlen: 24
                          5.188.207.0/24 maxlen: 24
                          5.101.64.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.50.0/23 maxlen: 23
                          91.243.51.0/24 maxlen: 24
                          91.243.50.0/24 maxlen: 24
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.62.0/23 maxlen: 23
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3b:da:3b:90:95:83:a7:d4:c4:58:b1:08:58:fd:cb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Aug 28 11:14:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=333d8a43f7317567c0d5c5c0ab368451363aef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:7e:90:02:ae:a2:22:08:55:8a:a9:73:a0:
                    a0:6f:2d:f6:24:c1:a1:75:9d:be:30:5c:74:5c:01:
                    16:6e:9c:59:54:c7:09:7f:3c:40:75:77:55:6c:50:
                    6e:e3:2b:75:42:6d:9b:0d:0e:18:2a:36:c4:e8:98:
                    38:d6:7c:bc:0e:16:f3:85:34:67:e9:97:78:0b:13:
                    c1:34:09:c1:ad:05:70:f5:19:b4:98:a5:4d:85:85:
                    77:08:24:5a:18:49:52:c7:64:b6:dd:02:49:d5:71:
                    50:60:70:90:db:de:99:83:74:4b:c9:9d:05:41:34:
                    08:11:44:80:11:9f:06:78:ff:0c:e9:a8:4c:bc:47:
                    97:7e:56:fa:dd:02:d3:89:1a:5d:9c:c2:4d:2b:59:
                    9a:be:4d:e0:e5:66:9e:eb:67:7d:fb:97:2f:17:7a:
                    1b:c6:f9:e6:56:ac:0d:71:56:91:0b:23:a3:a5:16:
                    17:97:17:27:4a:2a:34:29:23:17:87:89:cf:70:77:
                    d1:c9:ab:db:d6:07:a1:97:4a:ae:15:57:ab:3f:f0:
                    b4:ee:18:3b:f0:86:b6:44:e3:66:86:3c:48:d9:7c:
                    59:8c:f6:16:42:ed:3a:c2:1a:7e:2d:a9:33:aa:27:
                    1d:34:28:59:3e:f4:e7:bb:39:bf:65:9a:2c:e6:b4:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3D:8A:43:F7:31:75:67:C0:D5:C5:C0:AB:36:84:51:36:3A:EF:96
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Mz2KQ_cxdWfA1cXAqzaEUTY675Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.8.0/21
                  5.8.19.0/24
                  5.8.48.0-5.8.57.255
                  5.8.59.0-5.8.62.255
                  5.8.65.0/24
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.62.0/24
                  5.188.166.0/24
                  5.188.207.0-5.188.211.255
                  5.188.220.0/22
                  5.188.233.0-5.188.235.255
                  31.44.184.0/24
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.228.0/23
                  31.184.231.0/24
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.48.0/23
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.12.0/22
                  46.161.20.0-46.161.25.255
                  46.161.32.0/22
                  46.161.42.0/24
                  46.161.44.0-46.161.51.255
                  91.243.48.0/22
                  91.243.60.0/22
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  146.185.244.0/23
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:0a:60:eb:29:8a:53:70:01:c6:2c:b5:a8:6c:f6:92:bf:
         cd:47:d5:fa:57:b2:6d:2a:2d:35:49:87:79:e0:d2:9e:6d:77:
         f2:b7:98:25:71:fe:43:a0:6e:15:42:ee:7d:e2:a3:2f:93:a0:
         68:b7:b1:df:17:c7:1c:b6:c1:b9:68:fe:fc:24:be:ed:40:82:
         fa:71:08:67:6d:14:c9:2d:1c:7d:f4:18:17:3e:6c:45:0a:f8:
         3e:f5:d0:fd:2e:5a:ca:45:e8:bb:07:21:2a:cf:cb:d7:c0:9d:
         96:67:49:a4:25:df:4a:a2:4a:0e:73:99:16:5f:08:1f:2b:15:
         bc:a6:91:63:ae:3a:1d:ef:e8:a1:37:c7:32:58:92:64:cd:b2:
         f8:32:91:df:8f:e1:98:35:61:c6:68:d6:52:20:2f:e5:57:11:
         a9:d8:bb:17:c7:02:6e:59:eb:19:86:a7:15:81:10:d8:fe:09:
         c8:83:3e:16:90:77:22:f3:f9:af:6e:70:03:41:1b:87:67:c7:
         cf:31:c7:7f:00:b3:96:4f:82:70:cb:05:e3:43:85:46:a9:d9:
         2d:44:98:f7:0c:da:23:58:54:e9:d3:33:5d:37:a6:c4:4c:72:
         f0:4c:d7:0f:72:0c:af:07:2a:a9:6f:1d:74:d3:30:22:2d:1b:
         80:58:32:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 08:47:59 2023 by rpki-client on console-ams.rpki-client.org