Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/A0lI9z_l4rdZxB3FuOJxeaU1oOY.roa
File:                     A0lI9z_l4rdZxB3FuOJxeaU1oOY.roa (raw, json)
Hash identifier:          60fk046vwifCCHpAjVO2Ha+dHO7MmsBzizmHIzLdpTk=
Subject key identifier:   03:49:48:F7:3F:E5:E2:B7:59:C4:1D:C5:B8:E2:71:79:A5:35:A0:E6
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       01893B8F3EFFCDB91257A5C4BEC70C24FB04
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/A0lI9z_l4rdZxB3FuOJxeaU1oOY.roa
Signing time:             Sun 09 Jul 2023 16:49:50 +0000
ROA not before:           Sun 09 Jul 2023 16:49:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12301
IP address blocks:        79.120.168.0/23 maxlen: 24
                          79.120.176.0/20 maxlen: 24
                          79.120.192.0/19 maxlen: 24
                          79.120.198.0/24 maxlen: 24
                          79.120.200.0/24 maxlen: 24
                          79.120.128.0/19 maxlen: 24
                          79.120.224.0/20 maxlen: 24
                          79.120.240.0/21 maxlen: 24
                          79.120.250.0/23 maxlen: 24
                          212.24.160.0/19 maxlen: 19
                          193.226.196.0/22 maxlen: 24
                          193.226.194.0/23 maxlen: 24
                          193.226.200.0/21 maxlen: 24
                          89.186.98.0/23 maxlen: 24
                          89.186.100.0/23 maxlen: 24
                          193.226.208.0/22 maxlen: 24
                          213.253.192.0/18 maxlen: 24
                          89.186.104.0/23 maxlen: 24
                          193.226.216.0/21 maxlen: 24
                          89.186.116.0/23 maxlen: 24
                          193.226.224.0/23 maxlen: 24
                          193.226.228.0/22 maxlen: 24
                          193.226.236.0/23 maxlen: 24
                          193.226.234.0/23 maxlen: 24
                          193.226.242.0/23 maxlen: 24
                          193.226.252.0/22 maxlen: 24
                          193.226.250.0/23 maxlen: 24
                          94.125.248.0/21 maxlen: 24
                          82.131.160.0/20 maxlen: 24
                          62.77.192.0/22 maxlen: 24
                          193.91.64.0/19 maxlen: 24
                          82.131.176.0/22 maxlen: 24
                          62.77.200.0/21 maxlen: 24
                          62.77.208.0/20 maxlen: 24
                          82.131.180.0/23 maxlen: 24
                          82.131.192.0/22 maxlen: 24
                          62.77.224.0/20 maxlen: 24
                          82.131.199.0/24 maxlen: 24
                          82.131.208.0/21 maxlen: 24
                          62.77.244.0/22 maxlen: 24
                          62.77.242.0/23 maxlen: 24
                          91.83.148.0/22 maxlen: 24
                          91.83.146.0/23 maxlen: 24
                          91.83.152.0/23 maxlen: 24
                          91.83.156.0/22 maxlen: 24
                          91.83.160.0/20 maxlen: 24
                          213.16.64.0/18 maxlen: 24
                          91.83.176.0/22 maxlen: 24
                          87.97.64.0/20 maxlen: 24
                          91.83.92.0/23 maxlen: 24
                          91.83.96.0/22 maxlen: 24
                          91.83.100.0/23 maxlen: 24
                          91.83.104.0/22 maxlen: 24
                          91.83.108.0/23 maxlen: 24
                          91.83.122.0/23 maxlen: 24
                          91.83.124.0/22 maxlen: 24
                          91.83.128.0/21 maxlen: 24
                          82.144.160.0/22 maxlen: 24
                          91.83.254.0/23 maxlen: 24
                          82.144.168.0/22 maxlen: 24
                          82.144.178.0/23 maxlen: 24
                          82.144.180.0/22 maxlen: 24
                          82.144.184.0/22 maxlen: 24
                          82.144.190.0/23 maxlen: 24
                          185.50.28.0/22 maxlen: 24
                          91.83.208.0/20 maxlen: 24
                          91.83.224.0/20 maxlen: 24
                          91.83.220.0/22 maxlen: 22
                          91.83.240.0/21 maxlen: 24
                          91.83.248.0/22 maxlen: 24
                          91.82.192.0/20 maxlen: 24
                          91.82.208.0/23 maxlen: 24
                          91.82.216.0/21 maxlen: 24
                          91.82.224.0/22 maxlen: 24
                          91.82.236.0/22 maxlen: 24
                          91.82.152.0/21 maxlen: 24
                          91.82.148.0/22 maxlen: 24
                          91.82.174.0/23 maxlen: 24
                          213.197.64.0/21 maxlen: 24
                          91.82.184.0/22 maxlen: 24
                          91.83.40.0/21 maxlen: 24
                          91.83.48.0/22 maxlen: 24
                          91.83.56.0/21 maxlen: 24
                          91.83.64.0/20 maxlen: 24
                          194.143.224.0/19 maxlen: 24
                          91.83.80.0/21 maxlen: 24
                          91.83.88.0/22 maxlen: 24
                          91.82.244.0/22 maxlen: 24
                          195.184.0.0/19 maxlen: 24
                          91.82.252.0/22 maxlen: 24
                          91.82.248.0/23 maxlen: 24
                          91.82.8.0/21 maxlen: 24
                          91.82.16.0/21 maxlen: 24
                          212.108.192.0/18 maxlen: 24
                          91.82.84.0/22 maxlen: 24
                          91.82.80.0/23 maxlen: 24
                          91.82.88.0/21 maxlen: 24
                          91.82.96.0/19 maxlen: 24
                          194.169.253.0/24 maxlen: 24
                          91.82.128.0/23 maxlen: 24
                          213.163.0.0/18 maxlen: 24
                          91.82.40.0/21 maxlen: 24
                          91.82.48.0/21 maxlen: 24
                          91.82.58.0/23 maxlen: 24
                          91.82.62.0/23 maxlen: 24
                          91.82.72.0/21 maxlen: 24
                          81.0.64.0/20 maxlen: 24
                          81.0.80.0/23 maxlen: 24
                          81.0.88.0/23 maxlen: 24
                          81.0.96.0/23 maxlen: 24
                          81.94.176.0/20 maxlen: 24
                          81.0.104.0/22 maxlen: 24
                          81.0.100.0/22 maxlen: 24
                          82.141.128.0/18 maxlen: 24
                          193.68.32.0/19 maxlen: 24
                          81.0.110.0/23 maxlen: 24
                          81.0.112.0/21 maxlen: 24
                          81.0.124.0/23 maxlen: 24
                          81.0.121.0/24 maxlen: 24
                          81.0.120.0/23 maxlen: 24
                          81.0.120.0/24 maxlen: 24
                          2001:1aa0::/29 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3b:8f:3e:ff:cd:b9:12:57:a5:c4:be:c7:0c:24:fb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: Jul  9 16:49:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=034948f73fe5e2b759c41dc5b8e27179a535a0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:c7:3e:24:6e:21:35:e1:cc:9c:bd:6f:42:
                    d1:65:a1:17:4e:59:db:2b:c7:01:fe:18:b4:ba:f2:
                    9a:74:6f:af:3a:e5:ef:31:73:28:bf:25:2c:68:51:
                    06:80:ae:cc:94:5b:ff:ec:4a:e3:59:36:52:aa:bc:
                    34:fd:e5:57:d9:c9:f7:76:f7:24:a1:50:05:8c:93:
                    6a:b9:f9:bc:29:81:b6:02:77:6d:f4:f4:2a:ae:02:
                    a4:3c:38:64:c3:27:d4:d4:71:9f:4f:7d:49:e6:9c:
                    86:9a:61:07:a1:05:69:35:4a:5d:7a:c5:8a:e4:c5:
                    2f:a9:83:2e:73:c2:3f:72:47:98:fc:f4:14:59:00:
                    ce:91:5e:9e:bf:6c:e8:e1:66:f4:80:3a:56:7c:78:
                    55:86:15:fe:f5:9c:16:a6:f3:fe:a7:12:d8:2c:9b:
                    f6:82:cf:84:22:2c:41:b8:7a:53:fa:e8:55:4e:ce:
                    2c:82:de:1f:b2:b8:06:40:37:93:d6:e4:0f:4c:88:
                    35:02:b6:5f:eb:d9:97:5b:7f:fb:ea:2f:c0:63:51:
                    2d:2c:ba:65:1c:6b:22:e4:29:d4:e0:f1:04:e5:61:
                    23:9a:49:18:24:86:80:3e:69:7d:0a:47:c5:3a:6f:
                    7b:06:19:9c:ea:48:3b:2e:17:45:3d:d2:4c:69:df:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:49:48:F7:3F:E5:E2:B7:59:C4:1D:C5:B8:E2:71:79:A5:35:A0:E6
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/A0lI9z_l4rdZxB3FuOJxeaU1oOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.77.192.0/22
                  62.77.200.0-62.77.239.255
                  62.77.242.0-62.77.247.255
                  79.120.128.0/19
                  79.120.168.0/23
                  79.120.176.0-79.120.247.255
                  79.120.250.0/23
                  81.0.64.0-81.0.81.255
                  81.0.88.0/23
                  81.0.96.0/23
                  81.0.100.0-81.0.107.255
                  81.0.110.0-81.0.121.255
                  81.0.124.0/23
                  81.94.176.0/20
                  82.131.160.0-82.131.181.255
                  82.131.192.0/22
                  82.131.199.0/24
                  82.131.208.0/21
                  82.141.128.0/18
                  82.144.160.0/22
                  82.144.168.0/22
                  82.144.178.0-82.144.187.255
                  82.144.190.0/23
                  87.97.64.0/20
                  89.186.98.0-89.186.101.255
                  89.186.104.0/23
                  89.186.116.0/23
                  91.82.8.0-91.82.23.255
                  91.82.40.0-91.82.55.255
                  91.82.58.0/23
                  91.82.62.0/23
                  91.82.72.0-91.82.81.255
                  91.82.84.0-91.82.129.255
                  91.82.148.0-91.82.159.255
                  91.82.174.0/23
                  91.82.184.0/22
                  91.82.192.0-91.82.209.255
                  91.82.216.0-91.82.227.255
                  91.82.236.0/22
                  91.82.244.0-91.82.249.255
                  91.82.252.0/22
                  91.83.40.0-91.83.51.255
                  91.83.56.0-91.83.93.255
                  91.83.96.0-91.83.101.255
                  91.83.104.0-91.83.109.255
                  91.83.122.0-91.83.135.255
                  91.83.146.0-91.83.153.255
                  91.83.156.0-91.83.179.255
                  91.83.208.0-91.83.251.255
                  91.83.254.0/23
                  94.125.248.0/21
                  185.50.28.0/22
                  193.68.32.0/19
                  193.91.64.0/19
                  193.226.194.0-193.226.211.255
                  193.226.216.0-193.226.225.255
                  193.226.228.0/22
                  193.226.234.0-193.226.237.255
                  193.226.242.0/23
                  193.226.250.0-193.226.255.255
                  194.143.224.0/19
                  194.169.253.0/24
                  195.184.0.0/19
                  212.24.160.0/19
                  212.108.192.0/18
                  213.16.64.0/18
                  213.163.0.0/18
                  213.197.64.0/21
                  213.253.192.0/18
                IPv6:
                  2001:1aa0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:27:ae:4d:9b:34:e6:64:49:31:2f:0e:c8:8b:63:8e:bd:a3:
         a5:9c:c1:39:bd:d2:6f:07:2a:ff:71:5c:c1:44:30:c7:c1:f8:
         aa:a6:4b:1b:ba:09:c7:d4:1c:52:8d:dd:b8:6f:0d:15:00:a1:
         f0:dd:f9:50:6a:80:a1:31:7e:2a:89:bf:c0:86:a0:42:f7:a8:
         ff:37:aa:00:d0:d2:18:b8:f1:55:19:3e:b2:8a:ea:61:94:73:
         d6:58:3f:3d:38:7d:7e:36:06:df:bd:4c:92:be:01:1b:3c:c2:
         ed:15:f6:1c:23:db:fd:69:a6:5c:6e:c1:f6:9c:7d:62:12:4c:
         30:7b:55:39:20:64:96:02:b4:59:84:98:1a:87:fc:b0:fb:24:
         ae:a4:61:55:a8:d7:6d:6b:34:bf:b1:2b:de:08:62:9c:c8:db:
         20:0b:91:ff:d7:db:b4:70:c1:ed:44:4b:c0:54:96:35:d9:70:
         e6:69:a7:9d:89:f7:c9:a9:c1:01:3f:fc:06:58:0a:98:6a:4f:
         ad:40:3b:67:c6:8e:cb:fc:e7:71:c5:85:6b:01:8e:f8:d9:d9:
         3e:c2:0d:80:d8:0d:cd:8a:b4:77:12:0c:cc:a2:ed:f0:aa:39:
         72:a7:40:c0:bd:8b:17:43:68:3a:5c:b1:b1:31:91:ae:16:e9:
         3a:83:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org