Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/3mPKoCy5eWv8GitqE5Np3AWKguc.roa
File:                     3mPKoCy5eWv8GitqE5Np3AWKguc.roa (raw, json)
Hash identifier:          qoL92TjAzr5tXa39wikWMwruJij28pVVWb5PsV4eyIU=
Subject key identifier:   DE:63:CA:A0:2C:B9:79:6B:FC:1A:2B:6A:13:93:69:DC:05:8A:82:E7
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01856F670CCA41F464AE7FD0349A54D2137C
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/3mPKoCy5eWv8GitqE5Np3AWKguc.roa
Signing time:             Sun 01 Jan 2023 22:15:02 +0000
ROA not before:           Sun 01 Jan 2023 22:15:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2860
IP address blocks:        95.93.192.0/18 maxlen: 18
                          89.154.128.0/18 maxlen: 18
                          212.113.173.0/24 maxlen: 24
                          212.113.183.0/24 maxlen: 24
                          95.93.128.0/18 maxlen: 18
                          89.154.64.0/18 maxlen: 18
                          89.154.192.0/18 maxlen: 18
                          79.168.64.0/18 maxlen: 18
                          89.181.192.0/18 maxlen: 18
                          95.94.64.0/18 maxlen: 18
                          79.168.0.0/18 maxlen: 18
                          89.181.128.0/18 maxlen: 18
                          79.168.0.0/15 maxlen: 15
                          95.94.0.0/18 maxlen: 18
                          89.153.128.0/18 maxlen: 18
                          89.180.128.0/18 maxlen: 18
                          95.93.0.0/18 maxlen: 18
                          89.153.64.0/18 maxlen: 18
                          194.79.64.0/19 maxlen: 19
                          194.79.69.0/24 maxlen: 24
                          95.92.192.0/18 maxlen: 18
                          193.126.120.0/24 maxlen: 24
                          193.126.128.0/17 maxlen: 17
                          194.79.86.0/24 maxlen: 24
                          95.93.64.0/18 maxlen: 18
                          89.154.0.0/18 maxlen: 18
                          212.113.160.0/19 maxlen: 19
                          89.181.0.0/16 maxlen: 16
                          89.153.192.0/18 maxlen: 18
                          95.92.0.0/18 maxlen: 18
                          94.132.128.0/18 maxlen: 18
                          83.132.128.0/18 maxlen: 18
                          85.139.64.0/18 maxlen: 18
                          95.92.0.0/14 maxlen: 14
                          89.152.192.0/18 maxlen: 18
                          109.51.192.0/18 maxlen: 18
                          85.139.0.0/18 maxlen: 18
                          94.132.64.0/18 maxlen: 18
                          89.152.128.0/18 maxlen: 18
                          109.51.128.0/18 maxlen: 18
                          89.180.0.0/16 maxlen: 16
                          89.180.0.0/15 maxlen: 15
                          95.92.128.0/18 maxlen: 18
                          85.139.192.0/18 maxlen: 18
                          95.92.64.0/18 maxlen: 18
                          193.126.0.0/17 maxlen: 17
                          193.126.0.0/16 maxlen: 16
                          85.139.128.0/18 maxlen: 18
                          94.132.192.0/18 maxlen: 18
                          83.132.192.0/18 maxlen: 18
                          89.153.0.0/18 maxlen: 18
                          109.50.192.0/18 maxlen: 18
                          81.84.128.0/18 maxlen: 18
                          85.138.128.0/18 maxlen: 18
                          81.84.64.0/18 maxlen: 18
                          85.138.64.0/18 maxlen: 18
                          94.132.0.0/18 maxlen: 18
                          85.138.192.0/18 maxlen: 18
                          83.132.0.0/16 maxlen: 16
                          89.152.64.0/18 maxlen: 18
                          94.132.0.0/15 maxlen: 15
                          109.51.64.0/18 maxlen: 18
                          89.152.0.0/18 maxlen: 18
                          195.23.255.0/24 maxlen: 24
                          109.51.0.0/18 maxlen: 18
                          89.152.0.0/14 maxlen: 14
                          81.84.192.0/18 maxlen: 18
                          195.23.0.0/17 maxlen: 17
                          195.23.0.0/16 maxlen: 16
                          195.23.13.0/24 maxlen: 24
                          217.70.64.0/20 maxlen: 20
                          195.23.37.0/24 maxlen: 24
                          213.22.192.0/18 maxlen: 18
                          88.157.128.0/17 maxlen: 17
                          88.157.134.0/24 maxlen: 24
                          109.49.192.0/18 maxlen: 18
                          88.157.157.0/24 maxlen: 24
                          81.84.0.0/18 maxlen: 18
                          81.84.0.0/16 maxlen: 16
                          85.138.0.0/18 maxlen: 18
                          195.23.128.0/17 maxlen: 17
                          85.138.0.0/15 maxlen: 15
                          109.50.128.0/18 maxlen: 18
                          88.157.230.0/24 maxlen: 24
                          88.157.231.0/24 maxlen: 24
                          83.144.128.0/18 maxlen: 18
                          109.50.64.0/18 maxlen: 18
                          213.205.64.0/19 maxlen: 19
                          213.205.64.0/24 maxlen: 24
                          78.130.0.0/17 maxlen: 17
                          88.157.0.0/17 maxlen: 17
                          213.22.64.0/18 maxlen: 18
                          88.157.0.0/16 maxlen: 16
                          213.22.0.0/18 maxlen: 18
                          213.22.0.0/16 maxlen: 16
                          109.49.0.0/18 maxlen: 18
                          185.224.164.0/22 maxlen: 22
                          109.49.128.0/18 maxlen: 18
                          109.49.64.0/18 maxlen: 18
                          213.22.128.0/18 maxlen: 18
                          79.169.128.0/18 maxlen: 18
                          109.48.64.0/18 maxlen: 18
                          95.95.128.0/18 maxlen: 18
                          93.102.64.0/18 maxlen: 18
                          109.48.0.0/18 maxlen: 18
                          79.169.64.0/18 maxlen: 18
                          62.169.64.0/18 maxlen: 18
                          87.196.64.0/19 maxlen: 19
                          109.48.0.0/14 maxlen: 14
                          93.102.0.0/18 maxlen: 18
                          95.95.64.0/18 maxlen: 18
                          93.102.0.0/16 maxlen: 16
                          109.48.192.0/18 maxlen: 18
                          109.48.128.0/18 maxlen: 18
                          79.169.192.0/18 maxlen: 18
                          88.210.64.0/18 maxlen: 18
                          95.95.192.0/18 maxlen: 18
                          89.155.64.0/18 maxlen: 18
                          79.168.192.0/18 maxlen: 18
                          89.155.0.0/18 maxlen: 18
                          79.168.128.0/18 maxlen: 18
                          95.94.128.0/18 maxlen: 18
                          87.196.0.0/18 maxlen: 18
                          212.0.160.0/21 maxlen: 21
                          87.196.0.0/16 maxlen: 16
                          95.95.0.0/18 maxlen: 18
                          80.243.80.0/20 maxlen: 20
                          89.155.192.0/18 maxlen: 18
                          95.94.192.0/18 maxlen: 18
                          89.155.128.0/18 maxlen: 18
                          79.169.0.0/18 maxlen: 18
                          2a01:10::/29 maxlen: 29
                          2001:1588::/29 maxlen: 29
                          2a01:8:8011::/48 maxlen: 48
                          2a01:8::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:67:0c:ca:41:f4:64:ae:7f:d0:34:9a:54:d2:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  1 22:15:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de63caa02cb9796bfc1a2b6a139369dc058a82e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:bc:08:d5:e1:ba:ea:65:13:e5:8a:af:66:
                    fd:45:fe:ae:07:48:8e:a1:a0:9c:48:6a:dd:80:fd:
                    ae:fe:2b:47:72:55:b3:cc:42:4f:c1:96:9c:1a:df:
                    54:ee:89:c7:13:a5:10:8f:6c:18:cc:1b:43:7d:95:
                    07:73:00:74:77:9c:87:c0:8e:f2:0d:a5:de:04:5c:
                    95:6f:a5:e2:63:35:11:fd:63:dd:d0:0e:29:f0:96:
                    9e:27:48:fe:f3:37:cb:ea:f0:66:24:65:f0:81:89:
                    61:4e:d3:3f:14:7a:06:22:21:98:7c:5a:58:33:ac:
                    d9:b0:15:07:91:f6:e1:84:04:1c:5d:55:f0:48:4b:
                    07:1e:bf:53:2b:03:09:0b:76:f2:91:3e:a7:31:c3:
                    a2:fe:40:2a:59:5e:e0:33:1f:1d:d0:ca:be:a0:41:
                    42:d5:bf:cf:4f:d2:65:0e:cf:70:bf:b1:74:80:ca:
                    ae:8a:55:7d:06:9d:94:44:a8:d9:9c:7a:1e:9c:fd:
                    e8:6e:05:39:06:72:97:e2:64:39:f1:48:f9:ed:fa:
                    6e:16:dd:76:09:81:6b:b2:86:08:9c:a6:4b:be:fb:
                    c9:2c:95:28:a4:df:4c:4a:5d:37:b3:e0:86:37:be:
                    eb:6f:59:17:32:56:b8:9f:27:5e:04:60:3a:6c:1d:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:CA:A0:2C:B9:79:6B:FC:1A:2B:6A:13:93:69:DC:05:8A:82:E7
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/3mPKoCy5eWv8GitqE5Np3AWKguc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.64.0/18
                  78.130.0.0/17
                  79.168.0.0/15
                  80.243.80.0/20
                  81.84.0.0/16
                  83.132.0.0/16
                  83.144.128.0/18
                  85.138.0.0/15
                  87.196.0.0/16
                  88.157.0.0/16
                  88.210.64.0/18
                  89.152.0.0/14
                  89.180.0.0/15
                  93.102.0.0/16
                  94.132.0.0/15
                  95.92.0.0/14
                  109.48.0.0/14
                  185.224.164.0/22
                  193.126.0.0/16
                  194.79.64.0/19
                  195.23.0.0/16
                  212.0.160.0/21
                  212.113.160.0/19
                  213.22.0.0/16
                  213.205.64.0/19
                  217.70.64.0/20
                IPv6:
                  2001:1588::/29
                  2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         53:61:81:f8:41:cf:db:66:cf:30:f4:9c:74:5b:24:38:86:af:
         35:be:03:10:20:4f:ba:5a:6c:cc:cb:7a:cc:5c:f2:0d:85:6b:
         d9:26:93:5e:9c:75:aa:05:5b:c2:11:f0:9f:54:ff:cc:2b:2d:
         13:7f:e3:1a:96:e9:1c:2c:aa:37:1d:fd:e8:55:5e:dd:e0:73:
         c0:35:f9:58:d8:34:04:f1:a0:95:73:c6:25:b8:84:11:63:c7:
         b3:1a:d1:03:3f:48:dc:aa:08:29:d6:c0:4e:d9:81:5b:70:f6:
         36:32:44:6e:4f:9e:f6:51:12:f7:f4:1f:d9:8c:dd:c8:51:b0:
         e9:68:d2:8d:c5:f5:98:56:9e:10:d8:f9:f4:a9:09:a8:f0:e5:
         f0:c4:07:b4:45:d3:26:bc:1a:2f:37:37:02:9d:c7:59:9b:d1:
         e8:b1:b7:79:0c:32:e0:8f:9f:73:76:2d:86:21:9c:e2:9e:a4:
         27:ff:4d:98:3d:e5:70:9e:9a:ce:4c:64:dc:53:c6:99:ce:11:
         ad:da:ea:8d:23:f9:3d:7f:19:9c:6a:32:b6:ab:eb:15:c6:11:
         9a:62:26:22:84:cd:b4:c1:cb:1d:8c:cf:19:06:ff:74:19:a8:
         ef:17:56:c3:4d:e5:cc:c4:30:63:38:05:65:94:99:45:5a:c3:
         8d:6e:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 09:04:20 2023 by rpki-client on console-ams.rpki-client.org