Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/VuUxYQlWL17P0fKS12yjm9anXaI.roa
File:                     VuUxYQlWL17P0fKS12yjm9anXaI.roa (raw, json)
Hash identifier:          bZvd169ai4OuC85OvxHmKkcyLVhoCrC1xrSSTSMuZUc=
Subject key identifier:   56:E5:31:61:09:56:2F:5E:CF:D1:F2:92:D7:6C:A3:9B:D6:A7:5D:A2
Certificate issuer:       /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial:       018A087E3ABA1E64EF372CC57AB337A20FE8
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/VuUxYQlWL17P0fKS12yjm9anXaI.roa
Signing time:             Fri 18 Aug 2023 11:53:24 +0000
ROA not before:           Fri 18 Aug 2023 11:53:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9146
IP address blocks:        195.222.32.0/19 maxlen: 21
                          195.222.32.0/20 maxlen: 20
                          195.222.32.0/21 maxlen: 21
                          195.222.40.0/21 maxlen: 21
                          109.175.0.0/17 maxlen: 21
                          109.175.4.0/23 maxlen: 23
                          109.175.8.0/24 maxlen: 24
                          195.222.49.0/24 maxlen: 24
                          195.222.48.0/20 maxlen: 20
                          109.175.6.0/23 maxlen: 23
                          195.222.48.0/21 maxlen: 21
                          109.175.12.0/23 maxlen: 23
                          109.175.14.0/23 maxlen: 23
                          109.175.15.0/24 maxlen: 24
                          195.222.56.0/21 maxlen: 21
                          109.175.16.0/22 maxlen: 22
                          109.175.24.0/24 maxlen: 24
                          109.175.22.0/23 maxlen: 23
                          109.175.20.0/23 maxlen: 23
                          109.175.26.0/24 maxlen: 24
                          109.175.28.0/23 maxlen: 23
                          109.175.30.0/24 maxlen: 24
                          85.92.226.0/24 maxlen: 24
                          85.92.224.0/19 maxlen: 21
                          85.92.227.0/24 maxlen: 24
                          85.92.230.0/24 maxlen: 24
                          85.92.228.0/23 maxlen: 23
                          185.12.76.0/24 maxlen: 24
                          185.12.78.0/23 maxlen: 23
                          80.65.64.0/19 maxlen: 21
                          80.65.64.0/21 maxlen: 21
                          80.65.64.0/22 maxlen: 22
                          89.146.128.0/18 maxlen: 21
                          80.65.68.0/22 maxlen: 22
                          80.65.72.0/22 maxlen: 22
                          80.65.72.0/21 maxlen: 21
                          80.65.76.0/22 maxlen: 22
                          80.65.80.0/21 maxlen: 21
                          80.65.80.0/22 maxlen: 22
                          80.65.84.0/22 maxlen: 22
                          80.65.88.0/21 maxlen: 21
                          80.65.88.0/22 maxlen: 22
                          80.65.92.0/22 maxlen: 22
                          92.36.128.0/17 maxlen: 21
                          92.36.232.0/22 maxlen: 22
                          92.36.236.0/22 maxlen: 22
                          92.36.192.0/21 maxlen: 21
                          109.163.147.0/24 maxlen: 24
                          109.163.148.0/22 maxlen: 22
                          109.163.152.0/21 maxlen: 21
                          109.163.146.0/24 maxlen: 24
                          109.163.160.0/20 maxlen: 20
                          109.163.160.0/21 maxlen: 21
                          109.163.170.0/24 maxlen: 24
                          109.163.168.0/23 maxlen: 23
                          109.163.168.0/21 maxlen: 23
                          109.163.172.0/22 maxlen: 22
                          109.163.171.0/24 maxlen: 24
                          109.163.176.0/21 maxlen: 21
                          109.163.176.0/20 maxlen: 21
                          109.163.184.0/21 maxlen: 21
                          109.163.184.0/22 maxlen: 22
                          109.163.190.0/23 maxlen: 23
                          109.163.188.0/23 maxlen: 23
                          31.176.216.0/22 maxlen: 22
                          31.176.220.0/22 maxlen: 22
                          109.163.128.0/22 maxlen: 22
                          109.163.128.0/19 maxlen: 19
                          109.163.128.0/18 maxlen: 18
                          109.163.132.0/22 maxlen: 22
                          109.163.136.0/21 maxlen: 21
                          109.163.144.0/23 maxlen: 23
                          37.203.64.0/18 maxlen: 21
                          31.176.160.0/20 maxlen: 20
                          31.176.176.0/20 maxlen: 20
                          37.203.112.0/22 maxlen: 22
                          31.176.128.0/20 maxlen: 20
                          31.176.128.0/17 maxlen: 21
                          37.203.120.0/22 maxlen: 22
                          37.203.124.0/22 maxlen: 22
                          31.176.144.0/20 maxlen: 20
                          109.175.98.0/23 maxlen: 23
                          109.175.96.0/22 maxlen: 22
                          109.175.96.0/23 maxlen: 23
                          109.175.100.0/22 maxlen: 22
                          109.175.102.0/23 maxlen: 23
                          109.175.100.0/23 maxlen: 23
                          109.175.104.0/22 maxlen: 22
                          109.175.104.0/23 maxlen: 23
                          109.175.108.0/22 maxlen: 22
                          109.175.112.0/22 maxlen: 22
                          109.175.106.0/23 maxlen: 23
                          109.175.116.0/22 maxlen: 22
                          109.175.120.0/22 maxlen: 22
                          109.175.124.0/22 maxlen: 22
                          109.175.40.0/22 maxlen: 22
                          109.175.44.0/23 maxlen: 23
                          109.175.46.0/23 maxlen: 23
                          2a02:27b0:5300::/40 maxlen: 40
                          2a02:27b0::/32 maxlen: 32
                          2a02:27b0:4100::/40 maxlen: 40
                          2a02:27b0:4b00::/40 maxlen: 40
                          2a02:27b0:4500::/40 maxlen: 40
                          2a02:27b0:4400::/40 maxlen: 40
                          2a02:27b0:4d00::/40 maxlen: 40
                          2a02:27b0:4a00::/40 maxlen: 40
                          2a02:27b0:5500::/40 maxlen: 40
                          2a02:27b0:4900::/40 maxlen: 40
                          2a02:27b0:4300::/40 maxlen: 40
                          2a02:27b0:4800::/40 maxlen: 40
                          2a02:27b0:4c00::/40 maxlen: 40
                          2a02:27b0:4200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:08:7e:3a:ba:1e:64:ef:37:2c:c5:7a:b3:37:a2:0f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
        Validity
            Not Before: Aug 18 11:53:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56e5316109562f5ecfd1f292d76ca39bd6a75da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:ee:0f:24:9e:74:5d:96:0e:0a:d7:59:79:
                    ef:80:ee:d8:d5:56:a9:db:dc:06:53:70:81:b1:9d:
                    d7:09:82:ec:c7:e3:b6:d4:f2:59:0f:ec:a3:e5:59:
                    67:73:f3:fb:d9:77:89:80:6b:ea:99:ff:c4:4c:a8:
                    5c:d0:b7:16:a3:38:c3:c5:c8:4c:9b:65:ab:31:41:
                    56:82:9e:0e:80:d3:18:ae:a7:7d:98:97:0a:7e:7c:
                    ea:99:04:5a:97:ba:61:5b:e5:82:bd:35:9d:97:db:
                    de:4d:62:31:96:59:38:f6:e2:69:7f:60:dc:a6:29:
                    b6:65:4d:09:15:80:2b:91:39:d5:31:59:07:bf:f2:
                    8a:46:cf:82:17:74:9c:6a:55:37:d6:45:ec:bc:c5:
                    bd:c0:4d:a8:8b:7d:72:24:54:b2:30:60:53:9d:68:
                    11:9a:6d:84:db:c5:67:74:cd:ef:ae:50:53:49:22:
                    a5:ea:76:1a:0f:8a:b6:2a:84:5a:8f:40:e5:96:4b:
                    05:41:55:dc:ba:a2:0f:2f:0a:d9:7e:9b:a9:5e:f3:
                    36:8b:c6:10:2a:dd:bc:29:a6:63:c1:00:31:9c:cd:
                    a7:cc:ae:34:6e:5e:6c:d7:39:14:ba:87:31:16:52:
                    62:9a:c1:11:ac:ff:33:95:08:29:d9:55:65:cf:30:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E5:31:61:09:56:2F:5E:CF:D1:F2:92:D7:6C:A3:9B:D6:A7:5D:A2
            X509v3 Authority Key Identifier:
                keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/VuUxYQlWL17P0fKS12yjm9anXaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.176.128.0/17
                  37.203.64.0/18
                  80.65.64.0/19
                  85.92.224.0/19
                  89.146.128.0/18
                  92.36.128.0/17
                  109.163.128.0/18
                  109.175.0.0/17
                  185.12.76.0/24
                  185.12.78.0/23
                  195.222.32.0/19
                IPv6:
                  2a02:27b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:17:c8:7d:c6:1f:25:22:cf:f8:6d:be:c7:c8:4e:bd:ad:2e:
         b0:27:02:8a:f9:bf:53:02:ed:09:48:72:3c:e0:99:22:2f:e5:
         84:80:61:3c:e9:b8:ab:8f:8a:68:bf:85:ce:a6:0f:fc:4c:50:
         64:16:b2:7e:b1:f0:7c:d6:c2:80:24:37:26:dc:25:e6:bd:03:
         c2:11:a6:0a:e9:05:da:bc:92:e1:a0:d6:17:bf:cc:fa:c0:d4:
         d1:01:b3:d2:9b:6a:51:42:75:27:ff:48:a1:94:90:61:f7:3c:
         e8:6f:ce:68:fb:9e:b7:e3:dd:13:55:8b:34:e2:6b:a2:e2:cc:
         8b:49:27:2c:0e:fa:01:d1:9d:64:37:76:e0:e4:11:bb:be:bf:
         02:c6:c1:cf:87:df:68:ab:64:61:d0:84:39:61:fd:57:e3:92:
         e3:35:45:62:1e:84:fb:0c:60:71:96:2b:87:07:e6:a8:ff:a4:
         da:e7:d0:ac:c8:8a:a3:1d:16:a3:6c:65:10:2d:f6:3b:af:07:
         99:a8:e9:b1:78:ff:ed:63:57:a9:6b:3f:cf:dd:3f:40:86:50:
         e8:4d:07:c4:02:f8:08:9e:dc:ad:4b:48:70:a4:a1:6a:4d:d4:
         b2:a3:de:f1:f7:b0:d6:29:16:62:2b:f7:68:fb:34:40:c4:64:
         a5:e9:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:25 2024 by rpki-client on console-fra.rpki-client.org