Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eqnr33OEbJVI31RMiiNE8ZNX8oQ.roa
File:                     eqnr33OEbJVI31RMiiNE8ZNX8oQ.roa (raw, json)
Hash identifier:          VjCCK08mkaKA8qYcpu9UQSfQAgizV6B9tOSQkZkzj1E=
Subject key identifier:   7A:A9:EB:DF:73:84:6C:95:48:DF:54:4C:8A:23:44:F1:93:57:F2:84
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0187C1AAFFC7AEB06F9B272EB55F54ECC497
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eqnr33OEbJVI31RMiiNE8ZNX8oQ.roa
Signing time:             Thu 27 Apr 2023 07:43:41 +0000
ROA not before:           Thu 27 Apr 2023 07:43:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204384
IP address blocks:        193.46.210.0/24 maxlen: 24
                          5.180.176.0/24 maxlen: 24
                          5.105.139.0/24 maxlen: 24
                          5.105.138.0/24 maxlen: 24
                          5.105.143.0/24 maxlen: 24
                          5.105.142.0/24 maxlen: 24
                          5.105.165.0/24 maxlen: 24
                          5.105.162.0/24 maxlen: 24
                          5.105.170.0/24 maxlen: 24
                          5.105.172.0/24 maxlen: 24
                          5.105.69.0/24 maxlen: 24
                          5.105.68.0/24 maxlen: 24
                          5.105.77.0/24 maxlen: 24
                          5.105.76.0/24 maxlen: 24
                          5.105.85.0/24 maxlen: 24
                          5.105.94.0/24 maxlen: 24
                          5.105.104.0/24 maxlen: 24
                          5.105.112.0/24 maxlen: 24
                          5.105.118.0/24 maxlen: 24
                          5.105.115.0/24 maxlen: 24
                          5.105.114.0/24 maxlen: 24
                          5.105.113.0/24 maxlen: 24
                          5.105.228.0/24 maxlen: 24
                          5.105.240.0/24 maxlen: 24
                          5.105.239.0/24 maxlen: 24
                          5.105.244.0/24 maxlen: 24
                          5.105.245.0/24 maxlen: 24
                          5.105.249.0/24 maxlen: 24
                          5.105.248.0/24 maxlen: 24
                          5.105.186.0/24 maxlen: 24
                          5.105.185.0/24 maxlen: 24
                          5.105.187.0/24 maxlen: 24
                          5.105.199.0/24 maxlen: 24
                          5.105.198.0/24 maxlen: 24
                          5.105.202.0/24 maxlen: 24
                          5.105.206.0/24 maxlen: 24
                          5.105.203.0/24 maxlen: 24
                          5.105.207.0/24 maxlen: 24
                          5.105.215.0/24 maxlen: 24
                          5.105.22.0/24 maxlen: 24
                          5.105.23.0/24 maxlen: 24
                          5.105.31.0/24 maxlen: 24
                          5.105.35.0/24 maxlen: 24
                          5.105.34.0/24 maxlen: 24
                          5.105.44.0/22 maxlen: 22
                          5.105.47.0/24 maxlen: 24
                          5.105.46.0/24 maxlen: 24
                          5.105.45.0/24 maxlen: 24
                          5.105.63.0/24 maxlen: 24
                          5.105.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c1:aa:ff:c7:ae:b0:6f:9b:27:2e:b5:5f:54:ec:c4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Apr 27 07:43:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7aa9ebdf73846c9548df544c8a2344f19357f284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:f1:8b:0a:71:94:54:26:ee:92:b3:f7:5b:
                    37:c8:64:73:25:dd:18:9d:c3:19:f0:b1:92:c6:d3:
                    a0:c4:dd:b1:bd:b3:d3:83:31:77:eb:60:63:57:da:
                    d7:40:94:1f:81:5e:58:99:e2:d5:94:d3:4e:d4:55:
                    a8:b4:97:c9:22:aa:cc:75:24:22:70:92:ee:49:04:
                    1a:6f:42:d4:d8:64:b8:18:f6:d2:64:a1:a6:74:c7:
                    a2:e5:72:f6:34:26:b1:41:5a:20:9a:de:4d:2b:af:
                    7e:09:46:06:71:ad:a1:ce:74:7d:8f:3f:23:48:12:
                    a9:c6:a8:f4:3a:35:1a:f9:69:4a:41:ce:37:ee:db:
                    3a:f3:40:b7:0d:42:0a:bc:46:8c:6a:b5:ad:3c:33:
                    ad:48:04:e8:19:1d:9e:8c:23:90:17:1b:bf:0b:83:
                    0c:05:7b:fa:e1:7d:99:64:15:04:f8:2d:3a:d1:d7:
                    6d:8f:93:46:4e:08:d7:dd:15:4f:69:c8:76:6b:7e:
                    64:d2:28:93:1f:9e:93:7e:66:fc:91:65:d5:ca:b8:
                    d4:07:2a:df:51:d4:aa:b2:e2:d1:48:c9:cf:d5:d6:
                    fa:e5:86:83:ce:11:84:83:48:49:e9:96:63:f6:fb:
                    03:96:aa:f6:f7:41:1c:b3:f6:9e:ea:b5:cb:32:59:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A9:EB:DF:73:84:6C:95:48:DF:54:4C:8A:23:44:F1:93:57:F2:84
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eqnr33OEbJVI31RMiiNE8ZNX8oQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.22.0/23
                  5.105.31.0/24
                  5.105.34.0/23
                  5.105.44.0/22
                  5.105.63.0-5.105.64.255
                  5.105.68.0/23
                  5.105.76.0/23
                  5.105.85.0/24
                  5.105.94.0/24
                  5.105.104.0/24
                  5.105.112.0/22
                  5.105.118.0/24
                  5.105.138.0/23
                  5.105.142.0/23
                  5.105.162.0/24
                  5.105.165.0/24
                  5.105.170.0/24
                  5.105.172.0/24
                  5.105.185.0-5.105.187.255
                  5.105.198.0/23
                  5.105.202.0/23
                  5.105.206.0/23
                  5.105.215.0/24
                  5.105.228.0/24
                  5.105.239.0-5.105.240.255
                  5.105.244.0/23
                  5.105.248.0/23
                  5.180.176.0/24
                  193.46.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:f4:8c:c9:4e:b9:7e:3d:08:70:db:ba:02:1e:cd:0d:71:
         b7:06:b8:f4:70:82:b3:28:ea:19:bd:da:8a:ed:42:f0:9c:4a:
         42:de:40:68:04:4d:ef:14:fa:6f:d2:0b:a2:ef:b2:1b:34:0b:
         67:42:10:63:d6:6f:68:7c:ca:24:a7:b2:94:f3:93:34:7d:9b:
         39:b8:c4:48:5e:4e:26:dd:56:7a:aa:5b:30:94:ae:f0:ee:a3:
         a5:66:56:ae:0d:b9:2f:21:10:dd:13:4d:ff:2d:ef:e5:bb:0d:
         a9:b4:92:c8:e0:df:8e:ad:e3:c7:08:97:4f:c4:4e:1e:a9:06:
         15:a6:ee:88:fa:fd:d2:89:16:0a:d2:13:80:93:e6:70:b5:46:
         9c:70:b7:62:dd:6c:41:66:dd:ed:28:87:4e:b8:a9:f2:5b:7c:
         f8:61:aa:f1:b7:01:eb:3a:3a:5b:ff:04:0b:96:a6:04:f4:b9:
         56:82:d3:da:c1:10:81:a6:fa:03:2b:50:b5:31:8d:c4:9d:60:
         93:35:3c:12:6d:f9:d6:b8:26:2e:80:c0:01:cc:f6:f9:74:b5:
         32:02:8b:f2:ca:e3:42:b6:01:9f:ca:3c:39:f2:3a:18:87:d7:
         a0:22:af:48:64:68:56:09:cf:9a:cd:ca:05:40:28:51:f0:e6:
         8d:18:50:08
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAYfBqv/HrrBvmycutV9U7MSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDI3MDc0MzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWE5ZWJkZjczODQ2Yzk1NDhkZjU0NGM4YTIzNDRmMTkzNTdmMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr/xiwpxlFQm7pKz91s3yGRzJd0Y
ncMZ8LGSxtOgxN2xvbPTgzF362BjV9rXQJQfgV5YmeLVlNNO1FWotJfJIqrMdSQi
cJLuSQQab0LU2GS4GPbSZKGmdMei5XL2NCaxQVogmt5NK69+CUYGca2hznR9jz8j
SBKpxqj0OjUa+WlKQc437ts680C3DUIKvEaMarWtPDOtSAToGR2ejCOQFxu/C4MM
BXv64X2ZZBUE+C060ddtj5NGTgjX3RVPach2a35k0iiTH56Tfmb8kWXVyrjUByrf
UdSqsuLRSMnP1db65YaDzhGEg0hJ6ZZj9vsDlqr290Ecs/ae6rXLMlle0wIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFHqp699zhGyVSN9UTIojRPGTV/KEMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZXFucjMzT0ViSlZJMzFSTWlpTkU4Wk5YOG9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DCBzQQCAAEwgcYDBAEF
aRYDBAAFaR8DBAEFaSIDBAIFaSwwDAMEAAVpPwMEAAVpQAMEAQVpRAMEAQVpTAME
AAVpVQMEAAVpXgMEAAVpaAMEAgVpcAMEAAVpdgMEAQVpigMEAQVpjgMEAAVpogME
AAVppQMEAAVpqgMEAAVprDAMAwQABWm5AwQCBWm4AwQBBWnGAwQBBWnKAwQBBWnO
AwQABWnXAwQABWnkMAwDBAAFae8DBAAFafADBAEFafQDBAEFafgDBAAFtLADBADB
LtIwDQYJKoZIhvcNAQELBQADggEBAAKP9IzJTrl+PQhw27oCHs0NcbcGuPRwgrMo
6hm92ortQvCcSkLeQGgETe8U+m/SC6Lvshs0C2dCEGPWb2h8yiSnspTzkzR9mzm4
xEheTibdVnqqWzCUrvDuo6VmVq4NuS8hEN0TTf8t7+W7Dam0ksjg346t48cIl0/E
Th6pBhWm7oj6/dKJFgrSE4CT5nC1Rpxwt2LdbEFm3e0oh064qfJbfPhhqvG3Aes6
Olv/BAuWpgT0uVaC09rBEIGm+gMrULUxjcSdYJM1PBJt+da4Ji6AwAHM9vl0tTIC
i/LK40K2AZ/KPDnyOhiH16Air0hkaFYJz5rNygVAKFHw5o0YUAg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org