Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/ZiP-4jVfqHWcLGqBGvgsUwUQ1jY.roa
File:                     ZiP-4jVfqHWcLGqBGvgsUwUQ1jY.roa (raw, json)
Hash identifier:          2lu+7hHRw4gZic9wW+s5mwCOBX6CzJc+mkaauDBzIlM=
Subject key identifier:   66:23:FE:E2:35:5F:A8:75:9C:2C:6A:81:1A:F8:2C:53:05:10:D6:36
Certificate issuer:       /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial:       0185720C75F3A805FC70B048A3FE4230120B
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/ZiP-4jVfqHWcLGqBGvgsUwUQ1jY.roa
Signing time:             Mon 02 Jan 2023 10:34:57 +0000
ROA not before:           Mon 02 Jan 2023 10:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9150
IP address blocks:        185.67.64.0/24 maxlen: 24
                          185.67.66.0/24 maxlen: 24
                          185.67.65.0/24 maxlen: 24
                          185.67.67.0/24 maxlen: 24
                          213.207.64.0/18 maxlen: 18
                          213.206.192.0/18 maxlen: 18
                          212.83.192.0/18 maxlen: 18
                          185.67.64.0/22 maxlen: 22
                          213.207.95.0/24 maxlen: 24
                          213.207.94.0/24 maxlen: 24
                          213.207.93.0/24 maxlen: 24
                          213.207.98.0/24 maxlen: 24
                          213.207.97.0/24 maxlen: 24
                          213.207.96.0/24 maxlen: 24
                          213.207.92.0/24 maxlen: 24
                          213.207.99.0/24 maxlen: 24
                          213.207.102.0/24 maxlen: 24
                          213.207.101.0/24 maxlen: 24
                          213.207.100.0/24 maxlen: 24
                          213.207.105.0/24 maxlen: 24
                          213.207.104.0/24 maxlen: 24
                          213.207.103.0/24 maxlen: 24
                          213.207.109.0/24 maxlen: 24
                          213.207.108.0/24 maxlen: 24
                          213.207.107.0/24 maxlen: 24
                          213.207.112.0/24 maxlen: 24
                          213.207.111.0/24 maxlen: 24
                          213.207.110.0/24 maxlen: 24
                          213.207.106.0/24 maxlen: 24
                          213.207.113.0/24 maxlen: 24
                          213.207.116.0/24 maxlen: 24
                          213.207.115.0/24 maxlen: 24
                          213.207.114.0/24 maxlen: 24
                          213.207.118.0/24 maxlen: 24
                          213.207.117.0/24 maxlen: 24
                          213.207.123.0/24 maxlen: 24
                          213.207.122.0/24 maxlen: 24
                          213.207.121.0/24 maxlen: 24
                          213.207.125.0/24 maxlen: 24
                          213.207.124.0/24 maxlen: 24
                          213.207.120.0/24 maxlen: 24
                          213.207.119.0/24 maxlen: 24
                          213.207.126.0/24 maxlen: 24
                          213.207.127.0/24 maxlen: 24
                          213.207.64.0/24 maxlen: 24
                          213.207.67.0/24 maxlen: 24
                          213.207.66.0/24 maxlen: 24
                          213.207.65.0/24 maxlen: 24
                          213.207.71.0/24 maxlen: 24
                          213.207.70.0/24 maxlen: 24
                          213.207.69.0/24 maxlen: 24
                          213.207.68.0/24 maxlen: 24
                          213.207.74.0/24 maxlen: 24
                          213.207.73.0/24 maxlen: 24
                          213.207.72.0/24 maxlen: 24
                          213.207.78.0/24 maxlen: 24
                          213.207.77.0/24 maxlen: 24
                          213.207.76.0/24 maxlen: 24
                          213.207.75.0/24 maxlen: 24
                          213.207.81.0/24 maxlen: 24
                          213.207.80.0/24 maxlen: 24
                          213.207.79.0/24 maxlen: 24
                          213.207.85.0/24 maxlen: 24
                          213.207.84.0/24 maxlen: 24
                          213.207.83.0/24 maxlen: 24
                          213.207.82.0/24 maxlen: 24
                          213.207.88.0/24 maxlen: 24
                          213.207.87.0/24 maxlen: 24
                          213.207.86.0/24 maxlen: 24
                          213.207.91.0/24 maxlen: 24
                          213.207.90.0/24 maxlen: 24
                          213.207.89.0/24 maxlen: 24
                          213.206.243.0/24 maxlen: 24
                          213.206.242.0/24 maxlen: 24
                          213.206.241.0/24 maxlen: 24
                          213.206.246.0/24 maxlen: 24
                          213.206.245.0/24 maxlen: 24
                          213.206.244.0/24 maxlen: 24
                          213.206.253.0/24 maxlen: 24
                          213.206.252.0/24 maxlen: 24
                          213.206.251.0/24 maxlen: 24
                          213.206.247.0/24 maxlen: 24
                          213.206.250.0/24 maxlen: 24
                          213.206.249.0/24 maxlen: 24
                          213.206.248.0/24 maxlen: 24
                          213.206.254.0/24 maxlen: 24
                          213.206.255.0/24 maxlen: 24
                          213.206.192.0/24 maxlen: 24
                          213.206.195.0/24 maxlen: 24
                          213.206.194.0/24 maxlen: 24
                          213.206.193.0/24 maxlen: 24
                          213.206.198.0/24 maxlen: 24
                          213.206.197.0/24 maxlen: 24
                          213.206.196.0/24 maxlen: 24
                          213.206.199.0/24 maxlen: 24
                          213.206.202.0/24 maxlen: 24
                          213.206.201.0/24 maxlen: 24
                          213.206.200.0/24 maxlen: 24
                          213.206.205.0/24 maxlen: 24
                          213.206.204.0/24 maxlen: 24
                          213.206.203.0/24 maxlen: 24
                          213.206.206.0/24 maxlen: 24
                          213.206.212.0/24 maxlen: 24
                          213.206.211.0/24 maxlen: 24
                          213.206.210.0/24 maxlen: 24
                          213.206.213.0/24 maxlen: 24
                          213.206.209.0/24 maxlen: 24
                          213.206.208.0/24 maxlen: 24
                          213.206.207.0/24 maxlen: 24
                          213.206.216.0/24 maxlen: 24
                          213.206.215.0/24 maxlen: 24
                          213.206.214.0/24 maxlen: 24
                          213.206.219.0/24 maxlen: 24
                          213.206.218.0/24 maxlen: 24
                          213.206.217.0/24 maxlen: 24
                          213.206.226.0/24 maxlen: 24
                          213.206.225.0/24 maxlen: 24
                          213.206.224.0/24 maxlen: 24
                          213.206.223.0/24 maxlen: 24
                          213.206.222.0/24 maxlen: 24
                          213.206.221.0/24 maxlen: 24
                          213.206.220.0/24 maxlen: 24
                          213.206.229.0/24 maxlen: 24
                          213.206.228.0/24 maxlen: 24
                          213.206.227.0/24 maxlen: 24
                          213.206.233.0/24 maxlen: 24
                          213.206.232.0/24 maxlen: 24
                          213.206.231.0/24 maxlen: 24
                          213.206.230.0/24 maxlen: 24
                          213.206.240.0/24 maxlen: 24
                          213.206.239.0/24 maxlen: 24
                          213.206.238.0/24 maxlen: 24
                          213.206.237.0/24 maxlen: 24
                          213.206.236.0/24 maxlen: 24
                          213.206.235.0/24 maxlen: 24
                          213.206.234.0/24 maxlen: 24
                          212.83.192.0/24 maxlen: 24
                          212.83.194.0/24 maxlen: 24
                          212.83.193.0/24 maxlen: 24
                          212.83.198.0/24 maxlen: 24
                          212.83.197.0/24 maxlen: 24
                          212.83.196.0/24 maxlen: 24
                          212.83.195.0/24 maxlen: 24
                          212.83.199.0/24 maxlen: 24
                          212.83.255.0/24 maxlen: 24
                          212.83.254.0/24 maxlen: 24
                          212.83.201.0/24 maxlen: 24
                          212.83.200.0/24 maxlen: 24
                          212.83.205.0/24 maxlen: 24
                          212.83.204.0/24 maxlen: 24
                          212.83.203.0/24 maxlen: 24
                          212.83.202.0/24 maxlen: 24
                          212.83.206.0/24 maxlen: 24
                          212.83.212.0/24 maxlen: 24
                          212.83.211.0/24 maxlen: 24
                          212.83.210.0/24 maxlen: 24
                          212.83.209.0/24 maxlen: 24
                          212.83.213.0/24 maxlen: 24
                          212.83.208.0/24 maxlen: 24
                          212.83.207.0/24 maxlen: 24
                          212.83.215.0/24 maxlen: 24
                          212.83.214.0/24 maxlen: 24
                          212.83.219.0/24 maxlen: 24
                          212.83.218.0/24 maxlen: 24
                          212.83.217.0/24 maxlen: 24
                          212.83.216.0/24 maxlen: 24
                          212.83.226.0/24 maxlen: 24
                          212.83.225.0/24 maxlen: 24
                          212.83.224.0/24 maxlen: 24
                          212.83.223.0/24 maxlen: 24
                          212.83.222.0/24 maxlen: 24
                          212.83.221.0/24 maxlen: 24
                          212.83.220.0/24 maxlen: 24
                          212.83.229.0/24 maxlen: 24
                          212.83.228.0/24 maxlen: 24
                          212.83.227.0/24 maxlen: 24
                          212.83.233.0/24 maxlen: 24
                          212.83.232.0/24 maxlen: 24
                          212.83.231.0/24 maxlen: 24
                          212.83.230.0/24 maxlen: 24
                          212.83.239.0/24 maxlen: 24
                          212.83.238.0/24 maxlen: 24
                          212.83.237.0/24 maxlen: 24
                          212.83.240.0/24 maxlen: 24
                          212.83.236.0/24 maxlen: 24
                          212.83.235.0/24 maxlen: 24
                          212.83.234.0/24 maxlen: 24
                          212.83.243.0/24 maxlen: 24
                          212.83.242.0/24 maxlen: 24
                          212.83.241.0/24 maxlen: 24
                          212.83.246.0/24 maxlen: 24
                          212.83.245.0/24 maxlen: 24
                          212.83.244.0/24 maxlen: 24
                          212.83.253.0/24 maxlen: 24
                          212.83.252.0/24 maxlen: 24
                          212.83.251.0/24 maxlen: 24
                          212.83.250.0/24 maxlen: 24
                          212.83.249.0/24 maxlen: 24
                          212.83.248.0/24 maxlen: 24
                          212.83.247.0/24 maxlen: 24
                          2001:4018::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 11 Sep 2023 11:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:75:f3:a8:05:fc:70:b0:48:a3:fe:42:30:12:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
        Validity
            Not Before: Jan  2 10:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6623fee2355fa8759c2c6a811af82c530510d636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:61:d6:99:85:97:a0:48:ad:6d:86:ef:14:
                    1d:17:5d:e7:21:7d:05:19:7e:e2:01:20:41:b5:76:
                    2b:4c:e6:f4:8c:d1:b0:09:4f:46:df:88:5f:79:7e:
                    99:23:6d:76:00:e5:06:3d:4a:8e:c4:da:54:3f:0b:
                    72:12:72:b2:4b:68:dc:17:9f:e5:10:3a:ee:3f:b1:
                    8b:d0:a5:0d:11:71:f1:b1:df:c8:6c:73:f4:37:4d:
                    a1:85:a5:4e:38:77:31:7c:8e:b5:07:cf:f5:f2:b3:
                    eb:6b:18:9f:1b:2f:21:09:03:99:c5:73:da:f7:f2:
                    76:55:6a:76:28:f6:f3:df:c5:31:75:9d:14:46:75:
                    4e:28:0d:c6:81:12:28:f2:9f:cd:bf:37:3d:f9:e9:
                    6f:5b:85:b6:65:c9:44:35:39:d0:cf:af:04:db:e5:
                    c1:14:99:07:93:eb:ed:32:27:fb:2a:22:7e:64:cf:
                    93:40:d7:44:2f:ad:21:fe:f5:eb:c3:fd:bd:83:97:
                    fa:17:4b:1b:de:97:c5:b2:c6:aa:bd:63:eb:34:97:
                    31:4e:a0:ea:ce:ac:40:80:ca:f7:1d:f5:52:35:8f:
                    db:b8:f9:ef:83:10:0b:29:43:4a:e5:01:71:f2:fa:
                    42:87:1c:1f:4d:b9:ee:fb:ed:3c:02:b3:12:97:b0:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:23:FE:E2:35:5F:A8:75:9C:2C:6A:81:1A:F8:2C:53:05:10:D6:36
            X509v3 Authority Key Identifier:
                keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/ZiP-4jVfqHWcLGqBGvgsUwUQ1jY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.67.64.0/22
                  212.83.192.0/18
                  213.206.192.0/18
                  213.207.64.0/18
                IPv6:
                  2001:4018::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:ba:d2:f3:44:38:86:10:f8:61:b2:4f:6a:a3:f1:17:64:
         c0:84:f1:5a:7e:71:fd:0f:82:17:e8:b8:47:33:89:ee:c6:81:
         5e:13:df:d5:5e:be:d3:02:6a:5f:d1:86:7f:8f:df:f5:ba:25:
         98:d5:1e:5a:5c:f2:32:f1:ac:d0:17:38:6c:76:cf:a8:6a:78:
         1d:a9:0f:12:8c:26:fd:2d:eb:1d:0f:c0:45:0f:0f:2e:14:e6:
         5c:f2:17:94:01:87:c5:ce:b8:9b:2a:f7:cb:c6:3a:79:ae:ae:
         2c:4b:fa:18:76:9f:f2:6d:43:55:34:20:30:c5:b5:9b:9d:d8:
         bc:9e:bd:4f:1b:67:48:ad:35:07:48:e9:52:b1:d0:d7:b7:7a:
         e8:e6:e6:bc:d8:e9:ec:a9:f4:ee:31:94:7f:6d:6c:b9:95:4b:
         28:96:67:fd:d6:33:69:8a:59:92:59:ca:36:8e:b1:03:9a:74:
         52:11:62:f9:ba:64:a8:7a:e2:85:6e:c8:af:a0:db:d0:d3:91:
         ee:39:fd:4c:02:d6:b4:49:cd:bf:48:cc:c8:ce:35:05:a4:53:
         c0:d3:5a:31:4b:a5:92:cb:37:3d:5d:09:6a:09:41:97:b2:7b:
         c6:39:a9:2c:2b:da:d5:0e:47:5d:4b:6d:a4:c2:30:b1:00:4e:
         2b:35:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:58 2024 by rpki-client on console-ams.rpki-client.org