Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/i4P03zQbBCTSZMgEv7jj5GmifOQ.roa
File:                     i4P03zQbBCTSZMgEv7jj5GmifOQ.roa (raw, json)
Hash identifier:          j+2SZ7T9CyEvytM7sTC/yRm2p1sFZWNn0kAlyyDuUFA=
Subject key identifier:   8B:83:F4:DF:34:1B:04:24:D2:64:C8:04:BF:B8:E3:E4:69:A2:7C:E4
Certificate issuer:       /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial:       018A83E72F76D7AB32F9166687A6BCDC5D0B
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/i4P03zQbBCTSZMgEv7jj5GmifOQ.roa
Signing time:             Mon 11 Sep 2023 11:01:20 +0000
ROA not before:           Mon 11 Sep 2023 11:01:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9150
IP address blocks:        185.67.64.0/24 maxlen: 24
                          185.67.66.0/24 maxlen: 24
                          185.67.65.0/24 maxlen: 24
                          185.67.67.0/24 maxlen: 24
                          213.207.64.0/18 maxlen: 18
                          213.206.192.0/18 maxlen: 18
                          212.83.192.0/18 maxlen: 18
                          185.67.64.0/22 maxlen: 22
                          213.207.95.0/24 maxlen: 24
                          213.207.94.0/24 maxlen: 24
                          213.207.93.0/24 maxlen: 24
                          213.207.98.0/24 maxlen: 24
                          213.207.97.0/24 maxlen: 24
                          213.207.96.0/24 maxlen: 24
                          213.207.92.0/24 maxlen: 24
                          213.207.99.0/24 maxlen: 24
                          213.207.102.0/24 maxlen: 24
                          213.207.101.0/24 maxlen: 24
                          213.207.100.0/24 maxlen: 24
                          213.207.105.0/24 maxlen: 24
                          213.207.104.0/24 maxlen: 24
                          213.207.103.0/24 maxlen: 24
                          213.207.109.0/24 maxlen: 24
                          213.207.108.0/24 maxlen: 24
                          213.207.107.0/24 maxlen: 24
                          213.207.112.0/24 maxlen: 24
                          213.207.111.0/24 maxlen: 24
                          213.207.110.0/24 maxlen: 24
                          213.207.106.0/24 maxlen: 24
                          213.207.113.0/24 maxlen: 24
                          213.207.116.0/24 maxlen: 24
                          213.207.115.0/24 maxlen: 24
                          213.207.114.0/24 maxlen: 24
                          213.207.118.0/24 maxlen: 24
                          213.207.117.0/24 maxlen: 24
                          213.207.123.0/24 maxlen: 24
                          213.207.122.0/24 maxlen: 24
                          213.207.121.0/24 maxlen: 24
                          213.207.125.0/24 maxlen: 24
                          213.207.124.0/24 maxlen: 24
                          213.207.120.0/24 maxlen: 24
                          213.207.119.0/24 maxlen: 24
                          213.207.126.0/24 maxlen: 24
                          213.207.127.0/24 maxlen: 24
                          213.207.64.0/24 maxlen: 24
                          213.207.67.0/24 maxlen: 24
                          213.207.66.0/24 maxlen: 24
                          213.207.65.0/24 maxlen: 24
                          213.207.71.0/24 maxlen: 24
                          213.207.70.0/24 maxlen: 24
                          213.207.69.0/24 maxlen: 24
                          213.207.68.0/24 maxlen: 24
                          213.207.74.0/24 maxlen: 24
                          213.207.73.0/24 maxlen: 24
                          213.207.72.0/24 maxlen: 24
                          213.207.78.0/24 maxlen: 24
                          213.207.77.0/24 maxlen: 24
                          213.207.76.0/24 maxlen: 24
                          213.207.75.0/24 maxlen: 24
                          213.207.81.0/24 maxlen: 24
                          213.207.80.0/24 maxlen: 24
                          213.207.79.0/24 maxlen: 24
                          213.207.85.0/24 maxlen: 24
                          213.207.84.0/24 maxlen: 24
                          213.207.83.0/24 maxlen: 24
                          213.207.82.0/24 maxlen: 24
                          213.207.88.0/24 maxlen: 24
                          213.207.87.0/24 maxlen: 24
                          213.207.86.0/24 maxlen: 24
                          213.207.91.0/24 maxlen: 24
                          213.207.90.0/24 maxlen: 24
                          213.207.89.0/24 maxlen: 24
                          213.206.243.0/24 maxlen: 24
                          213.206.242.0/24 maxlen: 24
                          213.206.241.0/24 maxlen: 24
                          213.206.246.0/24 maxlen: 24
                          213.206.245.0/24 maxlen: 24
                          213.206.244.0/24 maxlen: 24
                          213.206.253.0/24 maxlen: 24
                          213.206.252.0/24 maxlen: 24
                          213.206.251.0/24 maxlen: 24
                          213.206.247.0/24 maxlen: 24
                          213.206.250.0/24 maxlen: 24
                          213.206.249.0/24 maxlen: 24
                          213.206.248.0/24 maxlen: 24
                          213.206.254.0/24 maxlen: 24
                          213.206.255.0/24 maxlen: 24
                          213.206.192.0/24 maxlen: 24
                          213.206.195.0/24 maxlen: 24
                          213.206.194.0/24 maxlen: 24
                          213.206.193.0/24 maxlen: 24
                          213.206.198.0/24 maxlen: 24
                          213.206.197.0/24 maxlen: 24
                          213.206.196.0/24 maxlen: 24
                          213.206.199.0/24 maxlen: 24
                          213.206.202.0/24 maxlen: 24
                          213.206.201.0/24 maxlen: 24
                          213.206.200.0/24 maxlen: 24
                          213.206.205.0/24 maxlen: 24
                          213.206.204.0/24 maxlen: 24
                          213.206.203.0/24 maxlen: 24
                          213.206.206.0/24 maxlen: 24
                          213.206.212.0/24 maxlen: 24
                          213.206.211.0/24 maxlen: 24
                          213.206.210.0/24 maxlen: 24
                          213.206.213.0/24 maxlen: 24
                          213.206.209.0/24 maxlen: 24
                          213.206.208.0/24 maxlen: 24
                          213.206.207.0/24 maxlen: 24
                          213.206.216.0/24 maxlen: 24
                          213.206.215.0/24 maxlen: 24
                          213.206.214.0/24 maxlen: 24
                          213.206.219.0/24 maxlen: 24
                          213.206.218.0/24 maxlen: 24
                          213.206.217.0/24 maxlen: 24
                          213.206.226.0/24 maxlen: 24
                          213.206.225.0/24 maxlen: 24
                          213.206.224.0/24 maxlen: 24
                          213.206.223.0/24 maxlen: 24
                          213.206.222.0/24 maxlen: 24
                          213.206.221.0/24 maxlen: 24
                          213.206.220.0/24 maxlen: 24
                          213.206.229.0/24 maxlen: 24
                          213.206.228.0/24 maxlen: 24
                          213.206.227.0/24 maxlen: 24
                          213.206.233.0/24 maxlen: 24
                          213.206.232.0/24 maxlen: 24
                          213.206.231.0/24 maxlen: 24
                          213.206.230.0/24 maxlen: 24
                          213.206.240.0/24 maxlen: 24
                          213.206.239.0/24 maxlen: 24
                          213.206.238.0/24 maxlen: 24
                          213.206.237.0/24 maxlen: 24
                          213.206.236.0/24 maxlen: 24
                          213.206.235.0/24 maxlen: 24
                          213.206.234.0/24 maxlen: 24
                          212.83.192.0/24 maxlen: 24
                          212.83.194.0/24 maxlen: 24
                          212.83.193.0/24 maxlen: 24
                          212.83.198.0/24 maxlen: 24
                          212.83.197.0/24 maxlen: 24
                          212.83.196.0/24 maxlen: 24
                          212.83.195.0/24 maxlen: 24
                          212.83.199.0/24 maxlen: 24
                          212.83.255.0/24 maxlen: 24
                          212.83.254.0/24 maxlen: 24
                          212.83.201.0/24 maxlen: 24
                          212.83.200.0/24 maxlen: 24
                          212.83.205.0/24 maxlen: 24
                          212.83.204.0/24 maxlen: 24
                          212.83.203.0/24 maxlen: 24
                          212.83.202.0/24 maxlen: 24
                          212.83.206.0/24 maxlen: 24
                          212.83.212.0/24 maxlen: 24
                          212.83.211.0/24 maxlen: 24
                          212.83.210.0/24 maxlen: 24
                          212.83.209.0/24 maxlen: 24
                          212.83.213.0/24 maxlen: 24
                          212.83.208.0/24 maxlen: 24
                          212.83.207.0/24 maxlen: 24
                          212.83.215.0/24 maxlen: 24
                          212.83.214.0/24 maxlen: 24
                          212.83.219.0/24 maxlen: 24
                          212.83.218.0/24 maxlen: 24
                          212.83.217.0/24 maxlen: 24
                          212.83.216.0/24 maxlen: 24
                          212.83.226.0/24 maxlen: 24
                          212.83.225.0/24 maxlen: 24
                          212.83.224.0/24 maxlen: 24
                          212.83.223.0/24 maxlen: 24
                          212.83.222.0/24 maxlen: 24
                          212.83.221.0/24 maxlen: 24
                          212.83.220.0/24 maxlen: 24
                          212.83.229.0/24 maxlen: 24
                          212.83.228.0/24 maxlen: 24
                          212.83.227.0/24 maxlen: 24
                          212.83.233.0/24 maxlen: 24
                          212.83.232.0/24 maxlen: 24
                          212.83.231.0/24 maxlen: 24
                          212.83.230.0/24 maxlen: 24
                          212.83.239.0/24 maxlen: 24
                          212.83.238.0/24 maxlen: 24
                          212.83.237.0/24 maxlen: 24
                          212.83.240.0/24 maxlen: 24
                          212.83.236.0/24 maxlen: 24
                          212.83.235.0/24 maxlen: 24
                          212.83.234.0/24 maxlen: 24
                          212.83.243.0/24 maxlen: 24
                          212.83.242.0/24 maxlen: 24
                          212.83.241.0/24 maxlen: 24
                          212.83.246.0/24 maxlen: 24
                          212.83.245.0/24 maxlen: 24
                          212.83.244.0/24 maxlen: 24
                          212.83.253.0/24 maxlen: 24
                          212.83.252.0/24 maxlen: 24
                          212.83.251.0/24 maxlen: 24
                          212.83.250.0/24 maxlen: 24
                          212.83.249.0/24 maxlen: 24
                          212.83.248.0/24 maxlen: 24
                          212.83.247.0/24 maxlen: 24
                          2001:4018::/32 maxlen: 48
                          2001:4019::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:e7:2f:76:d7:ab:32:f9:16:66:87:a6:bc:dc:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
        Validity
            Not Before: Sep 11 11:01:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8b83f4df341b0424d264c804bfb8e3e469a27ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:25:56:d1:9c:a2:da:e3:96:77:89:e3:d8:
                    9c:13:0a:f9:ff:00:89:af:f9:48:dc:85:1d:0d:87:
                    74:04:e8:ee:29:2c:c7:c1:cc:76:cc:56:52:b3:b1:
                    f3:ec:fe:dd:b1:bb:98:5d:ec:32:19:a6:2b:2a:30:
                    cc:a9:8b:b0:8c:cd:b9:a7:77:5d:79:fd:c3:32:50:
                    e3:68:bc:0f:49:e5:14:db:7f:a4:c2:0b:82:bd:9f:
                    d4:7c:96:bb:79:00:60:b5:b7:79:1d:3a:52:3a:12:
                    7f:82:0d:ad:29:8b:18:61:df:6f:2b:7b:d5:47:29:
                    2c:7f:0a:08:06:cf:f5:10:e6:93:14:d3:46:4d:16:
                    27:d8:db:2d:97:f8:10:3f:41:2b:e6:73:b5:40:5c:
                    42:57:25:47:3e:88:49:e7:0a:b6:9d:2c:0d:04:d4:
                    4d:2c:15:e0:8d:ad:cf:d9:83:fe:a5:62:64:af:1e:
                    75:94:10:74:56:4a:9e:d9:aa:71:a8:fd:26:05:37:
                    c5:f4:4f:e1:f3:ce:2e:32:21:0a:92:28:47:8f:65:
                    b9:b9:c2:e6:ec:e0:07:c7:29:4f:f3:34:90:72:f7:
                    15:8f:48:1e:4f:b3:07:b3:79:4a:70:8a:21:74:85:
                    e0:d6:4f:f4:cc:8e:68:b6:4f:89:bd:1e:67:c5:69:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:83:F4:DF:34:1B:04:24:D2:64:C8:04:BF:B8:E3:E4:69:A2:7C:E4
            X509v3 Authority Key Identifier:
                keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/i4P03zQbBCTSZMgEv7jj5GmifOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.67.64.0/22
                  212.83.192.0/18
                  213.206.192.0/18
                  213.207.64.0/18
                IPv6:
                  2001:4018::/31

    Signature Algorithm: sha256WithRSAEncryption
         36:fc:81:e8:22:3a:87:c7:15:46:f2:1a:bc:e6:c3:6a:be:14:
         08:fa:1d:64:7a:9f:12:c1:e3:cf:73:42:0c:54:fb:25:9e:ab:
         16:78:a2:72:d9:a0:06:07:61:57:68:1c:bb:22:3f:78:6b:98:
         23:9a:d4:0c:37:3f:9b:bb:f2:77:fd:67:b9:e8:14:8f:ef:38:
         da:43:70:1a:15:3e:0e:73:04:c1:10:4e:84:65:40:d3:83:45:
         3f:f2:a8:f4:24:23:e2:63:89:e6:60:1a:f0:f9:0b:c2:f2:59:
         7a:7d:b5:ae:11:d1:c7:c6:32:04:57:2c:b9:13:e7:95:a6:c3:
         aa:7a:74:7f:db:25:51:27:56:29:55:25:f5:b8:7b:0a:04:6b:
         ac:64:17:04:5c:bb:03:a2:94:5e:3f:de:19:99:87:e6:c4:45:
         f3:1f:84:84:2e:65:85:91:bd:a8:00:ab:ed:19:59:a1:88:43:
         e0:0b:e6:e4:ce:1d:c0:40:f8:87:22:0d:42:7e:42:4b:e6:35:
         4d:27:36:24:49:05:a1:c4:d8:b6:76:e8:78:0c:82:87:88:3d:
         36:df:52:5c:ef:a1:08:94:95:15:8b:6a:33:b1:85:80:a8:3d:
         1c:c4:12:03:86:a4:4f:4e:09:e4:60:e5:fa:8f:87:3e:b3:bf:
         3d:82:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:58 2024 by rpki-client on console-ams.rpki-client.org