Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuccauwrLIukyXy1WhK376KexYs.roa
File:                     tuccauwrLIukyXy1WhK376KexYs.roa (raw, json)
Hash identifier:          yrqlQb7w0k4T3h+LnT523xCpu2gAPfLw3nhMNmp4gKc=
Subject key identifier:   B6:E7:1C:6A:EC:2B:2C:8B:A4:C9:7C:B5:5A:12:B7:EF:A2:9E:C5:8B
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       0188009474FE5046D9F668C407EF60960CED
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuccauwrLIukyXy1WhK376KexYs.roa
Signing time:             Tue 09 May 2023 12:55:09 +0000
ROA not before:           Tue 09 May 2023 12:55:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        185.231.205.0/24 maxlen: 24
                          185.231.204.0/24 maxlen: 24
                          185.231.206.0/24 maxlen: 24
                          185.231.207.0/24 maxlen: 24
                          141.98.170.0/24 maxlen: 24
                          141.98.169.0/24 maxlen: 24
                          141.98.168.0/24 maxlen: 24
                          45.84.0.0/24 maxlen: 24
                          193.43.147.0/24 maxlen: 24
                          45.84.1.0/24 maxlen: 24
                          188.119.122.0/24 maxlen: 24
                          188.119.121.0/24 maxlen: 24
                          188.119.123.0/24 maxlen: 24
                          45.89.55.0/24 maxlen: 24
                          45.89.54.0/24 maxlen: 24
                          45.89.52.0/24 maxlen: 24
                          45.159.250.0/24 maxlen: 24
                          45.159.249.0/24 maxlen: 24
                          45.159.248.0/24 maxlen: 24
                          45.159.251.0/24 maxlen: 24
                          45.67.35.0/24 maxlen: 24
                          5.182.36.0/24 maxlen: 24
                          5.182.38.0/24 maxlen: 24
                          5.182.39.0/24 maxlen: 24
                          193.57.138.0/24 maxlen: 24
                          193.57.137.0/24 maxlen: 24
                          193.57.136.0/24 maxlen: 24
                          193.57.139.0/24 maxlen: 24
                          93.185.166.0/24 maxlen: 24
                          45.93.8.0/24 maxlen: 24
                          45.93.9.0/24 maxlen: 24
                          45.87.152.0/24 maxlen: 24
                          45.87.153.0/24 maxlen: 24
                          45.87.154.0/24 maxlen: 24
                          45.8.145.0/24 maxlen: 24
                          45.8.144.0/24 maxlen: 24
                          45.8.146.0/24 maxlen: 24
                          193.46.57.0/24 maxlen: 24
                          193.46.56.0/24 maxlen: 24
                          194.4.48.0/24 maxlen: 24
                          194.4.51.0/24 maxlen: 24
                          194.4.50.0/24 maxlen: 24
                          194.4.49.0/24 maxlen: 24
                          194.116.172.0/24 maxlen: 24
                          194.116.173.0/24 maxlen: 24
                          194.116.191.0/24 maxlen: 24
                          194.116.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:00:94:74:fe:50:46:d9:f6:68:c4:07:ef:60:96:0c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: May  9 12:55:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6e71c6aec2b2c8ba4c97cb55a12b7efa29ec58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:7c:ec:3c:51:de:86:ef:17:9a:cd:7f:e9:
                    16:f3:61:ff:50:0d:79:4b:85:fc:f6:86:e0:a0:5d:
                    2d:97:2b:60:83:c2:ec:89:15:82:1d:eb:1f:3a:a8:
                    17:33:94:8d:0a:15:38:e7:a5:c2:df:15:88:18:aa:
                    27:d7:51:e9:60:cf:a5:fe:dc:ae:2f:f8:88:ed:a5:
                    95:a9:4a:61:1b:12:17:f0:41:3a:f6:e7:e4:d2:fb:
                    3d:96:0e:4a:be:fb:cc:fa:7f:43:78:bd:37:d8:b3:
                    68:77:92:fc:66:fe:b3:c6:6d:2d:a4:f4:b2:a4:57:
                    05:d1:76:b5:d5:de:3f:3a:e1:40:c2:8c:3a:f8:ca:
                    36:44:83:16:55:92:c3:94:60:cf:f3:b5:1f:5d:39:
                    cb:e8:45:6e:79:71:36:1c:e5:af:33:52:98:06:1f:
                    56:b9:44:af:d2:f3:8d:cb:b3:12:aa:9a:d3:79:38:
                    21:74:6c:2d:40:4f:30:5b:2f:32:76:8b:2f:4b:df:
                    d0:8f:92:82:8a:2c:4f:14:7d:e6:88:0f:fd:82:59:
                    1c:98:b7:45:c1:0e:33:0a:b9:ca:78:52:d1:4c:6a:
                    26:51:82:17:13:12:22:4e:bd:1e:21:20:5f:67:7d:
                    cc:c7:18:d7:4c:99:27:ab:21:19:4b:fe:43:45:df:
                    58:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E7:1C:6A:EC:2B:2C:8B:A4:C9:7C:B5:5A:12:B7:EF:A2:9E:C5:8B
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuccauwrLIukyXy1WhK376KexYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.36.0/24
                  5.182.38.0/23
                  45.8.144.0-45.8.146.255
                  45.67.35.0/24
                  45.84.0.0/23
                  45.87.152.0-45.87.154.255
                  45.89.52.0/24
                  45.89.54.0/23
                  45.93.8.0/23
                  45.159.248.0/22
                  93.185.166.0/24
                  141.98.168.0-141.98.170.255
                  185.231.204.0/22
                  188.119.121.0-188.119.123.255
                  193.43.147.0/24
                  193.46.56.0/23
                  193.57.136.0/22
                  194.4.48.0/22
                  194.116.172.0/23
                  194.116.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:db:c7:e0:ee:fb:2e:19:bc:87:eb:16:42:6b:02:61:ec:ea:
         89:c0:cd:8d:6b:3a:dc:db:d7:7c:1a:88:32:05:64:6b:27:3b:
         ff:9d:f9:cc:0d:25:97:86:ac:01:42:5f:dc:39:44:52:90:bb:
         1c:a8:54:5f:13:95:ea:81:05:2b:4c:9b:53:09:4c:59:b3:c2:
         44:d4:0a:b1:81:06:97:e4:f3:02:9b:be:99:df:7f:03:b4:d9:
         78:9b:be:42:43:bb:d1:3a:2c:fc:01:0a:af:fa:3e:5d:1a:d0:
         93:0c:9f:b8:c2:10:59:a8:be:a1:5f:04:f4:ea:91:0e:58:c5:
         9b:cd:20:ed:18:5b:78:98:37:06:87:94:16:2b:ef:05:20:6e:
         2f:93:de:ff:cd:59:bd:fd:c4:f5:63:02:62:e1:0e:8b:6b:5f:
         47:84:f8:93:88:c3:08:15:e5:8c:92:9b:3e:be:7b:86:3b:7a:
         36:ea:33:0d:ef:b4:7f:a4:de:4a:2c:c7:22:5e:7e:2f:1f:5c:
         70:b6:69:9c:89:f6:d7:e4:1a:0c:9f:1a:30:45:78:31:94:a6:
         28:f5:5d:d2:44:36:2a:21:7d:05:f3:ee:a8:59:87:3a:36:1d:
         97:0a:2f:37:f0:6b:a0:f3:6c:9c:90:b7:dc:99:08:96:0e:44:
         31:7e:14:cc
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYgAlHT+UEbZ9mjEB+9glgztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjMwNTA5MTI1NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmU3MWM2YWVjMmIyYzhiYTRjOTdjYjU1YTEyYjdlZmEyOWVjNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbx87DxR3obvF5rNf+kW82H/UA15
S4X89obgoF0tlytgg8LsiRWCHesfOqgXM5SNChU456XC3xWIGKon11HpYM+l/tyu
L/iI7aWVqUphGxIX8EE69ufk0vs9lg5KvvvM+n9DeL032LNod5L8Zv6zxm0tpPSy
pFcF0Xa11d4/OuFAwow6+Mo2RIMWVZLDlGDP87UfXTnL6EVueXE2HOWvM1KYBh9W
uUSv0vONy7MSqprTeTghdGwtQE8wWy8ydosvS9/Qj5KCiixPFH3miA/9glkcmLdF
wQ4zCrnKeFLRTGomUYIXExIiTr0eISBfZ33MxxjXTJknqyEZS/5DRd9YkwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFLbnHGrsKyyLpMl8tVoSt++insWLMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvdHVjY2F1d3JMSXVreVh5MVdoSzM3NktleFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAAF
tiQDBAEFtiYwDAMEBC0IkAMEAC0IkgMEAC1DIwMEAS1UADAMAwQDLVeYAwQALVea
AwQALVk0AwQBLVk2AwQBLV0IAwQCLZ/4AwQAXbmmMAwDBAONYqgDBACNYqoDBAK5
58wwDAMEALx3eQMEArx3eAMEAMErkwMEAcEuOAMEAsE5iAMEAsIEMAMEAcJ0rAME
AcJ0vjANBgkqhkiG9w0BAQsFAAOCAQEAsdvH4O77Lhm8h+sWQmsCYezqicDNjWs6
3NvXfBqIMgVkayc7/535zA0ll4asAUJf3DlEUpC7HKhUXxOV6oEFK0ybUwlMWbPC
RNQKsYEGl+TzApu+md9/A7TZeJu+QkO70Tos/AEKr/o+XRrQkwyfuMIQWai+oV8E
9OqRDljFm80g7RhbeJg3BoeUFivvBSBuL5Pe/81Zvf3E9WMCYuEOi2tfR4T4k4jD
CBXljJKbPr57hjt6NuozDe+0f6TeSizHIl5+Lx9ccLZpnIn21+QaDJ8aMEV4MZSm
KPVd0kQ2KiF9BfPuqFmHOjYdlwovN/BroPNsnJC33JkIlg5EMX4UzA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org