Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/78enC7Swy58bJuncw8Mfazxvylo.roa
File:                     78enC7Swy58bJuncw8Mfazxvylo.roa (raw, json)
Hash identifier:          kKA+xcxd/Bfd0KqPcdx6Aixfa25fEnNm5MIE//tJeNY=
Subject key identifier:   EF:C7:A7:0B:B4:B0:CB:9F:1B:26:E9:DC:C3:C3:1F:6B:3C:6F:CA:5A
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       018B1D7A4B4C9B9B3D620E3ABFFB6928FCC6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/78enC7Swy58bJuncw8Mfazxvylo.roa
Signing time:             Wed 11 Oct 2023 06:43:55 +0000
ROA not before:           Wed 11 Oct 2023 06:43:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        84.32.214.0/23 maxlen: 24
                          84.32.219.0/24 maxlen: 24
                          84.32.221.0/24 maxlen: 24
                          84.32.224.0/24 maxlen: 24
                          84.32.226.0/24 maxlen: 24
                          84.32.228.0/24 maxlen: 24
                          84.32.232.0/24 maxlen: 24
                          84.32.235.0/24 maxlen: 24
                          84.32.238.0/24 maxlen: 24
                          84.32.234.0/24 maxlen: 24
                          84.32.239.0/24 maxlen: 24
                          84.32.240.0/24 maxlen: 24
                          84.32.246.0/23 maxlen: 24
                          84.32.244.0/23 maxlen: 24
                          84.32.246.0/24 maxlen: 24
                          84.32.242.0/24 maxlen: 24
                          84.32.241.0/24 maxlen: 24
                          84.32.249.0/24 maxlen: 24
                          84.32.250.0/24 maxlen: 24
                          84.32.251.0/24 maxlen: 24
                          84.32.247.0/24 maxlen: 24
                          84.32.253.0/24 maxlen: 24
                          84.32.254.0/24 maxlen: 24
                          84.32.255.0/24 maxlen: 24
                          84.32.58.0/24 maxlen: 24
                          84.32.61.0/24 maxlen: 24
                          84.32.62.0/24 maxlen: 24
                          84.32.64.0/24 maxlen: 24
                          84.32.60.0/24 maxlen: 24
                          84.32.68.0/24 maxlen: 24
                          84.32.65.0/24 maxlen: 24
                          84.32.66.0/24 maxlen: 24
                          84.32.77.0/24 maxlen: 24
                          84.32.83.0/24 maxlen: 24
                          84.32.85.0/24 maxlen: 24
                          84.32.89.0/24 maxlen: 24
                          84.32.90.0/24 maxlen: 24
                          84.32.88.0/24 maxlen: 24
                          84.32.92.0/24 maxlen: 24
                          84.32.93.0/24 maxlen: 24
                          84.32.95.0/24 maxlen: 24
                          84.32.104.0/24 maxlen: 24
                          84.32.105.0/24 maxlen: 24
                          84.32.4.0/24 maxlen: 24
                          84.32.7.0/24 maxlen: 24
                          84.32.8.0/24 maxlen: 24
                          84.32.14.0/24 maxlen: 24
                          84.32.24.0/22 maxlen: 24
                          84.32.20.0/22 maxlen: 24
                          84.32.20.0/24 maxlen: 24
                          84.32.27.0/24 maxlen: 24
                          84.32.28.0/24 maxlen: 24
                          84.32.29.0/24 maxlen: 24
                          84.32.26.0/24 maxlen: 24
                          84.32.31.0/24 maxlen: 24
                          84.32.42.0/24 maxlen: 24
                          84.32.43.0/24 maxlen: 24
                          84.32.47.0/24 maxlen: 24
                          84.32.46.0/24 maxlen: 24
                          84.32.176.0/24 maxlen: 24
                          84.32.174.0/23 maxlen: 24
                          84.32.178.0/23 maxlen: 24
                          84.32.211.0/24 maxlen: 24
                          84.32.212.0/24 maxlen: 24
                          84.32.213.0/24 maxlen: 24
                          84.32.150.0/24 maxlen: 24
                          84.32.148.0/23 maxlen: 24
                          84.32.150.0/23 maxlen: 24
                          84.32.153.0/24 maxlen: 24
                          84.32.159.0/24 maxlen: 24
                          84.32.155.0/24 maxlen: 24
                          84.32.157.0/24 maxlen: 24
                          84.32.158.0/24 maxlen: 24
                          88.216.183.0/24 maxlen: 24
                          88.216.180.0/24 maxlen: 24
                          88.216.190.0/24 maxlen: 24
                          88.216.191.0/24 maxlen: 24
                          88.216.187.0/24 maxlen: 24
                          88.216.188.0/24 maxlen: 24
                          88.216.189.0/24 maxlen: 24
                          88.216.197.0/24 maxlen: 24
                          88.216.198.0/24 maxlen: 24
                          88.216.212.0/22 maxlen: 24
                          88.216.211.0/24 maxlen: 24
                          88.216.208.0/24 maxlen: 24
                          88.216.110.0/24 maxlen: 24
                          88.216.111.0/24 maxlen: 24
                          88.216.107.0/24 maxlen: 24
                          88.216.109.0/24 maxlen: 24
                          88.216.106.0/24 maxlen: 24
                          88.216.128.0/24 maxlen: 24
                          88.216.129.0/24 maxlen: 24
                          88.216.132.0/24 maxlen: 24
                          88.216.130.0/23 maxlen: 24
                          88.216.134.0/23 maxlen: 24
                          88.216.223.0/24 maxlen: 24
                          88.216.220.0/24 maxlen: 24
                          88.216.228.0/22 maxlen: 24
                          88.216.236.0/22 maxlen: 24
                          88.216.58.0/24 maxlen: 24
                          88.216.64.0/24 maxlen: 24
                          88.216.65.0/24 maxlen: 24
                          88.216.93.0/24 maxlen: 24
                          88.216.95.0/24 maxlen: 24
                          88.216.92.0/24 maxlen: 24
                          88.216.101.0/24 maxlen: 24
                          88.216.102.0/24 maxlen: 24
                          88.216.104.0/24 maxlen: 24
                          88.216.105.0/24 maxlen: 24
                          88.216.2.0/24 maxlen: 24
                          88.216.3.0/24 maxlen: 24
                          88.216.0.0/24 maxlen: 24
                          88.216.1.0/24 maxlen: 24
                          88.216.16.0/24 maxlen: 24
                          88.216.23.0/24 maxlen: 24
                          88.216.22.0/24 maxlen: 24
                          88.216.22.0/23 maxlen: 24
                          88.216.33.0/24 maxlen: 24
                          88.216.38.0/24 maxlen: 24
                          88.216.35.0/24 maxlen: 24
                          88.216.36.0/24 maxlen: 24
                          88.216.44.0/24 maxlen: 24
                          88.216.42.0/24 maxlen: 24
                          88.216.40.0/24 maxlen: 24
                          88.216.45.0/24 maxlen: 24
                          88.216.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Oct 2023 05:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1d:7a:4b:4c:9b:9b:3d:62:0e:3a:bf:fb:69:28:fc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Oct 11 06:43:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efc7a70bb4b0cb9f1b26e9dcc3c31f6b3c6fca5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:ed:62:19:49:03:e6:a8:33:dd:9b:54:71:
                    15:b2:28:b1:83:77:84:34:b3:96:2e:fb:fa:30:56:
                    14:90:b1:52:e8:e6:8c:f6:36:24:19:b0:5d:15:67:
                    80:62:04:15:a4:36:c7:78:63:45:62:d8:96:cd:9f:
                    6c:2c:0d:5d:8d:6e:19:d5:b9:31:69:c7:f1:86:58:
                    48:7a:4c:f6:27:b9:55:46:4e:21:e5:95:e6:ec:2d:
                    9c:89:bb:56:59:fc:90:87:38:ac:f4:39:ca:33:e3:
                    aa:c4:f2:43:8a:06:6f:ca:6d:2e:e5:e8:3d:3c:03:
                    da:fe:56:b9:7e:61:a0:36:9e:89:34:08:d1:de:97:
                    e1:4e:75:1f:52:b4:f8:5f:ce:30:6e:30:e6:ca:49:
                    3a:92:9c:2b:a6:41:38:07:21:1c:5b:a2:01:98:70:
                    dd:af:ca:25:99:65:f1:29:d8:48:53:46:ba:d5:f9:
                    fb:24:67:13:bb:16:9e:70:6f:3d:1f:fe:2c:30:66:
                    48:a0:29:15:1a:17:ea:7f:82:e5:ba:86:c1:7f:81:
                    df:42:96:c5:a1:f2:de:25:fb:a0:66:35:a8:bb:94:
                    50:7e:c5:ed:1f:51:11:7e:e9:74:1b:d6:b2:0b:c5:
                    37:81:10:48:98:13:f2:59:0a:cb:48:ee:7c:2c:87:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C7:A7:0B:B4:B0:CB:9F:1B:26:E9:DC:C3:C3:1F:6B:3C:6F:CA:5A
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/78enC7Swy58bJuncw8Mfazxvylo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.4.0/24
                  84.32.7.0-84.32.8.255
                  84.32.14.0/24
                  84.32.20.0-84.32.29.255
                  84.32.31.0/24
                  84.32.42.0/23
                  84.32.46.0/23
                  84.32.58.0/24
                  84.32.60.0-84.32.62.255
                  84.32.64.0-84.32.66.255
                  84.32.68.0/24
                  84.32.77.0/24
                  84.32.83.0/24
                  84.32.85.0/24
                  84.32.88.0-84.32.90.255
                  84.32.92.0/23
                  84.32.95.0/24
                  84.32.104.0/23
                  84.32.148.0/22
                  84.32.153.0/24
                  84.32.155.0/24
                  84.32.157.0-84.32.159.255
                  84.32.174.0-84.32.176.255
                  84.32.178.0/23
                  84.32.211.0-84.32.215.255
                  84.32.219.0/24
                  84.32.221.0/24
                  84.32.224.0/24
                  84.32.226.0/24
                  84.32.228.0/24
                  84.32.232.0/24
                  84.32.234.0/23
                  84.32.238.0-84.32.242.255
                  84.32.244.0/22
                  84.32.249.0-84.32.251.255
                  84.32.253.0-84.32.255.255
                  88.216.0.0/22
                  88.216.16.0/24
                  88.216.22.0/23
                  88.216.33.0/24
                  88.216.35.0-88.216.36.255
                  88.216.38.0/24
                  88.216.40.0/24
                  88.216.42.0/24
                  88.216.44.0/23
                  88.216.47.0/24
                  88.216.58.0/24
                  88.216.64.0/23
                  88.216.92.0/23
                  88.216.95.0/24
                  88.216.101.0-88.216.102.255
                  88.216.104.0/22
                  88.216.109.0-88.216.111.255
                  88.216.128.0-88.216.132.255
                  88.216.134.0/23
                  88.216.180.0/24
                  88.216.183.0/24
                  88.216.187.0-88.216.191.255
                  88.216.197.0-88.216.198.255
                  88.216.208.0/24
                  88.216.211.0-88.216.215.255
                  88.216.220.0/24
                  88.216.223.0/24
                  88.216.228.0/22
                  88.216.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:ab:34:3d:24:36:0b:ce:a5:2c:61:31:93:53:be:6c:ad:5a:
         b7:17:d4:a1:de:7e:3d:5f:fa:c2:14:ea:4e:91:d0:5f:d4:05:
         e1:ae:e9:06:8b:b6:2f:a4:4c:28:41:ef:1c:ca:4c:60:c6:d4:
         55:96:e8:2b:22:35:a3:9f:3a:a8:d0:4f:68:04:cc:34:12:5f:
         f1:4d:22:34:a8:0a:47:94:04:de:01:c1:c9:1e:22:a6:cc:35:
         fd:26:71:8f:e7:87:d8:b5:17:40:a2:6c:fd:40:41:a7:0c:84:
         78:d6:36:e3:eb:17:c5:1a:0f:32:aa:77:4c:ce:a2:b0:e6:de:
         6f:a5:70:80:2c:bb:06:96:9e:8f:c7:c7:43:a6:51:8c:ea:d4:
         2e:84:5e:38:bf:47:02:1a:62:0d:4f:3a:b0:a1:6a:c3:72:9c:
         f7:34:97:e0:21:5d:ff:88:00:e2:3d:ce:0c:e7:94:46:3e:99:
         bb:d2:92:99:8a:c1:77:01:d4:75:3f:15:6d:9f:79:e4:f4:f3:
         16:f4:1f:aa:e1:ee:3a:ab:d3:7b:34:bd:48:b7:0f:7f:71:7b:
         3f:8d:96:5f:91:6b:4b:94:c3:3c:a5:c3:dc:b7:93:6d:5c:09:
         f5:ff:52:03:f5:51:93:ac:fb:63:b3:af:c9:1b:06:94:aa:93:
         aa:ac:bd:06
-----BEGIN CERTIFICATE-----
MIIHFjCCBf6gAwIBAgISAYsdektMm5s9Yg46v/tpKPzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDExMDY0MzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmM3YTcwYmI0YjBjYjlmMWIyNmU5ZGNjM2MzMWY2YjNjNmZjYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjHtYhlJA+aoM92bVHEVsiixg3eE
NLOWLvv6MFYUkLFS6OaM9jYkGbBdFWeAYgQVpDbHeGNFYtiWzZ9sLA1djW4Z1bkx
acfxhlhIekz2J7lVRk4h5ZXm7C2cibtWWfyQhzis9DnKM+OqxPJDigZvym0u5eg9
PAPa/la5fmGgNp6JNAjR3pfhTnUfUrT4X84wbjDmykk6kpwrpkE4ByEcW6IBmHDd
r8olmWXxKdhIU0a61fn7JGcTuxaecG89H/4sMGZIoCkVGhfqf4LluobBf4HfQpbF
ofLeJfugZjWou5RQfsXtH1ERful0G9ayC8U3gRBImBPyWQrLSO58LIfkQwIDAQAB
o4IEIjCCBB4wHQYDVR0OBBYEFO/Hpwu0sMufGybp3MPDH2s8b8paMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvNzhlbkM3U3d5NThiSnVuY3c4TWZhenh2eWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICNgYIKwYBBQUHAQcBAf8EggIlMIICITCCAh0EAgABMIIC
FQMEAFQgBDAMAwQAVCAHAwQAVCAIAwQAVCAOMAwDBAJUIBQDBAFUIBwDBABUIB8D
BAFUICoDBAFUIC4DBABUIDowDAMEAlQgPAMEAFQgPjAMAwQGVCBAAwQAVCBCAwQA
VCBEAwQAVCBNAwQAVCBTAwQAVCBVMAwDBANUIFgDBABUIFoDBAFUIFwDBABUIF8D
BAFUIGgDBAJUIJQDBABUIJkDBABUIJswDAMEAFQgnQMEBVQggDAMAwQBVCCuAwQA
VCCwAwQBVCCyMAwDBABUINMDBANUINADBABUINsDBABUIN0DBABUIOADBABUIOID
BABUIOQDBABUIOgDBAFUIOowDAMEAVQg7gMEAFQg8gMEAlQg9DAMAwQAVCD5AwQC
VCD4MAsDBABUIP0DAwBUIAMEAljYAAMEAFjYEAMEAVjYFgMEAFjYITAMAwQAWNgj
AwQAWNgkAwQAWNgmAwQAWNgoAwQAWNgqAwQBWNgsAwQAWNgvAwQAWNg6AwQBWNhA
AwQBWNhcAwQAWNhfMAwDBABY2GUDBABY2GYDBAJY2GgwDAMEAFjYbQMEBFjYYDAM
AwQHWNiAAwQAWNiEAwQBWNiGAwQAWNi0AwQAWNi3MAwDBABY2LsDBAZY2IAwDAME
AFjYxQMEAFjYxgMEAFjY0DAMAwQAWNjTAwQDWNjQAwQAWNjcAwQAWNjfAwQCWNjk
AwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQCUqzQ9JDYLzqUsYTGTU75srVq3F9Sh
3n49X/rCFOpOkdBf1AXhrukGi7YvpEwoQe8cykxgxtRVlugrIjWjnzqo0E9oBMw0
El/xTSI0qApHlATeAcHJHiKmzDX9JnGP54fYtRdAomz9QEGnDIR41jbj6xfFGg8y
qndMzqKw5t5vpXCALLsGlp6Px8dDplGM6tQuhF44v0cCGmINTzqwoWrDcpz3NJfg
IV3/iADiPc4M55RGPpm70pKZisF3AdR1PxVtn3nk9PMW9B+q4e46q9N7NL1Itw9/
cXs/jZZfkWtLlMM8pcPct5NtXAn1/1ID9VGTrPtjs6/JGwaUqpOqrL0G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org