Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8Ne_vqYwlLfRpIed4DuJlnWiy3A.roa
File:                     8Ne_vqYwlLfRpIed4DuJlnWiy3A.roa (raw, json)
Hash identifier:          arQj97iyg6VyqvThT7P01bBbygh5216MiCs2JTEVZrI=
Subject key identifier:   F0:D7:BF:BE:A6:30:94:B7:D1:A4:87:9D:E0:3B:89:96:75:A2:CB:70
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       0189F545523036D7ADFE235A0793FE38903E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8Ne_vqYwlLfRpIed4DuJlnWiy3A.roa
Signing time:             Mon 14 Aug 2023 18:18:28 +0000
ROA not before:           Mon 14 Aug 2023 18:18:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        84.32.214.0/23 maxlen: 24
                          84.32.219.0/24 maxlen: 24
                          84.32.221.0/24 maxlen: 24
                          84.32.224.0/24 maxlen: 24
                          84.32.225.0/24 maxlen: 24
                          84.32.226.0/24 maxlen: 24
                          84.32.228.0/24 maxlen: 24
                          84.32.231.0/24 maxlen: 24
                          84.32.232.0/24 maxlen: 24
                          84.32.235.0/24 maxlen: 24
                          84.32.234.0/24 maxlen: 24
                          84.32.239.0/24 maxlen: 24
                          84.32.240.0/24 maxlen: 24
                          84.32.246.0/23 maxlen: 24
                          84.32.244.0/23 maxlen: 24
                          84.32.246.0/24 maxlen: 24
                          84.32.242.0/24 maxlen: 24
                          84.32.241.0/24 maxlen: 24
                          84.32.252.0/23 maxlen: 24
                          84.32.249.0/24 maxlen: 24
                          84.32.250.0/24 maxlen: 24
                          84.32.251.0/24 maxlen: 24
                          84.32.252.0/24 maxlen: 24
                          84.32.247.0/24 maxlen: 24
                          84.32.254.0/24 maxlen: 24
                          84.32.255.0/24 maxlen: 24
                          84.32.58.0/24 maxlen: 24
                          84.32.61.0/24 maxlen: 24
                          84.32.62.0/24 maxlen: 24
                          84.32.64.0/24 maxlen: 24
                          84.32.60.0/24 maxlen: 24
                          84.32.68.0/24 maxlen: 24
                          84.32.65.0/24 maxlen: 24
                          84.32.67.0/24 maxlen: 24
                          84.32.76.0/24 maxlen: 24
                          84.32.83.0/24 maxlen: 24
                          84.32.89.0/24 maxlen: 24
                          84.32.92.0/24 maxlen: 24
                          84.32.93.0/24 maxlen: 24
                          84.32.94.0/24 maxlen: 24
                          84.32.105.0/24 maxlen: 24
                          84.32.4.0/24 maxlen: 24
                          84.32.7.0/24 maxlen: 24
                          84.32.8.0/24 maxlen: 24
                          84.32.9.0/24 maxlen: 24
                          84.32.14.0/24 maxlen: 24
                          84.32.24.0/22 maxlen: 24
                          84.32.20.0/22 maxlen: 24
                          84.32.23.0/24 maxlen: 24
                          84.32.20.0/24 maxlen: 24
                          84.32.22.0/24 maxlen: 24
                          84.32.27.0/24 maxlen: 24
                          84.32.28.0/24 maxlen: 24
                          84.32.29.0/24 maxlen: 24
                          84.32.25.0/24 maxlen: 24
                          84.32.26.0/24 maxlen: 24
                          84.32.31.0/24 maxlen: 24
                          84.32.43.0/24 maxlen: 24
                          84.32.39.0/24 maxlen: 24
                          84.32.51.0/24 maxlen: 24
                          84.32.49.0/24 maxlen: 24
                          84.32.50.0/24 maxlen: 24
                          84.32.45.0/24 maxlen: 24
                          84.32.179.0/24 maxlen: 24
                          84.32.174.0/23 maxlen: 24
                          84.32.178.0/23 maxlen: 24
                          84.32.210.0/24 maxlen: 24
                          84.32.211.0/24 maxlen: 24
                          84.32.212.0/24 maxlen: 24
                          84.32.213.0/24 maxlen: 24
                          84.32.108.0/23 maxlen: 24
                          84.32.110.0/24 maxlen: 24
                          84.32.150.0/24 maxlen: 24
                          84.32.148.0/23 maxlen: 24
                          84.32.150.0/23 maxlen: 24
                          84.32.153.0/24 maxlen: 24
                          84.32.159.0/24 maxlen: 24
                          84.32.155.0/24 maxlen: 24
                          84.32.157.0/24 maxlen: 24
                          84.32.158.0/24 maxlen: 24
                          88.216.183.0/24 maxlen: 24
                          88.216.180.0/24 maxlen: 24
                          88.216.190.0/24 maxlen: 24
                          88.216.191.0/24 maxlen: 24
                          88.216.188.0/24 maxlen: 24
                          88.216.189.0/24 maxlen: 24
                          88.216.197.0/24 maxlen: 24
                          88.216.212.0/22 maxlen: 24
                          88.216.211.0/24 maxlen: 24
                          88.216.110.0/24 maxlen: 24
                          88.216.111.0/24 maxlen: 24
                          88.216.107.0/24 maxlen: 24
                          88.216.109.0/24 maxlen: 24
                          88.216.106.0/24 maxlen: 24
                          88.216.128.0/24 maxlen: 24
                          88.216.132.0/24 maxlen: 24
                          88.216.130.0/23 maxlen: 24
                          88.216.134.0/23 maxlen: 24
                          88.216.222.0/24 maxlen: 24
                          88.216.220.0/24 maxlen: 24
                          88.216.228.0/22 maxlen: 24
                          88.216.236.0/22 maxlen: 24
                          88.216.58.0/24 maxlen: 24
                          88.216.60.0/24 maxlen: 24
                          88.216.61.0/24 maxlen: 24
                          88.216.62.0/24 maxlen: 24
                          88.216.63.0/24 maxlen: 24
                          88.216.64.0/24 maxlen: 24
                          88.216.65.0/24 maxlen: 24
                          88.216.66.0/24 maxlen: 24
                          88.216.93.0/24 maxlen: 24
                          88.216.92.0/24 maxlen: 24
                          88.216.101.0/24 maxlen: 24
                          88.216.102.0/24 maxlen: 24
                          88.216.104.0/24 maxlen: 24
                          88.216.105.0/24 maxlen: 24
                          88.216.2.0/24 maxlen: 24
                          88.216.3.0/24 maxlen: 24
                          88.216.0.0/24 maxlen: 24
                          88.216.1.0/24 maxlen: 24
                          88.216.16.0/24 maxlen: 24
                          88.216.23.0/24 maxlen: 24
                          88.216.22.0/24 maxlen: 24
                          88.216.22.0/23 maxlen: 24
                          88.216.32.0/24 maxlen: 24
                          88.216.38.0/24 maxlen: 24
                          88.216.35.0/24 maxlen: 24
                          88.216.36.0/24 maxlen: 24
                          88.216.44.0/24 maxlen: 24
                          88.216.42.0/24 maxlen: 24
                          88.216.40.0/24 maxlen: 24
                          88.216.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Aug 2023 05:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f5:45:52:30:36:d7:ad:fe:23:5a:07:93:fe:38:90:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Aug 14 18:18:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0d7bfbea63094b7d1a4879de03b899675a2cb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:82:94:89:d2:d5:fd:05:fc:23:74:6c:93:
                    eb:fc:b3:f8:0d:2a:59:81:06:c5:4a:b0:3b:ae:be:
                    99:a9:e3:c9:c0:3e:85:85:f8:da:08:5a:46:6a:84:
                    de:cb:ee:39:25:7f:78:35:91:a3:d4:af:bd:23:bf:
                    dc:c5:d2:97:85:30:6b:41:6d:14:f2:fb:83:58:0e:
                    70:29:4f:97:f6:00:e2:cf:d0:a6:e1:36:f3:94:19:
                    54:9d:55:94:55:ee:b0:23:7f:7a:aa:a1:fa:05:51:
                    05:15:e0:5a:51:16:6a:f3:64:df:f0:ea:91:20:94:
                    ff:85:1f:13:11:22:30:b5:4e:04:be:e6:2f:70:6c:
                    a8:19:bf:75:c3:c3:44:33:df:12:2f:96:2d:15:62:
                    21:f8:8a:1c:55:dd:68:f3:8e:5d:b9:44:44:29:2b:
                    cb:38:44:c7:73:ae:55:d5:9d:bd:5c:b1:90:19:8a:
                    ef:34:d4:08:1d:2e:01:c0:a0:a4:e9:ab:af:06:1c:
                    b4:0e:93:80:43:3f:5c:ce:3a:9c:0c:20:ff:bc:c6:
                    40:42:60:67:9e:de:6d:fe:1c:27:f6:36:dd:3a:33:
                    89:94:57:4b:92:f0:52:c1:a5:09:f2:93:98:63:20:
                    12:de:65:3c:85:50:5b:42:ad:df:38:e9:bc:d4:89:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:BF:BE:A6:30:94:B7:D1:A4:87:9D:E0:3B:89:96:75:A2:CB:70
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8Ne_vqYwlLfRpIed4DuJlnWiy3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.4.0/24
                  84.32.7.0-84.32.9.255
                  84.32.14.0/24
                  84.32.20.0-84.32.29.255
                  84.32.31.0/24
                  84.32.39.0/24
                  84.32.43.0/24
                  84.32.45.0/24
                  84.32.49.0-84.32.51.255
                  84.32.58.0/24
                  84.32.60.0-84.32.62.255
                  84.32.64.0/23
                  84.32.67.0-84.32.68.255
                  84.32.76.0/24
                  84.32.83.0/24
                  84.32.89.0/24
                  84.32.92.0-84.32.94.255
                  84.32.105.0/24
                  84.32.108.0-84.32.110.255
                  84.32.148.0/22
                  84.32.153.0/24
                  84.32.155.0/24
                  84.32.157.0-84.32.159.255
                  84.32.174.0/23
                  84.32.178.0/23
                  84.32.210.0-84.32.215.255
                  84.32.219.0/24
                  84.32.221.0/24
                  84.32.224.0-84.32.226.255
                  84.32.228.0/24
                  84.32.231.0-84.32.232.255
                  84.32.234.0/23
                  84.32.239.0-84.32.242.255
                  84.32.244.0/22
                  84.32.249.0-84.32.255.255
                  88.216.0.0/22
                  88.216.16.0/24
                  88.216.22.0/23
                  88.216.32.0/24
                  88.216.35.0-88.216.36.255
                  88.216.38.0/24
                  88.216.40.0/24
                  88.216.42.0/24
                  88.216.44.0/23
                  88.216.58.0/24
                  88.216.60.0-88.216.66.255
                  88.216.92.0/23
                  88.216.101.0-88.216.102.255
                  88.216.104.0/22
                  88.216.109.0-88.216.111.255
                  88.216.128.0/24
                  88.216.130.0-88.216.132.255
                  88.216.134.0/23
                  88.216.180.0/24
                  88.216.183.0/24
                  88.216.188.0/22
                  88.216.197.0/24
                  88.216.211.0-88.216.215.255
                  88.216.220.0/24
                  88.216.222.0/24
                  88.216.228.0/22
                  88.216.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:5e:f9:7a:b5:4e:50:4f:fe:a3:f7:21:dd:3d:68:6a:5a:
         b5:0d:52:4d:f4:e7:ab:02:a9:ee:b6:58:4c:25:6c:8d:50:de:
         86:81:10:d6:32:f2:3b:da:71:fa:0c:c6:7f:8e:13:63:a8:eb:
         28:23:8d:f6:2c:6a:a7:3b:36:6b:e2:20:2b:64:4c:3f:44:0e:
         53:60:e5:30:cf:11:2c:95:90:f5:fb:22:4f:97:6d:45:57:4c:
         ca:4d:f0:48:2a:a2:a6:ee:d5:a6:bd:3b:e2:4f:12:bd:2c:c9:
         05:ca:22:65:63:d8:d0:83:ea:2c:c1:31:fb:5d:02:75:1a:f2:
         af:ef:a7:db:a1:38:da:b5:5a:8b:09:a0:9b:7b:32:e8:d0:2f:
         7e:f0:b5:0c:bb:5d:85:e5:93:d8:69:2f:da:9e:3d:08:91:b9:
         1d:f8:a7:d6:63:39:01:4b:e0:2e:9c:ec:85:1a:de:8e:4f:71:
         20:14:be:6a:bd:13:eb:83:85:9d:07:16:e2:3f:c1:ca:b1:5c:
         a2:15:c0:a8:e0:86:7b:aa:04:f0:27:e3:0e:19:83:5d:10:89:
         4d:5e:fe:87:21:66:84:cc:22:00:ac:0a:3b:37:a6:9c:fd:ac:
         94:ff:2f:40:cb:e2:7b:2f:da:7f:48:e0:62:e6:a8:dc:27:eb:
         45:91:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org