Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BxCByhuOgg2uRaNV4uawfc1wdF4.roa
File:                     BxCByhuOgg2uRaNV4uawfc1wdF4.roa (raw, json)
Hash identifier:          /I4WNy2Ss1Ez1PyFGlSRX94m0Ji9Ro5wFhJVwvCjNdw=
Subject key identifier:   07:10:81:CA:1B:8E:82:0D:AE:45:A3:55:E2:E6:B0:7D:CD:70:74:5E
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       0189B4AC490899DABB54EC091644712EAF35
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BxCByhuOgg2uRaNV4uawfc1wdF4.roa
Signing time:             Wed 02 Aug 2023 05:15:37 +0000
ROA not before:           Wed 02 Aug 2023 05:15:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        84.32.214.0/23 maxlen: 24
                          84.32.219.0/24 maxlen: 24
                          84.32.221.0/24 maxlen: 24
                          84.32.224.0/24 maxlen: 24
                          84.32.225.0/24 maxlen: 24
                          84.32.226.0/24 maxlen: 24
                          84.32.228.0/24 maxlen: 24
                          84.32.231.0/24 maxlen: 24
                          84.32.232.0/24 maxlen: 24
                          84.32.235.0/24 maxlen: 24
                          84.32.234.0/24 maxlen: 24
                          84.32.239.0/24 maxlen: 24
                          84.32.240.0/24 maxlen: 24
                          84.32.246.0/23 maxlen: 24
                          84.32.244.0/23 maxlen: 24
                          84.32.246.0/24 maxlen: 24
                          84.32.242.0/24 maxlen: 24
                          84.32.241.0/24 maxlen: 24
                          84.32.252.0/23 maxlen: 24
                          84.32.249.0/24 maxlen: 24
                          84.32.250.0/24 maxlen: 24
                          84.32.251.0/24 maxlen: 24
                          84.32.247.0/24 maxlen: 24
                          84.32.254.0/24 maxlen: 24
                          84.32.255.0/24 maxlen: 24
                          84.32.58.0/24 maxlen: 24
                          84.32.61.0/24 maxlen: 24
                          84.32.62.0/24 maxlen: 24
                          84.32.64.0/24 maxlen: 24
                          84.32.60.0/24 maxlen: 24
                          84.32.68.0/24 maxlen: 24
                          84.32.65.0/24 maxlen: 24
                          84.32.67.0/24 maxlen: 24
                          84.32.76.0/24 maxlen: 24
                          84.32.83.0/24 maxlen: 24
                          84.32.89.0/24 maxlen: 24
                          84.32.92.0/24 maxlen: 24
                          84.32.93.0/24 maxlen: 24
                          84.32.94.0/24 maxlen: 24
                          84.32.8.0/24 maxlen: 24
                          84.32.9.0/24 maxlen: 24
                          84.32.14.0/24 maxlen: 24
                          84.32.24.0/22 maxlen: 24
                          84.32.20.0/22 maxlen: 24
                          84.32.23.0/24 maxlen: 24
                          84.32.20.0/24 maxlen: 24
                          84.32.22.0/24 maxlen: 24
                          84.32.27.0/24 maxlen: 24
                          84.32.28.0/24 maxlen: 24
                          84.32.29.0/24 maxlen: 24
                          84.32.25.0/24 maxlen: 24
                          84.32.26.0/24 maxlen: 24
                          84.32.31.0/24 maxlen: 24
                          84.32.43.0/24 maxlen: 24
                          84.32.39.0/24 maxlen: 24
                          84.32.51.0/24 maxlen: 24
                          84.32.50.0/24 maxlen: 24
                          84.32.45.0/24 maxlen: 24
                          84.32.46.0/24 maxlen: 24
                          84.32.179.0/24 maxlen: 24
                          84.32.174.0/23 maxlen: 24
                          84.32.178.0/23 maxlen: 24
                          84.32.210.0/24 maxlen: 24
                          84.32.212.0/24 maxlen: 24
                          84.32.213.0/24 maxlen: 24
                          84.32.108.0/23 maxlen: 24
                          84.32.110.0/24 maxlen: 24
                          84.32.150.0/24 maxlen: 24
                          84.32.148.0/23 maxlen: 24
                          84.32.150.0/23 maxlen: 24
                          84.32.153.0/24 maxlen: 24
                          84.32.159.0/24 maxlen: 24
                          84.32.157.0/24 maxlen: 24
                          84.32.158.0/24 maxlen: 24
                          88.216.183.0/24 maxlen: 24
                          88.216.180.0/24 maxlen: 24
                          88.216.190.0/24 maxlen: 24
                          88.216.191.0/24 maxlen: 24
                          88.216.188.0/24 maxlen: 24
                          88.216.189.0/24 maxlen: 24
                          88.216.197.0/24 maxlen: 24
                          88.216.212.0/22 maxlen: 24
                          88.216.211.0/24 maxlen: 24
                          88.216.110.0/24 maxlen: 24
                          88.216.111.0/24 maxlen: 24
                          88.216.107.0/24 maxlen: 24
                          88.216.109.0/24 maxlen: 24
                          88.216.106.0/24 maxlen: 24
                          88.216.128.0/24 maxlen: 24
                          88.216.132.0/24 maxlen: 24
                          88.216.130.0/23 maxlen: 24
                          88.216.134.0/23 maxlen: 24
                          88.216.222.0/24 maxlen: 24
                          88.216.220.0/24 maxlen: 24
                          88.216.228.0/22 maxlen: 24
                          88.216.240.0/22 maxlen: 24
                          88.216.236.0/22 maxlen: 24
                          88.216.244.0/22 maxlen: 24
                          88.216.58.0/24 maxlen: 24
                          88.216.60.0/24 maxlen: 24
                          88.216.61.0/24 maxlen: 24
                          88.216.62.0/24 maxlen: 24
                          88.216.63.0/24 maxlen: 24
                          88.216.64.0/24 maxlen: 24
                          88.216.65.0/24 maxlen: 24
                          88.216.93.0/24 maxlen: 24
                          88.216.92.0/24 maxlen: 24
                          88.216.101.0/24 maxlen: 24
                          88.216.104.0/24 maxlen: 24
                          88.216.105.0/24 maxlen: 24
                          88.216.2.0/24 maxlen: 24
                          88.216.3.0/24 maxlen: 24
                          88.216.0.0/24 maxlen: 24
                          88.216.1.0/24 maxlen: 24
                          88.216.16.0/24 maxlen: 24
                          88.216.23.0/24 maxlen: 24
                          88.216.22.0/23 maxlen: 24
                          88.216.32.0/24 maxlen: 24
                          88.216.38.0/24 maxlen: 24
                          88.216.35.0/24 maxlen: 24
                          88.216.36.0/24 maxlen: 24
                          88.216.44.0/24 maxlen: 24
                          88.216.42.0/24 maxlen: 24
                          88.216.40.0/24 maxlen: 24
                          88.216.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Aug 2023 12:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b4:ac:49:08:99:da:bb:54:ec:09:16:44:71:2e:af:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Aug  2 05:15:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=071081ca1b8e820dae45a355e2e6b07dcd70745e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:62:2b:5b:ee:74:f8:d8:45:04:d5:9f:83:
                    72:a7:19:3d:b8:10:2a:8c:57:7e:53:a6:77:ef:83:
                    79:7a:54:59:ae:d1:75:92:34:dd:7a:d9:a7:5c:c4:
                    5d:e8:83:53:5c:17:c5:b5:05:e4:90:c5:42:37:17:
                    d1:b0:44:95:21:fa:dc:5c:27:01:27:fa:c6:90:02:
                    2d:c1:a5:1d:1a:05:83:dc:ec:6e:b0:d5:78:f5:19:
                    41:d2:f5:3a:2c:6d:3c:5d:3b:96:f3:01:56:dd:4c:
                    03:6f:7d:18:27:63:83:ab:db:4d:89:a3:68:5a:26:
                    aa:17:95:58:57:59:49:04:84:ff:19:38:78:59:f5:
                    29:fd:93:72:32:a4:e0:7b:20:52:2f:fa:cb:1f:ab:
                    a9:4e:11:44:db:a4:b0:c4:39:d3:a2:58:7e:1f:4b:
                    67:c4:0f:3c:26:3d:a3:95:0d:1a:ff:e5:ca:24:08:
                    df:21:ef:cc:72:94:a7:6c:82:09:65:b2:f6:c2:01:
                    59:15:c6:ab:38:ec:4e:9e:4e:4f:61:ef:5f:7b:ca:
                    b5:4e:ea:53:1d:8f:9a:52:72:8e:8e:d1:90:bb:1b:
                    6c:8c:00:72:93:fa:2b:c2:0a:41:db:47:52:e6:8a:
                    43:0a:ec:52:50:76:93:80:8c:2b:33:68:9d:87:20:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:10:81:CA:1B:8E:82:0D:AE:45:A3:55:E2:E6:B0:7D:CD:70:74:5E
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BxCByhuOgg2uRaNV4uawfc1wdF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.8.0/23
                  84.32.14.0/24
                  84.32.20.0-84.32.29.255
                  84.32.31.0/24
                  84.32.39.0/24
                  84.32.43.0/24
                  84.32.45.0-84.32.46.255
                  84.32.50.0/23
                  84.32.58.0/24
                  84.32.60.0-84.32.62.255
                  84.32.64.0/23
                  84.32.67.0-84.32.68.255
                  84.32.76.0/24
                  84.32.83.0/24
                  84.32.89.0/24
                  84.32.92.0-84.32.94.255
                  84.32.108.0-84.32.110.255
                  84.32.148.0/22
                  84.32.153.0/24
                  84.32.157.0-84.32.159.255
                  84.32.174.0/23
                  84.32.178.0/23
                  84.32.210.0/24
                  84.32.212.0/22
                  84.32.219.0/24
                  84.32.221.0/24
                  84.32.224.0-84.32.226.255
                  84.32.228.0/24
                  84.32.231.0-84.32.232.255
                  84.32.234.0/23
                  84.32.239.0-84.32.242.255
                  84.32.244.0/22
                  84.32.249.0-84.32.255.255
                  88.216.0.0/22
                  88.216.16.0/24
                  88.216.22.0/23
                  88.216.32.0/24
                  88.216.35.0-88.216.36.255
                  88.216.38.0/24
                  88.216.40.0/24
                  88.216.42.0/24
                  88.216.44.0/23
                  88.216.58.0/24
                  88.216.60.0-88.216.65.255
                  88.216.92.0/23
                  88.216.101.0/24
                  88.216.104.0/22
                  88.216.109.0-88.216.111.255
                  88.216.128.0/24
                  88.216.130.0-88.216.132.255
                  88.216.134.0/23
                  88.216.180.0/24
                  88.216.183.0/24
                  88.216.188.0/22
                  88.216.197.0/24
                  88.216.211.0-88.216.215.255
                  88.216.220.0/24
                  88.216.222.0/24
                  88.216.228.0/22
                  88.216.236.0-88.216.247.255

    Signature Algorithm: sha256WithRSAEncryption
         48:b1:83:1a:95:5d:4b:c2:3f:0c:89:ad:67:a4:ed:65:44:a2:
         c7:ff:04:51:2f:94:7a:12:db:de:43:24:d7:54:62:a4:c8:4a:
         1d:bf:a3:c0:9d:28:af:d9:6e:45:b1:7a:77:86:ee:1e:35:0b:
         0e:86:a8:d5:22:0c:7a:19:5b:95:1a:0b:7b:48:7b:cf:89:7a:
         1a:6c:eb:42:f1:e8:70:eb:35:3c:90:bc:52:68:e4:81:13:79:
         35:12:53:df:9f:e7:8d:15:9c:5a:58:18:39:f6:73:1a:ab:71:
         63:ff:c9:1e:15:27:29:e7:11:ff:02:ba:d3:d2:3c:5e:79:87:
         e6:d9:a6:cd:47:86:88:5b:f5:4c:30:c3:a2:50:3d:db:00:d2:
         2b:b5:f0:6b:86:45:d8:2e:b5:91:8a:32:75:7e:3b:1f:78:66:
         b5:57:57:51:ea:c8:32:5a:4b:79:f6:a9:97:81:d0:65:96:c3:
         f2:44:e7:f6:be:b1:d0:79:7c:0b:14:ad:b5:b5:72:8a:8f:8d:
         0b:6d:49:4e:2b:37:9d:d2:06:6f:fd:35:ba:a9:c3:e6:fa:c0:
         1c:f1:73:c4:94:31:c2:ae:f2:05:cf:61:b1:d1:6f:ff:ae:87:
         6e:e0:5c:df:07:df:be:d2:37:e9:f4:c3:61:af:9f:5c:8f:df:
         55:f2:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org