Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CV_Sxe0iGcaQfvqSZfHkb2UbZHE.roa
File:                     CV_Sxe0iGcaQfvqSZfHkb2UbZHE.roa (raw, json)
Hash identifier:          95Kfu8Wf+ur0LcLmjIbMdOxMnefIpV1B3htxGX2XKYU=
Subject key identifier:   09:5F:D2:C5:ED:22:19:C6:90:7E:FA:92:65:F1:E4:6F:65:1B:64:71
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       018A4AC90D58C0AF5809E0656101F0C508DB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CV_Sxe0iGcaQfvqSZfHkb2UbZHE.roa
Signing time:             Thu 31 Aug 2023 08:50:04 +0000
ROA not before:           Thu 31 Aug 2023 08:50:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        84.32.214.0/23 maxlen: 24
                          84.32.219.0/24 maxlen: 24
                          84.32.221.0/24 maxlen: 24
                          84.32.224.0/24 maxlen: 24
                          84.32.225.0/24 maxlen: 24
                          84.32.226.0/24 maxlen: 24
                          84.32.228.0/24 maxlen: 24
                          84.32.232.0/24 maxlen: 24
                          84.32.235.0/24 maxlen: 24
                          84.32.234.0/24 maxlen: 24
                          84.32.239.0/24 maxlen: 24
                          84.32.240.0/24 maxlen: 24
                          84.32.246.0/23 maxlen: 24
                          84.32.244.0/23 maxlen: 24
                          84.32.246.0/24 maxlen: 24
                          84.32.242.0/24 maxlen: 24
                          84.32.241.0/24 maxlen: 24
                          84.32.252.0/23 maxlen: 24
                          84.32.249.0/24 maxlen: 24
                          84.32.250.0/24 maxlen: 24
                          84.32.251.0/24 maxlen: 24
                          84.32.252.0/24 maxlen: 24
                          84.32.247.0/24 maxlen: 24
                          84.32.254.0/24 maxlen: 24
                          84.32.255.0/24 maxlen: 24
                          84.32.58.0/24 maxlen: 24
                          84.32.61.0/24 maxlen: 24
                          84.32.62.0/24 maxlen: 24
                          84.32.64.0/24 maxlen: 24
                          84.32.60.0/24 maxlen: 24
                          84.32.68.0/24 maxlen: 24
                          84.32.65.0/24 maxlen: 24
                          84.32.67.0/24 maxlen: 24
                          84.32.76.0/24 maxlen: 24
                          84.32.77.0/24 maxlen: 24
                          84.32.83.0/24 maxlen: 24
                          84.32.89.0/24 maxlen: 24
                          84.32.90.0/24 maxlen: 24
                          84.32.88.0/24 maxlen: 24
                          84.32.92.0/24 maxlen: 24
                          84.32.93.0/24 maxlen: 24
                          84.32.94.0/24 maxlen: 24
                          84.32.105.0/24 maxlen: 24
                          84.32.4.0/24 maxlen: 24
                          84.32.7.0/24 maxlen: 24
                          84.32.8.0/24 maxlen: 24
                          84.32.9.0/24 maxlen: 24
                          84.32.14.0/24 maxlen: 24
                          84.32.24.0/22 maxlen: 24
                          84.32.20.0/22 maxlen: 24
                          84.32.23.0/24 maxlen: 24
                          84.32.20.0/24 maxlen: 24
                          84.32.22.0/24 maxlen: 24
                          84.32.27.0/24 maxlen: 24
                          84.32.28.0/24 maxlen: 24
                          84.32.29.0/24 maxlen: 24
                          84.32.25.0/24 maxlen: 24
                          84.32.26.0/24 maxlen: 24
                          84.32.31.0/24 maxlen: 24
                          84.32.43.0/24 maxlen: 24
                          84.32.39.0/24 maxlen: 24
                          84.32.51.0/24 maxlen: 24
                          84.32.47.0/24 maxlen: 24
                          84.32.49.0/24 maxlen: 24
                          84.32.50.0/24 maxlen: 24
                          84.32.179.0/24 maxlen: 24
                          84.32.174.0/23 maxlen: 24
                          84.32.178.0/23 maxlen: 24
                          84.32.210.0/24 maxlen: 24
                          84.32.211.0/24 maxlen: 24
                          84.32.212.0/24 maxlen: 24
                          84.32.213.0/24 maxlen: 24
                          84.32.108.0/23 maxlen: 24
                          84.32.110.0/24 maxlen: 24
                          84.32.150.0/24 maxlen: 24
                          84.32.148.0/23 maxlen: 24
                          84.32.150.0/23 maxlen: 24
                          84.32.153.0/24 maxlen: 24
                          84.32.159.0/24 maxlen: 24
                          84.32.155.0/24 maxlen: 24
                          84.32.157.0/24 maxlen: 24
                          84.32.158.0/24 maxlen: 24
                          88.216.183.0/24 maxlen: 24
                          88.216.180.0/24 maxlen: 24
                          88.216.190.0/24 maxlen: 24
                          88.216.191.0/24 maxlen: 24
                          88.216.188.0/24 maxlen: 24
                          88.216.189.0/24 maxlen: 24
                          88.216.197.0/24 maxlen: 24
                          88.216.212.0/22 maxlen: 24
                          88.216.211.0/24 maxlen: 24
                          88.216.208.0/24 maxlen: 24
                          88.216.110.0/24 maxlen: 24
                          88.216.111.0/24 maxlen: 24
                          88.216.107.0/24 maxlen: 24
                          88.216.109.0/24 maxlen: 24
                          88.216.106.0/24 maxlen: 24
                          88.216.128.0/24 maxlen: 24
                          88.216.132.0/24 maxlen: 24
                          88.216.130.0/23 maxlen: 24
                          88.216.134.0/23 maxlen: 24
                          88.216.222.0/24 maxlen: 24
                          88.216.220.0/24 maxlen: 24
                          88.216.228.0/22 maxlen: 24
                          88.216.236.0/22 maxlen: 24
                          88.216.58.0/24 maxlen: 24
                          88.216.60.0/24 maxlen: 24
                          88.216.61.0/24 maxlen: 24
                          88.216.62.0/24 maxlen: 24
                          88.216.63.0/24 maxlen: 24
                          88.216.64.0/24 maxlen: 24
                          88.216.65.0/24 maxlen: 24
                          88.216.66.0/24 maxlen: 24
                          88.216.93.0/24 maxlen: 24
                          88.216.92.0/24 maxlen: 24
                          88.216.101.0/24 maxlen: 24
                          88.216.102.0/24 maxlen: 24
                          88.216.104.0/24 maxlen: 24
                          88.216.105.0/24 maxlen: 24
                          88.216.2.0/24 maxlen: 24
                          88.216.3.0/24 maxlen: 24
                          88.216.0.0/24 maxlen: 24
                          88.216.1.0/24 maxlen: 24
                          88.216.16.0/24 maxlen: 24
                          88.216.23.0/24 maxlen: 24
                          88.216.22.0/24 maxlen: 24
                          88.216.22.0/23 maxlen: 24
                          88.216.32.0/24 maxlen: 24
                          88.216.38.0/24 maxlen: 24
                          88.216.35.0/24 maxlen: 24
                          88.216.36.0/24 maxlen: 24
                          88.216.44.0/24 maxlen: 24
                          88.216.42.0/24 maxlen: 24
                          88.216.40.0/24 maxlen: 24
                          88.216.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4a:c9:0d:58:c0:af:58:09:e0:65:61:01:f0:c5:08:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Aug 31 08:50:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=095fd2c5ed2219c6907efa9265f1e46f651b6471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:54:05:86:c5:74:b6:92:0c:c3:31:07:00:
                    55:bb:eb:fc:f3:be:05:55:90:31:9e:fb:7e:d7:88:
                    c5:d8:e4:b1:9b:1a:01:05:35:8b:ef:d7:71:1c:30:
                    3a:31:65:65:d5:aa:fb:b7:80:c4:33:33:66:eb:0a:
                    95:7f:fd:9a:43:af:b0:12:27:cc:06:9a:f3:32:89:
                    55:ec:9e:a6:ca:f8:a1:e2:8d:36:70:48:d9:94:76:
                    0d:c8:36:fa:9e:d1:86:ba:8f:a6:61:65:fb:1d:19:
                    dd:c8:37:54:3b:83:4a:e8:80:92:a6:3a:e2:e9:9c:
                    51:d5:1b:9b:36:de:3d:c0:a0:4e:a6:83:81:08:8a:
                    e1:14:55:4a:78:ba:19:c7:a5:8d:d3:34:68:7b:74:
                    7e:bf:f9:31:b0:fc:c5:99:0e:b6:f7:47:aa:b3:99:
                    e4:49:5b:9d:e4:29:07:1e:f0:8f:b6:1a:64:e5:11:
                    e1:2a:61:d9:38:35:5d:ae:61:46:8a:10:a8:ea:67:
                    19:0b:39:01:f4:0f:1f:fd:71:a2:e6:8e:bc:1f:fc:
                    0d:b4:99:33:94:aa:2c:55:24:92:40:aa:6c:d3:24:
                    87:87:24:90:db:59:7a:35:22:0b:f9:13:de:eb:ff:
                    6a:b3:99:61:41:18:5f:e1:63:d5:42:a7:a4:19:4f:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:D2:C5:ED:22:19:C6:90:7E:FA:92:65:F1:E4:6F:65:1B:64:71
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CV_Sxe0iGcaQfvqSZfHkb2UbZHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.4.0/24
                  84.32.7.0-84.32.9.255
                  84.32.14.0/24
                  84.32.20.0-84.32.29.255
                  84.32.31.0/24
                  84.32.39.0/24
                  84.32.43.0/24
                  84.32.47.0/24
                  84.32.49.0-84.32.51.255
                  84.32.58.0/24
                  84.32.60.0-84.32.62.255
                  84.32.64.0/23
                  84.32.67.0-84.32.68.255
                  84.32.76.0/23
                  84.32.83.0/24
                  84.32.88.0-84.32.90.255
                  84.32.92.0-84.32.94.255
                  84.32.105.0/24
                  84.32.108.0-84.32.110.255
                  84.32.148.0/22
                  84.32.153.0/24
                  84.32.155.0/24
                  84.32.157.0-84.32.159.255
                  84.32.174.0/23
                  84.32.178.0/23
                  84.32.210.0-84.32.215.255
                  84.32.219.0/24
                  84.32.221.0/24
                  84.32.224.0-84.32.226.255
                  84.32.228.0/24
                  84.32.232.0/24
                  84.32.234.0/23
                  84.32.239.0-84.32.242.255
                  84.32.244.0/22
                  84.32.249.0-84.32.255.255
                  88.216.0.0/22
                  88.216.16.0/24
                  88.216.22.0/23
                  88.216.32.0/24
                  88.216.35.0-88.216.36.255
                  88.216.38.0/24
                  88.216.40.0/24
                  88.216.42.0/24
                  88.216.44.0/23
                  88.216.58.0/24
                  88.216.60.0-88.216.66.255
                  88.216.92.0/23
                  88.216.101.0-88.216.102.255
                  88.216.104.0/22
                  88.216.109.0-88.216.111.255
                  88.216.128.0/24
                  88.216.130.0-88.216.132.255
                  88.216.134.0/23
                  88.216.180.0/24
                  88.216.183.0/24
                  88.216.188.0/22
                  88.216.197.0/24
                  88.216.208.0/24
                  88.216.211.0-88.216.215.255
                  88.216.220.0/24
                  88.216.222.0/24
                  88.216.228.0/22
                  88.216.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:93:4d:75:57:dd:e0:63:90:7a:ee:f5:94:0b:fc:48:25:da:
         4f:8c:73:68:76:d0:a5:35:06:48:1a:c0:5a:f4:4c:81:9a:ed:
         1f:54:58:63:d6:cd:c6:1a:5a:74:e7:23:89:f7:87:27:e2:57:
         ea:a5:fa:88:e1:2b:71:7d:51:e9:7b:ed:62:8d:bb:80:b6:3f:
         72:2a:17:45:63:79:48:40:15:57:41:c0:09:e4:c9:86:ef:cf:
         31:7d:ad:57:c4:6b:52:26:7e:b5:2e:fb:24:df:a2:2e:2c:67:
         6d:c4:c5:03:90:fd:de:39:24:5f:27:70:bf:8f:8a:07:96:b6:
         79:f0:c7:47:f6:cd:15:65:94:ac:03:77:60:70:35:aa:34:53:
         3b:a4:03:53:4f:e9:79:30:3f:7a:8a:63:ea:48:70:06:9a:0e:
         df:e2:98:68:82:e3:e6:f4:7e:0c:17:58:bf:e1:17:7b:8a:bd:
         14:81:76:93:5f:f7:8e:98:b0:da:24:da:56:19:23:60:37:9c:
         93:2c:27:8c:98:b2:3e:b7:94:4d:96:ed:83:34:b8:42:14:07:
         5a:8e:5c:e6:56:5b:23:db:a0:8e:7f:1a:68:c9:fe:29:f0:01:
         d9:15:b4:02:cd:2d:89:eb:e1:72:77:a7:f0:88:bc:d4:bd:f3:
         01:8b:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 18:41:17 2023 by rpki-client on console-fra.rpki-client.org