Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I5PvvKSrUDont9gPPln9C1serug.roa
File:                     I5PvvKSrUDont9gPPln9C1serug.roa (raw, json)
Hash identifier:          Kixwkp33fBFc09c569hC4vOs9HxnyzAY83K1s0RMvzA=
Subject key identifier:   23:93:EF:BC:A4:AB:50:3A:27:B7:D8:0F:3E:59:FD:0B:5B:1E:AE:E8
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       018B1D3022FAED63AA984957BF239C93BC00
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I5PvvKSrUDont9gPPln9C1serug.roa
Signing time:             Wed 11 Oct 2023 05:22:55 +0000
ROA not before:           Wed 11 Oct 2023 05:22:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        84.32.214.0/23 maxlen: 24
                          84.32.219.0/24 maxlen: 24
                          84.32.221.0/24 maxlen: 24
                          84.32.224.0/24 maxlen: 24
                          84.32.226.0/24 maxlen: 24
                          84.32.228.0/24 maxlen: 24
                          84.32.232.0/24 maxlen: 24
                          84.32.235.0/24 maxlen: 24
                          84.32.238.0/24 maxlen: 24
                          84.32.234.0/24 maxlen: 24
                          84.32.239.0/24 maxlen: 24
                          84.32.240.0/24 maxlen: 24
                          84.32.246.0/23 maxlen: 24
                          84.32.244.0/23 maxlen: 24
                          84.32.246.0/24 maxlen: 24
                          84.32.242.0/24 maxlen: 24
                          84.32.241.0/24 maxlen: 24
                          84.32.249.0/24 maxlen: 24
                          84.32.250.0/24 maxlen: 24
                          84.32.251.0/24 maxlen: 24
                          84.32.247.0/24 maxlen: 24
                          84.32.253.0/24 maxlen: 24
                          84.32.254.0/24 maxlen: 24
                          84.32.255.0/24 maxlen: 24
                          84.32.58.0/24 maxlen: 24
                          84.32.61.0/24 maxlen: 24
                          84.32.62.0/24 maxlen: 24
                          84.32.64.0/24 maxlen: 24
                          84.32.60.0/24 maxlen: 24
                          84.32.68.0/24 maxlen: 24
                          84.32.65.0/24 maxlen: 24
                          84.32.66.0/24 maxlen: 24
                          84.32.77.0/24 maxlen: 24
                          84.32.83.0/24 maxlen: 24
                          84.32.85.0/24 maxlen: 24
                          84.32.89.0/24 maxlen: 24
                          84.32.90.0/24 maxlen: 24
                          84.32.88.0/24 maxlen: 24
                          84.32.92.0/24 maxlen: 24
                          84.32.93.0/24 maxlen: 24
                          84.32.95.0/24 maxlen: 24
                          84.32.104.0/24 maxlen: 24
                          84.32.105.0/24 maxlen: 24
                          84.32.4.0/24 maxlen: 24
                          84.32.7.0/24 maxlen: 24
                          84.32.8.0/24 maxlen: 24
                          84.32.14.0/24 maxlen: 24
                          84.32.24.0/22 maxlen: 24
                          84.32.20.0/22 maxlen: 24
                          84.32.20.0/24 maxlen: 24
                          84.32.21.0/24 maxlen: 24
                          84.32.27.0/24 maxlen: 24
                          84.32.28.0/24 maxlen: 24
                          84.32.29.0/24 maxlen: 24
                          84.32.26.0/24 maxlen: 24
                          84.32.31.0/24 maxlen: 24
                          84.32.42.0/24 maxlen: 24
                          84.32.43.0/24 maxlen: 24
                          84.32.47.0/24 maxlen: 24
                          84.32.46.0/24 maxlen: 24
                          84.32.176.0/24 maxlen: 24
                          84.32.174.0/23 maxlen: 24
                          84.32.178.0/23 maxlen: 24
                          84.32.211.0/24 maxlen: 24
                          84.32.212.0/24 maxlen: 24
                          84.32.213.0/24 maxlen: 24
                          84.32.150.0/24 maxlen: 24
                          84.32.148.0/23 maxlen: 24
                          84.32.150.0/23 maxlen: 24
                          84.32.153.0/24 maxlen: 24
                          84.32.159.0/24 maxlen: 24
                          84.32.155.0/24 maxlen: 24
                          84.32.157.0/24 maxlen: 24
                          84.32.158.0/24 maxlen: 24
                          88.216.183.0/24 maxlen: 24
                          88.216.180.0/24 maxlen: 24
                          88.216.190.0/24 maxlen: 24
                          88.216.191.0/24 maxlen: 24
                          88.216.187.0/24 maxlen: 24
                          88.216.188.0/24 maxlen: 24
                          88.216.189.0/24 maxlen: 24
                          88.216.197.0/24 maxlen: 24
                          88.216.198.0/24 maxlen: 24
                          88.216.212.0/22 maxlen: 24
                          88.216.211.0/24 maxlen: 24
                          88.216.208.0/24 maxlen: 24
                          88.216.110.0/24 maxlen: 24
                          88.216.111.0/24 maxlen: 24
                          88.216.107.0/24 maxlen: 24
                          88.216.109.0/24 maxlen: 24
                          88.216.106.0/24 maxlen: 24
                          88.216.128.0/24 maxlen: 24
                          88.216.129.0/24 maxlen: 24
                          88.216.132.0/24 maxlen: 24
                          88.216.130.0/23 maxlen: 24
                          88.216.134.0/23 maxlen: 24
                          88.216.223.0/24 maxlen: 24
                          88.216.220.0/24 maxlen: 24
                          88.216.228.0/22 maxlen: 24
                          88.216.236.0/22 maxlen: 24
                          88.216.58.0/24 maxlen: 24
                          88.216.64.0/24 maxlen: 24
                          88.216.65.0/24 maxlen: 24
                          88.216.93.0/24 maxlen: 24
                          88.216.95.0/24 maxlen: 24
                          88.216.92.0/24 maxlen: 24
                          88.216.101.0/24 maxlen: 24
                          88.216.102.0/24 maxlen: 24
                          88.216.104.0/24 maxlen: 24
                          88.216.105.0/24 maxlen: 24
                          88.216.2.0/24 maxlen: 24
                          88.216.3.0/24 maxlen: 24
                          88.216.0.0/24 maxlen: 24
                          88.216.1.0/24 maxlen: 24
                          88.216.16.0/24 maxlen: 24
                          88.216.23.0/24 maxlen: 24
                          88.216.22.0/24 maxlen: 24
                          88.216.22.0/23 maxlen: 24
                          88.216.33.0/24 maxlen: 24
                          88.216.38.0/24 maxlen: 24
                          88.216.35.0/24 maxlen: 24
                          88.216.36.0/24 maxlen: 24
                          88.216.44.0/24 maxlen: 24
                          88.216.42.0/24 maxlen: 24
                          88.216.40.0/24 maxlen: 24
                          88.216.45.0/24 maxlen: 24
                          88.216.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Oct 2023 06:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1d:30:22:fa:ed:63:aa:98:49:57:bf:23:9c:93:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Oct 11 05:22:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2393efbca4ab503a27b7d80f3e59fd0b5b1eaee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ee:13:00:bb:45:b4:77:e0:f9:20:ac:e9:d6:
                    b3:20:c3:ea:01:8a:41:1a:07:6a:c3:60:da:f8:70:
                    6d:88:ee:12:2d:55:37:28:62:82:96:31:cb:6b:bc:
                    4f:e3:42:2b:46:48:b7:e5:80:48:3c:80:9f:62:f1:
                    c6:9a:81:15:26:3b:7a:71:5d:0c:7a:7a:94:d0:fd:
                    c7:83:80:2c:81:35:13:55:be:7a:1d:ef:44:12:8a:
                    75:83:cc:16:24:19:ac:dc:13:14:63:14:2e:36:2e:
                    3f:d0:18:40:2c:08:ce:3f:d3:e1:fd:ca:b9:e8:a7:
                    d9:dd:73:51:55:5e:0a:31:33:8f:3e:c7:c7:4a:21:
                    46:5d:4c:3e:96:35:b2:bb:fe:94:6c:0f:24:a0:b5:
                    11:4b:32:27:73:f1:71:1c:7a:8a:37:12:f6:b3:19:
                    da:56:c9:99:7b:4d:66:de:e4:09:30:e1:d9:55:50:
                    29:88:fa:d1:45:33:1f:83:2c:cb:0b:9d:bf:93:cc:
                    ae:93:f0:d2:d2:97:3a:73:01:e1:aa:24:5c:e2:e3:
                    ff:97:bc:a3:a4:29:c5:0a:e8:1a:3e:d0:59:5d:4b:
                    5f:24:29:71:fa:76:20:69:f2:a3:60:93:d4:65:06:
                    34:c2:2a:bb:7b:bb:01:b6:81:5a:0a:83:94:d0:b1:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:93:EF:BC:A4:AB:50:3A:27:B7:D8:0F:3E:59:FD:0B:5B:1E:AE:E8
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I5PvvKSrUDont9gPPln9C1serug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.4.0/24
                  84.32.7.0-84.32.8.255
                  84.32.14.0/24
                  84.32.20.0-84.32.29.255
                  84.32.31.0/24
                  84.32.42.0/23
                  84.32.46.0/23
                  84.32.58.0/24
                  84.32.60.0-84.32.62.255
                  84.32.64.0-84.32.66.255
                  84.32.68.0/24
                  84.32.77.0/24
                  84.32.83.0/24
                  84.32.85.0/24
                  84.32.88.0-84.32.90.255
                  84.32.92.0/23
                  84.32.95.0/24
                  84.32.104.0/23
                  84.32.148.0/22
                  84.32.153.0/24
                  84.32.155.0/24
                  84.32.157.0-84.32.159.255
                  84.32.174.0-84.32.176.255
                  84.32.178.0/23
                  84.32.211.0-84.32.215.255
                  84.32.219.0/24
                  84.32.221.0/24
                  84.32.224.0/24
                  84.32.226.0/24
                  84.32.228.0/24
                  84.32.232.0/24
                  84.32.234.0/23
                  84.32.238.0-84.32.242.255
                  84.32.244.0/22
                  84.32.249.0-84.32.251.255
                  84.32.253.0-84.32.255.255
                  88.216.0.0/22
                  88.216.16.0/24
                  88.216.22.0/23
                  88.216.33.0/24
                  88.216.35.0-88.216.36.255
                  88.216.38.0/24
                  88.216.40.0/24
                  88.216.42.0/24
                  88.216.44.0/23
                  88.216.47.0/24
                  88.216.58.0/24
                  88.216.64.0/23
                  88.216.92.0/23
                  88.216.95.0/24
                  88.216.101.0-88.216.102.255
                  88.216.104.0/22
                  88.216.109.0-88.216.111.255
                  88.216.128.0-88.216.132.255
                  88.216.134.0/23
                  88.216.180.0/24
                  88.216.183.0/24
                  88.216.187.0-88.216.191.255
                  88.216.197.0-88.216.198.255
                  88.216.208.0/24
                  88.216.211.0-88.216.215.255
                  88.216.220.0/24
                  88.216.223.0/24
                  88.216.228.0/22
                  88.216.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:2e:b0:93:44:75:29:4d:23:5e:f8:e6:bc:c7:b4:48:d3:b5:
         5e:cb:9b:8c:69:b3:c0:2a:71:d6:e7:8d:0b:e1:98:0a:9b:a6:
         63:f0:cc:9d:b3:09:3d:74:83:02:22:bf:76:d6:11:92:97:7e:
         80:e2:cb:5d:7f:f6:46:91:91:63:2a:76:5c:ef:60:1a:69:76:
         7a:8a:63:f4:ad:35:de:3d:54:55:e3:59:52:5d:00:8b:6b:1b:
         20:16:fb:fb:09:ce:82:37:34:bd:ae:7a:e6:51:93:09:ce:15:
         bb:d1:b5:6c:05:c9:03:f3:70:13:72:1b:75:2f:76:c2:f8:5f:
         a5:22:79:7a:6d:3d:13:dd:46:4d:29:a2:f8:53:2d:38:49:74:
         a3:39:f7:e9:01:47:cf:fa:53:f2:6b:f2:42:99:53:dc:0c:58:
         d8:b0:9a:ca:3a:59:d4:36:58:b6:09:0e:2d:90:72:f6:c9:3f:
         c6:cf:01:cf:d0:dd:1d:f0:cf:fc:8e:77:6c:91:f2:ac:54:fe:
         17:82:1e:c7:97:8f:c3:c9:8c:fb:ed:fd:ce:09:1c:89:b9:87:
         c4:b4:6a:ed:39:82:f9:55:e8:00:3e:d0:5f:f5:04:1c:40:f0:
         e3:bf:15:92:c5:e8:dd:51:72:d0:b7:ad:a1:70:47:a3:c8:09:
         5a:ca:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org