Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RajdoDoF_2Fzn4M9hADPXGbJK1Y.roa
File:                     RajdoDoF_2Fzn4M9hADPXGbJK1Y.roa (raw, json)
Hash identifier:          FHfiNxvPX6Q3SxKUeuKLtjG/ao7HtfXItaXWmcuqGQg=
Subject key identifier:   45:A8:DD:A0:3A:05:FF:61:73:9F:83:3D:84:00:CF:5C:66:C9:2B:56
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       0189DF1A6C8A6CA080F6804C66C92991600F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RajdoDoF_2Fzn4M9hADPXGbJK1Y.roa
Signing time:             Thu 10 Aug 2023 10:59:58 +0000
ROA not before:           Thu 10 Aug 2023 10:59:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        84.32.214.0/23 maxlen: 24
                          84.32.219.0/24 maxlen: 24
                          84.32.221.0/24 maxlen: 24
                          84.32.224.0/24 maxlen: 24
                          84.32.225.0/24 maxlen: 24
                          84.32.226.0/24 maxlen: 24
                          84.32.228.0/24 maxlen: 24
                          84.32.231.0/24 maxlen: 24
                          84.32.232.0/24 maxlen: 24
                          84.32.235.0/24 maxlen: 24
                          84.32.234.0/24 maxlen: 24
                          84.32.239.0/24 maxlen: 24
                          84.32.240.0/24 maxlen: 24
                          84.32.246.0/23 maxlen: 24
                          84.32.244.0/23 maxlen: 24
                          84.32.246.0/24 maxlen: 24
                          84.32.242.0/24 maxlen: 24
                          84.32.241.0/24 maxlen: 24
                          84.32.252.0/23 maxlen: 24
                          84.32.249.0/24 maxlen: 24
                          84.32.250.0/24 maxlen: 24
                          84.32.251.0/24 maxlen: 24
                          84.32.252.0/24 maxlen: 24
                          84.32.247.0/24 maxlen: 24
                          84.32.254.0/24 maxlen: 24
                          84.32.255.0/24 maxlen: 24
                          84.32.58.0/24 maxlen: 24
                          84.32.61.0/24 maxlen: 24
                          84.32.62.0/24 maxlen: 24
                          84.32.64.0/24 maxlen: 24
                          84.32.60.0/24 maxlen: 24
                          84.32.68.0/24 maxlen: 24
                          84.32.65.0/24 maxlen: 24
                          84.32.67.0/24 maxlen: 24
                          84.32.76.0/24 maxlen: 24
                          84.32.83.0/24 maxlen: 24
                          84.32.89.0/24 maxlen: 24
                          84.32.92.0/24 maxlen: 24
                          84.32.93.0/24 maxlen: 24
                          84.32.94.0/24 maxlen: 24
                          84.32.105.0/24 maxlen: 24
                          84.32.8.0/24 maxlen: 24
                          84.32.9.0/24 maxlen: 24
                          84.32.14.0/24 maxlen: 24
                          84.32.24.0/22 maxlen: 24
                          84.32.20.0/22 maxlen: 24
                          84.32.23.0/24 maxlen: 24
                          84.32.20.0/24 maxlen: 24
                          84.32.22.0/24 maxlen: 24
                          84.32.27.0/24 maxlen: 24
                          84.32.28.0/24 maxlen: 24
                          84.32.29.0/24 maxlen: 24
                          84.32.25.0/24 maxlen: 24
                          84.32.26.0/24 maxlen: 24
                          84.32.31.0/24 maxlen: 24
                          84.32.43.0/24 maxlen: 24
                          84.32.39.0/24 maxlen: 24
                          84.32.51.0/24 maxlen: 24
                          84.32.49.0/24 maxlen: 24
                          84.32.50.0/24 maxlen: 24
                          84.32.45.0/24 maxlen: 24
                          84.32.179.0/24 maxlen: 24
                          84.32.174.0/23 maxlen: 24
                          84.32.178.0/23 maxlen: 24
                          84.32.210.0/24 maxlen: 24
                          84.32.211.0/24 maxlen: 24
                          84.32.212.0/24 maxlen: 24
                          84.32.213.0/24 maxlen: 24
                          84.32.108.0/23 maxlen: 24
                          84.32.110.0/24 maxlen: 24
                          84.32.150.0/24 maxlen: 24
                          84.32.148.0/23 maxlen: 24
                          84.32.150.0/23 maxlen: 24
                          84.32.153.0/24 maxlen: 24
                          84.32.159.0/24 maxlen: 24
                          84.32.155.0/24 maxlen: 24
                          84.32.157.0/24 maxlen: 24
                          84.32.158.0/24 maxlen: 24
                          88.216.183.0/24 maxlen: 24
                          88.216.180.0/24 maxlen: 24
                          88.216.190.0/24 maxlen: 24
                          88.216.191.0/24 maxlen: 24
                          88.216.188.0/24 maxlen: 24
                          88.216.189.0/24 maxlen: 24
                          88.216.197.0/24 maxlen: 24
                          88.216.212.0/22 maxlen: 24
                          88.216.211.0/24 maxlen: 24
                          88.216.110.0/24 maxlen: 24
                          88.216.111.0/24 maxlen: 24
                          88.216.107.0/24 maxlen: 24
                          88.216.109.0/24 maxlen: 24
                          88.216.106.0/24 maxlen: 24
                          88.216.128.0/24 maxlen: 24
                          88.216.132.0/24 maxlen: 24
                          88.216.130.0/23 maxlen: 24
                          88.216.134.0/23 maxlen: 24
                          88.216.222.0/24 maxlen: 24
                          88.216.220.0/24 maxlen: 24
                          88.216.228.0/22 maxlen: 24
                          88.216.240.0/22 maxlen: 24
                          88.216.236.0/22 maxlen: 24
                          88.216.244.0/22 maxlen: 24
                          88.216.58.0/24 maxlen: 24
                          88.216.60.0/24 maxlen: 24
                          88.216.61.0/24 maxlen: 24
                          88.216.62.0/24 maxlen: 24
                          88.216.63.0/24 maxlen: 24
                          88.216.64.0/24 maxlen: 24
                          88.216.65.0/24 maxlen: 24
                          88.216.66.0/24 maxlen: 24
                          88.216.93.0/24 maxlen: 24
                          88.216.92.0/24 maxlen: 24
                          88.216.101.0/24 maxlen: 24
                          88.216.102.0/24 maxlen: 24
                          88.216.104.0/24 maxlen: 24
                          88.216.105.0/24 maxlen: 24
                          88.216.2.0/24 maxlen: 24
                          88.216.3.0/24 maxlen: 24
                          88.216.0.0/24 maxlen: 24
                          88.216.1.0/24 maxlen: 24
                          88.216.16.0/24 maxlen: 24
                          88.216.23.0/24 maxlen: 24
                          88.216.22.0/24 maxlen: 24
                          88.216.22.0/23 maxlen: 24
                          88.216.32.0/24 maxlen: 24
                          88.216.38.0/24 maxlen: 24
                          88.216.35.0/24 maxlen: 24
                          88.216.36.0/24 maxlen: 24
                          88.216.44.0/24 maxlen: 24
                          88.216.42.0/24 maxlen: 24
                          88.216.40.0/24 maxlen: 24
                          88.216.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:df:1a:6c:8a:6c:a0:80:f6:80:4c:66:c9:29:91:60:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Aug 10 10:59:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45a8dda03a05ff61739f833d8400cf5c66c92b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:dc:74:09:77:f3:b3:d6:a4:c1:af:fb:1a:
                    60:d8:31:3c:a3:d6:13:38:8d:76:32:69:56:03:01:
                    37:4a:e0:81:15:c4:ee:f1:ce:56:dd:5a:3f:ee:8e:
                    ff:15:f1:53:33:77:99:cc:aa:cc:79:28:af:33:e4:
                    0c:35:82:d4:39:27:c2:5d:61:90:37:67:9a:9a:31:
                    90:2a:ce:55:b7:7a:c1:f3:2f:7a:33:0d:59:11:91:
                    62:67:a2:de:6a:d4:80:3c:64:74:0c:ee:14:5c:17:
                    c6:b9:27:59:47:f6:eb:b8:a0:f3:db:0b:88:aa:8a:
                    0d:06:c4:14:8f:72:39:2c:ee:58:bd:d2:27:aa:1a:
                    0a:9f:bb:00:e6:66:31:1a:89:2d:8c:b9:ee:90:39:
                    00:74:f5:86:ab:7b:89:7a:c9:2c:c1:b4:ce:b7:53:
                    1b:a6:6a:e0:40:98:8b:fa:be:ab:50:a7:02:73:84:
                    6a:8e:bc:0d:ef:65:04:d5:18:6e:94:25:e7:f9:80:
                    d0:47:a5:e1:11:dc:2b:e5:bf:7c:b8:99:18:c3:4e:
                    ec:10:bf:d6:b3:ef:20:70:6d:16:6e:c8:47:55:93:
                    13:e0:07:76:76:db:37:96:c8:c1:3d:48:cd:54:de:
                    6d:2d:cd:cf:50:d6:2f:4a:6c:32:9b:f0:bf:f0:6e:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:DD:A0:3A:05:FF:61:73:9F:83:3D:84:00:CF:5C:66:C9:2B:56
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RajdoDoF_2Fzn4M9hADPXGbJK1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.8.0/23
                  84.32.14.0/24
                  84.32.20.0-84.32.29.255
                  84.32.31.0/24
                  84.32.39.0/24
                  84.32.43.0/24
                  84.32.45.0/24
                  84.32.49.0-84.32.51.255
                  84.32.58.0/24
                  84.32.60.0-84.32.62.255
                  84.32.64.0/23
                  84.32.67.0-84.32.68.255
                  84.32.76.0/24
                  84.32.83.0/24
                  84.32.89.0/24
                  84.32.92.0-84.32.94.255
                  84.32.105.0/24
                  84.32.108.0-84.32.110.255
                  84.32.148.0/22
                  84.32.153.0/24
                  84.32.155.0/24
                  84.32.157.0-84.32.159.255
                  84.32.174.0/23
                  84.32.178.0/23
                  84.32.210.0-84.32.215.255
                  84.32.219.0/24
                  84.32.221.0/24
                  84.32.224.0-84.32.226.255
                  84.32.228.0/24
                  84.32.231.0-84.32.232.255
                  84.32.234.0/23
                  84.32.239.0-84.32.242.255
                  84.32.244.0/22
                  84.32.249.0-84.32.255.255
                  88.216.0.0/22
                  88.216.16.0/24
                  88.216.22.0/23
                  88.216.32.0/24
                  88.216.35.0-88.216.36.255
                  88.216.38.0/24
                  88.216.40.0/24
                  88.216.42.0/24
                  88.216.44.0/23
                  88.216.58.0/24
                  88.216.60.0-88.216.66.255
                  88.216.92.0/23
                  88.216.101.0-88.216.102.255
                  88.216.104.0/22
                  88.216.109.0-88.216.111.255
                  88.216.128.0/24
                  88.216.130.0-88.216.132.255
                  88.216.134.0/23
                  88.216.180.0/24
                  88.216.183.0/24
                  88.216.188.0/22
                  88.216.197.0/24
                  88.216.211.0-88.216.215.255
                  88.216.220.0/24
                  88.216.222.0/24
                  88.216.228.0/22
                  88.216.236.0-88.216.247.255

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:5c:b1:b1:0f:d7:aa:af:37:2e:10:24:e3:b6:d8:25:bd:
         31:f5:e6:76:4e:96:48:e2:a9:0b:aa:a6:5c:52:11:07:6f:ed:
         bd:af:3b:ea:1e:17:13:3a:bf:92:c0:ea:74:7b:c8:94:57:13:
         8e:5f:3c:89:39:ca:55:c1:38:eb:68:52:14:47:5d:2e:a0:60:
         c4:1d:64:ac:66:7d:e7:ff:2c:22:25:7d:8a:e6:9f:1b:02:76:
         b7:c8:c7:00:ca:c6:75:27:b1:52:bf:f6:b5:8d:e6:20:10:f6:
         3b:85:78:65:51:5e:1e:24:02:c1:ac:12:3e:fc:8a:96:7d:c5:
         da:c0:1d:b2:be:c9:71:e4:9c:4c:3a:1d:fc:a4:d9:80:3e:66:
         38:9e:8f:b4:aa:6b:6a:63:17:40:81:84:e5:9d:5b:c8:41:20:
         e3:2a:1a:5a:9b:cd:9b:f0:0e:d1:11:c1:0a:eb:89:fa:24:a4:
         6b:3a:60:65:4d:ee:9a:70:29:16:b0:24:50:50:a4:b7:62:b4:
         cf:1d:0a:2b:fa:07:fe:61:88:c9:30:63:23:a3:29:a4:60:0c:
         55:2f:a0:c7:ce:19:6f:96:be:96:83:c0:63:13:b4:53:c9:8b:
         97:98:38:b6:5f:7a:48:86:0b:40:fc:27:49:63:a4:3a:a5:0b:
         cd:ed:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 18:50:57 2023 by rpki-client on console-fra.rpki-client.org