Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rUvan2jP7SSXkctWsl1KJa_XJ-w.roa
File:                     rUvan2jP7SSXkctWsl1KJa_XJ-w.roa (raw, json)
Hash identifier:          u1UKgn2leFJQUYwWqGenDzMq7CYFQqcgQCUGEq0qsLQ=
Subject key identifier:   AD:4B:DA:9F:68:CF:ED:24:97:91:CB:56:B2:5D:4A:25:AF:D7:27:EC
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       0189FCC183C28BA62697C79A5F84A2163F10
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rUvan2jP7SSXkctWsl1KJa_XJ-w.roa
Signing time:             Wed 16 Aug 2023 05:11:27 +0000
ROA not before:           Wed 16 Aug 2023 05:11:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        84.32.214.0/23 maxlen: 24
                          84.32.219.0/24 maxlen: 24
                          84.32.221.0/24 maxlen: 24
                          84.32.224.0/24 maxlen: 24
                          84.32.225.0/24 maxlen: 24
                          84.32.226.0/24 maxlen: 24
                          84.32.228.0/24 maxlen: 24
                          84.32.231.0/24 maxlen: 24
                          84.32.232.0/24 maxlen: 24
                          84.32.235.0/24 maxlen: 24
                          84.32.234.0/24 maxlen: 24
                          84.32.239.0/24 maxlen: 24
                          84.32.240.0/24 maxlen: 24
                          84.32.246.0/23 maxlen: 24
                          84.32.244.0/23 maxlen: 24
                          84.32.246.0/24 maxlen: 24
                          84.32.242.0/24 maxlen: 24
                          84.32.241.0/24 maxlen: 24
                          84.32.252.0/23 maxlen: 24
                          84.32.249.0/24 maxlen: 24
                          84.32.250.0/24 maxlen: 24
                          84.32.251.0/24 maxlen: 24
                          84.32.252.0/24 maxlen: 24
                          84.32.247.0/24 maxlen: 24
                          84.32.254.0/24 maxlen: 24
                          84.32.255.0/24 maxlen: 24
                          84.32.58.0/24 maxlen: 24
                          84.32.61.0/24 maxlen: 24
                          84.32.62.0/24 maxlen: 24
                          84.32.64.0/24 maxlen: 24
                          84.32.60.0/24 maxlen: 24
                          84.32.68.0/24 maxlen: 24
                          84.32.65.0/24 maxlen: 24
                          84.32.67.0/24 maxlen: 24
                          84.32.76.0/24 maxlen: 24
                          84.32.77.0/24 maxlen: 24
                          84.32.83.0/24 maxlen: 24
                          84.32.89.0/24 maxlen: 24
                          84.32.92.0/24 maxlen: 24
                          84.32.93.0/24 maxlen: 24
                          84.32.94.0/24 maxlen: 24
                          84.32.105.0/24 maxlen: 24
                          84.32.4.0/24 maxlen: 24
                          84.32.7.0/24 maxlen: 24
                          84.32.8.0/24 maxlen: 24
                          84.32.9.0/24 maxlen: 24
                          84.32.14.0/24 maxlen: 24
                          84.32.24.0/22 maxlen: 24
                          84.32.20.0/22 maxlen: 24
                          84.32.23.0/24 maxlen: 24
                          84.32.20.0/24 maxlen: 24
                          84.32.22.0/24 maxlen: 24
                          84.32.27.0/24 maxlen: 24
                          84.32.28.0/24 maxlen: 24
                          84.32.29.0/24 maxlen: 24
                          84.32.25.0/24 maxlen: 24
                          84.32.26.0/24 maxlen: 24
                          84.32.31.0/24 maxlen: 24
                          84.32.43.0/24 maxlen: 24
                          84.32.39.0/24 maxlen: 24
                          84.32.51.0/24 maxlen: 24
                          84.32.49.0/24 maxlen: 24
                          84.32.50.0/24 maxlen: 24
                          84.32.45.0/24 maxlen: 24
                          84.32.179.0/24 maxlen: 24
                          84.32.174.0/23 maxlen: 24
                          84.32.178.0/23 maxlen: 24
                          84.32.210.0/24 maxlen: 24
                          84.32.211.0/24 maxlen: 24
                          84.32.212.0/24 maxlen: 24
                          84.32.213.0/24 maxlen: 24
                          84.32.108.0/23 maxlen: 24
                          84.32.110.0/24 maxlen: 24
                          84.32.150.0/24 maxlen: 24
                          84.32.148.0/23 maxlen: 24
                          84.32.150.0/23 maxlen: 24
                          84.32.153.0/24 maxlen: 24
                          84.32.159.0/24 maxlen: 24
                          84.32.155.0/24 maxlen: 24
                          84.32.157.0/24 maxlen: 24
                          84.32.158.0/24 maxlen: 24
                          88.216.183.0/24 maxlen: 24
                          88.216.180.0/24 maxlen: 24
                          88.216.190.0/24 maxlen: 24
                          88.216.191.0/24 maxlen: 24
                          88.216.188.0/24 maxlen: 24
                          88.216.189.0/24 maxlen: 24
                          88.216.197.0/24 maxlen: 24
                          88.216.212.0/22 maxlen: 24
                          88.216.211.0/24 maxlen: 24
                          88.216.110.0/24 maxlen: 24
                          88.216.111.0/24 maxlen: 24
                          88.216.107.0/24 maxlen: 24
                          88.216.109.0/24 maxlen: 24
                          88.216.106.0/24 maxlen: 24
                          88.216.128.0/24 maxlen: 24
                          88.216.132.0/24 maxlen: 24
                          88.216.130.0/23 maxlen: 24
                          88.216.134.0/23 maxlen: 24
                          88.216.222.0/24 maxlen: 24
                          88.216.220.0/24 maxlen: 24
                          88.216.228.0/22 maxlen: 24
                          88.216.236.0/22 maxlen: 24
                          88.216.58.0/24 maxlen: 24
                          88.216.60.0/24 maxlen: 24
                          88.216.61.0/24 maxlen: 24
                          88.216.62.0/24 maxlen: 24
                          88.216.63.0/24 maxlen: 24
                          88.216.64.0/24 maxlen: 24
                          88.216.65.0/24 maxlen: 24
                          88.216.66.0/24 maxlen: 24
                          88.216.93.0/24 maxlen: 24
                          88.216.92.0/24 maxlen: 24
                          88.216.101.0/24 maxlen: 24
                          88.216.102.0/24 maxlen: 24
                          88.216.104.0/24 maxlen: 24
                          88.216.105.0/24 maxlen: 24
                          88.216.2.0/24 maxlen: 24
                          88.216.3.0/24 maxlen: 24
                          88.216.0.0/24 maxlen: 24
                          88.216.1.0/24 maxlen: 24
                          88.216.16.0/24 maxlen: 24
                          88.216.23.0/24 maxlen: 24
                          88.216.22.0/24 maxlen: 24
                          88.216.22.0/23 maxlen: 24
                          88.216.32.0/24 maxlen: 24
                          88.216.38.0/24 maxlen: 24
                          88.216.35.0/24 maxlen: 24
                          88.216.36.0/24 maxlen: 24
                          88.216.44.0/24 maxlen: 24
                          88.216.42.0/24 maxlen: 24
                          88.216.40.0/24 maxlen: 24
                          88.216.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 18 Aug 2023 09:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fc:c1:83:c2:8b:a6:26:97:c7:9a:5f:84:a2:16:3f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Aug 16 05:11:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad4bda9f68cfed249791cb56b25d4a25afd727ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:b5:ae:bd:13:4a:e2:eb:83:98:88:1d:18:
                    5b:3d:16:9c:f3:cb:64:d9:b1:c4:ae:17:ed:46:a5:
                    26:bf:50:61:cd:1d:ac:a9:69:3f:09:16:48:a3:25:
                    f6:a2:ae:90:07:a1:03:1b:03:8d:49:e2:09:b8:24:
                    6e:c6:fa:c8:5f:3f:d6:b3:3f:4e:a7:86:1c:f6:8d:
                    3f:b8:6c:6f:5c:ed:8c:b9:bb:0b:29:3b:56:17:9f:
                    d2:8d:39:14:fe:0b:a2:8b:5b:88:33:97:54:31:f4:
                    fe:90:2a:c5:c9:f8:fb:80:5d:be:0d:2d:91:38:8c:
                    71:4b:e0:36:ea:30:4f:10:6c:91:a0:59:a1:4c:73:
                    51:17:75:47:ac:a6:b2:ac:de:98:33:ba:8a:a6:19:
                    be:0b:19:8c:a5:23:0f:d6:8f:e0:92:73:a4:7d:98:
                    09:5a:97:ae:f0:5e:65:ea:e4:93:ea:9d:bb:07:25:
                    74:aa:58:50:b2:59:05:72:3a:62:f5:11:d3:2f:db:
                    d0:3c:09:49:a3:51:b4:2b:f0:2f:2f:43:7a:13:62:
                    4c:73:99:11:ad:53:09:c1:ec:82:47:eb:e3:1b:80:
                    23:fb:c8:00:b2:4f:3a:68:f1:81:dc:dc:fc:77:af:
                    52:38:02:b8:d9:8a:18:dc:9c:64:9f:f1:6b:c5:88:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4B:DA:9F:68:CF:ED:24:97:91:CB:56:B2:5D:4A:25:AF:D7:27:EC
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rUvan2jP7SSXkctWsl1KJa_XJ-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.4.0/24
                  84.32.7.0-84.32.9.255
                  84.32.14.0/24
                  84.32.20.0-84.32.29.255
                  84.32.31.0/24
                  84.32.39.0/24
                  84.32.43.0/24
                  84.32.45.0/24
                  84.32.49.0-84.32.51.255
                  84.32.58.0/24
                  84.32.60.0-84.32.62.255
                  84.32.64.0/23
                  84.32.67.0-84.32.68.255
                  84.32.76.0/23
                  84.32.83.0/24
                  84.32.89.0/24
                  84.32.92.0-84.32.94.255
                  84.32.105.0/24
                  84.32.108.0-84.32.110.255
                  84.32.148.0/22
                  84.32.153.0/24
                  84.32.155.0/24
                  84.32.157.0-84.32.159.255
                  84.32.174.0/23
                  84.32.178.0/23
                  84.32.210.0-84.32.215.255
                  84.32.219.0/24
                  84.32.221.0/24
                  84.32.224.0-84.32.226.255
                  84.32.228.0/24
                  84.32.231.0-84.32.232.255
                  84.32.234.0/23
                  84.32.239.0-84.32.242.255
                  84.32.244.0/22
                  84.32.249.0-84.32.255.255
                  88.216.0.0/22
                  88.216.16.0/24
                  88.216.22.0/23
                  88.216.32.0/24
                  88.216.35.0-88.216.36.255
                  88.216.38.0/24
                  88.216.40.0/24
                  88.216.42.0/24
                  88.216.44.0/23
                  88.216.58.0/24
                  88.216.60.0-88.216.66.255
                  88.216.92.0/23
                  88.216.101.0-88.216.102.255
                  88.216.104.0/22
                  88.216.109.0-88.216.111.255
                  88.216.128.0/24
                  88.216.130.0-88.216.132.255
                  88.216.134.0/23
                  88.216.180.0/24
                  88.216.183.0/24
                  88.216.188.0/22
                  88.216.197.0/24
                  88.216.211.0-88.216.215.255
                  88.216.220.0/24
                  88.216.222.0/24
                  88.216.228.0/22
                  88.216.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:63:d9:c6:e6:f6:2c:3e:55:64:6b:6a:2a:9b:d6:61:c6:
         9f:89:4f:3c:24:9c:27:bf:0a:19:01:0a:67:44:82:0f:f8:e3:
         9a:77:99:e5:a2:00:23:75:f8:b1:a8:d2:46:5c:33:33:fd:5a:
         cc:4c:d0:ae:9d:b0:00:70:26:33:ad:fe:e3:18:d4:de:cf:6c:
         a9:ad:ca:21:50:94:df:a8:1d:16:2f:6a:59:65:be:04:fb:4c:
         30:1c:01:e6:ba:19:ea:8d:92:e5:69:68:c5:a2:f8:d7:7e:ec:
         cb:5c:d4:5b:f6:b7:fd:67:e2:42:0e:94:ce:cd:c3:df:84:cc:
         70:b3:d1:10:fc:47:60:2f:f4:03:94:42:63:fc:30:fd:7e:6c:
         7d:fd:90:31:f5:c1:2d:cd:91:ce:76:7d:b5:67:84:1b:6a:af:
         7f:4b:1d:e8:16:d4:96:06:6d:33:80:a1:8e:6c:f0:4f:d2:70:
         7b:60:7d:c2:27:2f:0c:c7:fb:c0:ab:00:39:a9:c9:63:c4:f7:
         96:e8:78:fc:52:24:a7:59:41:f1:f3:70:37:47:21:53:8e:33:
         03:a2:28:54:85:31:6b:c8:a1:17:07:e3:25:d6:10:8c:ee:ea:
         70:de:af:02:63:21:7a:6f:50:3a:1a:f6:eb:60:a3:c4:ed:c8:
         09:cc:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org