Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/0D6tDxT-31gGDbfNpyXskPh2CMY.roa
File:                     0D6tDxT-31gGDbfNpyXskPh2CMY.roa (raw, json)
Hash identifier:          XZrhUdd9NAL5taI+gO5LGgf1FhsPmdETvfVnYBM6L+U=
Subject key identifier:   D0:3E:AD:0F:14:FE:DF:58:06:0D:B7:CD:A7:25:EC:90:F8:76:08:C6
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       01856EAFCB31495CE51F45AD0C6C82F1B9C3
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/0D6tDxT-31gGDbfNpyXskPh2CMY.roa
Signing time:             Sun 01 Jan 2023 18:54:52 +0000
ROA not before:           Sun 01 Jan 2023 18:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51407
IP address blocks:        46.32.216.0/23 maxlen: 23
                          46.32.214.0/23 maxlen: 23
                          46.32.218.0/23 maxlen: 23
                          46.32.220.0/23 maxlen: 23
                          176.67.58.0/24 maxlen: 24
                          176.67.57.0/24 maxlen: 24
                          176.67.62.0/24 maxlen: 24
                          176.67.61.0/24 maxlen: 24
                          95.215.131.0/24 maxlen: 24
                          37.60.144.0/23 maxlen: 23
                          37.60.144.0/21 maxlen: 21
                          37.60.148.0/23 maxlen: 23
                          37.60.146.0/23 maxlen: 23
                          37.60.150.0/23 maxlen: 23
                          84.242.50.0/24 maxlen: 24
                          84.242.53.0/24 maxlen: 24
                          94.73.12.0/23 maxlen: 23
                          94.73.16.0/23 maxlen: 23
                          94.73.14.0/23 maxlen: 23
                          94.73.18.0/23 maxlen: 23
                          94.73.24.0/23 maxlen: 23
                          94.73.22.0/23 maxlen: 23
                          94.73.20.0/23 maxlen: 23
                          94.73.26.0/23 maxlen: 23
                          94.73.30.0/23 maxlen: 23
                          94.73.28.0/23 maxlen: 23
                          46.32.192.0/21 maxlen: 21
                          46.32.192.0/23 maxlen: 23
                          46.32.194.0/23 maxlen: 23
                          46.32.198.0/23 maxlen: 23
                          46.32.196.0/23 maxlen: 23
                          46.32.202.0/23 maxlen: 23
                          46.32.206.0/23 maxlen: 23
                          46.32.204.0/23 maxlen: 23
                          46.32.212.0/23 maxlen: 23
                          46.32.210.0/23 maxlen: 23
                          94.73.4.0/23 maxlen: 23
                          94.73.2.0/23 maxlen: 23
                          94.73.0.0/19 maxlen: 19
                          94.73.0.0/23 maxlen: 23
                          94.73.10.0/23 maxlen: 23
                          94.73.8.0/23 maxlen: 23
                          94.73.6.0/23 maxlen: 23
                          5.43.206.0/23 maxlen: 23
                          5.43.204.0/23 maxlen: 23
                          5.43.202.0/23 maxlen: 23
                          5.43.200.0/23 maxlen: 23
                          5.43.208.0/23 maxlen: 23
                          5.43.212.0/23 maxlen: 23
                          5.43.210.0/23 maxlen: 23
                          5.43.216.0/23 maxlen: 23
                          5.43.214.0/23 maxlen: 23
                          5.43.218.0/23 maxlen: 23
                          5.43.222.0/23 maxlen: 23
                          5.43.220.0/23 maxlen: 23
                          46.43.64.0/23 maxlen: 23
                          46.43.70.0/23 maxlen: 23
                          46.43.68.0/23 maxlen: 23
                          46.43.64.0/18 maxlen: 18
                          46.43.66.0/23 maxlen: 23
                          46.43.76.0/23 maxlen: 23
                          46.43.74.0/23 maxlen: 23
                          46.43.72.0/23 maxlen: 23
                          46.43.78.0/23 maxlen: 23
                          46.43.84.0/23 maxlen: 23
                          46.43.82.0/23 maxlen: 23
                          46.43.80.0/23 maxlen: 23
                          46.43.90.0/23 maxlen: 23
                          46.43.88.0/23 maxlen: 23
                          46.43.86.0/23 maxlen: 23
                          5.43.192.0/19 maxlen: 19
                          5.43.192.0/23 maxlen: 23
                          5.43.194.0/23 maxlen: 23
                          5.43.198.0/23 maxlen: 23
                          5.43.196.0/23 maxlen: 23
                          46.43.98.0/23 maxlen: 23
                          46.43.96.0/23 maxlen: 23
                          46.43.94.0/23 maxlen: 23
                          46.43.92.0/23 maxlen: 23
                          46.43.104.0/23 maxlen: 23
                          46.43.102.0/23 maxlen: 23
                          46.43.100.0/23 maxlen: 23
                          46.43.112.0/23 maxlen: 23
                          46.43.110.0/23 maxlen: 23
                          46.43.108.0/23 maxlen: 23
                          46.43.106.0/23 maxlen: 23
                          46.43.118.0/23 maxlen: 23
                          46.43.116.0/23 maxlen: 23
                          46.43.114.0/23 maxlen: 23
                          46.43.124.0/23 maxlen: 23
                          46.43.122.0/23 maxlen: 23
                          46.43.120.0/23 maxlen: 23
                          46.43.126.0/23 maxlen: 23
                          46.244.64.0/23 maxlen: 23
                          46.244.64.0/19 maxlen: 19
                          46.244.70.0/23 maxlen: 23
                          46.244.68.0/23 maxlen: 23
                          46.244.66.0/23 maxlen: 23
                          46.244.74.0/23 maxlen: 23
                          46.244.72.0/23 maxlen: 23
                          46.244.78.0/23 maxlen: 23
                          46.244.76.0/23 maxlen: 23
                          46.244.82.0/23 maxlen: 23
                          46.244.80.0/23 maxlen: 23
                          46.244.84.0/23 maxlen: 23
                          46.244.88.0/23 maxlen: 23
                          46.244.86.0/23 maxlen: 23
                          46.244.90.0/23 maxlen: 23
                          46.244.94.0/23 maxlen: 23
                          46.244.92.0/23 maxlen: 23
                          46.28.138.0/23 maxlen: 23
                          46.28.142.0/23 maxlen: 23
                          176.67.96.0/19 maxlen: 19
                          176.67.98.0/23 maxlen: 23
                          176.67.96.0/23 maxlen: 23
                          176.67.100.0/23 maxlen: 23
                          176.67.104.0/23 maxlen: 23
                          176.67.102.0/23 maxlen: 23
                          176.67.108.0/23 maxlen: 23
                          176.67.106.0/23 maxlen: 23
                          176.67.112.0/23 maxlen: 23
                          176.67.110.0/23 maxlen: 23
                          176.67.114.0/23 maxlen: 23
                          176.67.118.0/23 maxlen: 23
                          176.67.116.0/23 maxlen: 23
                          176.67.124.0/23 maxlen: 23
                          176.67.122.0/23 maxlen: 23
                          176.67.120.0/23 maxlen: 23
                          176.67.126.0/23 maxlen: 23
                          31.13.160.0/23 maxlen: 23
                          31.13.164.0/23 maxlen: 23
                          31.13.166.0/23 maxlen: 23
                          176.67.58.0/23 maxlen: 23
                          176.67.56.0/23 maxlen: 23
                          176.67.56.0/21 maxlen: 21
                          176.67.60.0/23 maxlen: 23
                          176.67.62.0/23 maxlen: 23
                          84.242.48.0/20 maxlen: 20
                          84.242.50.0/23 maxlen: 23
                          84.242.48.0/23 maxlen: 23
                          84.242.58.0/23 maxlen: 23
                          84.242.56.0/23 maxlen: 23
                          84.242.54.0/23 maxlen: 23
                          84.242.52.0/23 maxlen: 23
                          84.242.62.0/23 maxlen: 23
                          84.242.60.0/23 maxlen: 23
                          31.25.74.0/23 maxlen: 23
                          31.25.72.0/23 maxlen: 23
                          31.25.78.0/23 maxlen: 23
                          31.25.76.0/23 maxlen: 23
                          46.32.201.0/24 maxlen: 24
                          46.32.200.0/24 maxlen: 24
                          46.32.208.0/24 maxlen: 24
                          188.227.232.0/23 maxlen: 23
                          188.227.238.0/23 maxlen: 23
                          188.227.236.0/23 maxlen: 23
                          188.227.234.0/23 maxlen: 23
                          94.73.1.0/24 maxlen: 24
                          176.65.16.0/20 maxlen: 20
                          185.17.233.0/24 maxlen: 24
                          176.65.16.0/23 maxlen: 23
                          185.17.232.0/24 maxlen: 24
                          176.65.24.0/23 maxlen: 23
                          176.65.22.0/23 maxlen: 23
                          176.65.20.0/23 maxlen: 23
                          185.17.234.0/24 maxlen: 24
                          176.65.18.0/23 maxlen: 23
                          176.65.28.0/23 maxlen: 23
                          176.65.26.0/23 maxlen: 23
                          176.65.30.0/23 maxlen: 23
                          178.130.190.0/23 maxlen: 23
                          37.76.216.0/23 maxlen: 23
                          178.130.188.0/23 maxlen: 23
                          37.76.214.0/23 maxlen: 23
                          37.76.218.0/23 maxlen: 23
                          37.76.222.0/23 maxlen: 23
                          37.76.220.0/23 maxlen: 23
                          46.43.67.0/24 maxlen: 24
                          46.43.66.0/24 maxlen: 24
                          46.43.65.0/24 maxlen: 24
                          178.130.144.0/20 maxlen: 20
                          178.130.144.0/23 maxlen: 23
                          178.130.148.0/23 maxlen: 23
                          178.130.146.0/23 maxlen: 23
                          178.130.152.0/23 maxlen: 23
                          178.130.150.0/23 maxlen: 23
                          178.130.156.0/23 maxlen: 23
                          178.130.154.0/23 maxlen: 23
                          178.130.158.0/23 maxlen: 23
                          178.130.162.0/23 maxlen: 23
                          178.130.160.0/19 maxlen: 19
                          178.130.160.0/23 maxlen: 23
                          37.76.192.0/23 maxlen: 23
                          37.76.192.0/19 maxlen: 19
                          178.130.164.0/23 maxlen: 23
                          178.130.170.0/23 maxlen: 23
                          37.76.196.0/23 maxlen: 23
                          178.130.168.0/23 maxlen: 23
                          37.76.194.0/23 maxlen: 23
                          178.130.166.0/23 maxlen: 23
                          178.130.172.0/23 maxlen: 23
                          37.76.198.0/23 maxlen: 23
                          178.130.176.0/23 maxlen: 23
                          37.76.202.0/23 maxlen: 23
                          178.130.174.0/23 maxlen: 23
                          37.76.200.0/23 maxlen: 23
                          37.76.206.0/23 maxlen: 23
                          178.130.178.0/23 maxlen: 23
                          37.76.204.0/23 maxlen: 23
                          178.130.186.0/23 maxlen: 23
                          37.76.212.0/23 maxlen: 23
                          178.130.184.0/23 maxlen: 23
                          37.76.210.0/23 maxlen: 23
                          178.130.182.0/23 maxlen: 23
                          37.76.208.0/23 maxlen: 23
                          178.130.180.0/23 maxlen: 23
                          85.184.52.0/23 maxlen: 23
                          85.184.58.0/23 maxlen: 23
                          85.184.56.0/23 maxlen: 23
                          85.184.54.0/23 maxlen: 23
                          85.184.62.0/23 maxlen: 23
                          85.184.60.0/23 maxlen: 23
                          85.184.36.0/23 maxlen: 23
                          85.184.34.0/23 maxlen: 23
                          85.184.32.0/19 maxlen: 19
                          85.184.32.0/23 maxlen: 23
                          85.184.38.0/23 maxlen: 23
                          85.184.44.0/23 maxlen: 23
                          85.184.42.0/23 maxlen: 23
                          85.184.40.0/23 maxlen: 23
                          85.184.50.0/23 maxlen: 23
                          85.184.48.0/23 maxlen: 23
                          85.184.46.0/23 maxlen: 23
                          5.34.162.0/23 maxlen: 23
                          5.34.164.0/23 maxlen: 23
                          5.34.166.0/23 maxlen: 23
                          31.13.163.0/24 maxlen: 24
                          31.13.162.0/24 maxlen: 24
                          185.7.120.0/23 maxlen: 23
                          185.7.122.0/23 maxlen: 23
                          2a04:940::/29 maxlen: 29
                          2a04:940:1600::/48 maxlen: 48
                          2a04:940:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:af:cb:31:49:5c:e5:1f:45:ad:0c:6c:82:f1:b9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jan  1 18:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d03ead0f14fedf58060db7cda725ec90f87608c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:b5:ec:87:5e:8b:e1:4f:1c:05:16:8f:2a:
                    c1:0a:0e:fa:93:f3:e2:8e:e8:72:a6:72:3a:73:5f:
                    1f:b3:20:80:45:14:c4:76:4b:0b:c7:96:f5:92:a6:
                    05:cd:50:02:5d:40:2f:a3:60:a4:ff:b2:6e:73:60:
                    0c:b1:a2:28:59:1f:4f:2d:26:8d:6c:8d:e4:28:00:
                    f2:44:cb:e4:25:e6:f1:21:9a:ce:2b:4f:45:1b:b1:
                    cc:de:04:52:2d:fb:0e:7c:2e:7b:aa:88:1e:e5:ef:
                    a9:e6:5c:3f:bd:f6:23:c9:ed:0e:9f:16:fd:35:60:
                    26:66:0a:60:01:8a:56:a6:75:48:5d:a2:e9:7e:8a:
                    41:a3:d2:c1:6d:73:5a:72:8e:6e:31:46:a7:22:cc:
                    b1:f0:e4:1b:46:12:37:8c:57:1a:6e:5a:6c:41:57:
                    01:27:f3:8f:0e:59:43:a8:35:31:ed:1d:24:d2:49:
                    b1:46:8a:b5:d9:e0:a1:06:8f:93:22:47:76:81:29:
                    96:5c:9d:f4:63:38:9a:d4:e2:49:2b:60:4c:58:a2:
                    98:45:fe:bd:ba:88:c6:27:68:1c:02:90:a7:f5:91:
                    7c:54:00:df:21:49:3f:89:21:74:a1:e1:c6:db:f6:
                    f0:38:cc:8e:f3:78:5f:8d:52:6d:a8:b9:4c:d9:16:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3E:AD:0F:14:FE:DF:58:06:0D:B7:CD:A7:25:EC:90:F8:76:08:C6
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/0D6tDxT-31gGDbfNpyXskPh2CMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.34.162.0-5.34.167.255
                  5.43.192.0/19
                  31.13.160.0/21
                  31.25.72.0/21
                  37.60.144.0/21
                  37.76.192.0/19
                  46.28.138.0/23
                  46.28.142.0/23
                  46.32.192.0-46.32.208.255
                  46.32.210.0-46.32.221.255
                  46.43.64.0/18
                  46.244.64.0/19
                  84.242.48.0/20
                  85.184.32.0/19
                  94.73.0.0/19
                  95.215.131.0/24
                  176.65.16.0/20
                  176.67.56.0/21
                  176.67.96.0/19
                  178.130.144.0-178.130.191.255
                  185.7.120.0/22
                  185.17.232.0-185.17.234.255
                  188.227.232.0/21
                IPv6:
                  2a04:940::/29

    Signature Algorithm: sha256WithRSAEncryption
         0b:33:93:96:b4:ae:b6:a4:46:cf:a2:b6:70:f1:ca:66:25:0b:
         d4:3e:4e:5c:8b:ce:39:6f:c1:70:c0:ed:a4:5e:92:a3:f4:bb:
         82:97:37:97:d8:48:f3:47:10:ca:1d:63:e2:3d:e3:c3:70:94:
         a2:1b:ad:af:f2:11:18:9b:33:8c:93:c9:3b:28:8a:49:62:22:
         f3:2a:9d:e4:2d:74:d6:08:93:6e:04:f1:96:66:bd:f6:ee:b4:
         3b:ba:5d:a8:18:41:66:78:d0:0d:67:7e:7d:80:5b:09:04:a7:
         28:ee:15:6c:37:cd:c9:2c:af:8a:f7:67:f4:8c:d5:c1:c8:19:
         06:2b:61:89:2d:de:5c:68:2a:e0:5f:65:60:97:20:c9:ff:91:
         e9:54:e9:82:77:96:24:72:41:0b:6a:bb:fc:72:2a:40:c2:ed:
         3b:7d:3a:d6:bd:ae:5d:82:94:b4:b8:15:18:10:de:48:12:51:
         e8:eb:88:60:c8:bd:37:86:b0:75:0b:4f:73:35:f9:b3:b9:7c:
         dd:4d:40:6a:c3:f3:a6:07:93:61:78:f3:04:de:9a:8a:e9:eb:
         6d:bc:cf:b2:28:44:a7:1f:30:e8:08:f0:89:b5:99:05:da:96:
         96:c5:9d:e4:16:f0:f8:36:1b:2a:da:53:51:3b:c5:b6:48:3e:
         5a:7e:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org