Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K5cOb92jHcgfd2zV9viLGyjzIA0.roa
File:                     K5cOb92jHcgfd2zV9viLGyjzIA0.roa (raw, json)
Hash identifier:          fV5k/Xkxs3hBqQ/Oz7i8BF9baTBfzBwjWQ6hm+YjfRk=
Subject key identifier:   2B:97:0E:6F:DD:A3:1D:C8:1F:77:6C:D5:F6:F8:8B:1B:28:F3:20:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       018BDD96FBD8129EF9751FB7AC49B096083C
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K5cOb92jHcgfd2zV9viLGyjzIA0.roa
Signing time:             Fri 17 Nov 2023 14:02:21 +0000
ROA not before:           Fri 17 Nov 2023 14:02:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212046
IP address blocks:        84.46.160.0/21 maxlen: 21
                          84.46.172.0/22 maxlen: 22
                          84.46.168.0/23 maxlen: 23
                          84.46.176.0/20 maxlen: 20
                          82.140.160.0/20 maxlen: 20
                          82.140.176.0/23 maxlen: 23
                          82.140.177.0/24 maxlen: 24
                          82.140.179.0/24 maxlen: 24
                          82.140.184.0/22 maxlen: 22
                          82.140.180.0/23 maxlen: 23
                          82.140.190.0/23 maxlen: 23
                          82.140.188.0/24 maxlen: 24
                          84.46.128.0/19 maxlen: 19
                          84.46.192.0/21 maxlen: 21
                          84.46.202.0/23 maxlen: 23
                          84.46.204.0/22 maxlen: 22
                          84.46.201.0/24 maxlen: 24
                          84.46.204.0/24 maxlen: 24
                          84.46.208.0/20 maxlen: 20
                          84.46.207.0/24 maxlen: 24
                          84.46.224.0/21 maxlen: 21
                          84.46.232.0/23 maxlen: 23
                          86.38.244.0/23 maxlen: 23
                          86.38.191.0/24 maxlen: 24
                          86.38.188.0/24 maxlen: 24
                          86.38.192.0/21 maxlen: 21
                          86.38.201.0/24 maxlen: 24
                          86.38.206.0/23 maxlen: 23
                          86.38.212.0/23 maxlen: 23
                          86.38.208.0/22 maxlen: 22
                          86.38.215.0/24 maxlen: 24
                          86.38.222.0/23 maxlen: 23
                          86.38.224.0/24 maxlen: 24
                          86.38.222.0/24 maxlen: 24
                          86.38.228.0/22 maxlen: 22
                          86.38.233.0/24 maxlen: 24
                          86.38.230.0/24 maxlen: 24
                          86.38.229.0/24 maxlen: 24
                          86.38.227.0/24 maxlen: 24
                          86.38.236.0/23 maxlen: 23
                          86.38.240.0/24 maxlen: 24
                          86.38.239.0/24 maxlen: 24
                          86.38.236.0/24 maxlen: 24
                          86.38.234.0/24 maxlen: 24
                          82.140.130.0/24 maxlen: 24
                          82.140.132.0/22 maxlen: 22
                          82.140.128.0/23 maxlen: 23
                          82.140.136.0/21 maxlen: 21
                          82.140.144.0/20 maxlen: 20
                          82.140.159.0/24 maxlen: 24
                          86.38.28.0/22 maxlen: 22
                          86.38.26.0/23 maxlen: 23
                          86.38.26.0/24 maxlen: 24
                          86.38.25.0/24 maxlen: 24
                          86.38.34.0/23 maxlen: 23
                          86.38.36.0/24 maxlen: 24
                          86.38.33.0/24 maxlen: 24
                          86.38.40.0/21 maxlen: 21
                          86.38.38.0/23 maxlen: 23
                          86.38.48.0/20 maxlen: 20
                          86.38.64.0/18 maxlen: 18
                          86.38.73.0/24 maxlen: 24
                          86.38.72.0/24 maxlen: 24
                          86.38.75.0/24 maxlen: 24
                          86.38.74.0/24 maxlen: 24
                          86.38.0.0/23 maxlen: 23
                          86.38.2.0/24 maxlen: 24
                          86.38.6.0/24 maxlen: 24
                          86.38.16.0/21 maxlen: 21
                          86.38.144.0/22 maxlen: 22
                          86.38.144.0/24 maxlen: 24
                          86.38.152.0/22 maxlen: 22
                          86.38.148.0/23 maxlen: 23
                          86.38.146.0/23 maxlen: 24
                          86.38.152.0/24 maxlen: 24
                          86.38.150.0/24 maxlen: 24
                          86.38.158.0/23 maxlen: 23
                          86.38.157.0/24 maxlen: 24
                          86.38.154.0/24 maxlen: 24
                          86.38.153.0/24 maxlen: 24
                          86.38.160.0/21 maxlen: 21
                          86.38.160.0/24 maxlen: 24
                          86.38.168.0/22 maxlen: 22
                          86.38.172.0/23 maxlen: 23
                          86.38.176.0/24 maxlen: 24
                          86.38.174.0/24 maxlen: 24
                          86.38.128.0/20 maxlen: 20
                          86.38.129.0/24 maxlen: 24
                          86.38.128.0/24 maxlen: 24
                          86.38.130.0/24 maxlen: 24
                          89.117.232.0/21 maxlen: 21
                          89.117.240.0/22 maxlen: 22
                          89.117.248.0/23 maxlen: 23
                          89.117.253.0/24 maxlen: 24
                          89.117.251.0/24 maxlen: 24
                          89.117.249.0/24 maxlen: 24
                          89.117.248.0/24 maxlen: 24
                          89.117.247.0/24 maxlen: 24
                          89.117.69.0/24 maxlen: 24
                          89.117.86.0/24 maxlen: 24
                          89.117.92.0/23 maxlen: 23
                          89.117.100.0/24 maxlen: 24
                          89.117.110.0/24 maxlen: 24
                          89.117.108.0/24 maxlen: 24
                          89.117.14.0/24 maxlen: 24
                          89.117.26.0/24 maxlen: 24
                          89.117.39.0/24 maxlen: 24
                          89.117.176.0/21 maxlen: 21
                          89.117.184.0/22 maxlen: 22
                          217.9.240.0/24 maxlen: 24
                          217.9.244.0/23 maxlen: 24
                          217.9.244.0/22 maxlen: 22
                          89.117.192.0/20 maxlen: 20
                          217.9.243.0/24 maxlen: 24
                          217.9.247.0/24 maxlen: 24
                          217.9.248.0/22 maxlen: 22
                          217.9.252.0/23 maxlen: 23
                          89.117.213.0/24 maxlen: 24
                          89.117.208.0/22 maxlen: 22
                          89.117.212.0/23 maxlen: 23
                          89.117.214.0/24 maxlen: 24
                          89.117.219.0/24 maxlen: 24
                          89.117.223.0/24 maxlen: 24
                          89.117.224.0/23 maxlen: 23
                          89.117.220.0/23 maxlen: 23
                          89.117.125.0/24 maxlen: 24
                          89.117.119.0/24 maxlen: 24
                          89.117.128.0/24 maxlen: 24
                          89.117.127.0/24 maxlen: 24
                          89.117.138.0/24 maxlen: 24
                          89.117.137.0/24 maxlen: 24
                          89.117.140.0/23 maxlen: 23
                          89.117.166.0/24 maxlen: 24
                          89.117.165.0/24 maxlen: 24
                          89.117.170.0/24 maxlen: 24
                          89.116.124.0/24 maxlen: 24
                          89.116.129.0/24 maxlen: 24
                          89.116.143.0/24 maxlen: 24
                          89.116.151.0/24 maxlen: 24
                          89.116.155.0/24 maxlen: 24
                          89.116.57.0/24 maxlen: 24
                          89.116.55.0/24 maxlen: 24
                          89.116.71.0/24 maxlen: 24
                          89.116.78.0/24 maxlen: 24
                          89.116.77.0/24 maxlen: 24
                          89.116.79.0/24 maxlen: 24
                          89.116.90.0/24 maxlen: 24
                          89.116.94.0/23 maxlen: 23
                          89.116.98.0/24 maxlen: 24
                          89.116.97.0/24 maxlen: 24
                          89.116.93.0/24 maxlen: 24
                          89.116.232.0/24 maxlen: 24
                          89.116.235.0/24 maxlen: 24
                          89.117.10.0/24 maxlen: 24
                          89.116.160.0/24 maxlen: 24
                          89.116.162.0/24 maxlen: 24
                          89.116.174.0/24 maxlen: 24
                          89.116.178.0/24 maxlen: 24
                          89.116.176.0/24 maxlen: 24
                          89.116.195.0/24 maxlen: 24
                          89.116.0.0/24 maxlen: 24
                          89.116.14.0/24 maxlen: 24
                          89.116.18.0/24 maxlen: 24
                          89.116.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dd:96:fb:d8:12:9e:f9:75:1f:b7:ac:49:b0:96:08:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Nov 17 14:02:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b970e6fdda31dc81f776cd5f6f88b1b28f3200d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:4f:8d:74:6e:ef:a1:1a:c0:1a:b9:49:f5:
                    c9:6e:74:a8:59:93:61:c9:6a:de:1b:21:47:3c:70:
                    fc:7e:b8:42:e7:7f:66:56:8f:52:c4:e1:91:e6:28:
                    5c:1e:b2:1f:4f:d0:7f:b0:fd:81:92:e3:b1:5d:e9:
                    79:de:03:61:1f:62:19:db:e6:8e:ff:83:9e:7e:37:
                    56:a7:ed:fd:ec:21:93:67:4c:b1:70:be:c3:87:ca:
                    48:77:31:66:fc:26:bf:d4:7d:8e:71:e0:5b:8d:e0:
                    5b:d0:9e:ee:2f:ae:c2:0b:1d:ed:13:12:d1:ba:0d:
                    3e:b4:e4:b0:db:31:a0:73:57:eb:0f:24:f8:09:2f:
                    35:23:cb:78:aa:29:e2:18:b7:2f:6f:2e:27:ff:f7:
                    8f:4f:7b:a6:ff:09:f1:2d:df:c9:cb:b6:cb:c0:1a:
                    05:01:2a:0e:68:b5:af:b6:4f:c7:34:2a:52:4f:3a:
                    c5:0c:30:7b:2b:06:b5:6e:7c:3d:15:82:b5:69:86:
                    d5:70:0d:92:77:b8:ec:55:c4:a2:b4:92:3d:32:ff:
                    9d:6d:95:5a:ac:23:50:d1:ba:a6:91:e5:41:db:ac:
                    b6:96:07:aa:7f:b5:61:d4:6d:ed:f5:9e:56:5d:e2:
                    8a:27:d5:02:49:2e:82:45:0c:18:19:8c:be:e9:a4:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:0E:6F:DD:A3:1D:C8:1F:77:6C:D5:F6:F8:8B:1B:28:F3:20:0D
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K5cOb92jHcgfd2zV9viLGyjzIA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.128.0-82.140.130.255
                  82.140.132.0-82.140.177.255
                  82.140.179.0-82.140.181.255
                  82.140.184.0-82.140.188.255
                  82.140.190.0/23
                  84.46.128.0-84.46.169.255
                  84.46.172.0-84.46.199.255
                  84.46.201.0-84.46.233.255
                  86.38.0.0-86.38.2.255
                  86.38.6.0/24
                  86.38.16.0/21
                  86.38.25.0-86.38.31.255
                  86.38.33.0-86.38.36.255
                  86.38.38.0-86.38.150.255
                  86.38.152.0/22
                  86.38.157.0-86.38.174.255
                  86.38.176.0/24
                  86.38.188.0/24
                  86.38.191.0-86.38.199.255
                  86.38.201.0/24
                  86.38.206.0-86.38.213.255
                  86.38.215.0/24
                  86.38.222.0-86.38.224.255
                  86.38.227.0-86.38.231.255
                  86.38.233.0-86.38.234.255
                  86.38.236.0/23
                  86.38.239.0-86.38.240.255
                  86.38.244.0/23
                  89.116.0.0/24
                  89.116.14.0/24
                  89.116.18.0/24
                  89.116.40.0/24
                  89.116.55.0/24
                  89.116.57.0/24
                  89.116.71.0/24
                  89.116.77.0-89.116.79.255
                  89.116.90.0/24
                  89.116.93.0-89.116.95.255
                  89.116.97.0-89.116.98.255
                  89.116.124.0/24
                  89.116.129.0/24
                  89.116.143.0/24
                  89.116.151.0/24
                  89.116.155.0/24
                  89.116.160.0/24
                  89.116.162.0/24
                  89.116.174.0/24
                  89.116.176.0/24
                  89.116.178.0/24
                  89.116.195.0/24
                  89.116.232.0/24
                  89.116.235.0/24
                  89.117.10.0/24
                  89.117.14.0/24
                  89.117.26.0/24
                  89.117.39.0/24
                  89.117.69.0/24
                  89.117.86.0/24
                  89.117.92.0/23
                  89.117.100.0/24
                  89.117.108.0/24
                  89.117.110.0/24
                  89.117.119.0/24
                  89.117.125.0/24
                  89.117.127.0-89.117.128.255
                  89.117.137.0-89.117.138.255
                  89.117.140.0/23
                  89.117.165.0-89.117.166.255
                  89.117.170.0/24
                  89.117.176.0-89.117.187.255
                  89.117.192.0-89.117.214.255
                  89.117.219.0-89.117.221.255
                  89.117.223.0-89.117.225.255
                  89.117.232.0-89.117.243.255
                  89.117.247.0-89.117.249.255
                  89.117.251.0/24
                  89.117.253.0/24
                  217.9.240.0/24
                  217.9.243.0-217.9.253.255

    Signature Algorithm: sha256WithRSAEncryption
         98:94:f8:b0:f1:ba:a3:0c:be:91:94:ea:37:c6:b3:9f:62:a6:
         f8:4d:df:81:94:eb:54:dc:95:fd:1e:86:5e:09:12:9f:e4:b3:
         ca:13:b8:b0:3d:71:b5:7d:2e:7f:59:84:68:ea:14:31:09:c3:
         93:61:2b:f2:e5:c6:f0:53:6b:e7:59:ec:33:ab:6b:d2:5b:3f:
         ea:3f:59:dc:6d:c3:3b:02:2e:81:f6:ca:bb:6b:2f:d7:61:d8:
         c3:93:51:c2:49:e9:5f:a4:cb:4e:5c:17:9a:cd:b9:e7:de:15:
         54:6d:8a:0f:1e:56:01:19:d2:24:e9:01:7f:64:d5:fb:94:91:
         74:52:51:09:38:61:b6:11:5b:73:89:23:b4:48:1f:12:f1:6e:
         ab:b9:c0:f9:55:30:27:38:5f:21:09:8e:09:e3:bd:4d:62:2d:
         82:2f:07:a1:2b:cc:20:67:c9:12:a4:ea:81:f9:ad:01:fa:d1:
         92:39:78:33:d5:3f:14:cf:39:5f:fb:38:67:c7:59:9a:06:0c:
         4f:3b:bc:51:9e:74:7c:6c:a5:57:5e:55:eb:f0:fa:c3:71:ac:
         18:51:63:d5:56:8c:27:01:c4:9a:32:8a:e2:eb:a0:4b:2a:45:
         85:6d:f6:3e:e0:d5:69:78:4d:be:f9:d3:29:76:54:0e:f0:d8:
         3d:fd:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 15:27:18 2023 by rpki-client on console-fra.rpki-client.org