Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ttsp50ed_qo-952D9SVPV0VB2M8.roa
File:                     ttsp50ed_qo-952D9SVPV0VB2M8.roa (raw, json)
Hash identifier:          N15aZ63XALKxjTCz229qJVqLAm6VpM+LPggQ73NqEfs=
Subject key identifier:   B6:DB:29:E7:47:9D:FE:AA:3E:F7:9D:83:F5:25:4F:57:45:41:D8:CF
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       018572BA64CBF7139D3BB84531750A758A3A
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ttsp50ed_qo-952D9SVPV0VB2M8.roa
Signing time:             Mon 02 Jan 2023 13:44:56 +0000
ROA not before:           Mon 02 Jan 2023 13:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210906
IP address blocks:        82.140.177.0/24 maxlen: 24
                          82.140.180.0/24 maxlen: 24
                          89.117.34.0/24 maxlen: 24
                          89.117.189.0/24 maxlen: 24
                          89.117.191.0/24 maxlen: 24
                          89.117.131.0/24 maxlen: 24
                          84.46.204.0/24 maxlen: 24
                          84.46.207.0/24 maxlen: 24
                          89.116.110.0/23 maxlen: 23
                          89.116.109.0/24 maxlen: 24
                          89.116.114.0/24 maxlen: 24
                          89.116.122.0/24 maxlen: 24
                          89.116.120.0/23 maxlen: 23
                          89.116.133.0/24 maxlen: 24
                          89.116.136.0/24 maxlen: 24
                          89.116.134.0/24 maxlen: 24
                          89.116.138.0/23 maxlen: 23
                          89.116.145.0/24 maxlen: 24
                          89.116.142.0/24 maxlen: 24
                          89.116.152.0/24 maxlen: 24
                          89.116.159.0/24 maxlen: 24
                          89.116.157.0/24 maxlen: 24
                          89.116.57.0/24 maxlen: 24
                          89.116.55.0/24 maxlen: 24
                          86.38.206.0/24 maxlen: 24
                          86.38.206.0/23 maxlen: 23
                          89.116.71.0/24 maxlen: 24
                          86.38.207.0/24 maxlen: 24
                          89.116.78.0/23 maxlen: 23
                          89.116.77.0/24 maxlen: 24
                          89.116.78.0/24 maxlen: 24
                          89.116.79.0/24 maxlen: 24
                          86.38.222.0/24 maxlen: 24
                          89.116.90.0/24 maxlen: 24
                          89.116.94.0/23 maxlen: 23
                          89.116.98.0/24 maxlen: 24
                          89.116.97.0/24 maxlen: 24
                          89.116.94.0/24 maxlen: 24
                          89.116.95.0/24 maxlen: 24
                          89.116.93.0/24 maxlen: 24
                          89.116.104.0/23 maxlen: 23
                          89.116.101.0/24 maxlen: 24
                          86.38.236.0/24 maxlen: 24
                          86.38.234.0/24 maxlen: 24
                          89.116.216.0/23 maxlen: 23
                          89.116.219.0/24 maxlen: 24
                          89.116.222.0/24 maxlen: 24
                          82.140.129.0/24 maxlen: 24
                          82.140.130.0/24 maxlen: 24
                          82.140.128.0/24 maxlen: 24
                          89.116.238.0/24 maxlen: 24
                          89.116.240.0/24 maxlen: 24
                          82.140.128.0/23 maxlen: 23
                          89.116.245.0/24 maxlen: 24
                          89.116.251.0/24 maxlen: 24
                          89.116.249.0/24 maxlen: 24
                          89.117.4.0/24 maxlen: 24
                          89.116.254.0/24 maxlen: 24
                          82.140.159.0/24 maxlen: 24
                          89.116.167.0/24 maxlen: 24
                          89.116.170.0/24 maxlen: 24
                          89.116.188.0/24 maxlen: 24
                          89.116.187.0/24 maxlen: 24
                          89.116.192.0/24 maxlen: 24
                          89.116.191.0/24 maxlen: 24
                          89.116.196.0/23 maxlen: 23
                          89.116.194.0/24 maxlen: 24
                          89.116.199.0/24 maxlen: 24
                          89.116.206.0/23 maxlen: 23
                          89.116.204.0/23 maxlen: 23
                          89.116.201.0/24 maxlen: 24
                          86.38.26.0/24 maxlen: 24
                          86.38.36.0/24 maxlen: 24
                          86.38.2.0/24 maxlen: 24
                          89.116.0.0/24 maxlen: 24
                          89.116.14.0/24 maxlen: 24
                          86.38.158.0/23 maxlen: 23
                          89.116.18.0/24 maxlen: 24
                          86.38.157.0/24 maxlen: 24
                          86.38.154.0/24 maxlen: 24
                          86.38.158.0/24 maxlen: 24
                          86.38.159.0/24 maxlen: 24
                          86.38.160.0/24 maxlen: 24
                          89.116.40.0/24 maxlen: 24
                          86.38.128.0/23 maxlen: 23
                          86.38.128.0/24 maxlen: 24
                          86.38.129.0/24 maxlen: 24
                          86.38.130.0/24 maxlen: 24
                          89.117.230.0/23 maxlen: 23
                          89.117.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:64:cb:f7:13:9d:3b:b8:45:31:75:0a:75:8a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan  2 13:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6db29e7479dfeaa3ef79d83f5254f574541d8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:b0:f9:eb:cb:ea:f0:ac:fe:a6:8e:8e:ef:
                    51:e6:7a:29:d9:ff:9e:62:40:4b:52:e0:14:93:47:
                    ff:9e:5e:3e:96:63:c7:0d:b2:3f:d5:6f:1b:fa:21:
                    f2:d0:0f:c3:08:10:ef:88:50:0c:d1:6b:6f:50:3e:
                    52:19:87:cf:84:66:81:02:50:76:b9:38:bf:a7:e0:
                    1d:22:bd:c9:ff:9d:b6:63:46:84:6b:fb:d0:cc:54:
                    3a:02:60:0b:38:8a:ae:2b:2a:9c:9e:83:d6:34:79:
                    c4:01:90:e6:b8:4e:5e:b4:3b:c5:96:58:29:af:80:
                    ca:31:5b:0e:04:ca:97:bb:0a:f9:b2:89:32:d5:84:
                    49:11:78:12:78:22:a6:2d:8a:b2:bc:ec:f1:f7:de:
                    06:1d:2b:27:39:4b:71:e5:7c:97:d0:27:de:18:32:
                    39:43:5a:cc:3d:7c:1c:bd:79:12:48:96:e5:b5:c6:
                    e7:04:aa:f7:38:c7:28:56:31:bd:17:c1:c4:44:30:
                    4e:6a:94:23:2e:c8:30:54:e4:a9:b6:61:b7:bc:df:
                    a7:f8:12:1f:eb:0e:52:4a:85:f8:ac:9b:36:c3:7c:
                    f6:5f:9c:14:fa:04:53:bf:e7:31:60:1f:32:af:19:
                    d6:e9:98:71:43:65:f1:e9:48:17:c4:5e:8f:ae:81:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DB:29:E7:47:9D:FE:AA:3E:F7:9D:83:F5:25:4F:57:45:41:D8:CF
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ttsp50ed_qo-952D9SVPV0VB2M8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.128.0-82.140.130.255
                  82.140.159.0/24
                  82.140.177.0/24
                  82.140.180.0/24
                  84.46.204.0/24
                  84.46.207.0/24
                  86.38.2.0/24
                  86.38.26.0/24
                  86.38.36.0/24
                  86.38.128.0-86.38.130.255
                  86.38.154.0/24
                  86.38.157.0-86.38.160.255
                  86.38.206.0/23
                  86.38.222.0/24
                  86.38.234.0/24
                  86.38.236.0/24
                  89.116.0.0/24
                  89.116.14.0/24
                  89.116.18.0/24
                  89.116.40.0/24
                  89.116.55.0/24
                  89.116.57.0/24
                  89.116.71.0/24
                  89.116.77.0-89.116.79.255
                  89.116.90.0/24
                  89.116.93.0-89.116.95.255
                  89.116.97.0-89.116.98.255
                  89.116.101.0/24
                  89.116.104.0/23
                  89.116.109.0-89.116.111.255
                  89.116.114.0/24
                  89.116.120.0-89.116.122.255
                  89.116.133.0-89.116.134.255
                  89.116.136.0/24
                  89.116.138.0/23
                  89.116.142.0/24
                  89.116.145.0/24
                  89.116.152.0/24
                  89.116.157.0/24
                  89.116.159.0/24
                  89.116.167.0/24
                  89.116.170.0/24
                  89.116.187.0-89.116.188.255
                  89.116.191.0-89.116.192.255
                  89.116.194.0/24
                  89.116.196.0/23
                  89.116.199.0/24
                  89.116.201.0/24
                  89.116.204.0/22
                  89.116.216.0/23
                  89.116.219.0/24
                  89.116.222.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.116.251.0/24
                  89.116.254.0/24
                  89.117.4.0/24
                  89.117.34.0/24
                  89.117.131.0/24
                  89.117.189.0/24
                  89.117.191.0/24
                  89.117.230.0/23
                  89.117.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:79:79:05:aa:b2:7c:aa:60:9e:e0:0e:e4:d8:96:73:a9:e5:
         84:5a:a7:0f:22:fd:6a:ed:e1:a0:2e:5a:6d:93:15:d1:44:08:
         33:95:36:73:6b:d8:37:e9:8f:fd:97:2f:c5:1b:0b:ba:e6:b9:
         51:65:a4:0e:25:55:dd:81:b0:02:f5:9d:22:c0:ba:50:3e:b1:
         73:31:d0:71:5e:45:79:da:d2:2d:f7:b9:8e:c5:82:bd:6f:99:
         c9:6e:89:d6:1a:ee:6a:5b:c2:5d:bf:e1:bf:60:aa:10:b3:df:
         5b:19:ba:f6:02:62:3e:c4:88:d3:fb:48:3c:1c:f3:d5:6a:cb:
         7d:7d:d6:88:7c:ee:a1:d8:4b:90:76:1b:cf:4f:d8:9f:52:06:
         0b:9c:b5:4f:fe:91:8c:16:fd:f6:b3:c2:38:f4:98:d9:1b:e4:
         67:4e:ef:0c:20:02:a4:f2:45:61:ad:83:35:d5:2a:08:39:71:
         c9:4f:79:bb:ea:76:5e:2c:22:26:4e:fb:c5:68:66:90:a2:fc:
         df:d9:e2:8f:62:00:ef:10:58:d3:5d:36:ed:a7:24:d5:d1:df:
         9f:11:51:9c:3c:9e:52:b9:c3:7d:5f:bb:1e:1f:8e:20:30:93:
         54:fe:dc:44:7d:3d:00:8f:c8:8e:a3:c1:43:14:4b:df:b2:54:
         a3:38:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 12:38:39 2023 by rpki-client on console-ams.rpki-client.org