Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/m2P74kTXMBC56IZ5FTGQ-VECHJE.roa
File:                     m2P74kTXMBC56IZ5FTGQ-VECHJE.roa (raw, json)
Hash identifier:          jquMCSABnhBeP9MJ1wbXZ4hKwWJUI+aLriOWVaezxgw=
Subject key identifier:   9B:63:FB:E2:44:D7:30:10:B9:E8:86:79:15:31:90:F9:51:02:1C:91
Certificate issuer:       /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial:       01856C7811B7BA02011632CCE8409A4B4F9E
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/m2P74kTXMBC56IZ5FTGQ-VECHJE.roa
Signing time:             Sun 01 Jan 2023 08:34:46 +0000
ROA not before:           Sun 01 Jan 2023 08:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21021
IP address blocks:        217.172.224.0/19 maxlen: 19
                          217.75.48.0/20 maxlen: 20
                          217.70.48.0/20 maxlen: 20
                          195.93.222.0/23 maxlen: 23
                          83.68.64.0/19 maxlen: 19
                          195.93.134.0/23 maxlen: 23
                          89.230.0.0/16 maxlen: 16
                          89.17.224.0/19 maxlen: 19
                          94.78.128.0/18 maxlen: 18
                          80.245.176.0/20 maxlen: 20
                          217.144.192.0/19 maxlen: 19
                          31.42.16.0/20 maxlen: 20
                          89.229.0.0/16 maxlen: 16
                          84.38.80.0/20 maxlen: 20
                          176.107.112.0/21 maxlen: 21
                          81.190.0.0/16 maxlen: 16
                          185.31.184.0/22 maxlen: 22
                          31.6.128.0/18 maxlen: 18
                          194.116.132.0/23 maxlen: 23
                          89.231.0.0/16 maxlen: 16
                          80.244.128.0/19 maxlen: 19
                          62.141.192.0/18 maxlen: 18
                          92.42.112.0/21 maxlen: 21
                          93.94.184.0/21 maxlen: 21
                          31.6.192.0/19 maxlen: 19
                          193.200.118.0/23 maxlen: 23
                          194.149.240.0/24 maxlen: 24
                          193.43.240.0/22 maxlen: 22
                          37.131.128.0/19 maxlen: 19
                          95.129.224.0/21 maxlen: 21
                          193.106.76.0/22 maxlen: 22
                          37.190.128.0/17 maxlen: 17
                          89.228.0.0/16 maxlen: 16
                          95.174.32.0/19 maxlen: 19
                          82.115.64.0/19 maxlen: 19
                          176.221.96.0/19 maxlen: 19
                          46.186.0.0/17 maxlen: 17
                          85.117.0.0/19 maxlen: 19
                          213.136.224.0/19 maxlen: 19
                          46.231.56.0/21 maxlen: 21
                          62.61.32.0/19 maxlen: 19
                          87.116.192.0/18 maxlen: 18
                          94.251.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Mon 03 Jul 2023 08:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:11:b7:ba:02:01:16:32:cc:e8:40:9a:4b:4f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
        Validity
            Not Before: Jan  1 08:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b63fbe244d73010b9e88679153190f951021c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:99:45:54:84:8a:9e:ae:ff:08:c1:d6:a1:
                    73:cc:a0:92:ab:d2:d2:dc:40:6d:15:68:8c:cb:3d:
                    19:41:2b:5e:24:5c:f1:32:1c:3f:d5:9f:17:2e:84:
                    8e:8a:d2:22:42:96:51:69:9d:46:66:cb:cf:8f:a9:
                    15:d0:1f:59:f3:42:3c:9a:f3:db:a6:cc:aa:81:2f:
                    eb:19:c6:2d:b5:77:06:94:aa:cf:ad:73:14:78:93:
                    a7:7f:4d:32:9b:dd:c6:c4:62:48:28:2d:80:e1:62:
                    37:ce:8f:c0:31:6a:5e:bf:73:9d:6f:ad:35:c5:d4:
                    ac:b7:ac:4b:c6:3e:6d:04:87:20:95:57:71:02:2a:
                    01:55:cd:2d:e2:e7:25:c6:f8:cb:8e:a3:60:83:d5:
                    d2:47:fd:de:04:ee:3a:ec:52:cc:b3:17:86:b3:92:
                    4b:d0:5f:eb:45:b3:d2:68:c5:71:b0:10:64:a0:63:
                    e1:cf:fd:61:2c:49:43:a0:8c:84:c7:b4:ba:7d:d3:
                    97:56:90:99:da:de:64:46:03:a3:80:4d:e1:27:e4:
                    bc:12:1c:b7:0a:70:7c:fb:83:10:ca:78:c5:8a:47:
                    8a:af:14:6c:f4:ac:92:05:1c:c1:ce:ac:7e:4f:8e:
                    f7:ae:0d:fe:f6:37:08:ef:1e:4a:f9:2f:cc:8f:4e:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:63:FB:E2:44:D7:30:10:B9:E8:86:79:15:31:90:F9:51:02:1C:91
            X509v3 Authority Key Identifier:
                keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/m2P74kTXMBC56IZ5FTGQ-VECHJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.128.0-31.6.223.255
                  31.42.16.0/20
                  37.131.128.0/19
                  37.190.128.0/17
                  46.186.0.0/17
                  46.231.56.0/21
                  62.61.32.0/19
                  62.141.192.0/18
                  80.244.128.0/19
                  80.245.176.0/20
                  81.190.0.0/16
                  82.115.64.0/19
                  83.68.64.0/19
                  84.38.80.0/20
                  85.117.0.0/19
                  87.116.192.0/18
                  89.17.224.0/19
                  89.228.0.0/14
                  92.42.112.0/21
                  93.94.184.0/21
                  94.78.128.0/18
                  94.251.128.0/17
                  95.129.224.0/21
                  95.174.32.0/19
                  176.107.112.0/21
                  176.221.96.0/19
                  185.31.184.0/22
                  193.43.240.0/22
                  193.106.76.0/22
                  193.200.118.0/23
                  194.116.132.0/23
                  194.149.240.0/24
                  195.93.134.0/23
                  195.93.222.0/23
                  213.136.224.0/19
                  217.70.48.0/20
                  217.75.48.0/20
                  217.144.192.0/19
                  217.172.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:c3:64:0d:e9:39:bf:1b:9d:67:3a:9b:c5:ee:69:ff:8a:
         b4:53:fc:2a:38:22:44:04:dc:06:ba:2d:7f:93:17:29:b3:52:
         3b:aa:91:fc:74:de:ec:d1:ac:88:35:78:96:7f:31:f4:99:3f:
         21:ab:00:fc:20:12:96:28:75:79:f3:1d:fc:b2:54:96:63:db:
         a2:8b:c2:f6:af:fd:04:fd:35:76:39:b7:da:d9:d4:02:5c:2a:
         7b:c4:c1:c6:34:8d:da:b0:33:0a:13:8b:e4:b2:80:19:d1:5a:
         8a:f8:ef:13:b1:26:79:74:fd:18:05:d9:99:8b:6d:fc:92:3d:
         1f:e5:6a:09:9b:39:46:59:89:6f:af:16:78:73:e7:49:48:19:
         cb:a4:62:31:df:6b:e4:0e:7e:eb:ec:26:d0:5a:9d:8b:18:09:
         58:32:44:53:63:27:ed:65:2c:65:99:0a:c4:19:1c:45:0f:f5:
         70:d6:95:9b:fd:a4:cc:c4:e6:5c:9f:d4:27:70:35:fd:e6:67:
         89:9f:f2:ab:9a:7f:f4:51:16:3f:25:5a:80:8f:5a:05:3f:7c:
         9c:76:29:45:85:65:36:30:c3:7c:5b:07:96:7f:3b:09:0b:28:
         26:d0:e1:1b:5e:0d:0b:47:ea:d7:e2:b5:ce:b9:4e:21:3e:15:
         5e:34:db:2a
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgISAYVseBG3ugIBFjLM6ECaS0+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5
NTg2MWQwHhcNMjMwMTAxMDgzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjYzZmJlMjQ0ZDczMDEwYjllODg2NzkxNTMxOTBmOTUxMDIxYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAuZRVSEip6u/wjB1qFzzKCSq9LS
3EBtFWiMyz0ZQSteJFzxMhw/1Z8XLoSOitIiQpZRaZ1GZsvPj6kV0B9Z80I8mvPb
psyqgS/rGcYttXcGlKrPrXMUeJOnf00ym93GxGJIKC2A4WI3zo/AMWpev3Odb601
xdSst6xLxj5tBIcglVdxAioBVc0t4uclxvjLjqNgg9XSR/3eBO467FLMsxeGs5JL
0F/rRbPSaMVxsBBkoGPhz/1hLElDoIyEx7S6fdOXVpCZ2t5kRgOjgE3hJ+S8Ehy3
CnB8+4MQynjFikeKrxRs9KySBRzBzqx+T473rg3+9jcI7x5K+S/Mj07jBQIDAQAB
o4IC+TCCAvUwHQYDVR0OBBYEFJtj++JE1zAQueiGeRUxkPlRAhyRMB8GA1UdIwQY
MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt
OGE2ZTU1NDE5NmJiLzEvbTJQNzRrVFhNQkM1NklaNUZUR1EtVkVDSEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi
LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDQYIKwYBBQUHAQcBAf8Egf0wgfowgfcEAgABMIHwMAwD
BAcfBoADBAUfBsADBAQfKhADBAUlg4ADBAclvoADBAcuugADBAMu5zgDBAU+PSAD
BAY+jcADBAVQ9IADBARQ9bADAwBRvgMEBVJzQAMEBVNEQAMEBFQmUAMEBVV1AAME
Bld0wAMEBVkR4AMDAlnkAwQDXCpwAwQDXV64AwQGXk6AAwQHXvuAAwQDX4HgAwQF
X64gAwQDsGtwAwQFsN1gAwQCuR+4AwQCwSvwAwQCwWpMAwQBwch2AwQBwnSEAwQA
wpXwAwQBw12GAwQBw13eAwQF1YjgAwQE2UYwAwQE2UswAwQF2ZDAAwQF2azgMA0G
CSqGSIb3DQEBCwUAA4IBAQA/McNkDek5vxudZzqbxe5p/4q0U/wqOCJEBNwGui1/
kxcps1I7qpH8dN7s0ayINXiWfzH0mT8hqwD8IBKWKHV58x38slSWY9uii8L2r/0E
/TV2Obfa2dQCXCp7xMHGNI3asDMKE4vksoAZ0VqK+O8TsSZ5dP0YBdmZi238kj0f
5WoJmzlGWYlvrxZ4c+dJSBnLpGIx32vkDn7r7CbQWp2LGAlYMkRTYyftZSxlmQrE
GRxFD/Vw1pWb/aTMxOZcn9QncDX95meJn/Krmn/0URY/JVqAj1oFP3ycdilFhWU2
MMN8WweWfzsJCygm0OEbXg0LR+rX4rXOuU4hPhVeNNsq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org