Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/6E7TImm0ermSnlx3HS6W-WBhQcI.roa
File:                     6E7TImm0ermSnlx3HS6W-WBhQcI.roa (raw, json)
Hash identifier:          ZULaoMVUZmjqc5wcbDpQY1YwKP12VceTUkGcvx2daS8=
Subject key identifier:   E8:4E:D3:22:69:B4:7A:B9:92:9E:5C:77:1D:2E:96:F9:60:61:41:C2
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018C9B428969B2A50079DE8D990DEB0ED47B
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/6E7TImm0ermSnlx3HS6W-WBhQcI.roa
Signing time:             Sun 24 Dec 2023 09:57:58 +0000
ROA not before:           Sun 24 Dec 2023 09:57:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205647
IP address blocks:        151.242.0.0/21 maxlen: 21
                          151.242.8.0/22 maxlen: 22
                          151.241.224.0/21 maxlen: 21
                          151.247.216.0/21 maxlen: 21
                          151.247.214.0/23 maxlen: 23
                          151.247.224.0/22 maxlen: 22
                          151.247.232.0/22 maxlen: 22
                          151.247.228.0/22 maxlen: 22
                          151.247.237.0/24 maxlen: 24
                          151.247.238.0/23 maxlen: 23
                          151.247.240.0/24 maxlen: 24
                          151.247.236.0/24 maxlen: 24
                          151.247.241.0/24 maxlen: 24
                          151.247.248.0/22 maxlen: 22
                          31.58.240.0/20 maxlen: 20
                          151.240.240.0/21 maxlen: 21
                          31.59.12.0/22 maxlen: 22
                          151.240.80.0/21 maxlen: 21
                          151.240.168.0/22 maxlen: 22
                          151.240.192.0/21 maxlen: 21
                          31.58.236.0/22 maxlen: 22
                          94.182.97.192/28 maxlen: 28
                          31.56.116.0/24 maxlen: 24
                          151.244.112.0/23 maxlen: 23
                          151.244.110.0/23 maxlen: 23
                          151.244.108.0/23 maxlen: 23
                          151.244.106.0/23 maxlen: 23
                          151.244.118.0/23 maxlen: 23
                          151.244.116.0/23 maxlen: 23
                          151.244.114.0/23 maxlen: 23
                          151.244.124.0/23 maxlen: 23
                          151.244.122.0/23 maxlen: 23
                          151.244.120.0/23 maxlen: 23
                          151.244.132.0/22 maxlen: 22
                          151.244.128.0/22 maxlen: 22
                          151.244.126.0/23 maxlen: 23
                          151.244.136.0/22 maxlen: 22
                          151.244.140.0/22 maxlen: 22
                          151.244.144.0/22 maxlen: 22
                          151.244.152.0/22 maxlen: 22
                          151.244.148.0/22 maxlen: 22
                          151.244.156.0/22 maxlen: 22
                          151.244.56.0/21 maxlen: 21
                          151.244.52.0/22 maxlen: 22
                          85.15.49.0/24 maxlen: 24
                          85.15.48.0/24 maxlen: 24
                          151.244.64.0/21 maxlen: 21
                          151.244.76.0/22 maxlen: 22
                          151.244.72.0/22 maxlen: 22
                          151.244.80.0/21 maxlen: 21
                          151.244.88.0/21 maxlen: 21
                          151.244.98.0/23 maxlen: 23
                          151.244.96.0/23 maxlen: 23
                          151.244.104.0/23 maxlen: 23
                          151.244.102.0/23 maxlen: 23
                          151.244.100.0/23 maxlen: 23
                          94.183.192.0/18 maxlen: 18
                          151.244.216.0/23 maxlen: 23
                          151.244.218.0/23 maxlen: 23
                          151.244.222.0/23 maxlen: 23
                          151.244.220.0/23 maxlen: 23
                          151.244.226.0/23 maxlen: 23
                          151.244.224.0/23 maxlen: 23
                          31.56.64.0/19 maxlen: 19
                          31.56.96.0/20 maxlen: 20
                          151.244.160.0/22 maxlen: 22
                          151.244.164.0/22 maxlen: 22
                          31.56.0.0/18 maxlen: 18
                          151.244.172.0/22 maxlen: 22
                          151.244.168.0/22 maxlen: 22
                          151.244.176.0/22 maxlen: 22
                          151.244.180.0/22 maxlen: 22
                          151.244.184.0/22 maxlen: 22
                          151.244.188.0/22 maxlen: 22
                          151.244.192.0/22 maxlen: 22
                          151.244.196.0/22 maxlen: 22
                          151.244.200.0/22 maxlen: 22
                          151.244.204.0/22 maxlen: 22
                          151.244.208.0/22 maxlen: 22
                          151.244.212.0/22 maxlen: 22
                          94.182.244.0/23 maxlen: 23
                          94.182.248.0/23 maxlen: 23
                          94.183.0.0/18 maxlen: 18
                          94.182.192.0/18 maxlen: 18
                          94.182.206.0/24 maxlen: 24
                          94.182.204.0/24 maxlen: 24
                          94.182.204.0/22 maxlen: 22
                          94.182.205.0/24 maxlen: 24
                          94.182.207.0/24 maxlen: 24
                          94.182.217.0/24 maxlen: 24
                          94.182.226.0/24 maxlen: 24
                          94.182.222.0/23 maxlen: 23
                          94.182.232.0/23 maxlen: 23
                          94.182.228.0/22 maxlen: 22
                          94.182.240.0/23 maxlen: 23
                          94.182.234.0/23 maxlen: 23
                          94.183.128.0/18 maxlen: 18
                          151.244.48.0/22 maxlen: 22
                          94.183.64.0/18 maxlen: 18
                          94.182.41.0/24 maxlen: 24
                          94.182.56.0/22 maxlen: 22
                          94.182.64.0/20 maxlen: 20
                          94.182.60.0/22 maxlen: 22
                          94.182.64.0/18 maxlen: 18
                          94.182.72.0/21 maxlen: 21
                          94.182.0.0/18 maxlen: 18
                          94.182.8.0/23 maxlen: 23
                          94.182.12.0/23 maxlen: 23
                          94.182.144.0/20 maxlen: 20
                          94.182.160.0/20 maxlen: 20
                          94.182.176.0/20 maxlen: 20
                          94.182.80.0/20 maxlen: 20
                          94.182.82.0/24 maxlen: 24
                          94.182.96.0/20 maxlen: 20
                          94.182.112.0/20 maxlen: 20
                          94.182.116.0/22 maxlen: 22
                          94.182.114.0/23 maxlen: 23
                          94.182.120.0/21 maxlen: 21
                          94.182.128.0/20 maxlen: 20
                          94.182.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:9b:42:89:69:b2:a5:00:79:de:8d:99:0d:eb:0e:d4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Dec 24 09:57:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e84ed32269b47ab9929e5c771d2e96f9606141c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a6:b7:70:fa:ee:4b:51:e4:22:82:a2:ea:05:
                    94:57:e9:48:ac:5e:f1:6e:c0:5d:87:b4:1b:0f:46:
                    8d:bb:20:cc:bc:37:8b:38:cf:85:69:a7:27:ee:63:
                    1e:7b:3b:0c:fd:5f:d5:06:93:61:e1:0a:4c:1a:3b:
                    bd:38:99:d4:65:6e:75:45:d3:cc:70:cb:d0:ee:98:
                    56:4d:27:e4:a4:0c:10:2e:92:32:19:da:d2:be:77:
                    62:c0:34:e9:aa:89:e0:e6:a7:22:43:5a:e9:f8:2c:
                    4f:08:e9:79:58:76:e2:0e:1c:e9:56:86:01:7b:b3:
                    98:8c:a6:4d:77:1d:11:1b:6a:a0:c7:a5:a4:45:da:
                    7c:bb:ee:c8:84:56:e1:45:6e:11:15:8e:f9:92:89:
                    a5:12:62:fd:4b:6d:98:dd:ce:c9:92:52:a7:65:59:
                    66:3e:eb:e3:04:2f:83:5a:d7:a0:01:ac:51:d3:69:
                    d3:ad:50:76:36:bd:0b:dc:bf:90:e9:f0:a9:ca:39:
                    2e:3b:b0:5e:ec:4c:39:17:61:de:0e:42:9d:9e:cf:
                    4d:b1:df:8b:ca:63:98:8c:25:b9:61:d4:84:02:51:
                    53:2b:1b:0b:7c:c6:f3:ba:3e:0c:5b:fe:3a:94:f9:
                    4c:08:2a:e5:a4:0d:2c:d7:b8:b0:0f:e0:88:8b:0c:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:D3:22:69:B4:7A:B9:92:9E:5C:77:1D:2E:96:F9:60:61:41:C2
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/6E7TImm0ermSnlx3HS6W-WBhQcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.0.0-31.56.111.255
                  31.56.116.0/24
                  31.58.236.0-31.58.255.255
                  31.59.12.0/22
                  85.15.48.0/23
                  94.182.0.0/15
                  151.240.80.0/21
                  151.240.168.0/22
                  151.240.192.0/21
                  151.240.240.0/21
                  151.241.224.0/21
                  151.242.0.0-151.242.11.255
                  151.244.48.0-151.244.227.255
                  151.247.214.0-151.247.241.255
                  151.247.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:0f:4a:be:39:6c:5a:cf:42:03:0d:d6:ea:da:f2:d1:ed:
         c3:30:2d:26:96:92:8b:a1:3c:7c:42:0b:28:85:9a:1f:3b:c0:
         0d:68:71:08:56:d5:46:b1:bf:b7:fe:32:d0:64:78:f1:41:70:
         a4:31:0d:3a:be:3a:e7:30:84:c9:33:ed:5b:18:8d:a1:99:e0:
         e1:09:4e:d3:9f:68:9b:c3:c8:4a:6c:68:e9:d4:d6:8c:92:28:
         ed:74:69:96:38:fd:05:51:ff:5d:dd:51:0e:86:91:09:aa:0a:
         80:c6:36:7d:aa:cc:ad:0c:d2:da:a6:25:ef:ca:fe:1f:c9:b8:
         4e:bc:41:49:13:1d:93:33:e1:56:ff:55:d1:af:c8:13:d8:e5:
         90:8d:cc:de:16:d2:b8:60:cc:04:ae:1b:85:1d:c1:42:ae:2a:
         87:ee:a7:fd:bc:c7:4d:20:be:9e:2f:b9:f1:65:4e:2e:23:09:
         51:0a:ee:0c:bf:3c:bf:35:45:13:1e:cd:be:67:27:1a:39:62:
         b4:55:6b:76:df:90:02:36:22:40:f7:c9:28:26:63:09:f1:45:
         a5:d2:0b:8e:fe:40:17:aa:e7:d4:01:38:5c:31:03:ba:72:6a:
         f2:b9:c6:30:ee:13:ee:ec:fd:f4:2f:c3:3c:82:a1:b3:be:05:
         94:1c:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:22 2024 by rpki-client on console-ams.rpki-client.org