Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/3p0wqQoyY_ZtZtOQN_mRbKmzSl4.roa
File:                     3p0wqQoyY_ZtZtOQN_mRbKmzSl4.roa (raw, json)
Hash identifier:          zMAmgREqZC7DnzdLk7E3qXusa8ZRSUyjjRYncxmkQag=
Subject key identifier:   DE:9D:30:A9:0A:32:63:F6:6D:66:D3:90:37:F9:91:6C:A9:B3:4A:5E
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       018B050C24623631CB04F6DC2BCB0947E9C6
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/3p0wqQoyY_ZtZtOQN_mRbKmzSl4.roa
Signing time:             Fri 06 Oct 2023 12:52:43 +0000
ROA not before:           Fri 06 Oct 2023 12:52:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5378
IP address blocks:        212.228.128.0/18 maxlen: 18
                          83.107.64.0/18 maxlen: 18
                          212.228.64.0/18 maxlen: 18
                          83.107.0.0/18 maxlen: 18
                          62.49.192.0/18 maxlen: 18
                          212.248.128.0/17 maxlen: 17
                          212.225.0.0/17 maxlen: 17
                          83.104.64.0/18 maxlen: 18
                          212.229.0.0/18 maxlen: 18
                          83.107.192.0/18 maxlen: 18
                          83.104.0.0/18 maxlen: 18
                          83.104.0.0/14 maxlen: 14
                          83.107.128.0/18 maxlen: 18
                          194.222.0.0/16 maxlen: 16
                          212.228.192.0/18 maxlen: 18
                          195.8.160.0/19 maxlen: 19
                          193.237.192.0/19 maxlen: 19
                          83.106.128.0/18 maxlen: 18
                          193.237.224.0/19 maxlen: 19
                          193.237.128.0/21 maxlen: 21
                          193.237.136.0/22 maxlen: 22
                          193.237.140.0/22 maxlen: 22
                          193.237.144.0/21 maxlen: 21
                          193.237.152.0/21 maxlen: 21
                          83.106.64.0/18 maxlen: 18
                          62.49.0.0/18 maxlen: 18
                          193.237.160.0/19 maxlen: 19
                          62.49.0.0/16 maxlen: 16
                          212.228.0.0/18 maxlen: 18
                          62.49.128.0/18 maxlen: 18
                          83.106.192.0/18 maxlen: 18
                          62.56.64.0/18 maxlen: 18
                          212.228.0.0/15 maxlen: 15
                          62.49.64.0/18 maxlen: 18
                          62.56.0.0/17 maxlen: 17
                          62.56.0.0/18 maxlen: 18
                          83.105.128.0/18 maxlen: 18
                          77.233.128.0/19 maxlen: 19
                          193.237.0.0/19 maxlen: 19
                          193.237.0.0/16 maxlen: 16
                          83.105.64.0/18 maxlen: 18
                          80.176.0.0/15 maxlen: 15
                          195.58.64.0/19 maxlen: 19
                          83.106.0.0/18 maxlen: 18
                          193.237.96.0/19 maxlen: 19
                          193.237.32.0/19 maxlen: 19
                          83.105.192.0/18 maxlen: 18
                          193.237.64.0/19 maxlen: 19
                          212.229.72.0/22 maxlen: 22
                          212.229.76.0/23 maxlen: 23
                          212.229.78.0/23 maxlen: 23
                          212.229.80.0/21 maxlen: 21
                          212.229.88.0/21 maxlen: 21
                          212.229.96.0/19 maxlen: 19
                          83.104.192.0/18 maxlen: 18
                          141.195.192.0/19 maxlen: 19
                          141.195.192.0/18 maxlen: 18
                          83.104.128.0/18 maxlen: 18
                          212.229.64.0/21 maxlen: 21
                          212.229.192.0/18 maxlen: 18
                          212.229.128.0/18 maxlen: 18
                          83.105.0.0/18 maxlen: 18
                          141.195.240.0/20 maxlen: 20
                          2a0a:ef40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:05:0c:24:62:36:31:cb:04:f6:dc:2b:cb:09:47:e9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Oct  6 12:52:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de9d30a90a3263f66d66d39037f9916ca9b34a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:64:7f:c2:04:59:82:c2:8f:46:90:f2:08:
                    ea:3d:db:e3:36:20:0f:47:a4:ab:3a:ad:e0:d4:9d:
                    64:b5:86:82:f2:b7:e3:96:83:57:ad:6e:0d:a1:ad:
                    76:ad:b7:c5:29:2e:43:f3:c3:53:4d:8f:50:10:0f:
                    75:87:11:36:9e:db:2f:9c:ca:11:1d:0a:92:65:4f:
                    bb:2a:9b:23:d9:1b:01:e8:46:f4:70:72:8f:89:21:
                    10:60:ef:35:cc:cb:25:47:e6:d6:ca:2c:cc:fd:36:
                    9f:07:83:46:3a:5f:72:88:40:ec:45:ce:51:93:56:
                    e6:9c:24:ab:96:98:25:89:a7:56:54:5a:2e:0d:47:
                    47:23:34:d6:6f:f6:71:22:bb:e0:dd:51:f3:67:a4:
                    a1:87:19:1d:3e:5e:ee:92:8f:7b:2c:f0:bc:24:64:
                    03:35:8d:24:d4:42:53:26:e8:03:eb:24:37:ea:dd:
                    1e:fd:69:b8:86:6e:9f:bb:63:34:75:fe:a9:a4:0f:
                    b9:98:26:5f:2d:2b:64:01:37:87:8e:7e:41:5a:1d:
                    7b:81:1a:86:b8:65:b2:c2:a3:ae:65:74:56:e9:4e:
                    89:03:3f:0a:35:0d:6e:74:bc:42:6e:2f:f8:cd:82:
                    99:38:a5:f4:8a:8c:24:1a:69:d8:d2:11:03:fa:c0:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:30:A9:0A:32:63:F6:6D:66:D3:90:37:F9:91:6C:A9:B3:4A:5E
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/3p0wqQoyY_ZtZtOQN_mRbKmzSl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.49.0.0/16
                  62.56.0.0/17
                  77.233.128.0/19
                  80.176.0.0/15
                  83.104.0.0/14
                  141.195.192.0/18
                  193.237.0.0/16
                  194.222.0.0/16
                  195.8.160.0/19
                  195.58.64.0/19
                  212.225.0.0/17
                  212.228.0.0/15
                  212.248.128.0/17
                IPv6:
                  2a0a:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:7e:8d:c4:a1:f5:6d:a2:ad:0c:42:78:04:73:1b:c6:c5:
         2e:20:da:93:d5:f1:ab:06:63:4f:1e:21:78:bf:b1:71:2b:89:
         97:59:f2:23:de:e1:ab:c4:18:de:e8:5a:8f:f6:b0:87:92:7e:
         88:3a:30:ef:bd:b5:86:7e:db:19:cc:00:d8:dc:b3:51:25:00:
         dc:3b:10:01:9f:99:d6:1e:d7:6f:87:14:91:6c:0a:50:f0:cb:
         59:c4:a6:b3:82:3b:4b:9c:10:6c:f6:42:cf:18:15:51:f7:40:
         ce:ec:f0:32:6a:6c:18:ab:d4:64:5f:1a:1a:1e:2f:73:31:33:
         f9:2b:c7:65:f6:a8:02:0b:f4:a6:4f:4b:96:d3:15:8e:20:ff:
         3b:e3:8a:4c:94:74:c7:42:ca:d0:a2:ed:c0:f4:f2:75:3f:a4:
         65:b4:af:09:c9:f2:b6:10:42:26:33:7b:39:fb:86:c2:85:24:
         62:18:8a:47:f7:18:2e:87:8a:be:c1:e1:94:54:6f:4c:36:b4:
         7d:72:bd:91:06:ed:61:21:5d:1b:51:ab:d1:e4:f2:86:95:d4:
         3a:98:5f:8b:86:3e:05:08:ab:4e:96:86:93:4c:b7:b8:44:66:
         be:a7:8e:a4:e5:e3:85:db:19:c6:03:5d:9a:58:47:57:e2:c3:
         70:4a:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 13:56:58 2023 by rpki-client on console-fra.rpki-client.org