Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/Hh0oE-lLC7r6CjhC_qkV0Lg07Mo.roa
File:                     Hh0oE-lLC7r6CjhC_qkV0Lg07Mo.roa (raw, json)
Hash identifier:          ENr4pk+Jf/n65NDwLfDH2vdKCCktlCUI+vOUnHzSeyM=
Subject key identifier:   1E:1D:28:13:E9:4B:0B:BA:FA:0A:38:42:FE:A9:15:D0:B8:34:EC:CA
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       018B00583A06DE71180CDCE4172F8884567B
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/Hh0oE-lLC7r6CjhC_qkV0Lg07Mo.roa
Signing time:             Thu 05 Oct 2023 14:57:43 +0000
ROA not before:           Thu 05 Oct 2023 14:57:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5378
IP address blocks:        212.228.128.0/18 maxlen: 18
                          83.107.64.0/18 maxlen: 18
                          212.228.64.0/18 maxlen: 18
                          83.107.0.0/18 maxlen: 18
                          62.49.192.0/18 maxlen: 18
                          212.248.128.0/17 maxlen: 17
                          212.225.0.0/17 maxlen: 17
                          83.104.64.0/18 maxlen: 18
                          212.229.0.0/18 maxlen: 18
                          83.107.192.0/18 maxlen: 18
                          83.104.0.0/18 maxlen: 18
                          83.104.0.0/14 maxlen: 14
                          83.107.128.0/18 maxlen: 18
                          212.228.192.0/18 maxlen: 18
                          195.8.160.0/19 maxlen: 19
                          193.237.192.0/19 maxlen: 19
                          83.106.128.0/18 maxlen: 18
                          193.237.224.0/19 maxlen: 19
                          193.237.128.0/21 maxlen: 21
                          193.237.136.0/22 maxlen: 22
                          193.237.140.0/22 maxlen: 22
                          193.237.144.0/21 maxlen: 21
                          193.237.152.0/21 maxlen: 21
                          83.106.64.0/18 maxlen: 18
                          62.49.0.0/18 maxlen: 18
                          193.237.160.0/19 maxlen: 19
                          62.49.0.0/16 maxlen: 16
                          212.228.0.0/18 maxlen: 18
                          62.49.128.0/18 maxlen: 18
                          83.106.192.0/18 maxlen: 18
                          62.56.64.0/18 maxlen: 18
                          212.228.0.0/15 maxlen: 15
                          62.49.64.0/18 maxlen: 18
                          62.56.0.0/17 maxlen: 17
                          62.56.0.0/18 maxlen: 18
                          83.105.128.0/18 maxlen: 18
                          77.233.128.0/19 maxlen: 19
                          193.237.0.0/19 maxlen: 19
                          193.237.0.0/16 maxlen: 16
                          83.105.64.0/18 maxlen: 18
                          80.176.0.0/15 maxlen: 15
                          195.58.64.0/19 maxlen: 19
                          83.106.0.0/18 maxlen: 18
                          193.237.96.0/19 maxlen: 19
                          193.237.32.0/19 maxlen: 19
                          83.105.192.0/18 maxlen: 18
                          193.237.64.0/19 maxlen: 19
                          212.229.72.0/22 maxlen: 22
                          212.229.76.0/23 maxlen: 23
                          212.229.78.0/23 maxlen: 23
                          212.229.80.0/21 maxlen: 21
                          212.229.88.0/21 maxlen: 21
                          212.229.96.0/19 maxlen: 19
                          83.104.192.0/18 maxlen: 18
                          141.195.192.0/19 maxlen: 19
                          141.195.192.0/18 maxlen: 18
                          83.104.128.0/18 maxlen: 18
                          212.229.64.0/21 maxlen: 21
                          212.229.192.0/18 maxlen: 18
                          212.229.128.0/18 maxlen: 18
                          141.195.224.0/20 maxlen: 20
                          83.105.0.0/18 maxlen: 18
                          141.195.240.0/20 maxlen: 20
                          2a0a:ef40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:00:58:3a:06:de:71:18:0c:dc:e4:17:2f:88:84:56:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Oct  5 14:57:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e1d2813e94b0bbafa0a3842fea915d0b834ecca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:4f:87:d1:62:57:4b:de:9a:40:0d:3d:e4:
                    e0:61:72:c9:47:ef:9b:a4:f4:a2:3c:0e:45:cf:4e:
                    3d:4d:79:11:9d:ae:18:ab:15:f8:97:d4:ce:d7:e0:
                    13:67:e1:58:8c:57:3e:90:f0:e3:55:c1:2e:b4:b2:
                    f9:1d:e6:17:8c:a0:3a:78:62:d2:16:73:13:38:cf:
                    1c:bf:5c:9e:2e:92:b3:2a:00:4d:8e:bf:93:f7:9e:
                    96:20:15:95:01:14:5f:96:10:db:7f:c4:d7:8f:5f:
                    86:38:50:e6:13:07:7e:84:45:1a:5e:06:8e:26:4e:
                    04:fb:7e:06:b7:bd:51:cd:35:83:f0:e1:76:42:50:
                    bd:4a:bd:07:1f:e0:71:6a:61:63:ce:d4:b2:ea:21:
                    8e:0a:1d:75:f0:7a:ad:29:04:19:25:88:84:e9:b6:
                    79:9c:b9:59:da:23:52:89:e2:95:63:48:bb:22:6c:
                    a1:de:b8:58:59:30:cf:e8:99:52:5c:aa:95:41:8e:
                    f1:05:53:41:be:9c:81:02:c4:cd:ea:b1:20:83:01:
                    af:76:ae:ec:d7:4a:07:1c:3b:d6:4d:8b:90:b2:bc:
                    77:f4:63:e6:b9:27:d5:74:5f:de:ca:44:24:b5:ff:
                    b3:31:eb:cd:9b:0a:a5:f3:62:be:db:b7:e5:ec:ed:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1D:28:13:E9:4B:0B:BA:FA:0A:38:42:FE:A9:15:D0:B8:34:EC:CA
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/Hh0oE-lLC7r6CjhC_qkV0Lg07Mo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.49.0.0/16
                  62.56.0.0/17
                  77.233.128.0/19
                  80.176.0.0/15
                  83.104.0.0/14
                  141.195.192.0/18
                  193.237.0.0/16
                  195.8.160.0/19
                  195.58.64.0/19
                  212.225.0.0/17
                  212.228.0.0/15
                  212.248.128.0/17
                IPv6:
                  2a0a:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:17:e7:3c:70:e7:10:21:4d:a2:75:86:e5:56:a6:83:02:
         d0:c0:f0:d5:8a:1f:b3:cb:d0:55:4f:ba:44:70:a9:ab:d9:f3:
         2a:43:82:d9:0c:b9:ec:2d:9b:e2:81:f1:9c:47:1f:18:63:7d:
         18:3a:e4:12:99:83:de:99:21:7c:b6:0c:dc:2d:8d:60:57:7a:
         45:fc:ca:39:46:fb:90:d9:69:86:5a:99:97:c0:10:cf:9e:ca:
         a0:3b:20:ae:4e:e8:68:a2:15:0b:37:2d:69:07:94:c4:94:ef:
         f3:22:97:05:3d:d0:04:29:33:62:e4:de:4a:97:de:a8:eb:5b:
         b8:4c:5a:04:c6:60:31:31:35:5a:0c:37:f5:24:66:23:e4:7b:
         10:4f:c6:39:e2:b5:f1:8b:37:7d:4f:eb:2c:a0:a1:59:67:99:
         ba:1c:fc:3c:67:7e:35:a9:86:f2:6d:a1:98:20:9a:f2:e7:23:
         91:ae:f5:75:18:03:87:bf:d7:2a:fa:27:55:cc:4c:55:1c:df:
         b6:59:fb:af:6d:5d:71:f9:86:e4:a7:2f:82:e3:58:cb:92:e2:
         0f:3e:d0:e3:3c:8f:93:19:ae:30:da:a9:1f:a3:1e:18:85:72:
         55:18:f4:61:38:c7:a8:86:52:11:5b:15:c6:2b:d3:30:fc:23:
         9d:78:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 15:57:24 2023 by rpki-client on console-fra.rpki-client.org