Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/mfQyz6gHtIMM5o56XcqyJ57GDdc.roa
File:                     mfQyz6gHtIMM5o56XcqyJ57GDdc.roa (raw, json)
Hash identifier:          3GYxsjNjdxD+mnx3EH/rbGch9VDL3sKaQWp6nesY9L0=
Subject key identifier:   99:F4:32:CF:A8:07:B4:83:0C:E6:8E:7A:5D:CA:B2:27:9E:C6:0D:D7
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       0185700279A6B846AE058A005442F080E2B5
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/mfQyz6gHtIMM5o56XcqyJ57GDdc.roa
Signing time:             Mon 02 Jan 2023 01:04:48 +0000
ROA not before:           Mon 02 Jan 2023 01:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29314
IP address blocks:        178.235.41.0/24 maxlen: 24
                          178.235.42.0/24 maxlen: 24
                          178.235.43.0/24 maxlen: 24
                          178.235.40.0/24 maxlen: 24
                          109.107.0.0/21 maxlen: 21
                          109.107.0.0/19 maxlen: 19
                          95.160.228.0/22 maxlen: 22
                          178.235.0.0/17 maxlen: 17
                          95.160.233.0/24 maxlen: 24
                          109.241.192.0/18 maxlen: 18
                          95.160.236.0/22 maxlen: 22
                          109.107.9.0/24 maxlen: 24
                          195.26.72.0/22 maxlen: 22
                          178.235.146.0/24 maxlen: 24
                          178.235.147.0/24 maxlen: 24
                          178.235.148.0/22 maxlen: 22
                          178.235.148.0/23 maxlen: 23
                          178.235.150.0/24 maxlen: 24
                          178.235.150.0/23 maxlen: 23
                          178.235.152.0/21 maxlen: 21
                          178.235.160.0/19 maxlen: 19
                          178.235.192.0/18 maxlen: 18
                          178.235.98.0/24 maxlen: 24
                          178.235.110.0/24 maxlen: 24
                          178.235.131.0/24 maxlen: 24
                          178.235.132.0/23 maxlen: 23
                          178.235.128.0/24 maxlen: 24
                          178.235.129.0/24 maxlen: 24
                          178.235.130.0/24 maxlen: 24
                          178.235.138.0/23 maxlen: 23
                          178.235.134.0/24 maxlen: 24
                          178.235.135.0/24 maxlen: 24
                          178.235.136.0/23 maxlen: 23
                          178.235.140.0/24 maxlen: 24
                          178.235.141.0/24 maxlen: 24
                          178.235.142.0/23 maxlen: 23
                          178.235.144.0/23 maxlen: 23
                          95.160.56.0/22 maxlen: 22
                          95.160.76.0/22 maxlen: 22
                          31.11.202.0/24 maxlen: 24
                          95.160.0.0/17 maxlen: 24
                          95.160.16.0/22 maxlen: 22
                          88.156.80.176/28 maxlen: 28
                          31.11.228.0/24 maxlen: 24
                          95.160.28.0/22 maxlen: 22
                          109.241.0.0/18 maxlen: 18
                          95.160.166.0/24 maxlen: 24
                          193.201.18.0/23 maxlen: 23
                          109.241.128.0/18 maxlen: 18
                          95.160.170.0/24 maxlen: 24
                          109.241.64.0/18 maxlen: 18
                          95.160.126.0/23 maxlen: 23
                          95.160.128.0/17 maxlen: 17
                          95.160.152.0/24 maxlen: 24
                          95.160.153.0/24 maxlen: 24
                          95.160.154.0/24 maxlen: 24
                          95.160.158.0/24 maxlen: 24
                          95.160.159.0/24 maxlen: 24
                          95.160.155.0/24 maxlen: 24
                          95.160.156.0/24 maxlen: 24
                          95.160.157.0/24 maxlen: 24
                          93.105.128.0/17 maxlen: 17
                          93.105.142.0/24 maxlen: 24
                          93.105.144.0/22 maxlen: 22
                          185.51.180.0/22 maxlen: 22
                          93.105.168.0/21 maxlen: 21
                          82.139.0.0/18 maxlen: 18
                          93.105.236.0/24 maxlen: 24
                          78.31.209.0/24 maxlen: 24
                          93.105.237.0/24 maxlen: 24
                          31.11.172.0/24 maxlen: 24
                          93.105.178.0/23 maxlen: 23
                          78.31.152.0/21 maxlen: 21
                          93.105.176.0/23 maxlen: 23
                          93.105.180.0/24 maxlen: 24
                          93.105.181.0/24 maxlen: 24
                          93.105.182.0/24 maxlen: 24
                          93.105.183.0/24 maxlen: 24
                          31.11.131.0/24 maxlen: 24
                          31.11.128.0/24 maxlen: 24
                          31.11.129.0/24 maxlen: 24
                          31.11.132.0/22 maxlen: 22
                          31.11.128.0/17 maxlen: 17
                          31.11.130.0/24 maxlen: 24
                          192.166.120.0/23 maxlen: 23
                          91.192.76.0/24 maxlen: 24
                          91.192.76.0/22 maxlen: 22
                          91.192.78.0/24 maxlen: 24
                          37.77.152.0/21 maxlen: 21
                          93.105.40.0/24 maxlen: 24
                          93.105.42.0/24 maxlen: 24
                          93.105.0.0/17 maxlen: 17
                          89.151.0.0/18 maxlen: 18
                          195.191.162.0/23 maxlen: 23
                          195.225.92.0/22 maxlen: 22
                          91.238.232.0/22 maxlen: 22
                          88.156.222.0/24 maxlen: 24
                          88.156.226.0/23 maxlen: 23
                          37.8.192.0/18 maxlen: 18
                          88.156.255.0/24 maxlen: 24
                          83.143.136.0/21 maxlen: 21
                          37.8.208.0/24 maxlen: 24
                          88.156.164.0/22 maxlen: 22
                          83.143.40.0/21 maxlen: 21
                          195.28.170.0/23 maxlen: 23
                          88.156.192.0/18 maxlen: 18
                          109.197.56.0/21 maxlen: 21
                          109.197.64.0/21 maxlen: 21
                          91.231.116.0/23 maxlen: 23
                          37.8.214.0/24 maxlen: 24
                          94.231.48.0/20 maxlen: 20
                          37.8.231.0/24 maxlen: 24
                          37.8.230.0/24 maxlen: 24
                          31.22.96.0/21 maxlen: 21
                          31.22.100.0/23 maxlen: 23
                          88.156.0.0/18 maxlen: 18
                          78.88.188.0/22 maxlen: 22
                          62.122.112.0/21 maxlen: 21
                          194.54.188.0/22 maxlen: 22
                          83.243.104.0/21 maxlen: 21
                          78.88.123.0/24 maxlen: 24
                          31.135.168.0/21 maxlen: 21
                          78.88.128.0/17 maxlen: 17
                          31.135.175.0/24 maxlen: 24
                          88.156.128.0/23 maxlen: 23
                          88.156.128.0/21 maxlen: 21
                          88.156.132.0/23 maxlen: 23
                          91.230.159.0/24 maxlen: 24
                          88.156.128.0/18 maxlen: 18
                          88.156.130.0/23 maxlen: 23
                          88.156.134.0/23 maxlen: 23
                          91.230.162.0/23 maxlen: 23
                          91.230.164.0/22 maxlen: 22
                          88.156.136.0/21 maxlen: 21
                          78.88.216.0/22 maxlen: 22
                          88.156.64.0/24 maxlen: 24
                          88.156.64.0/18 maxlen: 18
                          88.156.78.0/24 maxlen: 24
                          77.222.240.0/20 maxlen: 20
                          77.222.248.0/22 maxlen: 22
                          78.88.0.0/17 maxlen: 17
                          195.242.252.0/22 maxlen: 22
                          78.88.30.0/24 maxlen: 24
                          78.88.28.0/22 maxlen: 22
                          78.88.31.0/24 maxlen: 24
                          78.88.28.0/24 maxlen: 24
                          78.88.29.0/24 maxlen: 24
                          77.222.224.0/21 maxlen: 21
                          78.88.43.0/24 maxlen: 24
                          77.222.232.0/21 maxlen: 21
                          2a00:9f00:c::/48 maxlen: 48
                          2a00:9f00::/48 maxlen: 48
                          2a00:9f00::/36 maxlen: 36
                          2a00:9f00::/32 maxlen: 32
                          2a00:9f00:b000::/36 maxlen: 36
                          2a00:9f00:1000::/36 maxlen: 36
                          2a00:9f00:6000::/36 maxlen: 36
                          2a00:9f00:e000::/36 maxlen: 36
                          2a00:9f00:9000::/36 maxlen: 36
                          2a00:9f00:3000::/36 maxlen: 36
                          2a00:9f00:8000::/36 maxlen: 36
                          2a00:9f00:5000::/36 maxlen: 36
                          2a00:9f00:2000::/36 maxlen: 36
                          2a00:9f00:7000::/36 maxlen: 36
                          2a00:9f00:a000::/36 maxlen: 36
                          2a00:9f00:f000::/36 maxlen: 36
                          2a00:9f00:c000::/36 maxlen: 36
                          2a00:9f00:4000::/36 maxlen: 36
                          2a00:9f00:d000::/36 maxlen: 36
                          2a00:9f00:10::/48 maxlen: 48
                          2a00:9f00:a::/48 maxlen: 48
                          2a00:9f00:2007::/48 maxlen: 48
                          2a00:9f00:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:79:a6:b8:46:ae:05:8a:00:54:42:f0:80:e2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Jan  2 01:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99f432cfa807b4830ce68e7a5dcab2279ec60dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:83:62:e1:90:00:6c:ff:2c:a2:24:5f:df:
                    9d:52:d8:9e:98:f4:4c:11:be:e7:f0:01:b6:74:b0:
                    52:86:d9:3c:5d:52:74:e6:d9:cb:8b:60:aa:cc:59:
                    48:e4:c1:c3:24:f4:74:71:6d:c3:0e:31:b9:a2:31:
                    c7:d8:62:05:b3:92:4a:01:8a:6d:f1:c9:fc:3a:be:
                    cc:ab:73:e1:52:7b:4c:c0:04:09:d1:55:81:c0:31:
                    53:94:d9:58:c7:bf:72:9c:d6:2c:c1:3c:ac:39:6f:
                    38:a9:a5:6f:2a:d6:99:d8:9c:cd:56:41:e2:45:04:
                    24:58:33:2d:cd:2f:90:7e:c9:8d:ff:db:e6:33:3f:
                    56:f3:2d:e6:a7:cc:07:b5:5c:39:a6:1c:f5:a4:db:
                    78:34:5a:9e:3c:24:f8:b7:6f:d7:74:84:ac:cf:0e:
                    1a:89:a8:27:8e:26:35:0f:30:cc:6a:15:d4:87:7f:
                    b5:f2:40:2e:75:52:21:d0:97:ff:01:f3:60:da:85:
                    16:b3:f2:a5:8e:d5:f1:04:eb:a9:76:23:7e:71:ac:
                    4a:c0:44:b6:df:b8:45:8b:8e:08:0e:b2:c4:bf:c3:
                    80:65:30:ae:06:a6:24:a7:32:20:f5:89:1b:a4:28:
                    4f:2e:fa:fc:33:6f:01:d2:53:d0:ba:f9:18:a2:b3:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F4:32:CF:A8:07:B4:83:0C:E6:8E:7A:5D:CA:B2:27:9E:C6:0D:D7
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/mfQyz6gHtIMM5o56XcqyJ57GDdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.128.0/17
                  31.22.96.0/21
                  31.135.168.0/21
                  37.8.192.0/18
                  37.77.152.0/21
                  62.122.112.0/21
                  77.222.224.0/19
                  78.31.152.0/21
                  78.31.209.0/24
                  78.88.0.0/16
                  82.139.0.0/18
                  83.143.40.0/21
                  83.143.136.0/21
                  83.243.104.0/21
                  88.156.0.0/16
                  89.151.0.0/18
                  91.192.76.0/22
                  91.230.159.0/24
                  91.230.162.0-91.230.167.255
                  91.231.116.0/23
                  91.238.232.0/22
                  93.105.0.0/16
                  94.231.48.0/20
                  95.160.0.0/16
                  109.107.0.0/19
                  109.197.56.0-109.197.71.255
                  109.241.0.0/16
                  178.235.0.0/16
                  185.51.180.0/22
                  192.166.120.0/23
                  193.201.18.0/23
                  194.54.188.0/22
                  195.26.72.0/22
                  195.28.170.0/23
                  195.191.162.0/23
                  195.225.92.0/22
                  195.242.252.0/22
                IPv6:
                  2a00:9f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:b6:3f:f2:4d:c7:cc:32:62:60:34:07:a5:9e:10:43:44:
         32:33:e5:39:b2:2e:f0:98:93:78:c0:43:fb:48:50:e1:fb:b0:
         63:6c:b1:51:70:7c:c4:0f:36:51:f6:01:2a:4d:26:dc:1a:c4:
         31:68:8a:26:83:3f:e1:42:45:e0:a9:48:8d:3d:b1:7a:b6:4d:
         8d:67:28:e0:2a:19:9a:b3:16:0a:6d:79:02:51:84:a0:ed:19:
         45:0b:79:6b:a6:ca:a3:c1:83:32:b2:ff:c0:de:cc:80:9f:b0:
         6d:3e:48:9e:51:b9:95:9c:5d:74:44:3c:8f:c9:2c:02:63:f4:
         25:2d:78:4b:31:ec:28:38:ba:a8:af:77:e0:fb:65:d6:1e:c4:
         81:2e:91:c2:8a:bd:88:4b:4d:b9:a6:3d:d3:ba:7d:d9:5b:9a:
         cf:b8:74:0f:67:cf:fd:13:22:43:dc:5a:b1:80:e4:26:97:e9:
         85:26:15:bd:0f:f1:bc:5d:e3:2a:41:f7:7b:dc:8e:08:46:50:
         37:65:0e:42:94:37:cd:2e:fb:4d:d8:25:12:56:76:54:13:a4:
         a3:ad:cd:d5:e6:af:f2:9f:18:f7:f3:2c:39:d8:9b:f1:86:c5:
         5b:ee:f0:0f:47:e4:88:69:2f:8e:34:ea:5e:e7:0a:3d:04:40:
         6a:87:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 06:25:14 2023 by rpki-client on console-fra.rpki-client.org