Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7_HieZu8MxTbVK5EGwNktm-aL60.roa
File:                     7_HieZu8MxTbVK5EGwNktm-aL60.roa (raw, json)
Hash identifier:          wBlmcCACIpJSu8diew/BzrcsR7JpWXPg/+V0uAYIGJg=
Subject key identifier:   EF:F1:E2:79:9B:BC:33:14:DB:54:AE:44:1B:03:64:B6:6F:9A:2F:AD
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       018625F52BFDE332DFBE8E6A6D649E94FF32
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7_HieZu8MxTbVK5EGwNktm-aL60.roa
Signing time:             Mon 06 Feb 2023 09:01:09 +0000
ROA not before:           Mon 06 Feb 2023 09:01:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58272
IP address blocks:        188.72.114.0/24 maxlen: 24
                          188.72.116.0/24 maxlen: 24
                          188.72.115.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          37.18.0.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          188.72.89.0/24 maxlen: 24
                          188.72.87.0/24 maxlen: 24
                          188.72.95.0/24 maxlen: 24
                          188.72.102.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          37.18.78.0/24 maxlen: 24
                          37.230.187.0/24 maxlen: 24
                          178.170.231.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          178.170.136.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          178.170.141.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          178.170.145.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          46.243.140.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.151.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          37.230.170.0/24 maxlen: 24
                          37.230.171.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.178.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.215.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.224.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.246.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.174.0/24 maxlen: 24
                          141.101.179.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.144.0/24 maxlen: 24
                          141.101.143.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.146.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.157.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.163.0/24 maxlen: 24
                          141.101.169.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.172.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 Feb 2023 08:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:25:f5:2b:fd:e3:32:df:be:8e:6a:6d:64:9e:94:ff:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Feb  6 09:01:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eff1e2799bbc3314db54ae441b0364b66f9a2fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:c1:4b:7a:d3:3c:b9:2a:e5:4e:06:42:90:
                    64:29:b4:f4:36:f3:74:89:7a:2b:81:8a:86:d1:98:
                    6d:c6:2e:03:b2:e3:d5:04:4f:65:56:30:5e:84:a5:
                    f1:30:61:64:e0:59:d8:e0:b8:55:b2:f7:dd:56:84:
                    04:ae:53:cb:f8:40:d8:5b:c0:63:96:b7:1d:e9:f1:
                    8d:e0:6f:3f:03:97:b1:b7:2b:26:08:39:0c:bb:4f:
                    7e:cb:de:c0:1a:49:f9:8b:f0:f7:9a:27:e0:56:39:
                    06:51:85:25:71:c6:78:a1:51:07:f9:24:f5:6a:ff:
                    2b:12:ba:4f:b9:29:6c:07:e0:f8:ce:e8:2b:0a:49:
                    69:cf:17:cc:84:a3:f0:d7:74:b8:89:0b:79:b4:0b:
                    03:7d:83:64:52:fc:91:6f:9b:c6:10:b4:05:dc:8c:
                    c9:f2:4b:93:46:1d:23:9b:0f:85:a4:de:a2:2c:d6:
                    40:d4:0d:99:52:90:35:04:81:5e:ac:ec:82:c8:5c:
                    d7:95:1c:cb:96:f6:ae:5d:92:16:d6:0b:4e:9c:cb:
                    b7:d0:76:5f:78:79:d3:7d:1d:d8:47:cc:4a:78:30:
                    31:96:6e:17:4d:b6:41:85:f9:51:e0:5e:b2:18:ea:
                    af:26:76:f7:5d:90:df:2b:18:aa:6b:01:13:e6:53:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:E2:79:9B:BC:33:14:DB:54:AE:44:1B:03:64:B6:6F:9A:2F:AD
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7_HieZu8MxTbVK5EGwNktm-aL60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.63.0/24
                  37.18.78.0/24
                  37.230.134.0/24
                  37.230.151.0/24
                  37.230.163.0/24
                  37.230.170.0/23
                  37.230.176.0/24
                  37.230.178.0/24
                  37.230.182.0/23
                  37.230.187.0/24
                  46.243.138.0-46.243.140.255
                  46.243.149.0/24
                  46.243.204.0/24
                  46.243.214.0/23
                  46.243.221.0-46.243.225.255
                  46.243.236.0-46.243.238.255
                  46.243.240.0/22
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0/23
                  141.101.135.0/24
                  141.101.143.0-141.101.150.255
                  141.101.153.0-141.101.172.255
                  141.101.174.0/24
                  141.101.179.0/24
                  141.101.191.0/24
                  141.101.255.0/24
                  178.170.136.0/23
                  178.170.139.0-178.170.141.255
                  178.170.145.0/24
                  178.170.231.0/24
                  185.4.148.0/22
                  188.72.80.0/23
                  188.72.83.0-188.72.87.255
                  188.72.89.0/24
                  188.72.95.0/24
                  188.72.102.0/24
                  188.72.114.0-188.72.116.255
                  188.72.119.0/24
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:59:d1:a8:a7:bf:52:b9:20:a2:ee:7a:4e:ef:35:3c:d1:
         71:f4:bd:4e:e0:16:a9:de:13:9d:9e:04:31:7c:a4:42:68:89:
         d7:55:00:b3:0d:ed:91:2c:38:ee:3b:23:93:ed:8b:40:e3:6b:
         c4:dc:b5:2e:e1:29:ec:bc:35:1f:63:73:8b:a3:b5:8a:af:18:
         00:40:e6:ea:f9:17:ff:d8:93:99:92:9a:85:a6:2c:2f:cb:b2:
         58:32:b0:9d:ef:04:a7:e1:d6:de:c1:c5:ba:b7:c9:28:62:13:
         c8:65:6a:e6:ef:b7:98:ca:0e:d4:32:ef:69:4a:40:56:9a:86:
         95:d1:54:39:62:df:08:a5:13:fc:63:4e:da:b0:dd:12:1c:70:
         ba:cf:14:fd:a8:ea:65:b5:a0:f8:f8:57:5d:9e:4d:7b:be:35:
         4c:6b:8e:78:c7:98:e2:55:3e:f2:6e:89:0b:88:23:89:0a:72:
         f4:90:32:bc:5c:34:66:38:3b:d8:a6:30:e4:fa:41:6f:20:7e:
         9c:27:2f:45:61:6c:fd:21:84:cc:3d:b0:a9:14:00:45:79:2e:
         1a:66:c2:6a:da:22:53:10:e5:57:94:a4:a6:63:95:a1:3b:c4:
         bc:ee:6d:f8:9a:b4:e9:8c:60:61:9d:2e:f8:41:fd:b0:4d:06:
         8b:6c:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org