Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JoPnvk8P2OvEzGABShFkgQVmteQ.roa
File:                     JoPnvk8P2OvEzGABShFkgQVmteQ.roa (raw, json)
Hash identifier:          G0ygqmwrLuIBSoUeAmFZognwJDQ8ksZj+Kvysac2T0U=
Subject key identifier:   26:83:E7:BE:4F:0F:D8:EB:C4:CC:60:01:4A:11:64:81:05:66:B5:E4
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018BAEF7CD16EE61B2A6F47CBF8069D0B8A3
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JoPnvk8P2OvEzGABShFkgQVmteQ.roa
Signing time:             Wed 08 Nov 2023 12:45:57 +0000
ROA not before:           Wed 08 Nov 2023 12:45:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          91.200.241.0/24 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.20.0/22 maxlen: 24
                          194.36.24.0/24 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          78.142.195.0/24 maxlen: 32
                          78.142.193.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          109.94.168.0/24 maxlen: 32
                          194.169.54.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          2a0c:59c0:3000::/40 maxlen: 128
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 128
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a09:0:9000::/40 maxlen: 128
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ae:f7:cd:16:ee:61:b2:a6:f4:7c:bf:80:69:d0:b8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Nov  8 12:45:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2683e7be4f0fd8ebc4cc60014a1164810566b5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:8c:2c:ba:ae:63:e7:2b:54:fe:37:e0:83:
                    1e:a4:ef:42:8f:e0:d6:85:13:8a:39:92:c9:f2:b7:
                    e2:00:5d:35:be:90:45:b1:26:d2:5e:be:8f:5c:a3:
                    96:67:c3:a0:8e:73:98:1b:43:13:1f:44:c8:3d:7f:
                    7e:70:b9:58:48:ca:f2:d4:bc:24:07:26:b7:9e:8d:
                    b2:ac:79:18:2c:eb:ec:3a:0b:b4:aa:ba:0d:b7:dd:
                    ea:53:f0:75:68:1b:81:60:08:36:ba:55:fa:59:1b:
                    65:e7:69:7a:d6:e5:0e:ee:9c:35:a7:0e:b1:c4:06:
                    a6:ea:4c:11:09:9b:89:e0:58:30:79:86:dc:72:5e:
                    18:d3:5b:53:2c:5c:f2:61:27:a4:c4:de:0c:f4:aa:
                    70:3e:38:cd:81:c4:14:41:13:6f:50:17:1f:b9:8d:
                    3b:a2:f3:8b:dc:38:a8:5c:d1:71:73:ae:e1:ce:65:
                    4d:50:89:c6:1e:8e:30:d2:a0:24:27:50:14:b9:33:
                    a2:a3:ad:a5:36:ba:9b:16:32:a7:95:f1:a1:ee:b3:
                    b0:14:e5:fc:9f:49:2e:fd:b4:6b:fc:0d:9b:51:93:
                    34:7c:ff:97:5f:da:48:f5:43:4f:47:89:39:29:dc:
                    d3:8e:9b:7d:2c:3d:8c:f2:d2:94:b7:c1:fd:4a:2e:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:83:E7:BE:4F:0F:D8:EB:C4:CC:60:01:4A:11:64:81:05:66:B5:E4
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JoPnvk8P2OvEzGABShFkgQVmteQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  185.49.32.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:d0:84:d2:0a:1f:cd:46:42:44:eb:0b:49:d4:0c:1d:75:
         95:54:4f:f5:5d:b8:0e:e9:8d:4f:0b:97:ef:ed:18:73:b5:22:
         44:ba:50:74:22:01:77:a9:fd:67:36:d5:e5:ed:8c:e2:60:bd:
         4a:39:22:8b:4a:6f:53:eb:2c:c4:38:a8:59:53:0c:fa:4b:01:
         5a:52:29:c7:99:e9:ca:2c:e8:15:06:10:b6:1d:4f:e7:6c:9a:
         3b:23:4f:34:64:89:f1:08:ab:a6:dc:a0:0d:60:53:cf:f2:78:
         0e:50:b5:25:eb:0f:20:6d:ce:75:fa:f6:63:59:02:55:10:5f:
         33:45:14:37:cd:67:0e:e9:cb:57:ef:2e:86:53:5f:2b:3c:e1:
         e2:73:c3:24:07:f7:8d:c8:b8:40:09:cb:08:30:f9:64:e8:42:
         c2:a9:6a:24:ae:df:b8:e7:68:24:f5:b3:a6:ad:4a:47:82:ca:
         db:ba:09:d8:b9:63:63:a8:62:3c:5e:14:1c:c1:70:3c:10:dd:
         c3:d7:4f:19:4e:f7:a8:f5:3c:b3:e7:87:02:d6:68:60:65:40:
         83:2e:fc:cf:de:2a:21:31:22:4c:da:2d:e3:97:c0:bc:42:dc:
         ba:c8:2f:2b:1e:7c:cf:2e:f2:8a:3d:86:19:0f:99:35:90:10:
         33:04:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 01:55:33 2023 by rpki-client on console-fra.rpki-client.org