Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/wgT4cSvb-RtFFzFOHdEvtbmbBbM.roa
File:                     wgT4cSvb-RtFFzFOHdEvtbmbBbM.roa (raw, json)
Hash identifier:          5mYYAvc7qrrunawDznYeuHckBbgsupsRTgrXkZuBrrI=
Subject key identifier:   C2:04:F8:71:2B:DB:F9:1B:45:17:31:4E:1D:D1:2F:B5:B9:9B:05:B3
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       0189F07AFC6A52724F940EB9933715827339
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/wgT4cSvb-RtFFzFOHdEvtbmbBbM.roa
Signing time:             Sun 13 Aug 2023 19:58:59 +0000
ROA not before:           Sun 13 Aug 2023 19:58:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          91.200.241.0/24 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.20.0/22 maxlen: 24
                          194.36.24.0/24 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          78.142.193.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          194.169.54.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 128
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a09:0:9000::/40 maxlen: 128
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f0:7a:fc:6a:52:72:4f:94:0e:b9:93:37:15:82:73:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Aug 13 19:58:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c204f8712bdbf91b4517314e1dd12fb5b99b05b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:ce:21:55:e1:f3:af:a4:7c:5c:fa:50:25:
                    92:e5:e2:44:55:3d:24:34:ae:e6:18:d8:d7:df:25:
                    60:8d:36:ac:a3:d4:92:ac:33:2f:00:16:07:5d:21:
                    35:d1:2f:df:03:ed:48:2f:b1:94:e3:7a:ec:c2:4a:
                    90:49:04:4b:dd:32:64:e3:43:ad:69:a8:28:b0:38:
                    6a:5f:92:fa:6f:9d:a0:51:bf:61:6c:89:e2:b2:67:
                    25:b7:2a:45:f2:95:4e:20:fe:90:05:b2:a0:24:fa:
                    dc:9e:86:be:0e:20:89:b6:eb:5d:4a:a4:00:2f:d3:
                    2b:15:7a:20:53:c3:6e:78:f6:33:bd:71:70:94:09:
                    fe:71:8b:0d:c5:b7:86:e1:6f:36:9f:5f:0f:84:80:
                    a7:50:15:0e:5b:7a:14:3d:4f:29:e2:c6:c1:0f:b2:
                    31:0e:48:90:cf:40:52:c1:9d:68:ff:93:ad:9d:bc:
                    56:b6:80:d0:bc:41:c1:aa:d0:0b:2e:c5:4d:f3:8e:
                    c3:d8:42:33:0c:73:c1:2f:e4:31:5e:fc:f1:3c:4b:
                    4e:6e:a7:0d:00:d0:21:92:76:c1:10:bb:eb:38:28:
                    4c:83:83:d1:89:75:ad:e8:b2:bc:7a:d3:7c:89:68:
                    43:c8:43:02:dd:ce:91:91:05:53:ee:9b:24:0c:b0:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:04:F8:71:2B:DB:F9:1B:45:17:31:4E:1D:D1:2F:B5:B9:9B:05:B3
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/wgT4cSvb-RtFFzFOHdEvtbmbBbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  185.49.32.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:fb:e9:fc:95:fd:45:54:c9:9b:59:d0:90:0a:64:55:34:
         12:a7:87:b6:03:7c:d4:ba:cf:94:ec:72:bc:11:bf:36:ee:dd:
         3f:21:10:2a:30:68:f5:52:1b:d9:7e:a8:2e:ac:e1:22:99:60:
         9c:01:40:f0:ae:42:cf:19:2c:56:2d:2a:62:a7:fa:35:4c:35:
         75:b0:f2:13:57:3d:e4:c7:09:32:30:5e:48:8f:d2:13:f4:9e:
         15:16:2d:14:9a:5b:b1:4d:e3:a4:92:b2:ca:ad:03:02:46:db:
         63:64:32:ca:9b:7d:a7:2b:56:9a:47:e3:7b:4b:42:a0:f8:16:
         8b:94:c9:d9:90:02:99:b0:5d:98:56:06:59:f6:a4:37:ec:ba:
         64:33:99:ac:62:7a:e8:38:f7:e9:b8:35:9b:1b:9e:02:9e:31:
         cb:29:a5:fc:38:e2:e9:1f:85:5e:75:d3:8a:2d:b8:67:a3:45:
         ac:6f:58:c3:c0:f9:12:7d:99:58:9b:39:2b:5e:2d:ff:c0:bc:
         8f:60:ea:12:cf:44:98:4d:df:72:d8:86:48:67:0f:ef:41:25:
         7b:cd:c6:3a:92:82:4c:46:b9:74:1e:e9:3c:16:86:b1:52:9d:
         50:7a:5c:a1:4a:0d:c1:f0:52:6d:78:2d:bc:a0:a4:3c:87:d6:
         f0:4c:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 10:20:39 2023 by rpki-client on console-ams.rpki-client.org