Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/hFKviznLCgpXrq4mMv6ucdAEXaE.roa
File:                     hFKviznLCgpXrq4mMv6ucdAEXaE.roa (raw, json)
Hash identifier:          S7xTgitzpwozKyR/5Ed8dzAhN1c0P3LBkG4tPgXztYY=
Subject key identifier:   84:52:AF:8B:39:CB:0A:0A:57:AE:AE:26:32:FE:AE:71:D0:04:5D:A1
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       018B233C4AC878B7D0A5058D630120473908
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/hFKviznLCgpXrq4mMv6ucdAEXaE.roa
Signing time:             Thu 12 Oct 2023 09:33:55 +0000
ROA not before:           Thu 12 Oct 2023 09:33:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8926
IP address blocks:        93.113.244.0/22 maxlen: 22
                          86.107.64.0/22 maxlen: 22
                          89.46.164.0/22 maxlen: 22
                          188.208.96.0/22 maxlen: 22
                          188.208.104.0/22 maxlen: 22
                          188.214.200.0/21 maxlen: 21
                          89.32.252.0/22 maxlen: 22
                          188.214.228.0/22 maxlen: 24
                          86.107.160.0/21 maxlen: 21
                          188.208.192.0/22 maxlen: 22
                          188.208.204.0/22 maxlen: 22
                          92.114.128.0/18 maxlen: 18
                          92.114.128.0/17 maxlen: 24
                          188.208.112.0/22 maxlen: 22
                          188.208.120.0/21 maxlen: 24
                          89.32.56.0/21 maxlen: 21
                          93.119.200.0/21 maxlen: 21
                          93.119.232.0/21 maxlen: 21
                          93.119.228.0/22 maxlen: 22
                          188.214.60.0/22 maxlen: 22
                          93.113.64.0/21 maxlen: 21
                          188.213.236.0/22 maxlen: 22
                          93.119.160.0/21 maxlen: 21
                          188.213.244.0/22 maxlen: 22
                          93.119.196.0/22 maxlen: 22
                          89.39.96.0/21 maxlen: 21
                          188.214.136.0/22 maxlen: 22
                          89.32.172.0/22 maxlen: 22
                          188.214.147.0/24 maxlen: 24
                          188.214.146.0/24 maxlen: 24
                          86.106.213.0/24 maxlen: 24
                          89.39.112.0/21 maxlen: 24
                          86.106.208.0/20 maxlen: 20
                          86.106.224.0/19 maxlen: 24
                          86.106.144.0/21 maxlen: 21
                          93.113.80.0/21 maxlen: 21
                          89.32.136.0/21 maxlen: 21
                          93.113.92.0/22 maxlen: 22
                          89.39.76.0/22 maxlen: 22
                          89.39.84.0/22 maxlen: 22
                          89.38.32.0/22 maxlen: 22
                          178.132.112.0/20 maxlen: 24
                          178.132.128.0/18 maxlen: 24
                          89.38.64.0/22 maxlen: 22
                          89.38.76.0/22 maxlen: 22
                          86.105.172.0/22 maxlen: 22
                          93.118.188.0/22 maxlen: 22
                          86.105.80.0/21 maxlen: 21
                          188.213.36.0/22 maxlen: 22
                          188.213.52.0/22 maxlen: 22
                          93.119.96.0/21 maxlen: 21
                          93.119.108.0/22 maxlen: 22
                          93.119.128.0/21 maxlen: 21
                          93.119.140.0/22 maxlen: 22
                          188.213.220.0/22 maxlen: 22
                          93.119.144.0/21 maxlen: 21
                          89.45.40.0/22 maxlen: 22
                          86.105.208.0/22 maxlen: 22
                          109.185.128.0/18 maxlen: 24
                          89.37.104.0/24 maxlen: 24
                          86.104.196.0/22 maxlen: 22
                          109.185.64.0/18 maxlen: 18
                          89.37.44.0/22 maxlen: 22
                          89.44.152.0/22 maxlen: 22
                          86.105.56.0/21 maxlen: 21
                          93.118.176.0/22 maxlen: 22
                          109.185.192.0/18 maxlen: 18
                          93.117.68.0/22 maxlen: 22
                          93.117.72.0/21 maxlen: 21
                          89.36.156.0/22 maxlen: 22
                          85.204.176.0/21 maxlen: 21
                          93.117.48.0/20 maxlen: 20
                          188.212.0.0/22 maxlen: 22
                          188.212.8.0/21 maxlen: 21
                          188.212.24.0/21 maxlen: 21
                          89.43.168.0/22 maxlen: 22
                          188.212.40.0/21 maxlen: 21
                          93.117.128.0/21 maxlen: 21
                          93.117.144.0/21 maxlen: 21
                          93.117.140.0/22 maxlen: 22
                          89.43.128.0/22 maxlen: 22
                          93.117.156.0/22 maxlen: 22
                          109.185.0.0/18 maxlen: 18
                          93.117.160.0/21 maxlen: 21
                          109.185.0.0/16 maxlen: 24
                          93.117.168.0/22 maxlen: 22
                          93.116.128.0/18 maxlen: 18
                          89.42.104.0/22 maxlen: 22
                          188.237.192.0/18 maxlen: 18
                          89.42.128.0/22 maxlen: 22
                          188.237.128.0/18 maxlen: 18
                          93.116.64.0/18 maxlen: 18
                          89.42.64.0/22 maxlen: 22
                          188.237.168.0/24 maxlen: 24
                          89.42.72.0/21 maxlen: 21
                          5.56.64.0/24 maxlen: 24
                          5.56.64.0/18 maxlen: 24
                          5.56.73.0/24 maxlen: 24
                          5.56.72.0/24 maxlen: 24
                          89.42.224.0/22 maxlen: 22
                          188.210.240.0/21 maxlen: 21
                          89.35.200.0/22 maxlen: 22
                          188.210.248.0/22 maxlen: 22
                          93.116.192.0/18 maxlen: 24
                          89.42.180.0/22 maxlen: 22
                          89.34.192.0/21 maxlen: 21
                          94.176.64.0/20 maxlen: 20
                          89.34.204.0/22 maxlen: 22
                          46.55.0.0/18 maxlen: 18
                          46.55.0.0/17 maxlen: 24
                          37.75.64.0/18 maxlen: 24
                          89.34.232.0/22 maxlen: 22
                          188.237.0.0/18 maxlen: 18
                          92.115.192.0/18 maxlen: 18
                          188.237.0.0/16 maxlen: 24
                          212.0.215.0/24 maxlen: 24
                          89.41.64.0/18 maxlen: 24
                          212.0.219.0/24 maxlen: 24
                          37.75.16.0/20 maxlen: 24
                          92.115.128.0/18 maxlen: 18
                          188.209.216.0/21 maxlen: 21
                          93.115.136.0/21 maxlen: 21
                          188.237.64.0/18 maxlen: 18
                          93.116.0.0/18 maxlen: 18
                          89.35.40.0/21 maxlen: 21
                          93.116.0.0/16 maxlen: 24
                          46.55.111.0/24 maxlen: 24
                          89.35.84.0/22 maxlen: 22
                          188.237.24.0/22 maxlen: 24
                          89.35.8.0/21 maxlen: 21
                          46.55.64.0/18 maxlen: 18
                          185.28.104.0/22 maxlen: 24
                          92.114.192.0/20 maxlen: 20
                          92.114.192.0/18 maxlen: 18
                          188.215.236.0/22 maxlen: 22
                          188.215.252.0/22 maxlen: 22
                          92.114.144.0/20 maxlen: 20
                          92.114.160.0/20 maxlen: 20
                          92.114.176.0/20 maxlen: 20
                          92.115.64.0/18 maxlen: 18
                          212.0.192.0/22 maxlen: 22
                          212.0.192.0/19 maxlen: 32
                          212.0.199.0/24 maxlen: 24
                          212.0.195.0/24 maxlen: 24
                          212.0.193.0/24 maxlen: 24
                          89.34.112.0/21 maxlen: 21
                          212.0.198.0/24 maxlen: 24
                          212.0.196.0/24 maxlen: 24
                          212.0.200.0/21 maxlen: 24
                          212.0.203.0/24 maxlen: 24
                          212.0.208.0/20 maxlen: 24
                          212.0.210.0/24 maxlen: 24
                          92.115.0.0/18 maxlen: 18
                          89.40.228.0/22 maxlen: 22
                          92.115.0.0/16 maxlen: 24
                          89.34.64.0/21 maxlen: 21
                          2a02:a30:1600::/48 maxlen: 48
                          2a02:a30:172::/48 maxlen: 48
                          2a02:a30:6330:103::/64 maxlen: 64
                          2a02:a30:f090::/44 maxlen: 48
                          2a02:a30::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:23:3c:4a:c8:78:b7:d0:a5:05:8d:63:01:20:47:39:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Oct 12 09:33:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8452af8b39cb0a0a57aeae2632feae71d0045da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:2a:a9:35:8c:13:0e:5e:02:5b:7b:b0:e2:
                    d6:9c:a1:ae:39:06:2e:82:fc:b8:54:33:92:a7:b9:
                    c7:8f:8a:c8:ae:11:4f:98:5a:69:02:13:55:ce:3f:
                    01:6f:a7:49:6d:df:3e:d8:ba:cb:68:e0:9a:ab:3d:
                    75:11:fa:b8:6f:7a:0e:af:31:ca:6f:65:3d:db:ea:
                    bc:85:3b:f6:13:7d:0f:f6:12:e3:2d:2c:0b:2b:ed:
                    2e:40:21:0f:8a:70:ba:88:ac:16:6f:b9:f3:b9:ee:
                    28:4c:90:66:d4:99:be:f2:8f:83:f6:e1:7f:04:ab:
                    fe:c9:76:a8:60:e5:e4:d8:37:dd:01:5f:a5:a4:9b:
                    bd:e6:d1:0a:1b:76:54:1f:39:f2:9c:c1:07:f9:ca:
                    68:91:00:1e:66:df:32:90:91:df:49:a6:62:6f:e5:
                    3e:a5:e5:05:b1:0f:f3:8c:1d:d3:4b:87:71:6b:99:
                    18:ac:2f:38:81:b7:90:f5:cc:e0:b0:05:79:b4:98:
                    f4:bd:c0:04:8f:4e:ea:44:bb:ac:94:a5:99:de:06:
                    89:9e:a3:43:f5:d7:bb:30:cc:eb:39:cf:13:70:45:
                    e4:58:1b:a7:cb:e2:86:d4:10:1b:68:ae:a0:93:90:
                    f4:5a:06:07:b9:43:95:a7:06:4c:4c:5c:20:56:00:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:AF:8B:39:CB:0A:0A:57:AE:AE:26:32:FE:AE:71:D0:04:5D:A1
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/hFKviznLCgpXrq4mMv6ucdAEXaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.64.0/18
                  37.75.16.0/20
                  37.75.64.0/18
                  46.55.0.0/17
                  85.204.176.0/21
                  86.104.196.0/22
                  86.105.56.0/21
                  86.105.80.0/21
                  86.105.172.0/22
                  86.105.208.0/22
                  86.106.144.0/21
                  86.106.208.0-86.106.255.255
                  86.107.64.0/22
                  86.107.160.0/21
                  89.32.56.0/21
                  89.32.136.0/21
                  89.32.172.0/22
                  89.32.252.0/22
                  89.34.64.0/21
                  89.34.112.0/21
                  89.34.192.0/21
                  89.34.204.0/22
                  89.34.232.0/22
                  89.35.8.0/21
                  89.35.40.0/21
                  89.35.84.0/22
                  89.35.200.0/22
                  89.36.156.0/22
                  89.37.44.0/22
                  89.37.104.0/24
                  89.38.32.0/22
                  89.38.64.0/22
                  89.38.76.0/22
                  89.39.76.0/22
                  89.39.84.0/22
                  89.39.96.0/21
                  89.39.112.0/21
                  89.40.228.0/22
                  89.41.64.0/18
                  89.42.64.0/22
                  89.42.72.0/21
                  89.42.104.0/22
                  89.42.128.0/22
                  89.42.180.0/22
                  89.42.224.0/22
                  89.43.128.0/22
                  89.43.168.0/22
                  89.44.152.0/22
                  89.45.40.0/22
                  89.46.164.0/22
                  92.114.128.0-92.115.255.255
                  93.113.64.0/21
                  93.113.80.0/21
                  93.113.92.0/22
                  93.113.244.0/22
                  93.115.136.0/21
                  93.116.0.0/16
                  93.117.48.0/20
                  93.117.68.0-93.117.79.255
                  93.117.128.0/21
                  93.117.140.0-93.117.151.255
                  93.117.156.0-93.117.171.255
                  93.118.176.0/22
                  93.118.188.0/22
                  93.119.96.0/21
                  93.119.108.0/22
                  93.119.128.0/21
                  93.119.140.0-93.119.151.255
                  93.119.160.0/21
                  93.119.196.0-93.119.207.255
                  93.119.228.0-93.119.239.255
                  94.176.64.0/20
                  109.185.0.0/16
                  178.132.112.0-178.132.191.255
                  185.28.104.0/22
                  188.208.96.0/22
                  188.208.104.0/22
                  188.208.112.0/22
                  188.208.120.0/21
                  188.208.192.0/22
                  188.208.204.0/22
                  188.209.216.0/21
                  188.210.240.0-188.210.251.255
                  188.212.0.0/22
                  188.212.8.0/21
                  188.212.24.0/21
                  188.212.40.0/21
                  188.213.36.0/22
                  188.213.52.0/22
                  188.213.220.0/22
                  188.213.236.0/22
                  188.213.244.0/22
                  188.214.60.0/22
                  188.214.136.0/22
                  188.214.146.0/23
                  188.214.200.0/21
                  188.214.228.0/22
                  188.215.236.0/22
                  188.215.252.0/22
                  188.237.0.0/16
                  212.0.192.0/19
                IPv6:
                  2a02:a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:2b:7e:45:f9:c5:fb:68:55:a4:11:88:5e:61:f0:b0:34:ba:
         4e:9e:39:23:cb:c7:ac:d5:2d:9d:44:33:3d:81:a9:be:2a:09:
         f4:a5:c2:a1:3e:5d:de:f3:f7:75:f7:4e:e3:32:16:bd:4f:93:
         ff:fd:40:f0:15:51:cd:a8:f6:58:69:a3:10:4a:8b:25:d2:77:
         bc:4a:1d:eb:4f:ef:f3:11:14:48:00:7b:0d:94:25:0b:28:05:
         f5:0c:83:07:95:e6:f0:15:42:4f:e6:ef:3d:a4:47:e8:99:5e:
         48:78:14:15:be:5c:e5:50:1c:0a:85:ab:58:ac:3c:05:ad:79:
         42:8c:c4:28:f5:27:f8:f2:c4:22:a1:56:00:ff:e9:1a:49:3b:
         4a:1a:51:de:dc:1b:7a:0a:dc:b2:1a:9b:f4:44:17:10:4b:1f:
         e5:6b:ae:ea:23:5d:a4:77:66:99:89:c3:73:34:60:3b:09:79:
         e4:09:c6:4f:87:9a:a7:6e:b5:d9:ba:43:29:e3:c1:6a:b1:3a:
         20:4a:00:52:3a:e5:f9:67:d9:55:25:49:74:df:58:70:b6:1b:
         8e:af:70:26:98:28:05:dd:6b:b2:fd:0c:25:e7:c5:a5:e1:aa:
         b2:63:d5:e8:6b:b2:bf:70:96:9d:17:41:1c:28:62:f9:c5:cd:
         60:ec:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:27 2024 by rpki-client on console-ams.rpki-client.org