Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6xFeoUF2_3ovED7VagDs65QV38c.roa
File:                     6xFeoUF2_3ovED7VagDs65QV38c.roa (raw, json)
Hash identifier:          fZZInFXYcwyO6AwBDkhKF0Tqn0PCAyfcpSt1qOCCCZo=
Subject key identifier:   EB:11:5E:A1:41:76:FF:7A:2F:10:3E:D5:6A:00:EC:EB:94:15:DF:C7
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       01857255AAF4A26D68E0609E52F99559F7CF
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6xFeoUF2_3ovED7VagDs65QV38c.roa
Signing time:             Mon 02 Jan 2023 11:54:54 +0000
ROA not before:           Mon 02 Jan 2023 11:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6866
IP address blocks:        87.228.128.0/17 maxlen: 24
                          62.228.128.0/19 maxlen: 19
                          87.228.128.0/18 maxlen: 18
                          87.228.144.0/20 maxlen: 20
                          62.228.64.0/19 maxlen: 19
                          62.228.96.0/19 maxlen: 19
                          62.228.226.0/23 maxlen: 23
                          87.228.224.0/20 maxlen: 20
                          87.228.224.0/19 maxlen: 19
                          62.228.224.0/19 maxlen: 19
                          62.228.228.0/24 maxlen: 24
                          62.228.229.0/24 maxlen: 24
                          62.228.240.0/23 maxlen: 23
                          87.228.240.0/20 maxlen: 20
                          83.168.0.0/19 maxlen: 19
                          83.168.0.0/18 maxlen: 24
                          62.228.160.0/19 maxlen: 19
                          87.228.160.0/20 maxlen: 20
                          87.228.176.0/20 maxlen: 20
                          87.228.192.0/20 maxlen: 20
                          62.228.192.0/19 maxlen: 19
                          83.168.32.0/19 maxlen: 19
                          87.228.208.0/20 maxlen: 20
                          31.153.128.0/19 maxlen: 19
                          176.92.224.0/19 maxlen: 24
                          31.153.160.0/19 maxlen: 19
                          31.153.96.0/19 maxlen: 19
                          62.228.0.0/19 maxlen: 19
                          62.228.0.0/21 maxlen: 21
                          62.228.0.0/16 maxlen: 24
                          62.228.8.0/21 maxlen: 21
                          62.228.16.0/22 maxlen: 22
                          62.228.20.0/22 maxlen: 22
                          62.228.24.0/21 maxlen: 21
                          62.228.32.0/19 maxlen: 19
                          31.153.192.0/19 maxlen: 19
                          31.153.224.0/19 maxlen: 19
                          212.31.96.0/20 maxlen: 20
                          212.31.96.0/24 maxlen: 24
                          212.31.96.0/19 maxlen: 24
                          212.31.112.0/20 maxlen: 20
                          81.4.128.0/18 maxlen: 24
                          81.4.128.0/19 maxlen: 19
                          212.31.121.0/24 maxlen: 24
                          212.31.122.0/24 maxlen: 24
                          212.31.123.0/24 maxlen: 24
                          212.31.124.0/24 maxlen: 24
                          212.31.125.0/24 maxlen: 24
                          81.4.133.0/24 maxlen: 24
                          212.31.127.0/24 maxlen: 24
                          31.153.16.0/20 maxlen: 20
                          31.153.32.0/19 maxlen: 19
                          31.153.64.0/19 maxlen: 19
                          81.4.160.0/19 maxlen: 19
                          81.4.160.0/20 maxlen: 20
                          81.4.160.0/21 maxlen: 21
                          81.4.168.0/21 maxlen: 21
                          81.4.174.0/24 maxlen: 24
                          81.4.176.0/21 maxlen: 21
                          31.153.0.0/17 maxlen: 17
                          31.153.0.0/20 maxlen: 20
                          31.153.0.0/19 maxlen: 19
                          31.153.0.0/16 maxlen: 24
                          46.199.0.0/19 maxlen: 19
                          46.199.0.0/18 maxlen: 18
                          46.199.0.0/16 maxlen: 24
                          46.199.16.0/20 maxlen: 20
                          46.199.32.0/19 maxlen: 19
                          46.199.32.0/20 maxlen: 20
                          46.199.48.0/20 maxlen: 20
                          46.199.64.0/20 maxlen: 20
                          46.199.88.0/24 maxlen: 24
                          46.198.32.0/19 maxlen: 19
                          46.198.64.0/19 maxlen: 19
                          46.198.64.0/18 maxlen: 18
                          46.198.0.0/18 maxlen: 18
                          46.198.0.0/19 maxlen: 19
                          46.198.0.0/17 maxlen: 24
                          46.198.96.0/19 maxlen: 19
                          93.109.192.0/19 maxlen: 19
                          93.109.209.0/24 maxlen: 24
                          93.109.219.0/24 maxlen: 24
                          93.109.224.0/19 maxlen: 19
                          93.109.128.0/19 maxlen: 19
                          93.109.160.0/19 maxlen: 19
                          185.2.97.0/24 maxlen: 24
                          185.2.98.0/24 maxlen: 24
                          185.2.96.0/24 maxlen: 24
                          185.2.96.0/22 maxlen: 24
                          185.2.99.0/24 maxlen: 24
                          93.109.227.0/24 maxlen: 24
                          93.109.239.0/24 maxlen: 24
                          213.7.208.0/24 maxlen: 24
                          195.14.142.0/24 maxlen: 24
                          195.14.144.0/20 maxlen: 20
                          213.7.208.0/20 maxlen: 20
                          195.14.151.0/24 maxlen: 24
                          195.14.146.0/24 maxlen: 24
                          213.7.220.0/22 maxlen: 22
                          213.7.224.0/20 maxlen: 20
                          195.14.153.0/24 maxlen: 24
                          213.7.240.0/20 maxlen: 20
                          93.109.0.0/19 maxlen: 19
                          93.109.0.0/16 maxlen: 24
                          128.0.224.0/20 maxlen: 24
                          213.7.160.0/20 maxlen: 20
                          213.7.176.0/20 maxlen: 20
                          128.0.240.0/20 maxlen: 24
                          213.7.192.0/20 maxlen: 20
                          195.14.128.0/19 maxlen: 24
                          195.14.128.0/20 maxlen: 20
                          213.149.176.0/20 maxlen: 20
                          93.109.96.0/19 maxlen: 19
                          93.109.32.0/19 maxlen: 19
                          213.149.160.0/19 maxlen: 24
                          213.149.160.0/20 maxlen: 20
                          93.109.64.0/19 maxlen: 19
                          213.7.0.0/17 maxlen: 17
                          213.7.0.0/20 maxlen: 20
                          213.7.0.0/16 maxlen: 24
                          213.7.16.0/20 maxlen: 20
                          213.7.32.0/20 maxlen: 20
                          213.7.96.0/20 maxlen: 20
                          213.7.112.0/20 maxlen: 20
                          213.7.128.0/18 maxlen: 18
                          213.7.128.0/20 maxlen: 20
                          128.0.200.0/21 maxlen: 24
                          128.0.208.0/20 maxlen: 24
                          37.149.0.0/16 maxlen: 24
                          213.7.144.0/20 maxlen: 20
                          128.0.107.0/24 maxlen: 24
                          213.7.48.0/20 maxlen: 20
                          213.7.64.0/20 maxlen: 20
                          213.7.80.0/20 maxlen: 20
                          2a00:1358:1000::/48 maxlen: 48
                          2a00:1358:df00::/48 maxlen: 48
                          2a00:1358::/30 maxlen: 30
                          2a00:1358:f000::/41 maxlen: 41
                          2a00:1358:f080::/41 maxlen: 41
                          2a00:1358:b000::/44 maxlen: 44
                          2a00:1358:f000::/40 maxlen: 40
                          2a00:1358:d000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:55:aa:f4:a2:6d:68:e0:60:9e:52:f9:95:59:f7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  2 11:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb115ea14176ff7a2f103ed56a00eceb9415dfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:36:b9:cd:c6:3e:1a:48:7f:d3:bb:29:83:
                    9e:d0:25:d4:1c:7d:f3:69:33:a0:41:2e:a4:97:cb:
                    8d:d7:b2:5d:2f:a8:73:06:93:10:2d:60:a7:54:ce:
                    f9:30:d5:9b:ec:81:32:c0:56:6e:8c:7d:13:1c:c6:
                    8e:38:cb:95:d7:2e:31:c6:db:61:3b:80:82:39:5d:
                    1a:1d:04:73:ad:37:d2:ee:02:84:23:27:1c:89:05:
                    0e:ab:0a:a5:f4:a2:1d:85:f9:22:5d:6a:ed:e8:1d:
                    d3:56:87:e8:a0:24:2b:12:d0:cb:fd:e7:92:ae:ed:
                    52:b1:b7:23:bd:77:e4:8f:10:7c:d4:55:75:a6:f7:
                    8f:e8:ab:c9:fc:88:c0:d2:ad:42:e5:92:f7:a9:7b:
                    2f:3f:ed:15:c7:2e:16:ae:55:83:5e:33:16:2b:76:
                    e9:1a:7e:b8:99:22:a3:d0:22:45:de:1b:6f:73:43:
                    cb:fc:bf:46:e5:94:5e:6f:11:30:d5:b8:71:e7:fe:
                    a8:4b:d6:c8:21:5f:47:39:42:b8:d3:48:77:97:05:
                    91:bd:16:e1:bf:e8:60:17:bb:14:4b:1a:78:f8:97:
                    b2:8f:7b:1b:b2:e1:c4:76:e5:46:e5:02:a8:18:f3:
                    c1:48:71:5b:0e:91:b9:c1:cc:19:97:7f:5c:01:02:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:11:5E:A1:41:76:FF:7A:2F:10:3E:D5:6A:00:EC:EB:94:15:DF:C7
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6xFeoUF2_3ovED7VagDs65QV38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.153.0.0/16
                  37.149.0.0/16
                  46.198.0.0/17
                  46.199.0.0/16
                  62.228.0.0/16
                  81.4.128.0/18
                  83.168.0.0/18
                  87.228.128.0/17
                  93.109.0.0/16
                  128.0.107.0/24
                  128.0.200.0-128.0.255.255
                  176.92.224.0/19
                  185.2.96.0/22
                  195.14.128.0/19
                  212.31.96.0/19
                  213.7.0.0/16
                  213.149.160.0/19
                IPv6:
                  2a00:1358::/30

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:5a:94:4e:8a:7e:b6:8a:60:03:d8:ea:1a:aa:b1:95:b3:
         bd:8f:e7:3b:f0:d4:bc:d7:bd:14:09:04:c6:7b:a9:6b:ad:b6:
         dd:95:6c:e5:c6:44:b9:78:23:de:01:2c:73:0f:4b:28:cb:d7:
         ac:11:5d:1f:93:43:56:19:77:24:14:b6:b4:9c:69:42:42:b5:
         5e:02:ca:58:98:06:9a:ab:9a:a9:98:99:99:76:6f:50:5a:f6:
         d4:ef:f7:9c:a5:61:31:65:32:4d:38:6a:7c:ba:f9:f2:23:21:
         7d:8a:d7:56:19:1b:f8:62:be:06:52:2b:2d:1f:66:0e:d3:66:
         60:21:60:2f:92:f3:41:77:6e:f0:0a:54:db:2c:98:11:23:36:
         87:0b:ae:56:06:9c:63:86:f9:b8:c5:c3:ba:30:13:1a:9e:1b:
         f2:15:93:0a:c3:16:09:9f:a3:22:d0:57:e8:f1:4a:87:97:d3:
         b0:bf:e0:25:27:b9:59:02:68:d4:d3:63:80:1d:ff:3d:0c:05:
         a4:61:da:ab:c1:e9:a4:3c:3d:8a:02:9d:f1:9a:51:cb:d7:6e:
         40:2a:6c:27:0a:8b:7e:17:32:99:ae:5c:25:1e:0f:a7:d8:90:
         45:55:5f:53:c9:48:77:c5:5a:c7:e0:29:6c:bc:c4:2a:5f:6a:
         92:2d:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org