Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa
File:                     cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa (raw, json)
Hash identifier:          bdZ0K+9nBOUR3zTyugj5WLKD5nBOGi3vsIcdwh6dHvo=
Subject key identifier:   70:F9:D0:22:73:F4:3E:A6:FA:0F:99:7A:3C:4F:28:4A:CD:43:8F:F1
Certificate issuer:       /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial:       01862C79410330A78363CD1F8F6EDAE7499A
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa
Signing time:             Tue 07 Feb 2023 15:23:09 +0000
ROA not before:           Tue 07 Feb 2023 15:23:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48582
IP address blocks:        217.147.178.0/24 maxlen: 24
                          217.147.177.0/24 maxlen: 24
                          217.147.179.0/24 maxlen: 24
                          217.147.176.0/24 maxlen: 24
                          217.147.182.0/24 maxlen: 24
                          217.147.181.0/24 maxlen: 24
                          217.147.183.0/24 maxlen: 24
                          217.147.180.0/24 maxlen: 24
                          193.118.192.0/24 maxlen: 24
                          193.118.196.0/24 maxlen: 24
                          193.118.195.0/24 maxlen: 24
                          193.118.198.0/24 maxlen: 24
                          193.118.194.0/24 maxlen: 24
                          193.118.193.0/24 maxlen: 24
                          193.118.199.0/24 maxlen: 24
                          193.118.201.0/24 maxlen: 24
                          193.118.206.0/24 maxlen: 24
                          193.118.203.0/24 maxlen: 24
                          193.118.202.0/24 maxlen: 24
                          193.118.205.0/24 maxlen: 24
                          193.118.204.0/24 maxlen: 24
                          193.118.200.0/24 maxlen: 24
                          193.118.210.0/24 maxlen: 24
                          193.118.209.0/24 maxlen: 24
                          193.118.212.0/24 maxlen: 24
                          193.118.211.0/24 maxlen: 24
                          193.118.208.0/24 maxlen: 24
                          193.118.207.0/24 maxlen: 24
                          193.118.213.0/24 maxlen: 24
                          193.118.217.0/24 maxlen: 24
                          193.118.216.0/24 maxlen: 24
                          193.118.219.0/24 maxlen: 24
                          193.118.218.0/24 maxlen: 24
                          193.118.215.0/24 maxlen: 24
                          193.118.214.0/24 maxlen: 24
                          209.213.49.0/24 maxlen: 24
                          209.213.48.0/24 maxlen: 24
                          209.213.50.0/24 maxlen: 24
                          193.118.220.0/24 maxlen: 24
                          209.213.51.0/24 maxlen: 24
                          209.213.55.0/24 maxlen: 24
                          209.213.56.0/24 maxlen: 24
                          209.213.57.0/24 maxlen: 24
                          209.213.52.0/24 maxlen: 24
                          209.213.54.0/24 maxlen: 24
                          209.213.53.0/24 maxlen: 24
                          209.213.58.0/24 maxlen: 24
                          209.213.63.0/24 maxlen: 24
                          209.213.62.0/24 maxlen: 24
                          209.213.59.0/24 maxlen: 24
                          209.213.61.0/24 maxlen: 24
                          209.213.60.0/24 maxlen: 24
                          193.118.136.0/24 maxlen: 24
                          193.118.137.0/24 maxlen: 24
                          193.118.139.0/24 maxlen: 24
                          193.118.138.0/24 maxlen: 24
                          193.118.133.0/24 maxlen: 24
                          193.118.135.0/24 maxlen: 24
                          193.118.134.0/24 maxlen: 24
                          193.118.140.0/24 maxlen: 24
                          193.118.142.0/24 maxlen: 24
                          193.118.141.0/24 maxlen: 24
                          193.118.144.0/24 maxlen: 24
                          193.118.143.0/24 maxlen: 24
                          193.118.145.0/24 maxlen: 24
                          193.118.152.0/24 maxlen: 24
                          193.118.151.0/24 maxlen: 24
                          193.118.150.0/24 maxlen: 24
                          193.118.147.0/24 maxlen: 24
                          193.118.149.0/24 maxlen: 24
                          193.118.148.0/24 maxlen: 24
                          193.118.146.0/24 maxlen: 24
                          193.118.154.0/24 maxlen: 24
                          193.118.153.0/24 maxlen: 24
                          193.118.156.0/24 maxlen: 24
                          193.118.155.0/24 maxlen: 24
                          193.118.158.0/24 maxlen: 24
                          193.118.157.0/24 maxlen: 24
                          193.118.159.0/24 maxlen: 24
                          193.118.128.0/24 maxlen: 24
                          193.118.130.0/24 maxlen: 24
                          193.118.129.0/24 maxlen: 24
                          193.118.132.0/24 maxlen: 24
                          193.118.131.0/24 maxlen: 24
                          138.43.28.0/22 maxlen: 22
                          185.170.161.0/24 maxlen: 24
                          185.170.163.0/24 maxlen: 24
                          185.170.162.0/24 maxlen: 24
                          63.142.4.0/24 maxlen: 24
                          63.142.1.0/24 maxlen: 24
                          63.142.3.0/24 maxlen: 24
                          63.142.2.0/24 maxlen: 24
                          63.142.0.0/24 maxlen: 24
                          63.142.5.0/24 maxlen: 24
                          63.142.6.0/24 maxlen: 24
                          63.142.11.0/24 maxlen: 24
                          63.142.8.0/24 maxlen: 24
                          63.142.7.0/24 maxlen: 24
                          63.142.10.0/24 maxlen: 24
                          63.142.9.0/24 maxlen: 24
                          63.142.15.0/24 maxlen: 24
                          63.142.14.0/24 maxlen: 24
                          63.142.12.0/24 maxlen: 24
                          63.142.13.0/24 maxlen: 24
                          217.147.178.0/23 maxlen: 23
                          217.147.176.0/23 maxlen: 23
                          217.147.182.0/23 maxlen: 23
                          193.118.204.0/23 maxlen: 23
                          193.118.200.0/22 maxlen: 22
                          193.118.216.0/22 maxlen: 22
                          193.118.214.0/23 maxlen: 23
                          209.213.48.0/22 maxlen: 22
                          209.213.48.0/20 maxlen: 20
                          209.213.56.0/22 maxlen: 22
                          209.213.52.0/22 maxlen: 22
                          209.213.60.0/22 maxlen: 22
                          193.118.138.0/23 maxlen: 23
                          193.118.134.0/23 maxlen: 23
                          193.118.144.0/22 maxlen: 22
                          193.118.150.0/23 maxlen: 23
                          193.118.152.0/23 maxlen: 23
                          193.118.128.0/23 maxlen: 23
                          193.118.132.0/23 maxlen: 23
                          138.43.4.0/24 maxlen: 24
                          138.43.0.0/24 maxlen: 24
                          138.43.8.0/24 maxlen: 24
                          138.43.7.0/24 maxlen: 24
                          138.43.10.0/24 maxlen: 24
                          138.43.9.0/24 maxlen: 24
                          138.43.6.0/24 maxlen: 24
                          138.43.5.0/24 maxlen: 24
                          138.43.11.0/24 maxlen: 24
                          138.43.15.0/24 maxlen: 24
                          138.43.14.0/24 maxlen: 24
                          138.43.13.0/24 maxlen: 24
                          138.43.12.0/24 maxlen: 24
                          138.43.31.0/24 maxlen: 24
                          138.43.29.0/24 maxlen: 24
                          138.43.28.0/24 maxlen: 24
                          138.43.30.0/24 maxlen: 24
                          138.43.26.0/24 maxlen: 24
                          63.142.6.0/23 maxlen: 23
                          63.142.14.0/23 maxlen: 23
                          2a0b:2900:3140::/42 maxlen: 42
                          2a0b:2900:3240::/42 maxlen: 42
                          2a0b:2900:1140::/42 maxlen: 42
                          2a0b:2900:6140::/42 maxlen: 42
                          2a0b:2900:2140::/42 maxlen: 42
                          2a0b:2900:216c::/48 maxlen: 48
                          2a0b:2900:7f::/48 maxlen: 48
                          2a0b:2900:6100::/42 maxlen: 42
                          2a0b:2900:3100::/42 maxlen: 42
                          2a0b:2900:2100::/42 maxlen: 42
                          2a0b:2900:3200::/42 maxlen: 42
                          2a0b:2900:1100::/42 maxlen: 42
                          2a0b:2900:52b4::/47 maxlen: 47
                          2a0b:2900:4100::/41 maxlen: 41
                          2a0b:2900:5200::/41 maxlen: 41
                          2a0b:2900:1100::/41 maxlen: 41
                          2a0b:2900:2200::/41 maxlen: 42
                          2a0b:2900:3100::/41 maxlen: 41
                          2a0b:2900:6200::/41 maxlen: 41
                          2a0b:2900:3200::/41 maxlen: 41
                          2a0b:2900:2100::/41 maxlen: 41
                          2a0b:2900:1000::/41 maxlen: 42
                          2a0b:2900:4200::/41 maxlen: 41
                          2a0b:2900:2300::/41 maxlen: 42
                          2a0b:2900:1200::/41 maxlen: 42
                          2a0b:2900:61c0::/42 maxlen: 42
                          2a0b:2900:12c0::/42 maxlen: 42
                          2a0b:2900:31c0::/42 maxlen: 42
                          2a0b:2900:21c0::/42 maxlen: 42
                          2a0b:2900:32c0::/42 maxlen: 42
                          2a0b:2900:11c0::/42 maxlen: 42
                          2a0b:2900:1f00::/40 maxlen: 40
                          2a0b:2900:3180::/42 maxlen: 42
                          2a0b:2900:1180::/42 maxlen: 42
                          2a0b:2900:6180::/42 maxlen: 42
                          2a0b:2900:3280::/42 maxlen: 42
                          2a0b:2900:2180::/42 maxlen: 42
                          2a0b:2900:5234::/47 maxlen: 47
                          2a0b:2900:1280::/41 maxlen: 42
                          2a0b:2900:1180::/41 maxlen: 41
                          2a0b:2900:2280::/41 maxlen: 42
                          2a0b:2900:6280::/41 maxlen: 41
                          2a0b:2900:2380::/41 maxlen: 42
                          2a0b:2900:4280::/41 maxlen: 41
                          2a0b:2900:3180::/41 maxlen: 41
                          2a0b:2900:3280::/41 maxlen: 41
                          2a0b:2900:2180::/41 maxlen: 41
                          2a0b:2900:1080::/41 maxlen: 42
                          2a0b:2900:4180::/41 maxlen: 41
                          2a0b:2900:5280::/41 maxlen: 41

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2c:79:41:03:30:a7:83:63:cd:1f:8f:6e:da:e7:49:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
        Validity
            Not Before: Feb  7 15:23:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70f9d02273f43ea6fa0f997a3c4f284acd438ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:61:f2:15:94:be:2f:8a:8c:1d:f7:33:8e:
                    7b:ce:59:3e:f9:00:da:75:c0:a2:59:93:3b:8d:82:
                    17:23:68:13:85:41:6c:5b:d2:fe:da:9c:87:b0:4d:
                    56:c5:19:4f:a7:5b:cf:c8:6d:6f:5d:b0:3c:64:37:
                    da:68:b8:45:0d:a5:c4:de:78:1a:4a:8d:44:40:99:
                    75:bf:58:84:9c:62:93:3f:72:ca:18:b7:38:fb:9d:
                    f1:3b:a6:37:09:5f:ec:a9:27:21:0c:3f:55:60:48:
                    53:a6:1e:13:fb:21:91:cd:21:23:c8:49:a5:a5:d7:
                    19:0b:51:9b:ac:0f:87:a3:ac:35:18:2f:ac:4d:83:
                    fe:c1:a0:66:55:b8:6d:83:7d:f7:bc:1e:fd:33:5b:
                    5b:c9:e3:05:74:5f:fa:8f:2c:c7:d6:3c:91:fc:bf:
                    ac:86:3d:49:23:65:76:b1:a8:c9:a1:d8:eb:c0:76:
                    2f:fb:9a:eb:b8:cf:01:70:e3:8a:34:8b:67:d8:ab:
                    3a:d5:10:0f:68:9d:2f:6a:f5:4d:40:b7:88:f9:7e:
                    ed:87:00:6a:e2:0f:3c:66:8a:6a:a2:ab:c7:2d:92:
                    c4:c0:7f:f9:01:7c:1e:da:9e:86:de:87:9a:c7:5c:
                    48:72:35:43:ce:a4:be:0c:63:d5:26:5e:61:c0:96:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F9:D0:22:73:F4:3E:A6:FA:0F:99:7A:3C:4F:28:4A:CD:43:8F:F1
            X509v3 Authority Key Identifier:
                keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/cPnQInP0Pqb6D5l6PE8oSs1Dj_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.0.0/20
                  138.43.0.0/24
                  138.43.4.0-138.43.15.255
                  138.43.26.0/24
                  138.43.28.0/22
                  185.170.161.0-185.170.163.255
                  193.118.128.0/19
                  193.118.192.0-193.118.196.255
                  193.118.198.0-193.118.220.255
                  209.213.48.0/20
                  217.147.176.0/21
                IPv6:
                  2a0b:2900:7f::/48
                  2a0b:2900:1000::-2a0b:2900:12ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:1f00::/40
                  2a0b:2900:2100::-2a0b:2900:23ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:3100::-2a0b:2900:32ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:4100::-2a0b:2900:42ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:5200::/40
                  2a0b:2900:6100::-2a0b:2900:62ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0f:9c:36:56:ec:ba:90:46:c2:36:6d:eb:bd:8f:16:81:91:e0:
         d9:63:e0:70:ca:9e:30:dc:1c:1d:4f:46:db:2c:23:82:88:a4:
         8c:9d:cb:03:2d:b9:6b:81:05:25:f2:29:e8:aa:44:1b:f9:b0:
         62:bf:03:d7:9f:f9:c7:5d:cf:5a:65:e3:12:d8:3a:46:87:b3:
         c9:35:b0:0b:15:c4:d6:47:75:a0:bc:6f:8a:53:1c:3a:f5:44:
         d5:db:d3:3f:16:7b:ad:6b:11:3a:13:77:b8:99:21:15:8f:0d:
         a3:66:78:61:c1:b6:78:33:19:c9:fe:64:83:92:6b:f1:82:05:
         d1:5e:76:16:f6:0f:72:c1:46:08:cb:9b:f2:0f:f0:c5:c8:6a:
         6d:f0:85:13:72:9a:a0:2c:bf:5a:79:55:0a:4b:f9:c7:a3:42:
         18:5d:84:91:b6:ac:2f:a2:fb:2b:04:d7:b9:07:8e:c3:5e:8a:
         60:b5:fe:17:6f:c9:f6:3b:77:d1:ff:f8:3e:f9:b8:43:e6:dc:
         71:ab:3f:d0:a2:2e:dc:15:b3:9c:5c:68:4b:2b:f1:72:41:b7:
         f7:f9:c1:47:f2:e4:0e:52:3f:2a:1f:6f:3d:1e:3f:32:cf:ff:
         06:c0:22:2d:8d:5a:8a:95:4e:cb:eb:06:1b:48:a3:6f:44:df:
         16:30:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 14:49:49 2023 by rpki-client on console-fra.rpki-client.org