Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/himLItqH6zGI6Kq_yZcKzabA0ck.roa
File:                     himLItqH6zGI6Kq_yZcKzabA0ck.roa (raw, json)
Hash identifier:          Sz1yZt7a1gnr0oKHMxcQWvKUx8QOsjyAATCNM0trL4Y=
Subject key identifier:   86:29:8B:22:DA:87:EB:31:88:E8:AA:BF:C9:97:0A:CD:A6:C0:D1:C9
Certificate issuer:       /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial:       018B48404F4C4E7FB0A83EF8384304047F76
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/himLItqH6zGI6Kq_yZcKzabA0ck.roa
Signing time:             Thu 19 Oct 2023 14:04:16 +0000
ROA not before:           Thu 19 Oct 2023 14:04:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48582
IP address blocks:        217.147.178.0/24 maxlen: 24
                          217.147.178.0/23 maxlen: 23
                          217.147.177.0/24 maxlen: 24
                          217.147.179.0/24 maxlen: 24
                          217.147.176.0/24 maxlen: 24
                          217.147.176.0/23 maxlen: 23
                          217.147.182.0/24 maxlen: 24
                          217.147.182.0/23 maxlen: 23
                          217.147.183.0/24 maxlen: 24
                          193.118.192.0/24 maxlen: 24
                          193.118.196.0/24 maxlen: 24
                          193.118.195.0/24 maxlen: 24
                          193.118.198.0/24 maxlen: 24
                          193.118.194.0/24 maxlen: 24
                          193.118.193.0/24 maxlen: 24
                          193.118.199.0/24 maxlen: 24
                          193.118.201.0/24 maxlen: 24
                          193.118.206.0/24 maxlen: 24
                          193.118.203.0/24 maxlen: 24
                          193.118.202.0/24 maxlen: 24
                          193.118.205.0/24 maxlen: 24
                          193.118.204.0/23 maxlen: 23
                          193.118.204.0/24 maxlen: 24
                          193.118.200.0/22 maxlen: 22
                          193.118.200.0/24 maxlen: 24
                          193.118.210.0/24 maxlen: 24
                          193.118.209.0/24 maxlen: 24
                          193.118.212.0/24 maxlen: 24
                          193.118.211.0/24 maxlen: 24
                          193.118.208.0/24 maxlen: 24
                          193.118.207.0/24 maxlen: 24
                          193.118.213.0/24 maxlen: 24
                          193.118.216.0/22 maxlen: 22
                          193.118.217.0/24 maxlen: 24
                          193.118.216.0/24 maxlen: 24
                          193.118.219.0/24 maxlen: 24
                          193.118.218.0/24 maxlen: 24
                          193.118.215.0/24 maxlen: 24
                          193.118.214.0/23 maxlen: 23
                          193.118.214.0/24 maxlen: 24
                          209.213.48.0/22 maxlen: 22
                          209.213.49.0/24 maxlen: 24
                          209.213.48.0/20 maxlen: 20
                          209.213.48.0/24 maxlen: 24
                          209.213.50.0/24 maxlen: 24
                          193.118.220.0/24 maxlen: 24
                          209.213.51.0/24 maxlen: 24
                          209.213.56.0/22 maxlen: 22
                          209.213.56.0/24 maxlen: 24
                          209.213.55.0/24 maxlen: 24
                          209.213.57.0/24 maxlen: 24
                          209.213.52.0/24 maxlen: 24
                          209.213.52.0/22 maxlen: 22
                          209.213.54.0/24 maxlen: 24
                          209.213.53.0/24 maxlen: 24
                          209.213.58.0/24 maxlen: 24
                          209.213.63.0/24 maxlen: 24
                          209.213.62.0/24 maxlen: 24
                          209.213.59.0/24 maxlen: 24
                          209.213.60.0/22 maxlen: 22
                          209.213.61.0/24 maxlen: 24
                          209.213.60.0/24 maxlen: 24
                          193.118.138.0/24 maxlen: 24
                          193.118.137.0/24 maxlen: 24
                          193.118.136.0/24 maxlen: 24
                          193.118.139.0/24 maxlen: 24
                          193.118.138.0/23 maxlen: 23
                          193.118.133.0/24 maxlen: 24
                          193.118.135.0/24 maxlen: 24
                          193.118.134.0/23 maxlen: 23
                          193.118.134.0/24 maxlen: 24
                          193.118.140.0/24 maxlen: 24
                          193.118.142.0/24 maxlen: 24
                          193.118.141.0/24 maxlen: 24
                          193.118.144.0/24 maxlen: 24
                          193.118.143.0/24 maxlen: 24
                          193.118.144.0/22 maxlen: 22
                          193.118.145.0/24 maxlen: 24
                          193.118.152.0/24 maxlen: 24
                          193.118.151.0/24 maxlen: 24
                          193.118.150.0/23 maxlen: 23
                          193.118.150.0/24 maxlen: 24
                          193.118.152.0/23 maxlen: 23
                          193.118.147.0/24 maxlen: 24
                          193.118.149.0/24 maxlen: 24
                          193.118.148.0/24 maxlen: 24
                          193.118.146.0/24 maxlen: 24
                          193.118.154.0/24 maxlen: 24
                          193.118.153.0/24 maxlen: 24
                          193.118.156.0/24 maxlen: 24
                          193.118.155.0/24 maxlen: 24
                          193.118.158.0/24 maxlen: 24
                          193.118.157.0/24 maxlen: 24
                          193.118.159.0/24 maxlen: 24
                          193.118.128.0/24 maxlen: 24
                          193.118.128.0/23 maxlen: 23
                          193.118.130.0/24 maxlen: 24
                          193.118.129.0/24 maxlen: 24
                          193.118.132.0/24 maxlen: 24
                          193.118.132.0/23 maxlen: 23
                          193.118.131.0/24 maxlen: 24
                          138.43.4.0/24 maxlen: 24
                          138.43.0.0/24 maxlen: 24
                          138.43.10.0/24 maxlen: 24
                          138.43.6.0/24 maxlen: 24
                          138.43.8.0/24 maxlen: 24
                          138.43.7.0/24 maxlen: 24
                          138.43.9.0/24 maxlen: 24
                          138.43.5.0/24 maxlen: 24
                          138.43.11.0/24 maxlen: 24
                          138.43.15.0/24 maxlen: 24
                          138.43.14.0/24 maxlen: 24
                          138.43.13.0/24 maxlen: 24
                          138.43.12.0/24 maxlen: 24
                          138.43.31.0/24 maxlen: 24
                          138.43.28.0/22 maxlen: 22
                          138.43.29.0/24 maxlen: 24
                          138.43.28.0/24 maxlen: 24
                          138.43.30.0/24 maxlen: 24
                          138.43.26.0/24 maxlen: 24
                          185.170.161.0/24 maxlen: 24
                          185.170.163.0/24 maxlen: 24
                          185.170.162.0/24 maxlen: 24
                          63.142.4.0/24 maxlen: 24
                          63.142.1.0/24 maxlen: 24
                          63.142.3.0/24 maxlen: 24
                          63.142.2.0/24 maxlen: 24
                          63.142.0.0/24 maxlen: 24
                          63.142.5.0/24 maxlen: 24
                          63.142.6.0/24 maxlen: 24
                          63.142.6.0/23 maxlen: 23
                          63.142.11.0/24 maxlen: 24
                          63.142.8.0/24 maxlen: 24
                          63.142.7.0/24 maxlen: 24
                          63.142.10.0/24 maxlen: 24
                          63.142.9.0/24 maxlen: 24
                          63.142.15.0/24 maxlen: 24
                          63.142.14.0/23 maxlen: 23
                          63.142.14.0/24 maxlen: 24
                          63.142.12.0/24 maxlen: 24
                          63.142.13.0/24 maxlen: 24
                          2a0b:2900:61c0::/42 maxlen: 42
                          2a0b:2900:12c0::/42 maxlen: 42
                          2a0b:2900:3140::/42 maxlen: 42
                          2a0b:2900:31c0::/42 maxlen: 42
                          2a0b:2900:3240::/42 maxlen: 42
                          2a0b:2900:21c0::/42 maxlen: 42
                          2a0b:2900:32c0::/42 maxlen: 42
                          2a0b:2900:11c0::/42 maxlen: 42
                          2a0b:2900:6140::/42 maxlen: 42
                          2a0b:2900:1140::/42 maxlen: 42
                          2a0b:2900:2140::/42 maxlen: 42
                          2a0b:2900:216c::/48 maxlen: 48
                          2a0b:2900:1f00::/40 maxlen: 40
                          2a0b:2900:7f::/48 maxlen: 48
                          2a0b:2900:3180::/42 maxlen: 42
                          2a0b:2900:3100::/42 maxlen: 42
                          2a0b:2900:1180::/42 maxlen: 42
                          2a0b:2900:6180::/42 maxlen: 42
                          2a0b:2900:2100::/42 maxlen: 42
                          2a0b:2900:3200::/42 maxlen: 42
                          2a0b:2900:6100::/42 maxlen: 42
                          2a0b:2900:1100::/42 maxlen: 42
                          2a0b:2900:2180::/42 maxlen: 42
                          2a0b:2900:3280::/42 maxlen: 42
                          2a0b:2900:52b4::/47 maxlen: 47
                          2a0b:2900:5234::/47 maxlen: 47
                          2a0b:2900:5200::/41 maxlen: 41
                          2a0b:2900:4180::/41 maxlen: 41
                          2a0b:2900:3100::/41 maxlen: 41
                          2a0b:2900:4200::/41 maxlen: 41
                          2a0b:2900:6280::/41 maxlen: 41
                          2a0b:2900:1280::/41 maxlen: 42
                          2a0b:2900:2380::/41 maxlen: 42
                          2a0b:2900:6200::/41 maxlen: 41
                          2a0b:2900:5280::/41 maxlen: 41
                          2a0b:2900:1100::/41 maxlen: 41
                          2a0b:2900:1180::/41 maxlen: 41
                          2a0b:2900:1000::/41 maxlen: 42
                          2a0b:2900:2280::/41 maxlen: 42
                          2a0b:2900:2100::/41 maxlen: 41
                          2a0b:2900:3200::/41 maxlen: 41
                          2a0b:2900:4280::/41 maxlen: 41
                          2a0b:2900:3180::/41 maxlen: 41
                          2a0b:2900:2200::/41 maxlen: 42
                          2a0b:2900:4100::/41 maxlen: 41
                          2a0b:2900:2180::/41 maxlen: 41
                          2a0b:2900:1080::/41 maxlen: 42
                          2a0b:2900:2300::/41 maxlen: 42
                          2a0b:2900:1200::/41 maxlen: 42
                          2a0b:2900:3280::/41 maxlen: 41

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:48:40:4f:4c:4e:7f:b0:a8:3e:f8:38:43:04:04:7f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
        Validity
            Not Before: Oct 19 14:04:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=86298b22da87eb3188e8aabfc9970acda6c0d1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:a7:17:2a:40:8d:1a:dc:eb:65:d6:36:00:
                    d3:7c:23:97:b8:e0:d8:4b:b1:32:c7:ca:43:f6:4e:
                    42:f8:7f:71:02:e8:0b:e7:5e:d1:27:da:ab:86:6d:
                    94:0d:7c:2a:6a:9a:37:07:9d:97:55:05:29:c9:cb:
                    92:00:31:38:59:d1:7c:6c:fa:6d:33:2d:51:27:72:
                    de:ed:29:db:07:e4:b4:fa:39:4d:6d:5e:b1:3d:5f:
                    83:33:02:43:54:2d:98:bc:65:28:19:20:ad:7e:bc:
                    1e:d0:96:b2:ee:e9:9d:47:17:6c:cc:5c:20:f0:c9:
                    a6:25:8a:35:2c:b6:1c:53:4a:1c:84:40:b1:cf:e6:
                    b3:fe:88:7e:2e:74:7d:9d:e1:6b:67:90:ca:c7:5b:
                    48:33:95:b6:2e:72:e2:6c:27:5a:20:53:90:1b:95:
                    87:05:10:a1:6f:71:bf:93:0e:f7:d1:b7:df:21:4a:
                    28:13:1b:98:f6:94:00:b5:e6:57:84:bf:54:04:f0:
                    7f:e0:ea:f1:55:a3:ee:7c:63:e5:f2:a0:21:75:38:
                    ae:64:0a:e2:9f:e3:7a:ab:d3:14:b2:57:ab:83:f5:
                    03:5a:cc:5d:23:66:15:b2:c9:fa:62:e9:a0:b6:10:
                    69:a9:4d:59:19:ef:64:01:c1:f2:5e:cd:16:c1:bf:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:29:8B:22:DA:87:EB:31:88:E8:AA:BF:C9:97:0A:CD:A6:C0:D1:C9
            X509v3 Authority Key Identifier:
                keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/himLItqH6zGI6Kq_yZcKzabA0ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.0.0/20
                  138.43.0.0/24
                  138.43.4.0-138.43.15.255
                  138.43.26.0/24
                  138.43.28.0/22
                  185.170.161.0-185.170.163.255
                  193.118.128.0/19
                  193.118.192.0-193.118.196.255
                  193.118.198.0-193.118.220.255
                  209.213.48.0/20
                  217.147.176.0/22
                  217.147.182.0/23
                IPv6:
                  2a0b:2900:7f::/48
                  2a0b:2900:1000::-2a0b:2900:12ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:1f00::/40
                  2a0b:2900:2100::-2a0b:2900:23ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:3100::-2a0b:2900:32ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:4100::-2a0b:2900:42ff:ffff:ffff:ffff:ffff:ffff
                  2a0b:2900:5200::/40
                  2a0b:2900:6100::-2a0b:2900:62ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:b1:cd:0a:b3:c2:2e:d0:7f:14:e9:41:1d:d6:b3:48:c1:
         7f:34:2e:6e:f5:6b:55:f2:81:d5:88:f8:95:85:86:ec:a3:77:
         31:00:2c:b7:50:74:19:cc:20:29:9e:56:ba:70:5c:f5:f6:9e:
         f5:15:48:7a:db:91:4f:ad:3f:23:a3:24:a8:95:59:81:41:b2:
         d0:c2:84:88:b6:aa:25:26:b1:54:5a:ab:69:f8:9f:de:d7:dc:
         fe:cd:4e:28:5e:fc:16:55:44:4c:81:82:4e:6c:83:40:d7:8e:
         fc:f9:00:04:8a:1c:c4:5d:58:0d:00:7c:a9:7a:78:2d:45:73:
         80:b0:bc:bb:6e:b6:2b:97:e9:01:19:22:1e:6c:26:3b:19:29:
         0b:11:cf:58:87:11:ef:6c:73:80:34:49:88:42:fb:56:20:23:
         ce:0f:4d:e6:9a:a9:d8:db:97:07:fd:1b:72:c6:96:54:25:34:
         b1:3e:70:ab:86:3d:5d:13:6b:03:d8:77:95:3f:ac:7b:8b:da:
         09:47:c1:94:06:41:75:bc:5a:1a:7e:50:41:be:bd:46:ca:67:
         4d:69:03:b9:44:a7:92:3e:1d:f2:15:5f:81:74:41:13:c1:e7:
         26:66:ee:f5:23:a0:27:ca:91:b9:b9:b5:bd:51:4d:ff:97:e7:
         f6:3e:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:00 2024 by rpki-client on console-ams.rpki-client.org