Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/8av91o2uJmt2kUYrBSVcnsnmrN8.roa
File:                     8av91o2uJmt2kUYrBSVcnsnmrN8.roa (raw, json)
Hash identifier:          1JltsIgw6Sq2UIwAmvuvMV3aura1DJxeRDJnyVXh+zQ=
Subject key identifier:   F1:AB:FD:D6:8D:AE:26:6B:76:91:46:2B:05:25:5C:9E:C9:E6:AC:DF
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       018A2C628B71AAE111EB73E96A05010E4042
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/8av91o2uJmt2kUYrBSVcnsnmrN8.roa
Signing time:             Fri 25 Aug 2023 11:09:30 +0000
ROA not before:           Fri 25 Aug 2023 11:09:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42910
IP address blocks:        188.132.135.0/24 maxlen: 32
                          188.132.134.0/24 maxlen: 24
                          188.132.142.0/24 maxlen: 24
                          188.132.147.0/24 maxlen: 32
                          188.132.148.0/24 maxlen: 24
                          188.132.153.0/24 maxlen: 24
                          188.132.158.0/24 maxlen: 32
                          188.132.157.0/24 maxlen: 24
                          188.132.216.0/24 maxlen: 24
                          188.132.215.0/24 maxlen: 24
                          188.132.214.0/24 maxlen: 24
                          188.132.219.0/24 maxlen: 32
                          188.132.217.0/24 maxlen: 32
                          188.132.218.0/24 maxlen: 24
                          188.132.224.0/24 maxlen: 24
                          188.132.226.0/24 maxlen: 32
                          188.132.225.0/24 maxlen: 24
                          188.132.223.0/24 maxlen: 32
                          188.132.220.0/24 maxlen: 24
                          188.132.227.0/24 maxlen: 32
                          188.132.231.0/24 maxlen: 24
                          188.132.229.0/24 maxlen: 32
                          188.132.228.0/24 maxlen: 32
                          188.132.233.0/24 maxlen: 24
                          188.132.232.0/24 maxlen: 24
                          188.132.230.0/24 maxlen: 32
                          77.92.130.0/24 maxlen: 24
                          77.92.129.0/24 maxlen: 24
                          77.92.128.0/24 maxlen: 24
                          188.132.235.0/24 maxlen: 24
                          77.92.132.0/24 maxlen: 24
                          188.132.239.0/24 maxlen: 24
                          77.92.131.0/24 maxlen: 24
                          188.132.234.0/24 maxlen: 32
                          188.132.241.0/24 maxlen: 24
                          77.92.133.0/24 maxlen: 32
                          77.92.137.0/24 maxlen: 24
                          77.92.136.0/24 maxlen: 24
                          188.132.243.0/24 maxlen: 24
                          188.132.246.0/24 maxlen: 24
                          188.132.245.0/24 maxlen: 24
                          188.132.244.0/24 maxlen: 32
                          77.92.135.0/24 maxlen: 24
                          77.92.134.0/24 maxlen: 24
                          77.92.139.0/24 maxlen: 24
                          77.92.138.0/24 maxlen: 24
                          188.132.242.0/24 maxlen: 32
                          188.132.250.0/24 maxlen: 24
                          188.132.251.0/24 maxlen: 24
                          77.92.143.0/24 maxlen: 24
                          77.92.142.0/24 maxlen: 24
                          77.92.141.0/24 maxlen: 24
                          188.132.253.0/24 maxlen: 24
                          77.92.144.0/24 maxlen: 32
                          188.132.252.0/24 maxlen: 24
                          77.92.140.0/24 maxlen: 32
                          77.92.149.0/24 maxlen: 24
                          77.92.148.0/24 maxlen: 24
                          188.132.255.0/24 maxlen: 24
                          188.132.254.0/24 maxlen: 24
                          77.92.146.0/24 maxlen: 24
                          77.92.158.0/24 maxlen: 24
                          77.92.156.0/24 maxlen: 24
                          77.92.155.0/24 maxlen: 32
                          77.92.159.0/24 maxlen: 24
                          77.92.157.0/24 maxlen: 32
                          188.132.172.0/24 maxlen: 24
                          188.132.175.0/24 maxlen: 24
                          188.132.176.0/24 maxlen: 32
                          188.132.177.0/24 maxlen: 24
                          188.132.183.0/24 maxlen: 32
                          188.132.180.0/24 maxlen: 24
                          188.132.190.0/24 maxlen: 24
                          188.132.195.0/24 maxlen: 24
                          188.132.194.0/24 maxlen: 24
                          188.132.204.0/24 maxlen: 32
                          188.132.200.0/24 maxlen: 24
                          188.132.205.0/24 maxlen: 32
                          188.132.206.0/24 maxlen: 24
                          188.132.211.0/24 maxlen: 32
                          188.132.207.0/24 maxlen: 24
                          188.132.208.0/24 maxlen: 32
                          188.132.213.0/24 maxlen: 24
                          188.132.212.0/24 maxlen: 24
                          212.68.55.0/24 maxlen: 24
                          212.68.57.0/24 maxlen: 32
                          212.68.56.0/24 maxlen: 32
                          212.68.61.0/24 maxlen: 32
                          31.210.33.0/24 maxlen: 24
                          31.210.32.0/24 maxlen: 24
                          31.210.36.0/24 maxlen: 24
                          31.210.35.0/24 maxlen: 24
                          31.210.44.0/24 maxlen: 24
                          31.210.40.0/24 maxlen: 32
                          31.210.41.0/24 maxlen: 24
                          31.210.46.0/24 maxlen: 24
                          31.210.47.0/24 maxlen: 24
                          31.210.51.0/24 maxlen: 32
                          31.210.50.0/24 maxlen: 32
                          31.210.45.0/24 maxlen: 32
                          31.210.49.0/24 maxlen: 24
                          31.210.48.0/24 maxlen: 24
                          31.210.58.0/24 maxlen: 24
                          31.210.57.0/24 maxlen: 24
                          31.210.56.0/24 maxlen: 24
                          31.210.60.0/24 maxlen: 24
                          31.210.59.0/24 maxlen: 24
                          31.210.61.0/24 maxlen: 32
                          78.135.98.0/24 maxlen: 24
                          78.135.103.0/24 maxlen: 24
                          78.135.99.0/24 maxlen: 32
                          78.135.108.0/24 maxlen: 32
                          78.135.113.0/24 maxlen: 32
                          78.135.116.0/24 maxlen: 24
                          78.135.115.0/24 maxlen: 24
                          78.135.114.0/24 maxlen: 32
                          212.68.32.0/24 maxlen: 32
                          212.68.37.0/24 maxlen: 32
                          212.68.33.0/24 maxlen: 32
                          212.68.38.0/24 maxlen: 24
                          212.68.36.0/24 maxlen: 32
                          212.68.41.0/24 maxlen: 32
                          212.68.40.0/24 maxlen: 32
                          212.68.43.0/24 maxlen: 32
                          212.68.44.0/24 maxlen: 24
                          212.68.42.0/24 maxlen: 32
                          212.68.39.0/24 maxlen: 24
                          212.68.45.0/24 maxlen: 32
                          212.68.46.0/24 maxlen: 32
                          212.68.49.0/24 maxlen: 24
                          212.68.50.0/24 maxlen: 32
                          212.68.51.0/24 maxlen: 24
                          78.135.79.0/24 maxlen: 24
                          2a02:26b0:8001::/48 maxlen: 48
                          2a02:26b0::/32 maxlen: 32
                          2a02:26b0:8000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2c:62:8b:71:aa:e1:11:eb:73:e9:6a:05:01:0e:40:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Aug 25 11:09:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1abfdd68dae266b7691462b05255c9ec9e6acdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:f2:0e:f4:04:d1:d5:fd:ec:30:8f:d4:db:
                    b1:b2:24:c4:d0:4a:4a:57:13:ce:b5:f9:fb:3b:03:
                    b0:5c:54:d1:0c:01:b8:2d:20:f7:1c:51:86:62:20:
                    44:50:0b:33:fe:20:fe:2e:eb:3c:8c:64:55:2d:66:
                    d1:e7:f4:ef:86:0f:62:90:9f:4a:65:e1:6e:47:0d:
                    2b:da:74:78:61:1b:4c:dd:52:3f:06:bd:59:52:f8:
                    23:6b:7b:4b:7e:77:9c:91:36:d1:56:b8:0e:74:8b:
                    61:22:63:0b:58:09:05:49:45:b2:55:f3:77:3b:be:
                    f2:22:a1:d9:da:1a:27:d0:b3:a9:80:a1:a7:d3:f8:
                    1a:e1:9d:cb:39:80:e9:7d:36:83:7a:ce:a7:4b:17:
                    e9:c4:26:dc:9a:78:7c:da:f7:3b:e4:ce:94:07:0d:
                    a6:b7:24:7a:4c:1a:2e:58:cc:32:d4:64:33:b0:e2:
                    fd:3b:dc:32:66:0a:94:cc:92:46:4a:9c:95:c8:25:
                    8d:ec:01:f5:aa:83:0d:96:f0:44:8d:52:50:4a:40:
                    79:9d:75:ed:a2:67:dc:6f:42:a1:c6:2c:5b:da:77:
                    5f:e7:84:df:15:db:a6:83:d9:55:23:45:dd:29:61:
                    d4:64:ab:fc:20:a1:7e:6c:e3:11:fa:11:fa:02:47:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AB:FD:D6:8D:AE:26:6B:76:91:46:2B:05:25:5C:9E:C9:E6:AC:DF
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/8av91o2uJmt2kUYrBSVcnsnmrN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.32.0/23
                  31.210.35.0-31.210.36.255
                  31.210.40.0/23
                  31.210.44.0-31.210.51.255
                  31.210.56.0-31.210.61.255
                  77.92.128.0-77.92.144.255
                  77.92.146.0/24
                  77.92.148.0/23
                  77.92.155.0-77.92.159.255
                  78.135.79.0/24
                  78.135.98.0/23
                  78.135.103.0/24
                  78.135.108.0/24
                  78.135.113.0-78.135.116.255
                  188.132.134.0/23
                  188.132.142.0/24
                  188.132.147.0-188.132.148.255
                  188.132.153.0/24
                  188.132.157.0-188.132.158.255
                  188.132.172.0/24
                  188.132.175.0-188.132.177.255
                  188.132.180.0/24
                  188.132.183.0/24
                  188.132.190.0/24
                  188.132.194.0/23
                  188.132.200.0/24
                  188.132.204.0-188.132.208.255
                  188.132.211.0-188.132.220.255
                  188.132.223.0-188.132.235.255
                  188.132.239.0/24
                  188.132.241.0-188.132.246.255
                  188.132.250.0-188.132.255.255
                  212.68.32.0/23
                  212.68.36.0-212.68.46.255
                  212.68.49.0-212.68.51.255
                  212.68.55.0-212.68.57.255
                  212.68.61.0/24
                IPv6:
                  2a02:26b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:1e:5a:bf:1f:31:e2:8c:9c:2b:29:a8:2f:23:4a:65:f1:
         4b:ad:80:55:7a:8d:5c:06:aa:8b:90:89:79:8e:24:bc:6c:09:
         3c:b5:4e:9b:ef:bc:37:18:13:f7:87:f3:1e:1c:40:19:da:2b:
         23:44:c9:77:0d:f9:60:46:43:38:bf:f3:d0:b9:b5:1c:5f:c6:
         55:77:f4:5f:59:6d:23:be:e3:2d:eb:8d:b6:3b:89:cc:57:3e:
         4c:6d:54:6c:28:00:5d:38:b2:06:f3:f9:0f:68:e8:d3:e7:69:
         ce:a4:d3:48:d5:2b:6e:c1:24:b3:75:83:e2:80:83:f9:f2:cd:
         ea:f8:1d:e4:5a:b2:23:60:18:64:ca:7d:fa:cc:26:4e:83:12:
         35:15:ec:df:87:8a:4f:c3:b8:d1:01:c5:0b:6e:80:69:1a:d2:
         60:4b:41:c8:c3:ca:cf:88:8f:c4:8f:9d:a7:01:57:68:1a:fa:
         bf:6d:9c:38:03:e6:f1:12:b8:9f:df:65:82:1a:a8:83:94:47:
         33:fc:83:f5:f9:be:1c:b2:8d:79:08:1c:c7:a0:ee:e7:f0:69:
         58:28:14:b5:09:1e:5e:6a:7f:ba:0b:18:4b:db:2c:ce:4d:fe:
         c6:96:e1:e3:e8:95:3c:af:dd:df:c9:7a:d5:3f:83:d5:9c:91:
         c4:f2:ca:18
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgISAYosYotxquER63PpagUBDkBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2
YTUxNGQwHhcNMjMwODI1MTEwOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWFiZmRkNjhkYWUyNjZiNzY5MTQ2MmIwNTI1NWM5ZWM5ZTZhY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouTyDvQE0dX97DCP1NuxsiTE0EpK
VxPOtfn7OwOwXFTRDAG4LSD3HFGGYiBEUAsz/iD+Lus8jGRVLWbR5/Tvhg9ikJ9K
ZeFuRw0r2nR4YRtM3VI/Br1ZUvgja3tLfneckTbRVrgOdIthImMLWAkFSUWyVfN3
O77yIqHZ2hon0LOpgKGn0/ga4Z3LOYDpfTaDes6nSxfpxCbcmnh82vc75M6UBw2m
tyR6TBouWMwy1GQzsOL9O9wyZgqUzJJGSpyVyCWN7AH1qoMNlvBEjVJQSkB5nXXt
omfcb0Khxixb2ndf54TfFdumg9lVI0XdKWHUZKv8IKF+bOMR+hH6AkdZFwIDAQAB
o4IDgTCCA30wHQYDVR0OBBYEFPGr/daNriZrdpFGKwUlXJ7J5qzfMB8GA1UdIwQY
MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct
ZGY0YTJlNzYwY2NiLzEvOGF2OTFvMnVKbXQya1VZckJTVmNuc25tck44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni
LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlQYIKwYBBQUHAQcBAf8EggGEMIIBgDCCAW0EAgABMIIB
ZQMEAR/SIDAMAwQAH9IjAwQAH9IkAwQBH9IoMAwDBAIf0iwDBAIf0jAwDAMEAx/S
OAMEAR/SPDAMAwQHTVyAAwQATVyQAwQATVySAwQBTVyUMAwDBABNXJsDBAVNXIAD
BABOh08DBAFOh2IDBABOh2cDBABOh2wwDAMEAE6HcQMEAE6HdAMEAbyEhgMEALyE
jjAMAwQAvISTAwQAvISUAwQAvISZMAwDBAC8hJ0DBAC8hJ4DBAC8hKwwDAMEALyE
rwMEAbyEsAMEALyEtAMEALyEtwMEALyEvgMEAbyEwgMEALyEyDAMAwQCvITMAwQA
vITQMAwDBAC8hNMDBAC8hNwwDAMEALyE3wMEAryE6AMEALyE7zAMAwQAvITxAwQA
vIT2MAsDBAG8hPoDAwC8hAMEAdREIDAMAwQC1EQkAwQA1EQuMAwDBADURDEDBALU
RDAwDAMEANRENwMEAdREOAMEANREPTANBAIAAjAHAwUAKgImsDANBgkqhkiG9w0B
AQsFAAOCAQEAMh0eWr8fMeKMnCspqC8jSmXxS62AVXqNXAaqi5CJeY4kvGwJPLVO
m++8NxgT94fzHhxAGdorI0TJdw35YEZDOL/z0Lm1HF/GVXf0X1ltI77jLeuNtjuJ
zFc+TG1UbCgAXTiyBvP5D2jo0+dpzqTTSNUrbsEks3WD4oCD+fLN6vgd5FqyI2AY
ZMp9+swmToMSNRXs34eKT8O40QHFC26AaRrSYEtByMPKz4iPxI+dpwFXaBr6v22c
OAPm8RK4n99lghqog5RHM/yD9fm+HLKNeQgcx6Du5/BpWCgUtQkeXmp/ugsYS9ss
zk3+xpbh4+iVPK/d38l61T+D1ZyRxPLKGA==
-----END CERTIFICATE-----
Generated at Wed Sep 13 03:27:26 2023 by rpki-client on console-ams.rpki-client.org