Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/14cx1ByOQG66A5Do19DDCi9lWTg.roa
File:                     14cx1ByOQG66A5Do19DDCi9lWTg.roa (raw, json)
Hash identifier:          ynp3uYpzqR8WdMdeRHgAKpsGmWAMIQUaSuztjsuEVOc=
Subject key identifier:   D7:87:31:D4:1C:8E:40:6E:BA:03:90:E8:D7:D0:C3:0A:2F:65:59:38
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0186CBC1FCB42A2EDAF855811F53CF2A62AA
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/14cx1ByOQG66A5Do19DDCi9lWTg.roa
Signing time:             Fri 10 Mar 2023 13:42:13 +0000
ROA not before:           Fri 10 Mar 2023 13:42:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15802
IP address blocks:        91.73.80.0/20 maxlen: 20
                          91.73.96.0/20 maxlen: 20
                          91.73.112.0/20 maxlen: 20
                          91.73.252.0/22 maxlen: 22
                          94.201.251.0/24 maxlen: 24
                          91.74.10.0/24 maxlen: 24
                          87.201.176.0/22 maxlen: 22
                          87.201.180.0/22 maxlen: 22
                          87.201.184.0/22 maxlen: 22
                          94.201.196.0/22 maxlen: 22
                          91.73.216.0/23 maxlen: 23
                          94.200.163.0/24 maxlen: 24
                          5.32.64.0/19 maxlen: 19
                          5.32.72.0/24 maxlen: 24
                          91.72.188.0/22 maxlen: 22
                          94.200.192.0/19 maxlen: 19
                          91.72.204.0/24 maxlen: 24
                          5.32.94.0/24 maxlen: 24
                          5.32.96.0/19 maxlen: 19
                          91.72.205.0/24 maxlen: 24
                          91.72.206.0/24 maxlen: 24
                          94.200.208.0/24 maxlen: 24
                          5.32.0.0/17 maxlen: 19
                          5.32.23.0/24 maxlen: 24
                          94.200.131.0/24 maxlen: 24
                          5.32.27.0/24 maxlen: 24
                          5.32.32.0/19 maxlen: 19
                          5.32.36.0/24 maxlen: 24
                          94.200.145.0/24 maxlen: 24
                          94.200.156.0/24 maxlen: 24
                          87.201.14.0/24 maxlen: 24
                          91.73.16.0/20 maxlen: 20
                          91.73.32.0/20 maxlen: 20
                          87.201.40.0/24 maxlen: 24
                          94.207.239.0/24 maxlen: 24
                          87.201.46.0/24 maxlen: 24
                          91.73.48.0/20 maxlen: 20
                          91.73.64.0/20 maxlen: 20
                          80.227.200.0/22 maxlen: 22
                          5.32.111.0/24 maxlen: 24
                          94.200.227.0/24 maxlen: 24
                          94.200.231.0/24 maxlen: 24
                          91.72.229.0/24 maxlen: 24
                          94.200.240.0/24 maxlen: 24
                          94.200.248.0/22 maxlen: 22
                          91.73.0.0/20 maxlen: 20
                          5.31.96.0/19 maxlen: 19
                          94.206.148.0/22 maxlen: 22
                          94.206.152.0/23 maxlen: 23
                          94.206.164.0/24 maxlen: 24
                          5.31.128.0/20 maxlen: 20
                          5.31.128.0/19 maxlen: 19
                          94.206.183.0/24 maxlen: 24
                          94.206.181.0/24 maxlen: 24
                          94.206.182.0/24 maxlen: 24
                          5.31.144.0/20 maxlen: 20
                          94.206.84.0/24 maxlen: 24
                          94.206.92.0/24 maxlen: 24
                          94.206.97.0/24 maxlen: 24
                          5.31.64.0/19 maxlen: 19
                          94.206.106.0/24 maxlen: 24
                          94.206.112.0/23 maxlen: 23
                          94.200.0.0/13 maxlen: 19
                          5.31.208.0/20 maxlen: 20
                          5.31.224.0/20 maxlen: 20
                          5.31.224.0/19 maxlen: 19
                          5.31.240.0/20 maxlen: 20
                          87.200.0.0/15 maxlen: 19
                          94.200.17.0/24 maxlen: 24
                          5.31.160.0/19 maxlen: 19
                          5.31.160.0/20 maxlen: 20
                          80.227.0.0/16 maxlen: 19
                          5.31.176.0/20 maxlen: 20
                          94.200.29.0/24 maxlen: 24
                          91.72.0.0/14 maxlen: 19
                          94.200.25.0/24 maxlen: 24
                          5.31.192.0/20 maxlen: 20
                          5.31.192.0/19 maxlen: 19
                          94.200.47.0/24 maxlen: 24
                          94.200.51.0/24 maxlen: 24
                          5.30.160.0/19 maxlen: 19
                          94.205.204.0/22 maxlen: 22
                          5.30.96.0/19 maxlen: 19
                          5.30.128.0/19 maxlen: 19
                          94.206.31.0/24 maxlen: 24
                          94.206.40.0/22 maxlen: 22
                          5.31.0.0/19 maxlen: 19
                          94.206.51.0/24 maxlen: 24
                          213.132.32.0/19 maxlen: 19
                          94.206.61.0/24 maxlen: 24
                          5.31.32.0/19 maxlen: 19
                          94.206.74.0/23 maxlen: 23
                          5.30.192.0/19 maxlen: 19
                          94.205.240.0/24 maxlen: 24
                          94.205.254.0/24 maxlen: 24
                          5.30.224.0/19 maxlen: 19
                          94.206.16.0/23 maxlen: 23
                          94.206.21.0/24 maxlen: 24
                          94.205.8.0/22 maxlen: 22
                          5.30.32.0/19 maxlen: 19
                          5.30.64.0/19 maxlen: 19
                          5.30.0.0/19 maxlen: 19
                          5.30.8.0/22 maxlen: 22
                          5.30.0.0/15 maxlen: 15
                          94.203.200.0/22 maxlen: 22
                          94.203.204.0/22 maxlen: 22
                          94.203.228.0/22 maxlen: 22
                          94.203.44.0/23 maxlen: 23
                          94.203.62.0/23 maxlen: 23
                          91.75.85.0/24 maxlen: 24
                          91.75.84.0/24 maxlen: 24
                          91.75.86.0/24 maxlen: 24
                          94.203.90.0/23 maxlen: 23
                          91.75.87.0/24 maxlen: 24
                          91.75.16.0/24 maxlen: 24
                          91.75.18.0/24 maxlen: 24
                          91.75.24.0/24 maxlen: 24
                          94.203.156.0/22 maxlen: 22
                          94.203.199.0/24 maxlen: 24
                          94.203.92.0/22 maxlen: 22
                          91.74.56.0/24 maxlen: 24
                          91.74.70.0/24 maxlen: 24
                          91.74.68.0/23 maxlen: 23
                          91.74.78.0/23 maxlen: 23
                          94.202.192.0/22 maxlen: 22
                          2a00:f2b::/32 maxlen: 32
                          2a00:f2e::/32 maxlen: 32
                          2a00:f2c::/32 maxlen: 32
                          2a00:f2d::/32 maxlen: 32
                          2a00:f29::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cb:c1:fc:b4:2a:2e:da:f8:55:81:1f:53:cf:2a:62:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Mar 10 13:42:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d78731d41c8e406eba0390e8d7d0c30a2f655938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:ab:00:c8:96:7e:05:26:af:d0:87:21:06:
                    84:5e:0f:b6:51:f0:a2:d4:12:9c:26:85:c8:11:52:
                    73:ff:34:6c:33:29:64:df:af:b3:59:cd:ec:6a:ed:
                    69:5d:8f:bf:17:a4:dd:0e:01:e2:7c:9c:9f:ae:54:
                    07:6a:9c:eb:e3:07:94:4d:2d:91:ac:cb:e5:cf:f5:
                    2a:9f:d8:2b:27:ac:6f:8e:47:b9:53:ec:84:80:db:
                    2b:f9:4f:6b:60:09:13:59:97:cb:2c:8f:2b:62:38:
                    d0:82:03:38:a9:ba:f1:8d:02:76:21:a4:82:4c:70:
                    42:6b:51:52:da:2c:d8:d1:5d:32:9b:d6:5b:f9:03:
                    f0:c2:f6:d6:3e:a4:fa:96:ac:d9:1e:13:78:c0:72:
                    de:a0:fa:f1:7f:34:ec:30:07:a9:0f:e9:f2:43:6a:
                    e7:c2:ae:b9:78:c4:06:31:f8:37:a7:6c:33:81:b4:
                    59:d2:40:b7:83:e4:d9:90:05:1d:c2:b6:63:f1:ae:
                    7d:29:3a:96:50:2f:3d:ce:2b:58:44:21:03:b6:4c:
                    fa:c9:fa:c7:fc:15:c3:01:ce:3c:76:13:2f:ab:99:
                    22:ac:31:c4:13:aa:8c:b0:2e:98:01:ac:2f:96:3b:
                    3b:45:4a:49:e4:1e:8b:3b:be:43:61:55:8a:63:d7:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:87:31:D4:1C:8E:40:6E:BA:03:90:E8:D7:D0:C3:0A:2F:65:59:38
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/14cx1ByOQG66A5Do19DDCi9lWTg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.30.0.0-5.32.127.255
                  80.227.0.0/16
                  87.200.0.0/15
                  91.72.0.0/14
                  94.200.0.0/13
                  213.132.32.0/19
                IPv6:
                  2a00:f29::/32
                  2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:4f:e3:a7:62:3b:70:14:9e:7d:86:ff:89:1d:f3:c6:f4:
         43:29:54:7d:49:a4:5a:da:d5:93:bf:fa:9a:ca:75:fc:66:df:
         47:1c:dc:a3:10:d3:7e:df:c9:13:41:f1:9e:c2:26:ab:76:88:
         f7:0f:9a:a8:59:db:c5:1f:97:aa:41:99:f7:2b:95:4e:80:b8:
         00:61:b6:5e:01:f4:d7:6c:2a:77:4c:3c:e1:9b:80:17:cb:37:
         28:64:de:b6:2f:26:02:1a:78:80:11:eb:2a:e4:c8:9a:5e:17:
         f9:21:4e:51:4c:6e:46:fb:cc:e4:a9:97:92:e2:7d:ad:ba:59:
         0f:61:c3:2c:69:aa:2f:ba:7c:24:63:3b:31:9a:71:6a:65:91:
         cd:2a:54:af:5e:df:66:16:d1:bb:65:8f:09:27:63:13:b2:d1:
         9b:7f:81:35:1f:7c:4e:ea:06:39:0a:30:61:17:f5:96:04:c1:
         f3:46:63:a2:fd:46:49:97:33:ec:16:ff:49:cc:da:33:11:d7:
         a8:39:a3:8c:9e:61:7c:55:72:77:d8:aa:02:aa:dc:f2:a3:90:
         a0:7a:75:ff:3f:63:ab:73:87:ad:cb:e9:be:52:fa:d4:85:84:
         6e:b8:a7:7a:84:21:17:26:1f:60:53:f0:c8:d6:66:9f:82:92:
         23:e1:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org