Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa
File:                     7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa (raw, json)
Hash identifier:          NJpEE6KS2xjZkly49r+HSPlVfmk/CRwwJ2ZcANdnZfs=
Subject key identifier:   ED:67:23:F0:38:71:79:90:CC:E8:BF:B8:BD:D0:47:CD:1D:2F:6A:EA
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0186965A99EEBBCCB33303417B4746C975EE
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa
Signing time:             Tue 28 Feb 2023 04:49:25 +0000
ROA not before:           Tue 28 Feb 2023 04:49:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15802
IP address blocks:        5.30.32.0/19 maxlen: 19
                          94.201.251.0/24 maxlen: 24
                          5.30.64.0/19 maxlen: 19
                          87.201.176.0/22 maxlen: 22
                          87.201.180.0/22 maxlen: 22
                          87.201.184.0/22 maxlen: 22
                          94.201.196.0/22 maxlen: 22
                          5.30.0.0/19 maxlen: 19
                          5.30.8.0/22 maxlen: 22
                          91.73.216.0/23 maxlen: 23
                          5.30.0.0/15 maxlen: 15
                          5.32.64.0/19 maxlen: 19
                          91.72.204.0/24 maxlen: 24
                          5.32.96.0/19 maxlen: 19
                          91.72.205.0/24 maxlen: 24
                          91.72.206.0/24 maxlen: 24
                          5.32.0.0/17 maxlen: 19
                          94.203.204.0/22 maxlen: 22
                          5.32.32.0/19 maxlen: 19
                          94.200.156.0/24 maxlen: 24
                          80.227.200.0/22 maxlen: 22
                          94.200.248.0/22 maxlen: 22
                          91.73.0.0/20 maxlen: 20
                          5.31.96.0/19 maxlen: 19
                          94.203.44.0/23 maxlen: 23
                          94.206.152.0/23 maxlen: 23
                          94.203.62.0/23 maxlen: 23
                          5.31.128.0/19 maxlen: 19
                          94.206.181.0/24 maxlen: 24
                          5.31.64.0/19 maxlen: 19
                          94.206.112.0/23 maxlen: 23
                          94.200.0.0/13 maxlen: 19
                          5.31.224.0/19 maxlen: 19
                          5.31.160.0/19 maxlen: 19
                          87.200.0.0/15 maxlen: 19
                          80.227.0.0/16 maxlen: 19
                          91.72.0.0/14 maxlen: 19
                          5.31.192.0/19 maxlen: 19
                          5.30.160.0/19 maxlen: 19
                          5.30.96.0/19 maxlen: 19
                          5.30.128.0/19 maxlen: 19
                          91.74.78.0/23 maxlen: 23
                          5.31.0.0/19 maxlen: 19
                          213.132.32.0/19 maxlen: 19
                          5.31.32.0/19 maxlen: 19
                          94.206.74.0/23 maxlen: 23
                          5.30.192.0/19 maxlen: 19
                          5.30.224.0/19 maxlen: 19
                          94.206.16.0/23 maxlen: 23
                          94.206.21.0/24 maxlen: 24
                          2a00:f2e::/32 maxlen: 32
                          2a00:f2c::/32 maxlen: 32
                          2a00:f2d::/32 maxlen: 32
                          2a00:f29::/32 maxlen: 32
                          2a00:f2b::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:96:5a:99:ee:bb:cc:b3:33:03:41:7b:47:46:c9:75:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Feb 28 04:49:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed6723f038717990cce8bfb8bdd047cd1d2f6aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:b0:4c:79:91:db:bd:c0:6d:08:c5:1c:62:
                    5d:fb:3f:08:c3:35:9b:e8:e9:48:26:bf:d8:82:a4:
                    56:57:a7:97:00:6a:cd:12:46:48:6d:fd:a1:32:42:
                    e6:db:54:51:63:8a:d7:43:b4:29:96:e1:99:94:11:
                    e4:9e:ed:98:9e:38:40:e2:f4:fd:3e:77:ce:da:67:
                    50:13:96:95:aa:ef:d3:b9:34:aa:10:5e:c2:ce:43:
                    5e:9a:d8:e6:17:b9:bb:ef:11:5c:2b:70:a1:39:dd:
                    68:03:ea:35:b7:58:e0:a8:f3:17:b3:04:30:ec:9c:
                    6b:52:66:41:df:8f:dd:2f:b8:cb:22:14:fa:1a:62:
                    a9:9b:ee:37:92:4c:1c:40:6d:fb:e9:d9:58:51:dd:
                    b1:78:e9:25:43:21:6e:33:a3:73:5f:af:dd:e6:8c:
                    de:05:5b:40:ce:2e:aa:e9:ba:0e:17:44:cb:a8:b7:
                    98:9a:37:29:4f:45:8a:dc:97:5f:7f:89:91:91:5b:
                    b0:5b:bd:4c:de:de:65:f2:4d:4a:86:50:51:76:55:
                    4a:59:9a:41:6f:85:4e:fb:a7:7b:65:5a:c0:df:5b:
                    6d:19:4a:a6:19:c5:75:b2:25:f3:d6:4f:ba:cf:05:
                    10:60:71:c2:2f:d6:b9:66:a1:16:89:1c:d8:09:25:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:23:F0:38:71:79:90:CC:E8:BF:B8:BD:D0:47:CD:1D:2F:6A:EA
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/7Wcj8DhxeZDM6L-4vdBHzR0vauo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.30.0.0-5.32.127.255
                  80.227.0.0/16
                  87.200.0.0/15
                  91.72.0.0/14
                  94.200.0.0/13
                  213.132.32.0/19
                IPv6:
                  2a00:f29::/32
                  2a00:f2b::-2a00:f2e:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         76:16:19:2e:9c:1f:a5:0b:99:db:22:44:6a:43:cd:f5:64:2b:
         ce:ac:ec:e4:21:a3:3c:2b:a2:1a:42:4b:c6:7d:62:f3:8f:ae:
         36:32:b3:cb:16:69:62:cb:49:87:fd:50:da:a4:87:18:81:b8:
         5c:2a:a6:8f:ac:a0:12:d9:95:4f:6a:91:58:a8:1a:ab:9d:cf:
         4a:36:0a:d2:3c:76:59:21:f5:db:71:46:a7:c3:a0:4b:0d:38:
         78:ca:1d:ba:1f:64:83:07:f5:e6:8d:9f:45:f2:5b:0d:69:ad:
         07:c2:cd:c6:34:7e:bf:dc:9c:cf:59:66:fc:ba:d6:ba:1c:23:
         38:44:0f:57:97:c7:0f:42:41:3c:00:09:92:d0:ac:a5:b3:08:
         33:53:23:c9:c1:d7:36:36:5f:8c:a3:16:43:f7:3b:85:ce:c3:
         c3:ca:3e:3f:3c:77:20:c1:36:f9:68:b8:80:7f:3b:03:4f:31:
         51:12:34:48:2d:38:b1:92:e7:16:c5:6c:b5:3e:fa:d9:d8:50:
         07:41:ec:e6:12:6f:c9:4f:bd:de:49:33:cc:8d:9c:e7:47:13:
         14:88:e1:f0:c6:ec:97:f0:7a:e4:14:83:fd:df:6c:91:76:40:
         51:ea:ff:26:29:42:4b:59:4c:48:00:3e:bf:4d:84:18:63:24:
         ed:0d:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org