Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/2EiVYbsbb9q2wGf8aBk_YU8dEro.roa
File:                     2EiVYbsbb9q2wGf8aBk_YU8dEro.roa (raw, json)
Hash identifier:          oJPT2jJW6yNqSbWFQ7zRF+xhlY5pUwY0KPA2eSD78jg=
Subject key identifier:   D8:48:95:61:BB:1B:6F:DA:B6:C0:67:FC:68:19:3F:61:4F:1D:12:BA
Certificate issuer:       /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial:       018A0471DBC5122809A4851CCB3ECBD7623A
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/2EiVYbsbb9q2wGf8aBk_YU8dEro.roa
Signing time:             Thu 17 Aug 2023 17:01:25 +0000
ROA not before:           Thu 17 Aug 2023 17:01:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203346
IP address blocks:        188.208.52.0/22 maxlen: 22
                          89.39.212.0/24 maxlen: 24
                          89.39.215.0/24 maxlen: 24
                          89.33.47.0/24 maxlen: 24
                          86.107.72.0/24 maxlen: 24
                          89.33.46.0/24 maxlen: 24
                          89.39.241.0/24 maxlen: 24
                          188.241.211.0/24 maxlen: 24
                          188.208.48.0/22 maxlen: 22
                          89.33.134.0/24 maxlen: 24
                          86.107.193.0/24 maxlen: 24
                          86.107.194.0/23 maxlen: 23
                          188.208.109.0/24 maxlen: 24
                          185.80.112.0/23 maxlen: 23
                          185.80.114.0/23 maxlen: 23
                          93.114.58.0/24 maxlen: 24
                          93.114.52.0/23 maxlen: 23
                          93.114.54.0/24 maxlen: 24
                          91.235.130.0/24 maxlen: 24
                          91.235.131.0/24 maxlen: 24
                          93.114.59.0/24 maxlen: 24
                          89.33.116.0/24 maxlen: 24
                          193.32.66.0/24 maxlen: 24
                          86.106.94.0/24 maxlen: 24
                          193.32.67.0/24 maxlen: 24
                          86.106.95.0/24 maxlen: 24
                          86.106.105.0/24 maxlen: 24
                          86.106.110.0/23 maxlen: 23
                          86.106.106.0/23 maxlen: 23
                          86.106.114.0/23 maxlen: 23
                          86.106.116.0/23 maxlen: 23
                          86.106.118.0/24 maxlen: 24
                          188.213.252.0/22 maxlen: 22
                          188.213.248.0/22 maxlen: 22
                          89.32.43.0/24 maxlen: 24
                          89.38.240.0/24 maxlen: 24
                          89.32.170.0/24 maxlen: 24
                          89.46.47.0/24 maxlen: 24
                          86.106.138.0/23 maxlen: 23
                          176.126.192.0/23 maxlen: 23
                          86.106.140.0/23 maxlen: 23
                          176.126.194.0/24 maxlen: 24
                          188.214.95.0/24 maxlen: 24
                          86.106.174.0/24 maxlen: 24
                          86.106.175.0/24 maxlen: 24
                          188.172.176.0/20 maxlen: 20
                          86.105.229.0/24 maxlen: 24
                          86.105.230.0/24 maxlen: 24
                          86.105.242.0/24 maxlen: 24
                          86.105.243.0/24 maxlen: 24
                          89.45.82.0/24 maxlen: 24
                          193.254.48.0/21 maxlen: 21
                          93.119.118.0/23 maxlen: 23
                          93.119.120.0/23 maxlen: 23
                          193.254.56.0/21 maxlen: 21
                          93.119.124.0/24 maxlen: 24
                          188.213.206.0/24 maxlen: 24
                          86.106.10.0/24 maxlen: 24
                          188.213.207.0/24 maxlen: 24
                          188.213.214.0/24 maxlen: 24
                          86.106.13.0/24 maxlen: 24
                          188.213.215.0/24 maxlen: 24
                          86.106.14.0/23 maxlen: 23
                          86.105.176.0/24 maxlen: 24
                          86.105.178.0/24 maxlen: 24
                          86.105.184.0/24 maxlen: 24
                          86.105.185.0/24 maxlen: 24
                          89.37.96.0/24 maxlen: 24
                          89.37.92.0/24 maxlen: 24
                          193.30.254.0/24 maxlen: 24
                          188.212.254.0/24 maxlen: 24
                          89.37.129.0/24 maxlen: 24
                          86.104.224.0/23 maxlen: 23
                          89.37.130.0/23 maxlen: 23
                          89.37.132.0/23 maxlen: 23
                          86.104.222.0/23 maxlen: 23
                          89.37.134.0/24 maxlen: 24
                          86.105.2.0/24 maxlen: 24
                          86.105.6.0/24 maxlen: 24
                          188.211.167.0/24 maxlen: 24
                          89.36.136.0/24 maxlen: 24
                          89.36.138.0/24 maxlen: 24
                          89.36.139.0/24 maxlen: 24
                          89.36.141.0/24 maxlen: 24
                          91.218.236.0/23 maxlen: 23
                          91.218.238.0/23 maxlen: 23
                          37.156.173.0/24 maxlen: 24
                          94.177.126.0/24 maxlen: 24
                          89.36.38.0/24 maxlen: 24
                          89.36.39.0/24 maxlen: 24
                          89.42.152.0/23 maxlen: 23
                          176.223.116.0/23 maxlen: 23
                          176.223.118.0/24 maxlen: 24
                          89.35.54.0/24 maxlen: 24
                          89.42.10.0/24 maxlen: 24
                          46.102.182.0/24 maxlen: 24
                          46.102.183.0/24 maxlen: 24
                          89.35.89.0/24 maxlen: 24
                          37.156.64.0/24 maxlen: 24
                          89.41.189.0/24 maxlen: 24
                          89.41.190.0/23 maxlen: 23
                          37.156.65.0/24 maxlen: 24
                          176.223.161.0/24 maxlen: 24
                          89.33.250.0/24 maxlen: 24
                          89.33.251.0/24 maxlen: 24
                          89.33.255.0/24 maxlen: 24
                          89.33.254.0/24 maxlen: 24
                          89.40.209.0/24 maxlen: 24
                          188.208.222.0/23 maxlen: 23
                          89.33.198.0/23 maxlen: 23
                          89.33.200.0/23 maxlen: 23
                          89.33.206.0/24 maxlen: 24
                          89.40.140.0/24 maxlen: 24
                          89.40.141.0/24 maxlen: 24
                          188.209.120.0/22 maxlen: 22
                          188.209.124.0/22 maxlen: 22
                          89.41.28.0/23 maxlen: 23
                          89.34.104.0/24 maxlen: 24
                          89.34.105.0/24 maxlen: 24
                          93.115.59.0/24 maxlen: 24
                          89.34.102.0/24 maxlen: 24
                          89.41.50.0/23 maxlen: 23
                          89.41.49.0/24 maxlen: 24
                          31.14.66.0/23 maxlen: 23
                          194.41.60.0/24 maxlen: 24
                          194.41.61.0/24 maxlen: 24
                          77.81.84.0/23 maxlen: 23
                          77.81.89.0/24 maxlen: 24
                          77.81.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Sep 2023 18:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:04:71:db:c5:12:28:09:a4:85:1c:cb:3e:cb:d7:62:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
        Validity
            Not Before: Aug 17 17:01:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d8489561bb1b6fdab6c067fc68193f614f1d12ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:27:74:9f:be:85:a2:8f:3c:1e:82:6f:5d:
                    71:cb:d6:99:f9:cd:2b:61:7e:c8:ef:8d:69:1f:9c:
                    64:77:7c:3d:70:05:40:d8:0f:68:29:d9:aa:c2:67:
                    1a:f8:b1:1f:d4:b3:47:64:5d:1a:d1:59:cc:de:fd:
                    d7:d6:72:7f:d0:20:0d:d8:22:61:9f:72:44:28:5d:
                    73:24:77:28:82:fa:02:59:9a:1b:c8:92:02:76:d2:
                    9c:9b:53:69:91:b6:67:b4:c4:2f:ef:03:be:78:f8:
                    6f:38:09:49:22:87:02:6a:67:fc:aa:9e:b6:ff:b0:
                    fe:c5:e9:c0:48:95:e1:84:29:8f:4a:7f:b8:98:fa:
                    6d:aa:dd:16:22:6c:f6:37:97:a1:ab:25:5e:4e:f3:
                    0f:33:e6:83:89:97:6b:70:b0:b6:3f:53:61:c8:4a:
                    3e:f7:4c:f3:69:e9:66:d9:4a:e9:cd:49:dd:51:a4:
                    87:16:45:95:2a:50:08:f7:9c:e0:c9:19:5d:eb:af:
                    44:ec:70:2a:32:bf:5d:56:3f:01:92:f9:52:a0:2b:
                    1d:74:1b:c8:75:83:b7:e8:6c:17:d8:cf:ba:7d:48:
                    e2:78:a1:e1:8f:d1:22:cd:35:6a:90:33:f5:02:0d:
                    67:70:b1:7c:7a:95:d2:ed:a1:0e:88:7d:0e:08:3a:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:48:95:61:BB:1B:6F:DA:B6:C0:67:FC:68:19:3F:61:4F:1D:12:BA
            X509v3 Authority Key Identifier:
                keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/2EiVYbsbb9q2wGf8aBk_YU8dEro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.66.0/23
                  37.156.64.0/23
                  37.156.173.0/24
                  46.102.182.0/23
                  77.81.84.0-77.81.86.255
                  77.81.89.0/24
                  86.104.222.0-86.104.225.255
                  86.105.2.0/24
                  86.105.6.0/24
                  86.105.176.0/24
                  86.105.178.0/24
                  86.105.184.0/23
                  86.105.229.0-86.105.230.255
                  86.105.242.0/23
                  86.106.10.0/24
                  86.106.13.0-86.106.15.255
                  86.106.94.0/23
                  86.106.105.0-86.106.107.255
                  86.106.110.0/23
                  86.106.114.0-86.106.118.255
                  86.106.138.0-86.106.141.255
                  86.106.174.0/23
                  86.107.72.0/24
                  86.107.193.0-86.107.195.255
                  89.32.43.0/24
                  89.32.170.0/24
                  89.33.46.0/23
                  89.33.116.0/24
                  89.33.134.0/24
                  89.33.198.0-89.33.201.255
                  89.33.206.0/24
                  89.33.250.0/23
                  89.33.254.0/23
                  89.34.102.0/24
                  89.34.104.0/23
                  89.35.54.0/24
                  89.35.89.0/24
                  89.36.38.0/23
                  89.36.136.0/24
                  89.36.138.0/23
                  89.36.141.0/24
                  89.37.92.0/24
                  89.37.96.0/24
                  89.37.129.0-89.37.134.255
                  89.38.240.0/24
                  89.39.212.0/24
                  89.39.215.0/24
                  89.39.241.0/24
                  89.40.140.0/23
                  89.40.209.0/24
                  89.41.28.0/23
                  89.41.49.0-89.41.51.255
                  89.41.189.0-89.41.191.255
                  89.42.10.0/24
                  89.42.152.0/23
                  89.45.82.0/24
                  89.46.47.0/24
                  91.218.236.0/22
                  91.235.130.0/23
                  93.114.52.0-93.114.54.255
                  93.114.58.0/23
                  93.115.59.0/24
                  93.119.118.0-93.119.121.255
                  93.119.124.0/24
                  94.177.126.0/24
                  176.126.192.0-176.126.194.255
                  176.223.116.0-176.223.118.255
                  176.223.161.0/24
                  185.80.112.0/22
                  188.172.176.0/20
                  188.208.48.0/21
                  188.208.109.0/24
                  188.208.222.0/23
                  188.209.120.0/21
                  188.211.167.0/24
                  188.212.254.0/24
                  188.213.206.0/23
                  188.213.214.0/23
                  188.213.248.0/21
                  188.214.95.0/24
                  188.241.211.0/24
                  193.30.254.0/24
                  193.32.66.0/23
                  193.254.48.0/20
                  194.41.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:0e:12:9a:33:40:6a:e3:dd:6d:8b:3a:60:27:b3:3b:fa:
         ca:f6:77:0f:b2:c7:4f:32:a3:e5:19:67:a7:7a:a6:60:73:ce:
         a0:ed:92:68:6a:d9:fe:8f:25:b0:dd:ae:6d:93:8a:a9:78:79:
         9b:67:21:ae:17:93:88:56:53:b9:2e:f7:71:ad:af:cb:bb:5f:
         c9:a3:1c:96:1c:71:c8:4a:4f:d3:11:5e:80:e5:f0:fc:b6:0f:
         90:39:ac:45:e6:cd:9d:c4:21:b0:b9:46:56:9f:3d:69:4a:a3:
         55:f5:01:30:34:ba:a2:01:a6:b5:1d:c9:3e:b9:d0:02:53:a8:
         05:81:60:72:83:70:85:7f:73:e8:24:74:68:4e:49:75:9d:43:
         c4:19:5d:ba:1d:3a:42:7b:2c:66:74:14:c3:31:33:3a:2a:2b:
         c7:dc:14:c1:8d:2d:c0:12:20:bf:2c:2c:dc:41:3d:e6:93:fe:
         d1:37:4b:2e:12:78:86:16:76:3c:1f:a3:60:ba:84:a1:a1:01:
         1f:31:cb:cb:39:2f:10:72:32:65:51:a9:a5:e9:78:8d:55:74:
         76:74:ca:db:6b:21:45:bc:04:c8:c8:75:e0:69:36:7b:dd:d4:
         18:eb:37:75:3e:97:63:63:b8:d8:33:a2:5c:a0:4b:67:34:c6:
         a3:d6:52:8d
-----BEGIN CERTIFICATE-----
MIIHfzCCBmegAwIBAgISAYoEcdvFEigJpIUcyz7L12I6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjMwODE3MTcwMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODQ4OTU2MWJiMWI2ZmRhYjZjMDY3ZmM2ODE5M2Y2MTRmMWQxMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6EndJ++haKPPB6Cb11xy9aZ+c0r
YX7I741pH5xkd3w9cAVA2A9oKdmqwmca+LEf1LNHZF0a0VnM3v3X1nJ/0CAN2CJh
n3JEKF1zJHcogvoCWZobyJICdtKcm1NpkbZntMQv7wO+ePhvOAlJIocCamf8qp62
/7D+xenASJXhhCmPSn+4mPptqt0WImz2N5ehqyVeTvMPM+aDiZdrcLC2P1NhyEo+
90zzaelm2UrpzUndUaSHFkWVKlAI95zgyRld669E7HAqMr9dVj8BkvlSoCsddBvI
dYO36GwX2M+6fUjieKHhj9EizTVqkDP1Ag1ncLF8epXS7aEOiH0OCDreeQIDAQAB
o4IEizCCBIcwHQYDVR0OBBYEFNhIlWG7G2/atsBn/GgZP2FPHRK6MB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvMkVpVllic2JiOXEyd0dmOGFCa19ZVThkRXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICnwYIKwYBBQUHAQcBAf8EggKOMIICijCCAoYEAgABMIIC
fgMEAR8OQgMEASWcQAMEACWcrQMEAS5mtjAMAwQCTVFUAwQATVFWAwQATVFZMAwD
BAFWaN4DBAFWaOADBABWaQIDBABWaQYDBABWabADBABWabIDBAFWabgwDAMEAFZp
5QMEAFZp5gMEAVZp8gMEAFZqCjAMAwQAVmoNAwQEVmoAAwQBVmpeMAwDBABWamkD
BAJWamgDBAFWam4wDAMEAVZqcgMEAFZqdjAMAwQBVmqKAwQBVmqMAwQBVmquAwQA
VmtIMAwDBABWa8EDBAJWa8ADBABZICsDBABZIKoDBAFZIS4DBABZIXQDBABZIYYw
DAMEAVkhxgMEAVkhyAMEAFkhzgMEAVkh+gMEAVkh/gMEAFkiZgMEAVkiaAMEAFkj
NgMEAFkjWQMEAVkkJgMEAFkkiAMEAVkkigMEAFkkjQMEAFklXAMEAFklYDAMAwQA
WSWBAwQAWSWGAwQAWSbwAwQAWSfUAwQAWSfXAwQAWSfxAwQBWSiMAwQAWSjRAwQB
WSkcMAwDBABZKTEDBAJZKTAwDAMEAFkpvQMEBlkpgAMEAFkqCgMEAVkqmAMEAFkt
UgMEAFkuLwMEAlva7AMEAVvrgjAMAwQCXXI0AwQAXXI2AwQBXXI6AwQAXXM7MAwD
BAFdd3YDBAFdd3gDBABdd3wDBABesX4wDAMEBrB+wAMEALB+wjAMAwQCsN90AwQA
sN92AwQAsN+hAwQCuVBwAwQEvKywAwQDvNAwAwQAvNBtAwQBvNDeAwQDvNF4AwQA
vNOnAwQAvNT+AwQBvNXOAwQBvNXWAwQDvNX4AwQAvNZfAwQAvPHTAwQAwR7+AwQB
wSBCAwQEwf4wAwQBwik8MA0GCSqGSIb3DQEBCwUAA4IBAQBl2A4SmjNAauPdbYs6
YCezO/rK9ncPssdPMqPlGWeneqZgc86g7ZJoatn+jyWw3a5tk4qpeHmbZyGuF5OI
VlO5Lvdxra/Lu1/JoxyWHHHISk/TEV6A5fD8tg+QOaxF5s2dxCGwuUZWnz1pSqNV
9QEwNLqiAaa1Hck+udACU6gFgWByg3CFf3PoJHRoTkl1nUPEGV26HTpCeyxmdBTD
MTM6KivH3BTBjS3AEiC/LCzcQT3mk/7RN0suEniGFnY8H6NguoShoQEfMcvLOS8Q
cjJlUaml6XiNVXR2dMrbayFFvATIyHXgaTZ73dQY6zd1PpdjY7jYM6JcoEtnNMaj
1lKN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org