Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/SXmewaysqwbeNcOHpP3pdhw0d5U.roa
File:                     SXmewaysqwbeNcOHpP3pdhw0d5U.roa (raw, json)
Hash identifier:          O6+SXdjZ+p9ltYEmhIyv2GlrcSJhCXMevYDHop+gm3U=
Subject key identifier:   49:79:9E:C1:AC:AC:AB:06:DE:35:C3:87:A4:FD:E9:76:1C:34:77:95
Certificate issuer:       /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial:       0185AB0D85E8C312E96FEA9064069EAA66DC
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/SXmewaysqwbeNcOHpP3pdhw0d5U.roa
Signing time:             Fri 13 Jan 2023 12:14:28 +0000
ROA not before:           Fri 13 Jan 2023 12:14:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203346
IP address blocks:        188.208.52.0/22 maxlen: 22
                          89.39.212.0/24 maxlen: 24
                          89.39.215.0/24 maxlen: 24
                          89.33.47.0/24 maxlen: 24
                          86.107.72.0/24 maxlen: 24
                          89.33.46.0/24 maxlen: 24
                          89.39.241.0/24 maxlen: 24
                          188.241.211.0/24 maxlen: 24
                          89.33.134.0/24 maxlen: 24
                          86.107.193.0/24 maxlen: 24
                          86.107.194.0/23 maxlen: 23
                          185.80.112.0/23 maxlen: 23
                          185.80.114.0/23 maxlen: 23
                          93.114.58.0/24 maxlen: 24
                          91.235.130.0/24 maxlen: 24
                          91.235.131.0/24 maxlen: 24
                          93.114.59.0/24 maxlen: 24
                          89.33.116.0/24 maxlen: 24
                          193.32.66.0/24 maxlen: 24
                          193.32.67.0/24 maxlen: 24
                          86.106.94.0/24 maxlen: 24
                          86.106.95.0/24 maxlen: 24
                          86.106.105.0/24 maxlen: 24
                          86.106.110.0/23 maxlen: 23
                          86.106.106.0/23 maxlen: 23
                          86.106.114.0/23 maxlen: 23
                          86.106.116.0/23 maxlen: 23
                          86.106.118.0/24 maxlen: 24
                          89.32.43.0/24 maxlen: 24
                          89.38.240.0/24 maxlen: 24
                          89.32.170.0/24 maxlen: 24
                          89.46.47.0/24 maxlen: 24
                          86.106.138.0/23 maxlen: 23
                          176.126.192.0/23 maxlen: 23
                          176.126.194.0/24 maxlen: 24
                          188.214.95.0/24 maxlen: 24
                          188.172.176.0/20 maxlen: 20
                          86.105.242.0/24 maxlen: 24
                          86.105.243.0/24 maxlen: 24
                          89.45.82.0/24 maxlen: 24
                          193.254.48.0/21 maxlen: 21
                          93.119.118.0/23 maxlen: 23
                          93.119.120.0/23 maxlen: 23
                          193.254.56.0/21 maxlen: 21
                          93.119.124.0/24 maxlen: 24
                          188.213.206.0/24 maxlen: 24
                          93.119.125.0/24 maxlen: 24
                          86.106.10.0/24 maxlen: 24
                          188.213.207.0/24 maxlen: 24
                          188.213.214.0/24 maxlen: 24
                          86.106.13.0/24 maxlen: 24
                          188.213.215.0/24 maxlen: 24
                          86.106.14.0/23 maxlen: 23
                          86.105.176.0/24 maxlen: 24
                          86.105.178.0/24 maxlen: 24
                          86.105.184.0/24 maxlen: 24
                          86.105.185.0/24 maxlen: 24
                          89.37.94.0/24 maxlen: 24
                          89.37.96.0/24 maxlen: 24
                          89.37.92.0/23 maxlen: 23
                          86.104.212.0/24 maxlen: 24
                          86.104.213.0/24 maxlen: 24
                          193.30.254.0/24 maxlen: 24
                          193.30.255.0/24 maxlen: 24
                          188.212.254.0/24 maxlen: 24
                          89.37.129.0/24 maxlen: 24
                          89.37.130.0/23 maxlen: 23
                          89.37.132.0/23 maxlen: 23
                          89.37.134.0/24 maxlen: 24
                          86.105.2.0/24 maxlen: 24
                          86.105.6.0/24 maxlen: 24
                          188.211.167.0/24 maxlen: 24
                          89.36.136.0/24 maxlen: 24
                          89.36.138.0/24 maxlen: 24
                          89.36.139.0/24 maxlen: 24
                          89.36.141.0/24 maxlen: 24
                          86.104.0.0/23 maxlen: 23
                          86.104.2.0/24 maxlen: 24
                          37.156.173.0/24 maxlen: 24
                          94.177.126.0/24 maxlen: 24
                          89.36.38.0/24 maxlen: 24
                          89.36.39.0/24 maxlen: 24
                          89.42.152.0/23 maxlen: 23
                          89.42.154.0/24 maxlen: 24
                          176.223.116.0/23 maxlen: 23
                          176.223.118.0/24 maxlen: 24
                          89.35.54.0/24 maxlen: 24
                          89.42.10.0/24 maxlen: 24
                          46.102.178.0/23 maxlen: 23
                          46.102.177.0/24 maxlen: 24
                          89.35.89.0/24 maxlen: 24
                          37.156.64.0/24 maxlen: 24
                          89.41.189.0/24 maxlen: 24
                          89.41.190.0/23 maxlen: 23
                          37.156.65.0/24 maxlen: 24
                          176.223.160.0/24 maxlen: 24
                          176.223.161.0/24 maxlen: 24
                          89.33.250.0/24 maxlen: 24
                          89.33.251.0/24 maxlen: 24
                          89.33.255.0/24 maxlen: 24
                          89.33.254.0/24 maxlen: 24
                          89.40.209.0/24 maxlen: 24
                          188.208.220.0/23 maxlen: 23
                          188.208.222.0/23 maxlen: 23
                          89.33.198.0/23 maxlen: 23
                          89.33.200.0/23 maxlen: 23
                          89.33.206.0/24 maxlen: 24
                          89.40.140.0/24 maxlen: 24
                          89.40.141.0/24 maxlen: 24
                          188.209.120.0/22 maxlen: 22
                          188.209.124.0/22 maxlen: 22
                          89.41.27.0/24 maxlen: 24
                          89.41.28.0/23 maxlen: 23
                          89.34.104.0/24 maxlen: 24
                          89.34.105.0/24 maxlen: 24
                          93.115.59.0/24 maxlen: 24
                          89.34.102.0/24 maxlen: 24
                          89.41.50.0/23 maxlen: 23
                          89.41.49.0/24 maxlen: 24
                          31.14.66.0/23 maxlen: 23
                          77.81.84.0/23 maxlen: 23
                          77.81.89.0/24 maxlen: 24
                          77.81.90.0/23 maxlen: 23
                          77.81.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Jan 2023 16:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ab:0d:85:e8:c3:12:e9:6f:ea:90:64:06:9e:aa:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
        Validity
            Not Before: Jan 13 12:14:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49799ec1acacab06de35c387a4fde9761c347795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:39:df:70:a6:2a:c2:47:52:73:fc:da:01:
                    7a:3f:56:bb:78:6c:cd:d2:77:8b:ce:33:76:2e:1f:
                    d2:fe:15:b4:37:05:62:ff:29:82:5c:f3:98:e4:eb:
                    a5:6b:ce:b4:56:e7:84:f4:2a:b2:5b:bd:c1:0b:48:
                    e8:bb:7c:37:e8:be:50:5f:a5:2e:04:3d:1e:0e:77:
                    65:49:5a:cf:0b:26:66:73:e6:85:3d:af:4d:28:27:
                    0d:d8:59:9a:58:5d:a0:21:82:c6:3a:30:59:29:09:
                    24:8c:87:30:fd:0e:d0:c4:70:e3:e3:0d:7a:47:7c:
                    9c:68:02:87:ec:6d:e7:7b:56:57:65:09:a1:c6:04:
                    b8:21:f5:ea:60:38:74:ee:4d:fe:35:b8:1c:5a:b2:
                    4e:60:9f:1f:9f:3f:75:1e:b3:e7:3c:af:53:d9:20:
                    8f:be:01:95:fc:16:92:41:55:2b:bf:f3:b3:de:e9:
                    04:a8:2a:c5:43:a7:4a:ea:e7:96:34:4f:a6:87:80:
                    d8:56:50:71:ed:74:70:d2:0d:26:9e:03:d9:3e:e3:
                    2e:84:7f:a7:67:0d:a4:4d:ae:fe:6e:fb:bc:ec:47:
                    c6:3d:14:83:07:c5:ce:68:f5:35:41:0d:8c:2e:8c:
                    9b:2e:c5:9e:e7:1e:df:c8:d6:ea:f8:54:15:00:03:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:9E:C1:AC:AC:AB:06:DE:35:C3:87:A4:FD:E9:76:1C:34:77:95
            X509v3 Authority Key Identifier:
                keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/SXmewaysqwbeNcOHpP3pdhw0d5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.66.0/23
                  37.156.64.0/23
                  37.156.173.0/24
                  46.102.177.0-46.102.179.255
                  77.81.84.0-77.81.86.255
                  77.81.89.0-77.81.91.255
                  86.104.0.0-86.104.2.255
                  86.104.212.0/23
                  86.105.2.0/24
                  86.105.6.0/24
                  86.105.176.0/24
                  86.105.178.0/24
                  86.105.184.0/23
                  86.105.242.0/23
                  86.106.10.0/24
                  86.106.13.0-86.106.15.255
                  86.106.94.0/23
                  86.106.105.0-86.106.107.255
                  86.106.110.0/23
                  86.106.114.0-86.106.118.255
                  86.106.138.0/23
                  86.107.72.0/24
                  86.107.193.0-86.107.195.255
                  89.32.43.0/24
                  89.32.170.0/24
                  89.33.46.0/23
                  89.33.116.0/24
                  89.33.134.0/24
                  89.33.198.0-89.33.201.255
                  89.33.206.0/24
                  89.33.250.0/23
                  89.33.254.0/23
                  89.34.102.0/24
                  89.34.104.0/23
                  89.35.54.0/24
                  89.35.89.0/24
                  89.36.38.0/23
                  89.36.136.0/24
                  89.36.138.0/23
                  89.36.141.0/24
                  89.37.92.0-89.37.94.255
                  89.37.96.0/24
                  89.37.129.0-89.37.134.255
                  89.38.240.0/24
                  89.39.212.0/24
                  89.39.215.0/24
                  89.39.241.0/24
                  89.40.140.0/23
                  89.40.209.0/24
                  89.41.27.0-89.41.29.255
                  89.41.49.0-89.41.51.255
                  89.41.189.0-89.41.191.255
                  89.42.10.0/24
                  89.42.152.0-89.42.154.255
                  89.45.82.0/24
                  89.46.47.0/24
                  91.235.130.0/23
                  93.114.58.0/23
                  93.115.59.0/24
                  93.119.118.0-93.119.121.255
                  93.119.124.0/23
                  94.177.126.0/24
                  176.126.192.0-176.126.194.255
                  176.223.116.0-176.223.118.255
                  176.223.160.0/23
                  185.80.112.0/22
                  188.172.176.0/20
                  188.208.52.0/22
                  188.208.220.0/22
                  188.209.120.0/21
                  188.211.167.0/24
                  188.212.254.0/24
                  188.213.206.0/23
                  188.213.214.0/23
                  188.214.95.0/24
                  188.241.211.0/24
                  193.30.254.0/23
                  193.32.66.0/23
                  193.254.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:55:6a:53:b5:f4:61:ed:08:3a:05:0c:6d:d0:0f:3a:74:9b:
         b8:d1:9c:89:4c:d6:82:3d:77:c6:3d:90:51:e1:90:61:47:18:
         f0:ca:67:57:b7:da:1f:02:03:08:7f:f2:57:32:15:e6:bf:e9:
         99:f2:40:7c:b1:84:72:52:01:e0:49:74:d2:b2:95:5c:05:e8:
         85:55:3e:bb:cd:7e:2f:04:07:b3:07:c7:18:60:ad:b7:6b:de:
         5d:e0:be:30:0e:c7:1f:ba:bb:7a:a4:7e:2c:9f:d5:4b:29:dd:
         60:f4:16:5e:00:5d:ee:1f:68:85:a6:e4:cc:e6:bc:4d:05:00:
         0e:b3:5a:a7:20:a9:02:c8:67:bd:c2:81:01:b2:ba:51:a4:6a:
         53:80:49:15:7c:d9:04:11:84:cd:d9:b7:e7:f7:2c:97:fd:92:
         73:32:11:20:65:54:87:66:e9:c0:10:40:be:06:f7:38:08:47:
         04:31:fd:1e:dd:e0:1a:97:87:7b:21:b7:fc:08:e8:48:c0:d7:
         12:b9:53:99:a3:e7:d5:88:54:0e:69:b8:49:48:23:0d:f6:a7:
         59:96:b2:bd:80:e8:c2:9e:f8:c3:45:3f:ef:ac:8b:2d:8c:d7:
         22:72:10:1a:a9:35:01:3b:35:1f:f0:cd:ce:2a:53:fa:17:44:
         98:4c:12:c6
-----BEGIN CERTIFICATE-----
MIIHajCCBlKgAwIBAgISAYWrDYXowxLpb+qQZAaeqmbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjMwMTEzMTIxNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTc5OWVjMWFjYWNhYjA2ZGUzNWMzODdhNGZkZTk3NjFjMzQ3Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqto533CmKsJHUnP82gF6P1a7eGzN
0neLzjN2Lh/S/hW0NwVi/ymCXPOY5Oula860VueE9CqyW73BC0jou3w36L5QX6Uu
BD0eDndlSVrPCyZmc+aFPa9NKCcN2FmaWF2gIYLGOjBZKQkkjIcw/Q7QxHDj4w16
R3ycaAKH7G3ne1ZXZQmhxgS4IfXqYDh07k3+NbgcWrJOYJ8fnz91HrPnPK9T2SCP
vgGV/BaSQVUrv/Oz3ukEqCrFQ6dK6ueWNE+mh4DYVlBx7XRw0g0mngPZPuMuhH+n
Zw2kTa7+bvu87EfGPRSDB8XOaPU1QQ2MLoybLsWe5x7fyNbq+FQVAAPW0wIDAQAB
o4IEdjCCBHIwHQYDVR0OBBYEFEl5nsGsrKsG3jXDh6T96XYcNHeVMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvU1htZXdheXNxd2JlTmNPSHBQM3BkaHcwZDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICigYIKwYBBQUHAQcBAf8EggJ5MIICdTCCAnEEAgABMIIC
aQMEAR8OQgMEASWcQAMEACWcrTAMAwQALmaxAwQCLmawMAwDBAJNUVQDBABNUVYw
DAMEAE1RWQMEAk1RWDALAwMDVmgDBABWaAIDBAFWaNQDBABWaQIDBABWaQYDBABW
abADBABWabIDBAFWabgDBAFWafIDBABWagowDAMEAFZqDQMEBFZqAAMEAVZqXjAM
AwQAVmppAwQCVmpoAwQBVmpuMAwDBAFWanIDBABWanYDBAFWaooDBABWa0gwDAME
AFZrwQMEAlZrwAMEAFkgKwMEAFkgqgMEAVkhLgMEAFkhdAMEAFkhhjAMAwQBWSHG
AwQBWSHIAwQAWSHOAwQBWSH6AwQBWSH+AwQAWSJmAwQBWSJoAwQAWSM2AwQAWSNZ
AwQBWSQmAwQAWSSIAwQBWSSKAwQAWSSNMAwDBAJZJVwDBABZJV4DBABZJWAwDAME
AFklgQMEAFklhgMEAFkm8AMEAFkn1AMEAFkn1wMEAFkn8QMEAVkojAMEAFko0TAM
AwQAWSkbAwQBWSkcMAwDBABZKTEDBAJZKTAwDAMEAFkpvQMEBlkpgAMEAFkqCjAM
AwQDWSqYAwQAWSqaAwQAWS1SAwQAWS4vAwQBW+uCAwQBXXI6AwQAXXM7MAwDBAFd
d3YDBAFdd3gDBAFdd3wDBABesX4wDAMEBrB+wAMEALB+wjAMAwQCsN90AwQAsN92
AwQBsN+gAwQCuVBwAwQEvKywAwQCvNA0AwQCvNDcAwQDvNF4AwQAvNOnAwQAvNT+
AwQBvNXOAwQBvNXWAwQAvNZfAwQAvPHTAwQBwR7+AwQBwSBCAwQEwf4wMA0GCSqG
SIb3DQEBCwUAA4IBAQCQVWpTtfRh7Qg6BQxt0A86dJu40ZyJTNaCPXfGPZBR4ZBh
RxjwymdXt9ofAgMIf/JXMhXmv+mZ8kB8sYRyUgHgSXTSspVcBeiFVT67zX4vBAez
B8cYYK23a95d4L4wDscfurt6pH4sn9VLKd1g9BZeAF3uH2iFpuTM5rxNBQAOs1qn
IKkCyGe9woEBsrpRpGpTgEkVfNkEEYTN2bfn9yyX/ZJzMhEgZVSHZunAEEC+Bvc4
CEcEMf0e3eAal4d7Ibf8COhIwNcSuVOZo+fViFQOabhJSCMN9qdZlrK9gOjCnvjD
RT/vrIstjNcichAaqTUBOzUf8M3OKlP6F0SYTBLG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-fra.rpki-client.org