Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nF4jC918QfY9DPXfFiKeP8_Q0rY.roa
File:                     nF4jC918QfY9DPXfFiKeP8_Q0rY.roa (raw, json)
Hash identifier:          munCePX547jOs4pzjRQgp09j1RzIbsStzRJ1MnBCxQg=
Subject key identifier:   9C:5E:23:0B:DD:7C:41:F6:3D:0C:F5:DF:16:22:9E:3F:CF:D0:D2:B6
Certificate issuer:       /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial:       0185A55EFF30FD7698ED586C897F272B618F
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nF4jC918QfY9DPXfFiKeP8_Q0rY.roa
Signing time:             Thu 12 Jan 2023 09:45:44 +0000
ROA not before:           Thu 12 Jan 2023 09:45:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203346
IP address blocks:        188.208.52.0/22 maxlen: 22
                          89.39.212.0/24 maxlen: 24
                          89.39.215.0/24 maxlen: 24
                          89.33.47.0/24 maxlen: 24
                          89.33.46.0/24 maxlen: 24
                          89.39.241.0/24 maxlen: 24
                          188.241.211.0/24 maxlen: 24
                          89.33.134.0/24 maxlen: 24
                          86.107.193.0/24 maxlen: 24
                          86.107.194.0/23 maxlen: 23
                          185.80.112.0/23 maxlen: 23
                          185.80.114.0/23 maxlen: 23
                          93.114.58.0/24 maxlen: 24
                          91.235.130.0/24 maxlen: 24
                          91.235.131.0/24 maxlen: 24
                          93.114.59.0/24 maxlen: 24
                          89.33.116.0/24 maxlen: 24
                          193.32.66.0/24 maxlen: 24
                          86.106.94.0/24 maxlen: 24
                          193.32.67.0/24 maxlen: 24
                          86.106.95.0/24 maxlen: 24
                          86.106.105.0/24 maxlen: 24
                          86.106.110.0/23 maxlen: 23
                          86.106.106.0/23 maxlen: 23
                          86.106.114.0/23 maxlen: 23
                          86.106.116.0/23 maxlen: 23
                          86.106.118.0/24 maxlen: 24
                          89.32.170.0/24 maxlen: 24
                          86.106.138.0/23 maxlen: 23
                          176.126.192.0/23 maxlen: 23
                          176.126.194.0/24 maxlen: 24
                          188.214.95.0/24 maxlen: 24
                          188.172.176.0/20 maxlen: 20
                          86.105.242.0/24 maxlen: 24
                          86.105.243.0/24 maxlen: 24
                          89.45.82.0/24 maxlen: 24
                          193.254.48.0/21 maxlen: 21
                          93.119.118.0/23 maxlen: 23
                          93.119.120.0/23 maxlen: 23
                          193.254.56.0/21 maxlen: 21
                          93.119.124.0/24 maxlen: 24
                          188.213.206.0/24 maxlen: 24
                          93.119.125.0/24 maxlen: 24
                          86.106.10.0/24 maxlen: 24
                          188.213.207.0/24 maxlen: 24
                          188.213.214.0/24 maxlen: 24
                          86.106.13.0/24 maxlen: 24
                          188.213.215.0/24 maxlen: 24
                          86.106.14.0/23 maxlen: 23
                          86.105.176.0/24 maxlen: 24
                          86.105.178.0/24 maxlen: 24
                          86.105.184.0/24 maxlen: 24
                          86.105.185.0/24 maxlen: 24
                          89.37.94.0/24 maxlen: 24
                          89.37.96.0/24 maxlen: 24
                          89.37.92.0/23 maxlen: 23
                          86.104.212.0/24 maxlen: 24
                          86.104.213.0/24 maxlen: 24
                          193.30.254.0/24 maxlen: 24
                          193.30.255.0/24 maxlen: 24
                          188.212.254.0/24 maxlen: 24
                          89.37.129.0/24 maxlen: 24
                          89.37.130.0/23 maxlen: 23
                          89.37.132.0/23 maxlen: 23
                          89.37.134.0/24 maxlen: 24
                          86.105.6.0/24 maxlen: 24
                          188.211.167.0/24 maxlen: 24
                          89.36.138.0/24 maxlen: 24
                          89.36.139.0/24 maxlen: 24
                          89.36.141.0/24 maxlen: 24
                          86.104.0.0/23 maxlen: 23
                          86.104.2.0/24 maxlen: 24
                          37.156.173.0/24 maxlen: 24
                          94.177.126.0/24 maxlen: 24
                          89.36.38.0/24 maxlen: 24
                          89.36.39.0/24 maxlen: 24
                          89.42.152.0/23 maxlen: 23
                          89.42.154.0/24 maxlen: 24
                          176.223.116.0/23 maxlen: 23
                          176.223.118.0/24 maxlen: 24
                          89.35.54.0/24 maxlen: 24
                          89.42.10.0/24 maxlen: 24
                          46.102.178.0/23 maxlen: 23
                          46.102.177.0/24 maxlen: 24
                          89.35.89.0/24 maxlen: 24
                          37.156.64.0/24 maxlen: 24
                          89.41.189.0/24 maxlen: 24
                          89.41.190.0/23 maxlen: 23
                          37.156.65.0/24 maxlen: 24
                          176.223.160.0/24 maxlen: 24
                          176.223.161.0/24 maxlen: 24
                          89.33.250.0/24 maxlen: 24
                          89.33.251.0/24 maxlen: 24
                          89.33.255.0/24 maxlen: 24
                          89.33.254.0/24 maxlen: 24
                          89.40.209.0/24 maxlen: 24
                          188.208.220.0/23 maxlen: 23
                          188.208.222.0/23 maxlen: 23
                          89.33.198.0/23 maxlen: 23
                          89.33.200.0/23 maxlen: 23
                          89.33.206.0/24 maxlen: 24
                          89.40.140.0/24 maxlen: 24
                          89.40.141.0/24 maxlen: 24
                          188.209.120.0/22 maxlen: 22
                          188.209.124.0/22 maxlen: 22
                          89.41.27.0/24 maxlen: 24
                          89.41.28.0/23 maxlen: 23
                          89.34.104.0/24 maxlen: 24
                          89.34.105.0/24 maxlen: 24
                          93.115.59.0/24 maxlen: 24
                          89.34.102.0/24 maxlen: 24
                          89.41.50.0/23 maxlen: 23
                          89.41.49.0/24 maxlen: 24
                          31.14.66.0/23 maxlen: 23
                          77.81.84.0/23 maxlen: 23
                          77.81.89.0/24 maxlen: 24
                          77.81.90.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a5:5e:ff:30:fd:76:98:ed:58:6c:89:7f:27:2b:61:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
        Validity
            Not Before: Jan 12 09:45:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9c5e230bdd7c41f63d0cf5df16229e3fcfd0d2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:17:59:81:95:4a:12:d7:8c:ac:45:fe:a1:
                    22:48:85:e2:ac:7d:75:8f:06:ff:ce:06:5e:0a:b2:
                    43:c5:1f:2f:d2:92:17:8f:2a:bb:83:7e:18:2b:4e:
                    b0:39:20:52:76:33:4c:04:cc:1b:57:fb:76:64:9c:
                    36:3e:98:cf:3a:84:47:c3:67:ac:ea:d8:8c:54:e4:
                    fe:e8:4b:98:a4:c4:96:20:3b:3b:13:f8:83:8e:d0:
                    ca:10:12:34:24:88:5f:dc:dc:1d:bf:09:f5:90:f8:
                    70:b9:54:61:41:04:5c:9c:3b:9e:39:95:10:8d:93:
                    2c:99:b6:dc:5a:5a:71:33:eb:ad:9d:be:67:bf:ca:
                    89:88:51:c7:6f:b5:31:81:0f:c0:11:8c:cb:d6:37:
                    c5:bb:47:12:e9:5e:ca:c1:8a:67:78:18:a7:e0:9b:
                    0e:3b:cf:7e:8b:ab:e3:47:b4:a3:64:e3:37:78:f2:
                    5c:13:5c:be:a0:2b:dc:e1:10:d8:1d:72:5a:e6:09:
                    67:f1:37:07:cb:e7:11:86:2a:34:67:0e:23:57:f2:
                    88:79:68:fc:1f:db:5a:03:34:84:23:5c:4e:dc:b6:
                    08:05:c6:6c:51:73:07:49:5f:14:ee:e4:75:a8:71:
                    89:fa:a6:48:ce:0c:98:77:38:6f:0d:51:7a:d1:d9:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:23:0B:DD:7C:41:F6:3D:0C:F5:DF:16:22:9E:3F:CF:D0:D2:B6
            X509v3 Authority Key Identifier:
                keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/nF4jC918QfY9DPXfFiKeP8_Q0rY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.66.0/23
                  37.156.64.0/23
                  37.156.173.0/24
                  46.102.177.0-46.102.179.255
                  77.81.84.0/23
                  77.81.89.0-77.81.91.255
                  86.104.0.0-86.104.2.255
                  86.104.212.0/23
                  86.105.6.0/24
                  86.105.176.0/24
                  86.105.178.0/24
                  86.105.184.0/23
                  86.105.242.0/23
                  86.106.10.0/24
                  86.106.13.0-86.106.15.255
                  86.106.94.0/23
                  86.106.105.0-86.106.107.255
                  86.106.110.0/23
                  86.106.114.0-86.106.118.255
                  86.106.138.0/23
                  86.107.193.0-86.107.195.255
                  89.32.170.0/24
                  89.33.46.0/23
                  89.33.116.0/24
                  89.33.134.0/24
                  89.33.198.0-89.33.201.255
                  89.33.206.0/24
                  89.33.250.0/23
                  89.33.254.0/23
                  89.34.102.0/24
                  89.34.104.0/23
                  89.35.54.0/24
                  89.35.89.0/24
                  89.36.38.0/23
                  89.36.138.0/23
                  89.36.141.0/24
                  89.37.92.0-89.37.94.255
                  89.37.96.0/24
                  89.37.129.0-89.37.134.255
                  89.39.212.0/24
                  89.39.215.0/24
                  89.39.241.0/24
                  89.40.140.0/23
                  89.40.209.0/24
                  89.41.27.0-89.41.29.255
                  89.41.49.0-89.41.51.255
                  89.41.189.0-89.41.191.255
                  89.42.10.0/24
                  89.42.152.0-89.42.154.255
                  89.45.82.0/24
                  91.235.130.0/23
                  93.114.58.0/23
                  93.115.59.0/24
                  93.119.118.0-93.119.121.255
                  93.119.124.0/23
                  94.177.126.0/24
                  176.126.192.0-176.126.194.255
                  176.223.116.0-176.223.118.255
                  176.223.160.0/23
                  185.80.112.0/22
                  188.172.176.0/20
                  188.208.52.0/22
                  188.208.220.0/22
                  188.209.120.0/21
                  188.211.167.0/24
                  188.212.254.0/24
                  188.213.206.0/23
                  188.213.214.0/23
                  188.214.95.0/24
                  188.241.211.0/24
                  193.30.254.0/23
                  193.32.66.0/23
                  193.254.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:71:66:4a:a2:c4:05:4e:da:3e:de:10:41:d6:d9:7c:0c:
         31:7c:0d:39:48:48:ca:c8:58:09:dd:2f:51:7a:14:89:52:b4:
         67:16:42:91:8f:24:1c:29:43:47:38:13:b4:ff:bf:1a:3e:a1:
         6f:48:cb:83:79:a7:6f:0d:24:ca:65:15:4e:44:5b:de:79:c2:
         dd:a8:0f:4e:8e:a9:0f:7f:b8:d8:9e:17:76:1b:a9:bf:be:19:
         32:f0:0b:be:51:2d:f1:c2:be:1a:83:69:e6:e8:26:b1:84:03:
         a9:51:c5:9f:c8:92:56:f0:b6:1d:6d:02:a7:62:03:a6:f7:36:
         b9:99:de:d6:1a:eb:b4:d2:ba:2b:e4:5d:c0:b7:f9:3b:a7:0a:
         2a:8e:73:5a:eb:37:67:db:4a:aa:ab:96:b5:60:dd:bd:35:2c:
         40:cb:42:30:bb:99:b9:27:46:45:89:70:c8:67:f7:e0:32:38:
         69:ec:3a:c8:17:09:bd:ea:ea:85:52:09:2b:43:63:db:6e:07:
         57:f7:b5:9f:75:16:11:b5:d7:16:ec:95:e3:3d:e6:23:9c:9c:
         f9:95:11:c7:eb:bc:18:db:27:d9:b9:a8:4d:ea:b9:04:89:3e:
         ac:74:9c:19:36:9c:94:ee:c7:a3:a1:2c:a1:7e:3c:0c:a6:80:
         18:f8:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-fra.rpki-client.org