Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/dNN6vIzw_PfOV_9N2VmFIkoWpmc.roa
File:                     dNN6vIzw_PfOV_9N2VmFIkoWpmc.roa (raw, json)
Hash identifier:          YFcdt+Vca1LSETIQfmXG8RXcRkIMQy02rVoeBFcRPmg=
Subject key identifier:   74:D3:7A:BC:8C:F0:FC:F7:CE:57:FF:4D:D9:59:85:22:4A:16:A6:67
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       018D3095AC31E47DCF766708B906E90179AE
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/dNN6vIzw_PfOV_9N2VmFIkoWpmc.roa
Signing time:             Mon 22 Jan 2024 09:52:11 +0000
ROA not before:           Mon 22 Jan 2024 09:52:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12479
IP address blocks:        1.178.224.0/19 maxlen: 19
                          1.178.224.0/21 maxlen: 21
                          1.178.232.0/21 maxlen: 21
                          1.178.240.0/21 maxlen: 21
                          1.178.248.0/21 maxlen: 21
                          46.102.160.0/21 maxlen: 24
                          62.36.0.0/16 maxlen: 24
                          62.36.21.0/24 maxlen: 24
                          64.225.144.0/21 maxlen: 24
                          77.81.168.0/21 maxlen: 24
                          81.24.168.0/21 maxlen: 24
                          85.48.0.0/12 maxlen: 24
                          85.48.188.0/24 maxlen: 24
                          85.204.152.0/21 maxlen: 24
                          86.104.112.0/21 maxlen: 24
                          86.104.168.0/21 maxlen: 24
                          86.104.186.0/23 maxlen: 24
                          89.44.184.0/22 maxlen: 24
                          89.200.184.0/21 maxlen: 24
                          90.160.0.0/12 maxlen: 24
                          93.117.88.0/21 maxlen: 21
                          93.117.88.0/22 maxlen: 22
                          93.117.92.0/22 maxlen: 22
                          95.214.36.0/23 maxlen: 24
                          107.183.128.0/17 maxlen: 17
                          109.205.128.0/21 maxlen: 21
                          109.205.128.0/22 maxlen: 22
                          109.205.128.0/23 maxlen: 23
                          109.205.130.0/23 maxlen: 23
                          109.205.132.0/22 maxlen: 22
                          109.205.132.0/23 maxlen: 23
                          109.205.134.0/23 maxlen: 23
                          113.203.128.0/18 maxlen: 18
                          145.1.128.0/17 maxlen: 17
                          145.1.128.0/19 maxlen: 19
                          145.1.160.0/19 maxlen: 19
                          145.1.192.0/20 maxlen: 20
                          145.1.208.0/20 maxlen: 20
                          145.1.224.0/22 maxlen: 22
                          145.1.228.0/22 maxlen: 22
                          145.1.232.0/21 maxlen: 21
                          145.1.240.0/20 maxlen: 20
                          149.74.0.0/16 maxlen: 16
                          149.74.0.0/22 maxlen: 22
                          149.74.0.0/24 maxlen: 24
                          149.74.1.0/24 maxlen: 24
                          149.74.2.0/23 maxlen: 23
                          149.74.4.0/22 maxlen: 22
                          149.74.4.0/23 maxlen: 23
                          149.74.6.0/23 maxlen: 23
                          149.74.8.0/22 maxlen: 22
                          149.74.16.0/22 maxlen: 22
                          149.74.20.0/22 maxlen: 22
                          149.74.24.0/22 maxlen: 22
                          149.74.28.0/22 maxlen: 22
                          149.74.30.0/24 maxlen: 24
                          149.74.32.0/20 maxlen: 20
                          149.74.48.0/21 maxlen: 21
                          149.74.56.0/22 maxlen: 22
                          149.74.60.0/22 maxlen: 22
                          149.74.64.0/21 maxlen: 21
                          149.74.72.0/21 maxlen: 21
                          149.74.80.0/22 maxlen: 22
                          149.74.84.0/22 maxlen: 22
                          149.74.88.0/22 maxlen: 22
                          149.74.92.0/22 maxlen: 22
                          149.74.96.0/20 maxlen: 20
                          149.74.96.0/23 maxlen: 23
                          149.74.98.0/23 maxlen: 23
                          149.74.100.0/23 maxlen: 23
                          149.74.102.0/23 maxlen: 23
                          149.74.104.0/23 maxlen: 23
                          149.74.106.0/23 maxlen: 23
                          149.74.108.0/23 maxlen: 23
                          149.74.110.0/23 maxlen: 23
                          149.74.112.0/21 maxlen: 21
                          149.74.120.0/21 maxlen: 21
                          149.74.128.0/22 maxlen: 22
                          149.74.132.0/22 maxlen: 22
                          149.74.134.0/24 maxlen: 24
                          149.74.136.0/22 maxlen: 22
                          149.74.140.0/22 maxlen: 22
                          149.74.144.0/22 maxlen: 22
                          149.74.148.0/22 maxlen: 22
                          149.74.152.0/21 maxlen: 21
                          149.74.160.0/22 maxlen: 22
                          149.74.160.0/23 maxlen: 23
                          149.74.164.0/22 maxlen: 22
                          149.74.168.0/22 maxlen: 22
                          149.74.170.0/24 maxlen: 24
                          149.74.172.0/22 maxlen: 22
                          149.74.176.0/22 maxlen: 22
                          149.74.178.0/24 maxlen: 24
                          149.74.180.0/22 maxlen: 22
                          149.74.184.0/22 maxlen: 22
                          149.74.187.0/24 maxlen: 24
                          149.74.188.0/22 maxlen: 22
                          149.74.192.0/22 maxlen: 22
                          149.74.196.0/22 maxlen: 22
                          149.74.197.0/24 maxlen: 24
                          149.74.199.0/24 maxlen: 24
                          149.74.200.0/22 maxlen: 22
                          149.74.204.0/22 maxlen: 22
                          149.74.208.0/22 maxlen: 22
                          149.74.208.0/23 maxlen: 23
                          149.74.210.0/23 maxlen: 23
                          149.74.212.0/22 maxlen: 22
                          149.74.216.0/22 maxlen: 22
                          149.74.220.0/22 maxlen: 22
                          149.74.224.0/22 maxlen: 22
                          149.74.232.0/22 maxlen: 22
                          149.74.236.0/22 maxlen: 22
                          149.74.240.0/22 maxlen: 22
                          149.74.244.0/22 maxlen: 22
                          149.74.248.0/22 maxlen: 22
                          149.74.251.0/24 maxlen: 24
                          149.74.252.0/22 maxlen: 22
                          149.74.252.0/23 maxlen: 23
                          151.252.16.0/21 maxlen: 21
                          152.41.0.0/17 maxlen: 17
                          161.199.192.0/22 maxlen: 22
                          176.10.16.0/21 maxlen: 21
                          176.10.24.0/21 maxlen: 21
                          176.104.64.0/19 maxlen: 19
                          185.124.36.0/22 maxlen: 22
                          185.132.192.0/22 maxlen: 22
                          185.147.93.0/24 maxlen: 24
                          188.93.32.0/22 maxlen: 22
                          188.126.128.0/19 maxlen: 19
                          188.126.128.0/22 maxlen: 22
                          188.126.132.0/22 maxlen: 22
                          188.126.136.0/22 maxlen: 22
                          188.126.140.0/22 maxlen: 22
                          188.126.144.0/22 maxlen: 22
                          188.126.148.0/22 maxlen: 22
                          188.126.152.0/22 maxlen: 22
                          188.126.156.0/23 maxlen: 23
                          188.126.158.0/23 maxlen: 23
                          188.126.158.0/24 maxlen: 24
                          188.208.0.0/20 maxlen: 20
                          188.208.0.0/22 maxlen: 22
                          188.208.4.0/22 maxlen: 22
                          188.208.8.0/22 maxlen: 22
                          188.208.8.0/24 maxlen: 24
                          188.208.9.0/24 maxlen: 24
                          188.208.12.0/22 maxlen: 22
                          188.208.12.0/24 maxlen: 24
                          188.208.13.0/24 maxlen: 24
                          188.208.14.0/24 maxlen: 24
                          188.208.40.0/21 maxlen: 21
                          188.239.128.0/19 maxlen: 19
                          188.239.128.0/21 maxlen: 21
                          188.239.144.0/22 maxlen: 22
                          188.239.148.0/22 maxlen: 22
                          188.239.152.0/23 maxlen: 23
                          188.239.154.0/23 maxlen: 23
                          188.239.156.0/23 maxlen: 23
                          188.239.158.0/23 maxlen: 23
                          188.240.128.0/20 maxlen: 20
                          188.240.128.0/21 maxlen: 21
                          188.240.136.0/22 maxlen: 22
                          188.240.140.0/22 maxlen: 22
                          192.157.192.0/18 maxlen: 24
                          192.157.192.0/22 maxlen: 22
                          192.157.196.0/22 maxlen: 22
                          192.157.200.0/21 maxlen: 21
                          192.157.208.0/21 maxlen: 21
                          192.157.216.0/21 maxlen: 21
                          193.124.1.0/24 maxlen: 24
                          193.124.25.0/24 maxlen: 24
                          193.124.31.0/24 maxlen: 24
                          193.124.32.0/24 maxlen: 24
                          193.124.37.0/24 maxlen: 24
                          193.124.43.0/24 maxlen: 24
                          193.124.51.0/24 maxlen: 24
                          193.124.61.0/24 maxlen: 24
                          193.124.70.0/23 maxlen: 24
                          193.124.81.0/24 maxlen: 24
                          193.124.85.0/24 maxlen: 24
                          193.124.120.0/24 maxlen: 24
                          193.124.132.0/24 maxlen: 24
                          193.124.135.0/24 maxlen: 24
                          193.124.255.0/24 maxlen: 24
                          194.58.28.0/23 maxlen: 24
                          194.58.30.0/24 maxlen: 24
                          194.58.35.0/24 maxlen: 24
                          194.58.80.0/23 maxlen: 24
                          194.58.84.0/22 maxlen: 24
                          194.135.0.0/24 maxlen: 24
                          194.135.3.0/24 maxlen: 24
                          194.135.19.0/24 maxlen: 24
                          194.135.28.0/23 maxlen: 24
                          194.135.31.0/24 maxlen: 24
                          194.135.56.0/22 maxlen: 24
                          194.135.76.0/22 maxlen: 24
                          194.135.101.0/24 maxlen: 24
                          194.135.102.0/24 maxlen: 24
                          194.135.125.0/24 maxlen: 24
                          194.135.126.0/23 maxlen: 24
                          194.135.134.0/24 maxlen: 24
                          194.135.196.0/22 maxlen: 24
                          195.254.182.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 07:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:30:95:ac:31:e4:7d:cf:76:67:08:b9:06:e9:01:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Jan 22 09:52:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=74d37abc8cf0fcf7ce57ff4dd95985224a16a667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:6a:a4:94:68:d6:29:da:c5:a2:ab:07:bc:
                    35:28:8f:76:58:d1:e2:1d:2c:f6:db:72:46:91:04:
                    60:d9:a0:9d:55:f1:11:ec:e0:94:a9:d1:e8:c2:60:
                    eb:13:41:8a:76:df:68:69:a2:1b:93:72:bb:68:77:
                    29:98:f9:21:4e:a1:07:cb:44:da:db:ec:ef:19:33:
                    0d:97:96:5b:bf:af:23:fb:72:5a:cd:ef:b6:9d:21:
                    67:d1:02:8e:d0:7d:58:cd:fb:d5:4f:bd:56:b9:e0:
                    d5:70:47:45:10:69:5a:f1:ec:11:30:92:a0:84:94:
                    55:a5:90:2c:18:6b:76:8e:e7:26:f7:d4:7b:aa:03:
                    c3:9e:69:34:f0:21:f5:7b:f3:07:cc:0d:c4:80:b6:
                    40:4a:a1:31:f5:6c:b0:a6:42:79:5b:0e:da:ec:6e:
                    8d:65:46:7b:47:35:06:a2:0d:64:0b:ff:3c:a8:a7:
                    a7:88:63:e3:5a:e6:0e:4d:8f:d8:10:ba:33:4d:3c:
                    ed:90:fe:2f:01:e1:8d:f5:84:3e:ba:d1:7a:a0:5a:
                    49:34:16:69:c0:25:23:37:58:5b:00:8d:fa:c0:6d:
                    14:2b:d7:f7:28:0e:2d:50:40:28:a4:8a:1f:f3:5c:
                    90:6b:40:1b:85:86:e5:f6:1e:87:d5:e5:04:87:3c:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D3:7A:BC:8C:F0:FC:F7:CE:57:FF:4D:D9:59:85:22:4A:16:A6:67
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/dNN6vIzw_PfOV_9N2VmFIkoWpmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.224.0/19
                  46.102.160.0/21
                  62.36.0.0/16
                  64.225.144.0/21
                  77.81.168.0/21
                  81.24.168.0/21
                  85.48.0.0/12
                  85.204.152.0/21
                  86.104.112.0/21
                  86.104.168.0/21
                  86.104.186.0/23
                  89.44.184.0/22
                  89.200.184.0/21
                  90.160.0.0/12
                  93.117.88.0/21
                  95.214.36.0/23
                  107.183.128.0/17
                  109.205.128.0/21
                  113.203.128.0/18
                  145.1.128.0/17
                  149.74.0.0/16
                  151.252.16.0/21
                  152.41.0.0/17
                  161.199.192.0/22
                  176.10.16.0/20
                  176.104.64.0/19
                  185.124.36.0/22
                  185.132.192.0/22
                  185.147.93.0/24
                  188.93.32.0/22
                  188.126.128.0/19
                  188.208.0.0/20
                  188.208.40.0/21
                  188.239.128.0/19
                  188.240.128.0/20
                  192.157.192.0/18
                  193.124.1.0/24
                  193.124.25.0/24
                  193.124.31.0-193.124.32.255
                  193.124.37.0/24
                  193.124.43.0/24
                  193.124.51.0/24
                  193.124.61.0/24
                  193.124.70.0/23
                  193.124.81.0/24
                  193.124.85.0/24
                  193.124.120.0/24
                  193.124.132.0/24
                  193.124.135.0/24
                  193.124.255.0/24
                  194.58.28.0-194.58.30.255
                  194.58.35.0/24
                  194.58.80.0/23
                  194.58.84.0/22
                  194.135.0.0/24
                  194.135.3.0/24
                  194.135.19.0/24
                  194.135.28.0/23
                  194.135.31.0/24
                  194.135.56.0/22
                  194.135.76.0/22
                  194.135.101.0-194.135.102.255
                  194.135.125.0-194.135.127.255
                  194.135.134.0/24
                  194.135.196.0/22
                  195.254.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:b5:4d:2d:09:24:bc:6d:fe:bf:19:69:46:32:b7:d2:c2:5a:
         a0:8f:e5:2e:e7:f2:39:b0:6a:49:88:85:8f:3d:13:a5:e7:0a:
         21:9c:62:39:9a:81:51:d1:18:4b:4e:8a:55:36:a5:30:c3:47:
         c5:e8:c7:51:22:99:16:c6:19:a6:f3:9c:84:9a:33:63:7f:6b:
         c6:ca:71:11:80:e3:40:d0:52:8b:03:df:09:17:ed:e5:61:57:
         2f:ea:31:dd:71:56:84:25:92:a7:54:80:f1:51:38:6b:6c:32:
         d3:fb:c0:d4:12:84:d6:2c:cc:31:e2:e8:ef:da:58:78:8e:3c:
         ec:3f:5d:5e:7f:06:63:cc:ba:2e:65:ef:70:72:4c:9c:aa:89:
         24:da:c2:87:80:4c:cd:c1:37:e1:50:86:01:de:93:a1:c7:2a:
         6b:27:6c:a2:be:59:8a:5d:61:51:38:a1:23:2b:10:5c:38:a1:
         85:a5:aa:04:e7:11:c1:c0:c8:86:67:a2:e7:ef:f3:da:0f:8a:
         34:0f:72:78:ba:b6:24:47:a9:5d:73:17:f6:71:36:61:48:77:
         3d:e6:39:02:e5:71:48:23:9d:19:f9:8d:eb:de:40:2e:8d:3f:
         df:90:43:48:5b:fb:57:c7:54:8d:76:7d:57:44:28:60:b2:c5:
         e5:e9:b3:0e
-----BEGIN CERTIFICATE-----
MIIGqTCCBZGgAwIBAgISAY0wlawx5H3PdmcIuQbpAXmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYWQzNDRlYjVmN2ViMWRlZTRiOGY4NDM1ZmI1YjlkODc2
NjNlOWQwHhcNMjQwMTIyMDk1MjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGQzN2FiYzhjZjBmY2Y3Y2U1N2ZmNGRkOTU5ODUyMjRhMTZhNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3VqpJRo1inaxaKrB7w1KI92WNHi
HSz223JGkQRg2aCdVfER7OCUqdHowmDrE0GKdt9oaaIbk3K7aHcpmPkhTqEHy0Ta
2+zvGTMNl5Zbv68j+3Jaze+2nSFn0QKO0H1YzfvVT71WueDVcEdFEGla8ewRMJKg
hJRVpZAsGGt2jucm99R7qgPDnmk08CH1e/MHzA3EgLZASqEx9WywpkJ5Ww7a7G6N
ZUZ7RzUGog1kC/88qKeniGPjWuYOTY/YELozTTztkP4vAeGN9YQ+utF6oFpJNBZp
wCUjN1hbAI36wG0UK9f3KA4tUEAopIof81yQa0AbhYbl9h6H1eUEhzx+twIDAQAB
o4IDtTCCA7EwHQYDVR0OBBYEFHTTeryM8Pz3zlf/TdlZhSJKFqZnMB8GA1UdIwQY
MBaAFO+tNE619+sd7kuPhDX7W52HZj6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzYwMFRyWDM2eDN1UzQtRU5mdGJuWWRtUHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYTgzMGEtZjA2MS00Y2RjLWJhZmIt
YTJmZTlmMDE1ZDcxLzEvZE5ONnZJendfUGZPVl85TjJWbUZJa29XcG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xYTgzMGEtZjA2MS00Y2RjLWJhZmItYTJmZTlmMDE1ZDcx
LzEvNzYwMFRyWDM2eDN1UzQtRU5mdGJuWWRtUHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIByQYIKwYBBQUHAQcBAf8EggG4MIIBtDCCAbAEAgABMIIB
qAMEBQGy4AMEAy5moAMDAD4kAwQDQOGQAwQDTVGoAwQDURioAwMEVTADBANVzJgD
BANWaHADBANWaKgDBAFWaLoDBAJZLLgDBANZyLgDAwRaoAMEA111WAMEAV/WJAME
B2u3gAMEA23NgAMEBnHLgAMEB5EBgAMDAJVKAwQDl/wQAwQHmCkAAwQCocfAAwQE
sAoQAwQFsGhAAwQCuXwkAwQCuYTAAwQAuZNdAwQCvF0gAwQFvH6AAwQEvNAAAwQD
vNAoAwQFvO+AAwQEvPCAAwQGwJ3AAwQAwXwBAwQAwXwZMAwDBADBfB8DBADBfCAD
BADBfCUDBADBfCsDBADBfDMDBADBfD0DBAHBfEYDBADBfFEDBADBfFUDBADBfHgD
BADBfIQDBADBfIcDBADBfP8wDAMEAsI6HAMEAMI6HgMEAMI6IwMEAcI6UAMEAsI6
VAMEAMKHAAMEAMKHAwMEAMKHEwMEAcKHHAMEAMKHHwMEAsKHOAMEAsKHTDAMAwQA
wodlAwQAwodmMAwDBADCh30DBAfChwADBADCh4YDBALCh8QDBAHD/rYwDQYJKoZI
hvcNAQELBQADggEBAHm1TS0JJLxt/r8ZaUYyt9LCWqCP5S7n8jmwakmIhY89E6Xn
CiGcYjmagVHRGEtOilU2pTDDR8Xox1EimRbGGabznISaM2N/a8bKcRGA40DQUosD
3wkX7eVhVy/qMd1xVoQlkqdUgPFROGtsMtP7wNQShNYszDHi6O/aWHiOPOw/XV5/
BmPMui5l73ByTJyqiSTawoeATM3BN+FQhgHek6HHKmsnbKK+WYpdYVE4oSMrEFw4
oYWlqgTnEcHAyIZnoufv89oPijQPcni6tiRHqV1zF/ZxNmFIdz3mOQLlcUgjnRn5
jeveQC6NP9+QQ0hb+1fHVI12fVdEKGCyxeXpsw4=
-----END CERTIFICATE-----
Generated at Tue Jan 23 12:08:02 2024 by rpki-client on console-fra.rpki-client.org