Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wvzb_7GqexFvMGaEUzRePb5MLkk.roa
File:                     wvzb_7GqexFvMGaEUzRePb5MLkk.roa (raw, json)
Hash identifier:          x+taWMFKnQgDOTnB0du+AyIaJDYxd4fzzhRxDcvr3W4=
Subject key identifier:   C2:FC:DB:FF:B1:AA:7B:11:6F:30:66:84:53:34:5E:3D:BE:4C:2E:49
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       0191310C70F969FF18022C45E82F1DB6DDD6
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wvzb_7GqexFvMGaEUzRePb5MLkk.roa
Signing time:             Thu 08 Aug 2024 08:13:04 +0000
ROA not before:           Thu 08 Aug 2024 08:13:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3352
IP address blocks:        2.136.0.0/16 maxlen: 16
                          2.137.0.0/16 maxlen: 16
                          2.138.0.0/16 maxlen: 16
                          2.139.0.0/16 maxlen: 16
                          79.144.0.0/16 maxlen: 16
                          79.145.0.0/16 maxlen: 16
                          79.146.0.0/16 maxlen: 16
                          79.147.0.0/16 maxlen: 16
                          79.148.0.0/16 maxlen: 16
                          80.24.0.0/16 maxlen: 16
                          80.25.0.0/16 maxlen: 16
                          80.30.0.0/16 maxlen: 16
                          80.31.0.0/16 maxlen: 16
                          80.32.0.0/16 maxlen: 16
                          80.33.0.0/16 maxlen: 16
                          80.34.0.0/16 maxlen: 16
                          80.35.0.0/16 maxlen: 16
                          80.36.0.0/16 maxlen: 16
                          80.37.0.0/16 maxlen: 16
                          80.38.0.0/16 maxlen: 16
                          80.39.0.0/16 maxlen: 16
                          80.59.0.0/16 maxlen: 16
                          81.32.0.0/16 maxlen: 16
                          81.33.0.0/16 maxlen: 16
                          81.34.0.0/16 maxlen: 16
                          81.35.0.0/16 maxlen: 16
                          81.36.0.0/16 maxlen: 16
                          81.37.0.0/16 maxlen: 16
                          81.38.0.0/16 maxlen: 16
                          81.39.0.0/16 maxlen: 16
                          81.40.0.0/16 maxlen: 16
                          81.41.0.0/16 maxlen: 16
                          81.42.0.0/16 maxlen: 16
                          81.43.0.0/16 maxlen: 16
                          81.44.0.0/16 maxlen: 16
                          83.32.0.0/16 maxlen: 16
                          83.33.0.0/16 maxlen: 16
                          83.34.0.0/16 maxlen: 16
                          83.35.0.0/16 maxlen: 16
                          83.36.0.0/16 maxlen: 16
                          83.37.0.0/16 maxlen: 16
                          83.38.0.0/16 maxlen: 16
                          83.39.0.0/16 maxlen: 16
                          83.47.0.0/16 maxlen: 16
                          83.52.0.0/16 maxlen: 16
                          83.53.0.0/16 maxlen: 16
                          83.54.0.0/16 maxlen: 16
                          83.55.0.0/16 maxlen: 16
                          83.56.0.0/16 maxlen: 16
                          83.57.0.0/16 maxlen: 16
                          83.58.0.0/16 maxlen: 16
                          83.59.0.0/16 maxlen: 16
                          83.60.0.0/16 maxlen: 16
                          83.61.0.0/16 maxlen: 16
                          83.63.0.0/16 maxlen: 16
                          88.0.0.0/16 maxlen: 16
                          88.1.0.0/16 maxlen: 16
                          88.2.0.0/16 maxlen: 16
                          88.3.0.0/16 maxlen: 16
                          88.8.0.0/16 maxlen: 16
                          88.9.0.0/16 maxlen: 16
                          88.10.0.0/16 maxlen: 16
                          88.11.0.0/16 maxlen: 16
                          88.12.0.0/16 maxlen: 16
                          88.13.0.0/16 maxlen: 16
                          88.14.0.0/16 maxlen: 16
                          88.15.0.0/16 maxlen: 16
                          88.16.0.0/16 maxlen: 16
                          88.24.0.0/16 maxlen: 16
                          88.25.0.0/16 maxlen: 16
                          88.27.0.0/16 maxlen: 16
                          88.30.0.0/16 maxlen: 16
                          176.80.0.0/16 maxlen: 24
                          176.81.0.0/16 maxlen: 16
                          176.82.0.0/16 maxlen: 24
                          176.83.0.0/16 maxlen: 24
                          176.85.0.0/16 maxlen: 16
                          176.86.0.0/16 maxlen: 16
                          176.87.0.0/16 maxlen: 24
                          192.101.1.0/24 maxlen: 24
                          194.69.225.0/24 maxlen: 24
                          194.179.34.0/24 maxlen: 24
                          194.179.112.0/24 maxlen: 24
                          194.224.157.0/24 maxlen: 24
                          195.53.0.0/16 maxlen: 16
                          195.53.69.0/24 maxlen: 24
                          195.53.193.0/24 maxlen: 24
                          195.53.218.0/23 maxlen: 23
                          195.55.78.0/24 maxlen: 24
                          195.55.79.0/24 maxlen: 24
                          195.55.110.0/24 maxlen: 24
                          195.57.5.0/24 maxlen: 24
                          195.57.27.0/24 maxlen: 24
                          195.76.0.0/16 maxlen: 16
                          195.76.141.0/24 maxlen: 24
                          195.76.164.0/24 maxlen: 24
                          195.77.57.0/24 maxlen: 24
                          195.77.132.0/22 maxlen: 22
                          195.77.132.0/23 maxlen: 23
                          195.77.132.0/24 maxlen: 24
                          195.235.0.0/16 maxlen: 16
                          195.235.95.0/24 maxlen: 24
                          195.235.188.0/24 maxlen: 24
                          195.235.225.0/24 maxlen: 24
                          195.235.241.0/24 maxlen: 24
                          195.235.242.0/24 maxlen: 24
                          212.170.0.0/16 maxlen: 16
                          212.170.156.0/24 maxlen: 24
                          212.170.159.0/24 maxlen: 24
                          213.96.0.0/16 maxlen: 16
                          213.97.0.0/16 maxlen: 16
                          213.98.0.0/16 maxlen: 16
                          213.99.0.0/16 maxlen: 24
                          213.99.44.0/24 maxlen: 24
                          213.99.59.0/24 maxlen: 24
                          217.11.96.0/19 maxlen: 19
                          217.124.182.0/24 maxlen: 24
                          217.126.0.0/16 maxlen: 16
                          217.127.0.0/16 maxlen: 16
Validation:               Failed, certificate revoked on Fri 16 Aug 2024 06:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:31:0c:70:f9:69:ff:18:02:2c:45:e8:2f:1d:b6:dd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Aug  8 08:13:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c2fcdbffb1aa7b116f30668453345e3dbe4c2e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:14:13:dc:4a:54:d7:c0:cc:14:9a:c0:61:
                    9e:1b:5b:80:d9:12:65:b5:7c:94:1e:f7:d2:2c:cd:
                    85:e3:46:27:5a:6e:01:84:91:eb:47:02:48:ed:76:
                    06:fd:52:f8:96:c7:3b:56:de:4a:23:3b:f8:84:e3:
                    d7:2c:71:70:9d:ed:c7:f0:11:56:b2:d0:de:b0:24:
                    4f:b2:91:04:a4:be:70:5f:3e:d0:8c:b7:9d:59:b0:
                    e4:c0:71:6f:77:09:20:55:cb:b8:f4:4b:1f:b8:c3:
                    98:2b:2d:82:55:77:bc:b4:65:e6:9e:84:ad:4c:00:
                    89:d0:dc:6b:f2:27:16:95:51:4f:03:13:9b:d7:ae:
                    57:21:eb:1d:8a:f4:e5:ea:3b:44:db:ae:15:de:8a:
                    f6:65:a1:40:5c:1a:d2:f3:b2:fa:f6:64:0c:04:20:
                    f0:2d:9d:81:ac:c9:b6:8a:15:b5:33:a2:7c:1d:8b:
                    22:3e:63:15:0c:24:a9:67:b2:c3:3c:cc:2e:45:b5:
                    a9:2b:c0:f0:93:7a:82:ef:93:d1:9e:44:1e:a8:60:
                    21:d4:36:85:af:3b:f5:87:7b:3c:be:5a:7f:b4:3a:
                    73:73:27:ab:06:1a:96:95:b9:3c:82:c5:d2:f6:ec:
                    1e:06:ba:b7:c3:89:d2:13:e8:3a:4c:21:ed:ee:20:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:DB:FF:B1:AA:7B:11:6F:30:66:84:53:34:5E:3D:BE:4C:2E:49
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wvzb_7GqexFvMGaEUzRePb5MLkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.136.0.0/14
                  79.144.0.0-79.148.255.255
                  80.24.0.0/15
                  80.30.0.0-80.39.255.255
                  80.59.0.0/16
                  81.32.0.0-81.44.255.255
                  83.32.0.0/13
                  83.47.0.0/16
                  83.52.0.0-83.61.255.255
                  83.63.0.0/16
                  88.0.0.0/14
                  88.8.0.0-88.16.255.255
                  88.24.0.0/15
                  88.27.0.0/16
                  88.30.0.0/16
                  176.80.0.0/14
                  176.85.0.0-176.87.255.255
                  192.101.1.0/24
                  194.69.225.0/24
                  194.179.34.0/24
                  194.179.112.0/24
                  194.224.157.0/24
                  195.53.0.0/16
                  195.55.78.0/23
                  195.55.110.0/24
                  195.57.5.0/24
                  195.57.27.0/24
                  195.76.0.0/16
                  195.77.57.0/24
                  195.77.132.0/22
                  195.235.0.0/16
                  212.170.0.0/16
                  213.96.0.0/14
                  217.11.96.0/19
                  217.124.182.0/24
                  217.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c5:9a:64:2f:2c:f3:17:02:cc:50:1a:3f:a8:64:58:9f:7c:a9:
         ab:54:2d:93:4e:3c:27:fd:c9:26:85:20:5e:ce:27:b1:9b:3b:
         ad:c3:78:4e:13:e2:bd:00:d5:4c:02:66:39:ed:23:cb:dc:90:
         d1:58:d1:99:74:3a:d2:03:51:b0:0a:0c:5e:a3:ee:69:7f:20:
         55:97:02:7a:66:27:28:7a:eb:00:a2:83:a9:81:e9:f1:23:44:
         1e:31:ba:df:8e:ed:d4:09:8d:91:71:66:83:01:94:39:72:fe:
         98:21:c9:fb:5d:82:93:7a:34:f3:75:7c:19:da:d4:d4:bc:f2:
         64:af:57:f9:28:a4:5c:b2:6a:0c:5f:95:b0:39:c0:34:0e:d5:
         4c:d0:a2:a9:a6:da:24:48:0c:4c:c4:64:41:32:6b:f3:ce:8f:
         46:41:04:af:b2:2e:94:78:30:09:b4:2b:f0:21:c0:c1:8e:b4:
         ad:d5:d9:87:b9:fb:db:74:35:89:69:a0:a8:0f:f0:bc:d3:65:
         17:be:7c:21:d2:08:49:46:fd:5e:a2:54:bc:eb:3c:03:bb:2e:
         b3:37:c8:76:53:db:a0:16:31:1f:41:a0:8b:4f:a3:d8:bd:76:
         17:39:0d:af:37:e0:a9:10:68:c9:af:b6:8f:7d:8c:10:01:33:
         3b:11:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:21 2025 by rpki-client