Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/1-zQlnI0C5-ZlSMrCiSVqMtf32dw.roa
File:                     1-zQlnI0C5-ZlSMrCiSVqMtf32dw.roa (raw, json)
Hash identifier:          Ayz4alBohLgVHsmvj05b86Mu/rh5e/q+zl4OPfbrziY=
Subject key identifier:   FB:34:25:9C:8D:02:E7:E6:65:48:CA:C2:89:25:6A:32:D7:F7:D9:DC
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       0186CA6F3D2A8F74A5DDCBABF64BBA9F475D
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/1-zQlnI0C5-ZlSMrCiSVqMtf32dw.roa
Signing time:             Fri 10 Mar 2023 07:32:13 +0000
ROA not before:           Fri 10 Mar 2023 07:32:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198610
IP address blocks:        45.80.68.0/22 maxlen: 22
                          45.80.68.0/24 maxlen: 24
                          45.80.69.0/24 maxlen: 24
                          45.80.70.0/24 maxlen: 24
                          45.80.71.0/24 maxlen: 24
                          45.147.176.0/22 maxlen: 22
                          45.147.176.0/24 maxlen: 24
                          45.147.177.0/24 maxlen: 24
                          45.147.178.0/24 maxlen: 24
                          45.147.179.0/24 maxlen: 24
                          5.181.109.0/24 maxlen: 24
                          5.181.110.0/24 maxlen: 24
                          5.181.111.0/24 maxlen: 24
                          5.181.108.0/24 maxlen: 24
                          5.181.108.0/22 maxlen: 22
                          45.141.77.0/24 maxlen: 24
                          45.141.76.0/22 maxlen: 22
                          45.141.78.0/24 maxlen: 24
                          45.141.76.0/24 maxlen: 24
                          45.67.57.0/24 maxlen: 24
                          45.67.58.0/24 maxlen: 24
                          45.141.79.0/24 maxlen: 24
                          45.67.56.0/24 maxlen: 24
                          45.67.56.0/22 maxlen: 22
                          45.67.59.0/24 maxlen: 24
                          185.19.204.0/22 maxlen: 22
                          185.19.204.0/24 maxlen: 24
                          185.19.205.0/24 maxlen: 24
                          185.19.206.0/24 maxlen: 24
                          185.19.207.0/24 maxlen: 24
                          193.168.46.0/24 maxlen: 24
                          193.168.46.0/23 maxlen: 23
                          193.168.47.0/24 maxlen: 24
                          193.168.48.0/23 maxlen: 23
                          193.168.48.0/24 maxlen: 24
                          193.168.49.0/24 maxlen: 24
                          45.12.16.0/24 maxlen: 24
                          45.12.17.0/24 maxlen: 24
                          45.12.16.0/22 maxlen: 22
                          45.12.18.0/24 maxlen: 24
                          45.12.19.0/24 maxlen: 24
                          95.214.61.0/24 maxlen: 24
                          95.214.62.0/24 maxlen: 24
                          95.214.63.0/24 maxlen: 24
                          95.214.60.0/24 maxlen: 24
                          95.214.60.0/22 maxlen: 22
                          81.200.112.0/24 maxlen: 24
                          81.200.113.0/24 maxlen: 24
                          213.139.208.0/22 maxlen: 22
                          81.200.112.0/21 maxlen: 21
                          213.139.208.0/24 maxlen: 24
                          81.200.114.0/24 maxlen: 24
                          213.139.209.0/24 maxlen: 24
                          81.200.115.0/24 maxlen: 24
                          81.200.116.0/24 maxlen: 24
                          81.200.118.0/24 maxlen: 24
                          81.200.117.0/24 maxlen: 24
                          213.139.210.0/24 maxlen: 24
                          213.139.211.0/24 maxlen: 24
                          81.200.119.0/24 maxlen: 24
                          45.146.164.0/24 maxlen: 24
                          45.146.165.0/24 maxlen: 24
                          45.146.166.0/24 maxlen: 24
                          45.146.164.0/22 maxlen: 22
                          45.146.167.0/24 maxlen: 24
                          91.106.206.0/24 maxlen: 24
                          91.106.200.0/21 maxlen: 21
                          91.106.200.0/24 maxlen: 24
                          91.106.201.0/24 maxlen: 24
                          91.106.202.0/24 maxlen: 24
                          91.106.203.0/24 maxlen: 24
                          91.106.204.0/24 maxlen: 24
                          91.106.205.0/24 maxlen: 24
                          91.106.207.0/24 maxlen: 24
                          62.113.97.0/24 maxlen: 24
                          62.113.98.0/24 maxlen: 24
                          62.113.96.0/20 maxlen: 20
                          62.113.96.0/24 maxlen: 24
                          62.113.104.0/24 maxlen: 24
                          62.113.105.0/24 maxlen: 24
                          62.113.99.0/24 maxlen: 24
                          62.113.100.0/24 maxlen: 24
                          62.113.101.0/24 maxlen: 24
                          62.113.102.0/24 maxlen: 24
                          62.113.103.0/24 maxlen: 24
                          62.113.110.0/24 maxlen: 24
                          62.113.111.0/24 maxlen: 24
                          62.113.106.0/24 maxlen: 24
                          62.113.107.0/24 maxlen: 24
                          62.113.108.0/24 maxlen: 24
                          62.113.109.0/24 maxlen: 24
                          193.200.72.0/22 maxlen: 22
                          193.200.72.0/24 maxlen: 24
                          193.200.73.0/24 maxlen: 24
                          193.200.74.0/24 maxlen: 24
                          193.200.75.0/24 maxlen: 24
                          217.172.24.0/22 maxlen: 22
                          217.172.24.0/24 maxlen: 24
                          217.172.27.0/24 maxlen: 24
                          217.172.25.0/24 maxlen: 24
                          217.172.26.0/24 maxlen: 24
                          185.78.30.0/24 maxlen: 24
                          185.78.28.0/22 maxlen: 22
                          185.78.31.0/24 maxlen: 24
                          185.78.28.0/24 maxlen: 24
                          185.78.29.0/24 maxlen: 24
                          45.84.224.0/24 maxlen: 24
                          45.84.225.0/24 maxlen: 24
                          45.84.224.0/22 maxlen: 22
                          45.84.226.0/24 maxlen: 24
                          45.84.227.0/24 maxlen: 24
                          185.225.34.0/24 maxlen: 24
                          185.225.32.0/22 maxlen: 22
                          185.225.35.0/24 maxlen: 24
                          185.225.32.0/24 maxlen: 24
                          185.225.33.0/24 maxlen: 24
                          185.50.24.0/24 maxlen: 24
                          185.50.24.0/22 maxlen: 22
                          45.90.32.0/24 maxlen: 24
                          45.90.33.0/24 maxlen: 24
                          45.90.34.0/24 maxlen: 24
                          45.90.35.0/24 maxlen: 24
                          45.90.32.0/22 maxlen: 22
                          5.101.153.244/32 maxlen: 32
                          87.236.17.122/32 maxlen: 32
                          5.101.153.242/32 maxlen: 32
                          185.50.25.0/24 maxlen: 24
                          185.50.26.0/24 maxlen: 24
                          185.50.27.0/24 maxlen: 24
                          45.9.40.0/22 maxlen: 24
                          62.217.177.0/24 maxlen: 24
                          62.217.178.0/24 maxlen: 24
                          62.217.179.0/24 maxlen: 24
                          62.217.176.0/21 maxlen: 21
                          62.217.176.0/24 maxlen: 24
                          62.217.183.0/24 maxlen: 24
                          62.217.180.0/24 maxlen: 24
                          62.217.181.0/24 maxlen: 24
                          62.217.182.0/24 maxlen: 24
                          45.130.42.0/24 maxlen: 24
                          45.130.43.0/24 maxlen: 24
                          45.130.40.0/22 maxlen: 22
                          45.130.40.0/24 maxlen: 24
                          45.130.41.0/24 maxlen: 24
                          193.176.76.0/24 maxlen: 24
                          193.176.77.0/24 maxlen: 24
                          193.176.78.0/24 maxlen: 24
                          193.176.76.0/22 maxlen: 22
                          193.176.79.0/24 maxlen: 24
                          5.101.154.191/32 maxlen: 32
                          31.129.96.0/20 maxlen: 20
                          31.129.98.0/24 maxlen: 24
                          31.129.96.0/24 maxlen: 24
                          87.236.16.0/24 maxlen: 24
                          87.236.17.0/24 maxlen: 24
                          87.236.16.0/21 maxlen: 21
                          87.236.21.0/24 maxlen: 24
                          87.236.22.0/24 maxlen: 24
                          87.236.23.0/24 maxlen: 24
                          87.236.18.0/24 maxlen: 24
                          87.236.19.0/24 maxlen: 24
                          87.236.20.0/24 maxlen: 24
                          185.155.118.0/24 maxlen: 24
                          5.101.152.0/24 maxlen: 24
                          5.101.152.0/21 maxlen: 21
                          5.101.153.0/24 maxlen: 24
                          5.101.154.0/24 maxlen: 24
                          5.101.155.0/24 maxlen: 24
                          5.101.156.0/24 maxlen: 24
                          5.101.157.0/24 maxlen: 24
                          5.101.158.0/24 maxlen: 24
                          5.101.159.0/24 maxlen: 24
                          2a04:bac0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 10 Mar 2023 08:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ca:6f:3d:2a:8f:74:a5:dd:cb:ab:f6:4b:ba:9f:47:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Mar 10 07:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb34259c8d02e7e66548cac289256a32d7f7d9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c2:7b:6b:5c:69:93:9c:76:1d:5f:91:e3:69:
                    e0:f9:8e:2e:a0:3f:ac:38:c9:0c:46:ff:6f:20:df:
                    2a:c5:3b:48:6a:e3:c8:76:18:af:20:84:89:ac:5d:
                    55:53:6b:63:b4:6d:0e:96:35:c7:a9:f8:58:0a:bd:
                    b5:f7:ad:c1:91:62:2b:e5:55:f2:d5:8b:51:92:cb:
                    bd:03:88:59:ed:99:e4:f5:7d:fc:1a:db:c2:fa:3c:
                    f6:fa:64:be:56:76:4b:c6:94:33:d3:13:50:ec:08:
                    d8:24:59:35:37:45:86:ae:22:ee:bb:94:1b:18:36:
                    db:c2:1f:2a:2d:e6:9f:cb:a2:f5:f5:c5:fc:71:64:
                    72:9c:3f:27:d2:85:e5:81:47:30:7b:86:6d:ef:4e:
                    d5:c9:ac:7d:24:5f:14:30:ba:da:6b:2c:42:2c:a9:
                    71:f2:2e:cd:5b:4a:28:00:c7:85:a7:48:ba:32:de:
                    77:b3:b8:3e:4e:34:83:46:be:59:78:0d:80:e2:b2:
                    83:48:79:78:2b:05:18:3d:33:c7:f5:30:6a:8b:21:
                    df:9c:e1:fe:3d:de:07:00:ee:ce:c2:bf:fb:cb:8e:
                    f6:0e:14:64:ef:2e:ad:2d:f9:c0:ee:ef:04:8e:82:
                    d3:b1:96:f9:21:d5:7c:92:1d:1d:ea:de:c7:94:7d:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:34:25:9C:8D:02:E7:E6:65:48:CA:C2:89:25:6A:32:D7:F7:D9:DC
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/1-zQlnI0C5-ZlSMrCiSVqMtf32dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.101.152.0/21
                  5.181.108.0/22
                  31.129.96.0/20
                  45.9.40.0/22
                  45.12.16.0/22
                  45.67.56.0/22
                  45.80.68.0/22
                  45.84.224.0/22
                  45.90.32.0/22
                  45.130.40.0/22
                  45.141.76.0/22
                  45.146.164.0/22
                  45.147.176.0/22
                  62.113.96.0/20
                  62.217.176.0/21
                  81.200.112.0/21
                  87.236.16.0/21
                  91.106.200.0/21
                  95.214.60.0/22
                  185.19.204.0/22
                  185.50.24.0/22
                  185.78.28.0/22
                  185.155.118.0/24
                  185.225.32.0/22
                  193.168.46.0-193.168.49.255
                  193.176.76.0/22
                  193.200.72.0/22
                  213.139.208.0/22
                  217.172.24.0/22
                IPv6:
                  2a04:bac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:56:f6:d5:61:6d:01:9e:30:0b:c3:58:19:6f:43:86:e9:50:
         34:ae:67:4a:b5:d2:c0:cf:a7:b2:09:a6:4e:86:16:68:2b:b4:
         7b:0a:50:13:62:76:5c:5a:de:1a:79:77:7b:b9:01:3a:42:78:
         f6:fb:43:c1:5c:78:15:20:68:b8:2f:99:0d:07:ef:99:dc:85:
         5f:67:ee:a4:0e:31:09:b0:59:86:56:3a:cb:02:f7:90:02:70:
         f8:da:0d:8c:a3:a0:9d:5c:8e:27:ff:64:2c:ba:a2:e4:b8:45:
         dc:ff:9e:b5:41:0d:55:90:f6:94:1c:a1:e9:9e:a0:95:b5:a8:
         a2:6b:a6:9d:96:dd:69:72:83:64:74:20:01:9c:e6:05:2e:75:
         f1:dd:a1:3f:17:3a:88:93:6c:7f:e7:49:3d:c8:4e:45:b1:e9:
         22:89:78:32:ab:bd:9c:c5:5b:ca:e0:0d:98:3e:81:75:ff:6e:
         f7:ad:5d:b0:a7:c9:52:7c:9d:51:bd:48:2b:ab:58:10:11:69:
         64:95:c9:0d:97:b9:e5:22:66:9a:a5:e8:eb:e1:58:b4:8c:fc:
         da:71:65:16:b5:54:70:2b:6b:d9:dd:6e:16:29:61:cb:6e:77:
         91:4c:19:05:7e:25:f9:2a:9c:e9:9f:4c:4f:da:5d:bb:df:e0:
         73:5d:80:32
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAYbKbz0qj3Sl3cur9ku6n0ddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjMwMzEwMDczMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjM0MjU5YzhkMDJlN2U2NjU0OGNhYzI4OTI1NmEzMmQ3ZjdkOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sJ7a1xpk5x2HV+R42ng+Y4uoD+s
OMkMRv9vIN8qxTtIauPIdhivIISJrF1VU2tjtG0OljXHqfhYCr21963BkWIr5VXy
1YtRksu9A4hZ7Znk9X38GtvC+jz2+mS+VnZLxpQz0xNQ7AjYJFk1N0WGriLuu5Qb
GDbbwh8qLeafy6L19cX8cWRynD8n0oXlgUcwe4Zt707Vyax9JF8UMLraayxCLKlx
8i7NW0ooAMeFp0i6Mt53s7g+TjSDRr5ZeA2A4rKDSHl4KwUYPTPH9TBqiyHfnOH+
Pd4HAO7Owr/7y472DhRk7y6tLfnA7u8EjoLTsZb5IdV8kh0d6t7HlH09kwIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFPs0JZyNAufmZUjKwoklajLX99ncMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvMS16UWxuSTBDNS1abFNNckNpU1ZxTXRmMzJkdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvNDg5MmE5LTNiMzctNGQzOS05YzJiLWQ4M2VkMTQwZDI4
ZC8xL1FYUHV1TkF2WDJSNGl6X2NlTmE2dUtWZjBXby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB4gYIKwYBBQUHAQcBAf8EgdIwgc8wgb0EAgABMIG2AwQD
BWWYAwQCBbVsAwQEH4FgAwQCLQkoAwQCLQwQAwQCLUM4AwQCLVBEAwQCLVTgAwQC
LVogAwQCLYIoAwQCLY1MAwQCLZKkAwQCLZOwAwQEPnFgAwQDPtmwAwQDUchwAwQD
V+wQAwQDW2rIAwQCX9Y8AwQCuRPMAwQCuTIYAwQCuU4cAwQAuZt2AwQCueEgMAwD
BAHBqC4DBAHBqDADBALBsEwDBALByEgDBALVi9ADBALZrBgwDQQCAAIwBwMFAyoE
usAwDQYJKoZIhvcNAQELBQADggEBAFRW9tVhbQGeMAvDWBlvQ4bpUDSuZ0q10sDP
p7IJpk6GFmgrtHsKUBNidlxa3hp5d3u5ATpCePb7Q8FceBUgaLgvmQ0H75nchV9n
7qQOMQmwWYZWOssC95ACcPjaDYyjoJ1cjif/ZCy6ouS4Rdz/nrVBDVWQ9pQcoeme
oJW1qKJrpp2W3Wlyg2R0IAGc5gUudfHdoT8XOoiTbH/nST3ITkWx6SKJeDKrvZzF
W8rgDZg+gXX/bvetXbCnyVJ8nVG9SCurWBARaWSVyQ2XueUiZpql6OvhWLSM/Npx
ZRa1VHAra9ndbhYpYctud5FMGQV+JfkqnOmfTE/aXbvf4HNdgDI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org