Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/4W6RoRd_cqfLyRDNO0JfaozsLvs.roa
File:                     4W6RoRd_cqfLyRDNO0JfaozsLvs.roa (raw, json)
Hash identifier:          O3LvzUkwXfQQ8ekoec4Gw00WPBJjWohJvoKCc8p/2+g=
Subject key identifier:   E1:6E:91:A1:17:7F:72:A7:CB:C9:10:CD:3B:42:5F:6A:8C:EC:2E:FB
Certificate issuer:       /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial:       01856D8AC4A8D2734071B40E79C9D7A8F991
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/4W6RoRd_cqfLyRDNO0JfaozsLvs.roa
Signing time:             Sun 01 Jan 2023 13:34:48 +0000
ROA not before:           Sun 01 Jan 2023 13:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200845
IP address blocks:        185.188.17.0/24 maxlen: 24
                          185.188.16.0/24 maxlen: 24
                          185.188.19.0/24 maxlen: 24
                          185.194.208.0/24 maxlen: 24
                          185.188.18.0/24 maxlen: 24
                          185.194.211.0/24 maxlen: 24
                          185.194.210.0/24 maxlen: 24
                          185.194.209.0/24 maxlen: 24
                          185.157.212.0/24 maxlen: 24
                          185.157.215.0/24 maxlen: 24
                          185.157.214.0/24 maxlen: 24
                          185.86.211.0/24 maxlen: 24
                          185.104.61.0/24 maxlen: 24
                          185.104.60.0/24 maxlen: 24
                          185.84.44.0/24 maxlen: 24
                          134.255.242.0/24 maxlen: 24
                          89.43.197.0/24 maxlen: 24
                          89.43.196.0/24 maxlen: 24
                          185.84.47.0/24 maxlen: 24
                          185.84.46.0/24 maxlen: 24
                          185.84.45.0/24 maxlen: 24
                          5.187.39.0/24 maxlen: 24
                          185.92.238.0/24 maxlen: 24
                          95.156.206.0/24 maxlen: 24
                          95.156.205.0/24 maxlen: 24
                          95.156.204.0/24 maxlen: 24
                          5.187.38.0/24 maxlen: 24
                          95.156.207.0/24 maxlen: 24
                          185.191.23.0/24 maxlen: 24
                          185.191.22.0/24 maxlen: 24
                          185.191.21.0/24 maxlen: 24
                          185.191.20.0/24 maxlen: 24
                          212.237.231.0/24 maxlen: 24
                          185.204.64.0/24 maxlen: 24
                          185.204.67.0/24 maxlen: 24
                          185.204.66.0/24 maxlen: 24
                          185.204.65.0/24 maxlen: 24
                          185.76.78.0/24 maxlen: 24
                          185.76.79.0/24 maxlen: 24
                          5.61.213.0/24 maxlen: 24
                          5.61.212.0/24 maxlen: 24
                          5.61.215.0/24 maxlen: 24
                          5.61.214.0/24 maxlen: 24
                          185.75.21.0/24 maxlen: 24
                          185.75.20.0/24 maxlen: 24
                          185.122.187.0/24 maxlen: 24
                          185.89.29.0/24 maxlen: 24
                          185.89.28.0/24 maxlen: 24
                          185.89.31.0/24 maxlen: 24
                          217.61.243.0/24 maxlen: 24
                          217.61.242.0/24 maxlen: 24
                          217.61.241.0/24 maxlen: 24
                          185.122.186.0/24 maxlen: 24
                          185.161.184.0/24 maxlen: 24
                          195.181.253.0/24 maxlen: 24
                          195.181.252.0/24 maxlen: 24
                          185.104.153.0/24 maxlen: 24
                          185.104.155.0/24 maxlen: 24
                          185.104.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:c4:a8:d2:73:40:71:b4:0e:79:c9:d7:a8:f9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
        Validity
            Not Before: Jan  1 13:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e16e91a1177f72a7cbc910cd3b425f6a8cec2efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:d8:b0:1e:49:9a:41:a8:87:34:b9:c3:05:
                    60:30:4e:b6:09:5a:47:83:7b:90:9f:f2:aa:05:00:
                    6a:ac:f8:18:0a:3e:87:2a:10:4a:08:e6:6f:6a:8b:
                    f8:45:e7:1d:b0:4f:1e:eb:4e:4e:07:9e:68:06:35:
                    bd:54:19:b1:13:25:dd:bd:db:71:80:d8:5f:51:b0:
                    1e:f2:cf:c8:23:83:2a:6c:c9:b5:3c:cb:4e:8d:e5:
                    22:fb:d5:da:ed:05:c1:c1:d0:b0:cd:23:c1:14:f4:
                    1f:1a:90:26:92:19:18:d6:3c:08:2b:a9:9e:b2:e0:
                    c3:6c:4f:d3:79:14:52:e8:dd:bb:92:bb:19:cd:f3:
                    f9:c0:ac:05:80:ce:22:e6:51:e9:16:f7:b3:c2:a6:
                    4a:9b:5f:00:2c:33:0f:3c:44:1b:5e:c7:b0:e3:88:
                    27:b3:cc:6d:f1:d2:f4:2c:5a:ea:23:ef:7a:dd:8d:
                    89:5e:ab:06:1a:a7:e3:a0:4f:a5:84:d8:30:f7:9a:
                    1f:a1:7b:e0:64:1b:fb:74:9d:86:19:80:9a:4e:38:
                    03:6c:78:9e:12:17:aa:f2:93:41:84:b0:c1:f6:79:
                    a7:09:af:f2:c1:9c:c4:db:57:2a:a9:32:8d:39:98:
                    8b:2c:e1:27:11:a0:9d:22:34:0d:e5:56:29:8c:d2:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:91:A1:17:7F:72:A7:CB:C9:10:CD:3B:42:5F:6A:8C:EC:2E:FB
            X509v3 Authority Key Identifier:
                keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/4W6RoRd_cqfLyRDNO0JfaozsLvs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.212.0/22
                  5.187.38.0/23
                  89.43.196.0/23
                  95.156.204.0/22
                  134.255.242.0/24
                  185.75.20.0/23
                  185.76.78.0/23
                  185.84.44.0/22
                  185.86.211.0/24
                  185.89.28.0/23
                  185.89.31.0/24
                  185.92.238.0/24
                  185.104.60.0/23
                  185.104.153.0-185.104.155.255
                  185.122.186.0/23
                  185.157.212.0/24
                  185.157.214.0/23
                  185.161.184.0/24
                  185.188.16.0/22
                  185.191.20.0/22
                  185.194.208.0/22
                  185.204.64.0/22
                  195.181.252.0/23
                  212.237.231.0/24
                  217.61.241.0-217.61.243.255

    Signature Algorithm: sha256WithRSAEncryption
         63:3d:74:93:28:bc:1f:71:f3:bd:08:f6:4e:fa:37:eb:6a:be:
         b1:1f:86:98:4b:80:4f:ae:b3:59:e8:4a:a2:d6:89:33:f2:5f:
         d5:43:77:35:5b:ab:f2:11:19:d0:35:e8:1a:9b:50:b0:dd:4b:
         ad:67:a8:0f:7d:cd:0d:db:33:5b:ba:f4:74:13:bd:f0:ce:99:
         18:23:e4:f5:fc:8f:94:fb:56:e4:1a:71:54:16:af:2a:eb:cc:
         eb:09:87:8a:c0:25:35:bb:74:7a:58:07:1b:e2:7d:43:69:9a:
         3c:94:05:79:1b:87:dd:88:47:ce:f5:35:68:65:92:46:ca:22:
         bf:50:0d:c4:b8:da:bb:26:2c:21:df:17:22:8c:0b:66:e1:30:
         a0:d8:8c:df:4d:a1:bf:59:9b:71:d8:eb:b0:9e:b2:76:cf:45:
         2b:a2:7a:f8:86:a4:f5:fe:78:5c:b8:d9:44:de:5c:2f:7b:4a:
         8f:39:21:c3:19:f9:31:1d:73:e4:87:27:44:27:ed:28:f0:b9:
         17:cd:dc:d8:3b:8a:95:bd:da:dd:32:21:36:92:d7:a6:4e:ef:
         d6:59:af:3f:79:2d:44:b8:fe:3d:f1:8f:6f:b3:a5:b9:88:54:
         c6:34:e4:a4:04:b2:d2:d6:a7:02:60:ae:53:2e:96:e6:98:f5:
         91:64:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:53 2023 by rpki-client on console-fra.rpki-client.org