Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/8ymuIKbZSn_LfoIk9daPuDk8pMM.roa
File:                     8ymuIKbZSn_LfoIk9daPuDk8pMM.roa (raw, json)
Hash identifier:          4g2uFEQNzHbgrFaw4abwQqBCGGc9zb3YvGhIE8RXIIY=
Subject key identifier:   F3:29:AE:20:A6:D9:4A:7F:CB:7E:82:24:F5:D6:8F:B8:39:3C:A4:C3
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       018648000C8F901772B8F92E2DA95B5E9EE2
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/8ymuIKbZSn_LfoIk9daPuDk8pMM.roa
Signing time:             Sun 12 Feb 2023 23:40:08 +0000
ROA not before:           Sun 12 Feb 2023 23:40:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56630
IP address blocks:        45.141.8.0/22 maxlen: 24
                          185.224.248.0/22 maxlen: 24
                          185.6.12.0/23 maxlen: 24
                          185.6.14.0/23 maxlen: 24
                          45.150.232.0/22 maxlen: 24
                          195.238.124.0/22 maxlen: 24
                          185.140.209.0/24 maxlen: 24
                          185.140.208.0/24 maxlen: 24
                          185.131.64.0/24 maxlen: 24
                          185.131.66.0/24 maxlen: 24
                          185.131.65.0/24 maxlen: 24
                          185.131.67.0/24 maxlen: 24
                          88.218.240.0/22 maxlen: 24
                          217.30.8.0/22 maxlen: 24
                          194.59.46.0/24 maxlen: 24
                          185.140.12.0/22 maxlen: 24
                          194.59.59.0/24 maxlen: 24
                          194.59.155.0/24 maxlen: 24
                          91.201.64.0/22 maxlen: 24
                          194.59.142.0/24 maxlen: 24
                          213.183.36.0/24 maxlen: 24
                          213.183.38.0/24 maxlen: 24
                          213.183.37.0/24 maxlen: 24
                          213.183.33.0/24 maxlen: 24
                          213.183.32.0/24 maxlen: 24
                          5.182.228.0/22 maxlen: 24
                          213.183.39.0/24 maxlen: 24
                          213.183.41.0/24 maxlen: 24
                          213.183.40.0/24 maxlen: 24
                          213.183.43.0/24 maxlen: 24
                          213.183.42.0/24 maxlen: 24
                          213.183.44.0/24 maxlen: 24
                          213.183.50.0/24 maxlen: 24
                          213.183.49.0/24 maxlen: 24
                          88.210.38.0/24 maxlen: 24
                          213.183.51.0/24 maxlen: 24
                          213.183.45.0/24 maxlen: 24
                          213.183.46.0/24 maxlen: 24
                          213.183.48.0/24 maxlen: 24
                          213.183.47.0/24 maxlen: 24
                          213.183.52.0/24 maxlen: 24
                          88.210.39.0/24 maxlen: 24
                          213.183.53.0/24 maxlen: 24
                          213.183.55.0/24 maxlen: 24
                          213.183.54.0/24 maxlen: 24
                          213.183.57.0/24 maxlen: 24
                          213.183.56.0/24 maxlen: 24
                          213.183.58.0/24 maxlen: 24
                          77.72.16.0/23 maxlen: 24
                          213.183.59.0/24 maxlen: 24
                          213.183.60.0/24 maxlen: 24
                          213.183.62.0/24 maxlen: 24
                          213.183.61.0/24 maxlen: 24
                          77.72.18.0/23 maxlen: 24
                          77.72.20.0/23 maxlen: 24
                          77.72.22.0/23 maxlen: 24
                          213.183.63.0/24 maxlen: 24
                          92.119.88.0/22 maxlen: 24
                          91.192.83.0/24 maxlen: 24
                          91.192.81.0/24 maxlen: 24
                          91.192.80.0/24 maxlen: 24
                          5.188.172.0/24 maxlen: 24
                          5.188.173.0/24 maxlen: 24
                          5.188.180.0/22 maxlen: 24
                          185.246.152.0/24 maxlen: 24
                          185.246.153.0/24 maxlen: 24
                          185.246.155.0/24 maxlen: 24
                          185.246.154.0/24 maxlen: 24
                          45.135.120.0/22 maxlen: 24
                          31.40.216.0/22 maxlen: 24
                          213.226.68.0/22 maxlen: 24
                          93.189.58.0/24 maxlen: 24
                          93.189.57.0/24 maxlen: 24
                          185.135.84.0/22 maxlen: 24
                          93.189.56.0/24 maxlen: 24
                          93.189.61.0/24 maxlen: 24
                          93.189.60.0/24 maxlen: 24
                          93.189.63.0/24 maxlen: 24
                          93.189.62.0/24 maxlen: 24
                          2a06:f906::/36 maxlen: 36
                          2a06:f903::/36 maxlen: 36
                          2a06:f905::/36 maxlen: 36
                          2a06:f900:4000::/36 maxlen: 36
                          2a06:f900::/36 maxlen: 36
                          2a06:f902::/36 maxlen: 36
                          2a06:f904::/36 maxlen: 36
                          2a06:f907:4000::/36 maxlen: 36
                          2a06:f907::/36 maxlen: 36
                          2a06:f901::/36 maxlen: 36
                          2a0d:8400::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:48:00:0c:8f:90:17:72:b8:f9:2e:2d:a9:5b:5e:9e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Feb 12 23:40:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f329ae20a6d94a7fcb7e8224f5d68fb8393ca4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:db:e9:a0:e4:a8:31:1b:81:ea:60:87:bd:
                    74:66:b6:cd:c0:99:da:39:d7:ce:2d:38:a7:8f:6c:
                    7e:55:43:3a:67:63:cb:42:86:50:f8:7c:f5:45:d6:
                    83:c6:93:91:dc:90:2b:46:11:a0:5d:6e:d0:5f:67:
                    88:d3:75:26:3c:14:6d:ea:74:70:4b:b0:d3:33:55:
                    b8:e9:8c:5a:bc:fd:4c:1f:30:ca:06:68:23:bf:f6:
                    3d:2e:61:15:76:e8:e8:f7:65:61:e3:a0:11:b7:67:
                    7c:e2:77:0f:ce:03:37:4a:68:e3:73:22:8b:7b:b3:
                    0e:8e:39:ee:cc:5e:ca:d2:b4:32:20:08:fa:83:38:
                    e7:7f:c0:8b:b1:12:a8:ba:9b:ce:ef:3d:cd:ea:7a:
                    4e:71:08:58:28:10:d9:8d:38:29:58:e2:3d:7b:da:
                    f2:85:6a:27:b0:3c:4f:22:60:7a:ca:b1:e0:db:fc:
                    16:5e:af:09:b8:87:d9:52:08:ef:34:06:4c:37:0d:
                    76:a4:81:5d:fb:46:0d:e3:76:f0:7e:71:69:25:3d:
                    8a:d6:e3:e9:d9:b0:43:c3:a1:22:5c:ae:cc:a1:e4:
                    0f:6f:51:60:41:64:d0:3e:a8:95:25:2e:09:a1:2b:
                    7f:3e:07:86:c2:d9:5e:95:77:3e:8a:4d:b1:c6:ca:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:AE:20:A6:D9:4A:7F:CB:7E:82:24:F5:D6:8F:B8:39:3C:A4:C3
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/8ymuIKbZSn_LfoIk9daPuDk8pMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.228.0/22
                  5.188.172.0/23
                  5.188.180.0/22
                  31.40.216.0/22
                  45.135.120.0/22
                  45.141.8.0/22
                  45.150.232.0/22
                  77.72.16.0/21
                  88.210.38.0/23
                  88.218.240.0/22
                  91.192.80.0/23
                  91.192.83.0/24
                  91.201.64.0/22
                  92.119.88.0/22
                  93.189.56.0-93.189.58.255
                  93.189.60.0/22
                  185.6.12.0/22
                  185.131.64.0/22
                  185.135.84.0/22
                  185.140.12.0/22
                  185.140.208.0/23
                  185.224.248.0/22
                  185.246.152.0/22
                  194.59.46.0/24
                  194.59.59.0/24
                  194.59.142.0/24
                  194.59.155.0/24
                  195.238.124.0/22
                  213.183.32.0/23
                  213.183.36.0-213.183.63.255
                  213.226.68.0/22
                  217.30.8.0/22
                IPv6:
                  2a06:f900::/36
                  2a06:f900:4000::/36
                  2a06:f901::/36
                  2a06:f902::/36
                  2a06:f903::/36
                  2a06:f904::/36
                  2a06:f905::/36
                  2a06:f906::/36
                  2a06:f907::/36
                  2a06:f907:4000::/36
                  2a0d:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:67:ee:f7:f1:d5:2b:89:38:bf:e5:58:25:ae:90:70:ab:bc:
         f4:98:60:70:17:aa:ca:fb:d2:fb:ba:23:ef:b4:1d:51:67:ac:
         bb:00:50:ea:4d:13:c3:44:db:ec:6a:32:8d:16:67:39:b9:c1:
         fa:56:f4:05:33:e8:80:21:a5:c3:aa:05:16:59:4a:ad:21:ab:
         e1:2d:ec:bf:ee:86:5a:c5:58:91:73:c6:f3:b2:f9:36:97:8f:
         a1:3e:76:d9:f1:45:ec:08:e9:f4:c0:70:d4:dd:a9:71:22:7a:
         52:69:68:16:cc:d6:fd:3d:70:ec:e2:ae:0b:3b:75:04:cf:c9:
         5e:f6:fb:1b:e2:cc:ca:a3:1a:48:e4:08:d8:fc:d9:dd:55:67:
         8e:a5:77:19:64:0d:2e:86:53:12:ad:a0:71:fe:52:2c:7a:99:
         2a:30:aa:fe:b9:78:de:ab:ae:9e:17:6e:03:bc:e3:af:1f:f6:
         fb:0e:43:93:f3:b5:9b:52:e5:46:8e:2f:57:bd:bc:3f:9e:38:
         e0:11:a0:1e:15:bc:ab:45:a2:3c:30:6d:ed:ec:0d:83:9c:48:
         73:f3:a2:03:13:83:c3:30:35:1d:7f:9b:b3:1c:e2:30:7f:c0:
         75:f1:6f:1f:5f:63:9b:66:86:ae:4f:96:b8:0b:45:2e:62:1c:
         bb:ff:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org