Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/q-EIc1KPnfvZwoav7L1AiN34NIQ.roa
File:                     q-EIc1KPnfvZwoav7L1AiN34NIQ.roa (raw, json)
Hash identifier:          7fuAiEIoTt6duSoq1mmbBMiGNtOMQbWzC9Tjauhulpc=
Subject key identifier:   AB:E1:08:73:52:8F:9D:FB:D9:C2:86:AF:EC:BD:40:88:DD:F8:34:84
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       01859BFCE3697A0994349071B4A16EB23442
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/q-EIc1KPnfvZwoav7L1AiN34NIQ.roa
Signing time:             Tue 10 Jan 2023 14:01:59 +0000
ROA not before:           Tue 10 Jan 2023 14:01:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29286
IP address blocks:        88.202.4.0/24 maxlen: 24
                          88.202.9.0/24 maxlen: 24
                          88.202.8.0/24 maxlen: 24
                          88.202.5.0/24 maxlen: 24
                          88.202.7.0/24 maxlen: 24
                          88.202.6.0/24 maxlen: 24
                          88.202.18.0/24 maxlen: 24
                          84.254.135.0/24 maxlen: 24
                          84.254.133.0/24 maxlen: 24
                          84.254.139.0/24 maxlen: 24
                          84.254.138.0/24 maxlen: 24
                          84.254.143.0/24 maxlen: 24
                          84.254.141.0/24 maxlen: 24
                          84.254.140.0/24 maxlen: 24
                          84.254.152.0/24 maxlen: 24
                          84.254.150.0/24 maxlen: 24
                          84.254.149.0/24 maxlen: 24
                          84.254.151.0/24 maxlen: 24
                          84.254.148.0/24 maxlen: 24
                          84.254.159.0/24 maxlen: 24
                          84.254.157.0/24 maxlen: 24
                          84.254.156.0/24 maxlen: 24
                          84.254.158.0/24 maxlen: 24
                          84.254.153.0/24 maxlen: 24
                          84.254.155.0/24 maxlen: 24
                          84.254.154.0/24 maxlen: 24
                          84.254.163.0/24 maxlen: 24
                          84.254.160.0/24 maxlen: 24
                          84.254.162.0/24 maxlen: 24
                          84.254.161.0/24 maxlen: 24
                          84.254.166.0/24 maxlen: 24
                          84.254.171.0/24 maxlen: 24
                          84.254.170.0/24 maxlen: 24
                          84.254.172.0/24 maxlen: 24
                          84.254.167.0/24 maxlen: 24
                          84.254.169.0/24 maxlen: 24
                          84.254.168.0/24 maxlen: 24
                          84.254.174.0/24 maxlen: 24
                          84.254.173.0/24 maxlen: 24
                          84.254.175.0/24 maxlen: 24
                          176.227.132.0/24 maxlen: 24
                          176.227.128.0/24 maxlen: 24
                          176.227.130.0/24 maxlen: 24
                          176.227.139.0/24 maxlen: 24
                          176.227.138.0/24 maxlen: 24
                          176.227.137.0/24 maxlen: 24
                          84.254.132.0/24 maxlen: 24
                          176.227.142.0/24 maxlen: 24
                          84.254.129.0/24 maxlen: 24
                          84.254.128.0/24 maxlen: 24
                          84.254.131.0/24 maxlen: 24
                          176.227.143.0/24 maxlen: 24
                          176.227.141.0/24 maxlen: 24
                          176.227.140.0/24 maxlen: 24
                          84.254.190.0/24 maxlen: 24
                          95.210.136.0/24 maxlen: 24
                          95.210.138.0/24 maxlen: 24
                          95.210.140.0/24 maxlen: 24
                          95.210.143.0/24 maxlen: 24
                          95.210.142.0/24 maxlen: 24
                          95.210.152.0/24 maxlen: 24
                          95.210.157.0/24 maxlen: 24
                          95.210.156.0/24 maxlen: 24
                          95.210.169.0/24 maxlen: 24
                          95.210.255.0/24 maxlen: 24
                          95.210.254.0/24 maxlen: 24
                          5.61.197.0/24 maxlen: 24
                          5.61.199.0/24 maxlen: 24
                          5.61.198.0/24 maxlen: 24
                          5.61.193.0/24 maxlen: 24
                          5.61.195.0/24 maxlen: 24
                          95.210.11.0/24 maxlen: 24
                          95.210.10.0/24 maxlen: 24
                          95.210.7.0/24 maxlen: 24
                          95.210.12.0/24 maxlen: 24
                          95.210.13.0/24 maxlen: 24
                          95.210.79.0/24 maxlen: 24
                          95.210.82.0/24 maxlen: 24
                          95.210.81.0/24 maxlen: 24
                          95.210.83.0/24 maxlen: 24
                          95.210.94.0/24 maxlen: 24
                          95.210.93.0/24 maxlen: 24
                          95.210.105.0/24 maxlen: 24
                          95.210.104.0/24 maxlen: 24
                          95.210.110.0/24 maxlen: 24
                          95.210.109.0/24 maxlen: 24
                          95.210.108.0/24 maxlen: 24
                          95.210.107.0/24 maxlen: 24
                          95.210.128.0/24 maxlen: 24
                          95.210.37.0/24 maxlen: 24
                          95.210.36.0/24 maxlen: 24
                          95.210.35.0/24 maxlen: 24
                          95.210.34.0/24 maxlen: 24
                          95.210.43.0/24 maxlen: 24
                          95.210.40.0/24 maxlen: 24
                          95.210.42.0/24 maxlen: 24
                          95.210.55.0/24 maxlen: 24
                          95.210.61.0/24 maxlen: 24
                          95.210.63.0/24 maxlen: 24
                          95.210.71.0/24 maxlen: 24
                          95.210.68.0/24 maxlen: 24
                          95.210.70.0/24 maxlen: 24
                          95.210.69.0/24 maxlen: 24
                          95.210.78.0/24 maxlen: 24
                          95.210.75.0/24 maxlen: 24
                          95.210.77.0/24 maxlen: 24
                          95.210.76.0/24 maxlen: 24
                          95.210.73.0/24 maxlen: 24
                          95.210.72.0/24 maxlen: 24
                          88.202.116.0/22 maxlen: 22
                          5.175.64.0/20 maxlen: 20
                          88.202.68.0/23 maxlen: 23
                          88.202.70.0/23 maxlen: 23
                          88.202.76.0/23 maxlen: 23
                          88.202.72.0/22 maxlen: 22
                          213.209.164.0/24 maxlen: 24
                          213.209.163.0/24 maxlen: 24
                          213.209.161.0/24 maxlen: 24
                          213.209.162.0/24 maxlen: 24
                          213.209.169.0/24 maxlen: 24
                          213.209.170.0/24 maxlen: 24
                          88.202.0.0/17 maxlen: 17
                          88.202.0.0/18 maxlen: 18
                          84.254.164.0/23 maxlen: 23
                          84.254.176.0/21 maxlen: 21
                          84.254.184.0/22 maxlen: 22
                          176.227.128.0/20 maxlen: 20
                          84.254.128.0/18 maxlen: 18
                          84.254.188.0/23 maxlen: 23
                          95.210.192.0/20 maxlen: 20
                          95.210.192.0/19 maxlen: 19
                          95.210.224.0/20 maxlen: 20
                          95.210.160.0/19 maxlen: 19
                          95.210.240.0/21 maxlen: 21
                          95.210.252.0/23 maxlen: 23
                          95.210.248.0/22 maxlen: 22
                          5.61.192.0/21 maxlen: 21
                          95.210.0.0/22 maxlen: 22
                          95.210.8.0/21 maxlen: 21
                          95.210.0.0/16 maxlen: 16
                          213.209.184.0/22 maxlen: 22
                          95.210.96.0/21 maxlen: 24
                          95.210.112.0/22 maxlen: 22
                          95.210.116.0/22 maxlen: 22
                          185.28.64.0/24 maxlen: 24
                          95.210.32.0/23 maxlen: 23
                          95.210.44.0/23 maxlen: 23
                          185.28.65.0/24 maxlen: 24
                          95.210.46.0/23 maxlen: 23
                          95.210.48.0/22 maxlen: 22
                          95.210.64.0/20 maxlen: 20
                          88.202.85.0/24 maxlen: 24
                          88.202.81.0/24 maxlen: 24
                          88.202.84.0/24 maxlen: 24
                          88.202.79.0/24 maxlen: 24
                          88.202.88.0/24 maxlen: 24
                          88.202.90.0/24 maxlen: 24
                          88.202.87.0/24 maxlen: 24
                          88.202.86.0/24 maxlen: 24
                          88.202.96.0/24 maxlen: 24
                          88.202.95.0/24 maxlen: 24
                          88.202.98.0/24 maxlen: 24
                          88.202.97.0/24 maxlen: 24
                          88.202.93.0/24 maxlen: 24
                          88.202.105.0/24 maxlen: 24
                          88.202.103.0/24 maxlen: 24
                          88.202.102.0/24 maxlen: 24
                          88.202.104.0/24 maxlen: 24
                          88.202.99.0/24 maxlen: 24
                          88.202.101.0/24 maxlen: 24
                          88.202.100.0/24 maxlen: 24
                          88.202.112.0/24 maxlen: 24
                          88.202.106.0/24 maxlen: 24
                          88.202.107.0/24 maxlen: 24
                          88.202.123.0/24 maxlen: 24
                          88.202.122.0/24 maxlen: 24
                          88.202.121.0/24 maxlen: 24
                          88.202.30.0/24 maxlen: 24
                          88.202.32.0/24 maxlen: 24
                          5.175.64.0/24 maxlen: 24
                          88.202.51.0/24 maxlen: 24
                          88.202.47.0/24 maxlen: 24
                          88.202.46.0/24 maxlen: 24
                          88.202.48.0/24 maxlen: 24
                          5.175.68.0/24 maxlen: 24
                          5.175.71.0/24 maxlen: 24
                          5.175.70.0/24 maxlen: 24
                          5.175.67.0/24 maxlen: 24
                          5.175.69.0/24 maxlen: 24
                          88.202.55.0/24 maxlen: 24
                          5.175.66.0/24 maxlen: 24
                          5.175.65.0/24 maxlen: 24
                          5.175.74.0/24 maxlen: 24
                          5.175.78.0/24 maxlen: 24
                          5.175.77.0/24 maxlen: 24
                          88.202.64.0/24 maxlen: 24
                          88.202.61.0/24 maxlen: 24
                          5.175.76.0/24 maxlen: 24
                          88.202.63.0/24 maxlen: 24
                          5.175.75.0/24 maxlen: 24
                          88.202.62.0/24 maxlen: 24
                          5.175.73.0/24 maxlen: 24
                          5.175.72.0/24 maxlen: 24
                          88.202.66.0/24 maxlen: 24
                          5.175.79.0/24 maxlen: 24
                          213.209.160.0/19 maxlen: 19
                          213.209.172.0/22 maxlen: 24
                          2a00:ca0:201e::/48 maxlen: 48
                          2a00:ca0:2008::/48 maxlen: 48
                          2a00:ca0:2005::/48 maxlen: 48
                          2a00:ca0:2002::/48 maxlen: 48
                          2a00:ca0:2003::/48 maxlen: 48
                          2a00:ca0:2000::/48 maxlen: 48
                          2a00:ca0:2012::/48 maxlen: 48
                          2a00:ca0:200c::/48 maxlen: 48
                          2a00:ca0:200f::/48 maxlen: 48
                          2a00:ca0:2006::/48 maxlen: 48
                          2a00:ca0:200a::/48 maxlen: 48
                          2a00:ca0:2004::/48 maxlen: 48
                          2a00:ca0:2001::/48 maxlen: 48
                          2a00:ca0:2016::/48 maxlen: 48
                          2a00:ca0::/32 maxlen: 32
                          2a00:ca0:2013::/48 maxlen: 48
                          2a00:ca0:2017::/48 maxlen: 48
                          2a00:ca0:200e::/48 maxlen: 48
                          2a00:ca0:201d::/48 maxlen: 48
                          2a00:ca0:201a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 07:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9b:fc:e3:69:7a:09:94:34:90:71:b4:a1:6e:b2:34:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Jan 10 14:01:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abe10873528f9dfbd9c286afecbd4088ddf83484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:bf:12:c9:98:04:95:70:7d:43:c5:0f:01:
                    16:a0:0e:34:66:8c:7c:8e:ff:cb:37:fa:e5:1d:3f:
                    35:a8:35:da:6f:06:6a:89:d4:1a:61:69:da:8d:58:
                    b4:73:50:a8:54:61:76:1a:33:2d:a5:43:94:b7:ad:
                    39:20:a1:4f:cf:54:1f:2a:80:ce:38:8b:86:ed:0b:
                    62:96:e2:ce:22:1a:86:cd:c8:7a:a0:0f:1a:37:69:
                    ce:6f:3e:46:90:ab:9e:75:3f:d0:89:b4:66:d9:dd:
                    20:cd:33:c0:ee:5f:fd:0a:d5:9a:92:63:2c:02:62:
                    95:b2:c9:c9:75:62:ad:77:b4:f6:44:92:1a:a5:78:
                    ca:35:b2:bf:8e:f7:20:95:70:73:72:a0:6b:05:c1:
                    3c:59:ed:ca:c3:1b:9e:5f:01:65:51:93:66:df:12:
                    f3:0f:05:1b:f5:57:22:39:21:15:de:eb:34:d0:48:
                    b0:ff:3b:a0:d8:4b:d7:ba:c7:9c:54:f5:93:7c:30:
                    2c:f8:06:25:b8:43:19:0d:ed:2c:2f:68:0e:6c:34:
                    56:5c:c4:d1:1d:7b:e8:ee:ce:ce:b1:29:d5:61:21:
                    dc:f3:c3:eb:e4:54:76:4d:be:a4:1b:63:9f:5c:87:
                    11:51:6b:a8:b9:8e:14:bb:3b:ae:3a:dc:52:e8:12:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:08:73:52:8F:9D:FB:D9:C2:86:AF:EC:BD:40:88:DD:F8:34:84
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/q-EIc1KPnfvZwoav7L1AiN34NIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.192.0/21
                  5.175.64.0/20
                  84.254.128.0/18
                  88.202.0.0/17
                  95.210.0.0/16
                  176.227.128.0/20
                  185.28.64.0/23
                  213.209.160.0/19
                IPv6:
                  2a00:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:48:5f:39:35:a2:1d:f3:19:04:c6:84:48:db:22:26:7c:
         27:c8:f6:a6:15:19:0b:83:19:15:93:37:12:77:d4:dd:b6:fa:
         55:5c:13:69:15:fa:7a:fe:f3:60:26:ba:15:ea:6a:98:5e:ed:
         f0:2d:e4:64:21:7a:3c:e7:29:cc:de:21:97:9e:dd:6d:1e:a3:
         3f:e1:b4:c8:44:46:65:9f:72:cd:08:70:f4:35:be:54:61:67:
         f6:58:b2:f0:6d:1d:27:2e:ef:90:00:7c:a0:81:6c:c6:81:c6:
         73:a4:29:6d:20:eb:f4:af:8d:c2:34:c8:df:df:f0:43:36:d1:
         11:bb:05:14:bd:1a:bc:30:c6:4c:92:39:0f:62:b3:3a:55:88:
         a9:52:21:16:c8:3f:b3:e2:10:a6:ed:d3:eb:52:68:54:93:c2:
         d0:64:32:e0:52:4d:03:48:d2:b9:b6:a5:ad:8a:b2:7a:0b:b3:
         62:e7:27:5d:c6:2b:b9:d5:e4:28:0b:b8:9f:c9:9f:f0:64:c6:
         64:5b:c8:18:ba:ba:74:df:f5:27:64:5d:6a:67:b9:6c:b0:c4:
         a4:77:fb:cb:ad:8a:92:72:26:a9:a6:a4:cb:3a:bd:19:56:e2:
         02:26:8b:88:17:27:97:34:5d:3b:c0:21:c8:2f:b5:71:4c:89:
         3b:44:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:19 2024 by rpki-client on console-fra.rpki-client.org