Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/uo_PYdreTNmGwqxKZPKkH8lFITQ.roa
File:                     uo_PYdreTNmGwqxKZPKkH8lFITQ.roa (raw, json)
Hash identifier:          /GSf/h6PofbUoyfNyMZUCD+zgnSpaG9klELZmSiccc8=
Subject key identifier:   BA:8F:CF:61:DA:DE:4C:D9:86:C2:AC:4A:64:F2:A4:1F:C9:45:21:34
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       0187798D61B652E77C4F47CB9FACC3AB6B82
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/uo_PYdreTNmGwqxKZPKkH8lFITQ.roa
Signing time:             Thu 13 Apr 2023 07:38:41 +0000
ROA not before:           Thu 13 Apr 2023 07:38:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29286
IP address blocks:        88.202.4.0/24 maxlen: 24
                          88.202.9.0/24 maxlen: 24
                          88.202.8.0/24 maxlen: 24
                          88.202.5.0/24 maxlen: 24
                          88.202.7.0/24 maxlen: 24
                          88.202.6.0/24 maxlen: 24
                          88.202.18.0/24 maxlen: 24
                          84.254.135.0/24 maxlen: 24
                          84.254.133.0/24 maxlen: 24
                          84.254.139.0/24 maxlen: 24
                          84.254.138.0/24 maxlen: 24
                          84.254.143.0/24 maxlen: 24
                          84.254.141.0/24 maxlen: 24
                          84.254.140.0/24 maxlen: 24
                          84.254.152.0/24 maxlen: 24
                          84.254.150.0/24 maxlen: 24
                          84.254.149.0/24 maxlen: 24
                          84.254.151.0/24 maxlen: 24
                          84.254.148.0/24 maxlen: 24
                          84.254.159.0/24 maxlen: 24
                          84.254.157.0/24 maxlen: 24
                          84.254.156.0/24 maxlen: 24
                          84.254.158.0/24 maxlen: 24
                          84.254.153.0/24 maxlen: 24
                          84.254.155.0/24 maxlen: 24
                          84.254.154.0/24 maxlen: 24
                          84.254.163.0/24 maxlen: 24
                          84.254.160.0/24 maxlen: 24
                          84.254.162.0/24 maxlen: 24
                          84.254.161.0/24 maxlen: 24
                          84.254.166.0/24 maxlen: 24
                          84.254.171.0/24 maxlen: 24
                          84.254.170.0/24 maxlen: 24
                          84.254.172.0/24 maxlen: 24
                          84.254.167.0/24 maxlen: 24
                          84.254.169.0/24 maxlen: 24
                          84.254.168.0/24 maxlen: 24
                          84.254.174.0/24 maxlen: 24
                          84.254.173.0/24 maxlen: 24
                          84.254.175.0/24 maxlen: 24
                          176.227.132.0/24 maxlen: 24
                          176.227.128.0/24 maxlen: 24
                          176.227.130.0/24 maxlen: 24
                          176.227.139.0/24 maxlen: 24
                          176.227.138.0/24 maxlen: 24
                          176.227.137.0/24 maxlen: 24
                          84.254.132.0/24 maxlen: 24
                          176.227.142.0/24 maxlen: 24
                          84.254.129.0/24 maxlen: 24
                          84.254.128.0/24 maxlen: 24
                          84.254.131.0/24 maxlen: 24
                          176.227.143.0/24 maxlen: 24
                          176.227.141.0/24 maxlen: 24
                          176.227.140.0/24 maxlen: 24
                          84.254.190.0/24 maxlen: 24
                          95.210.136.0/24 maxlen: 24
                          95.210.138.0/24 maxlen: 24
                          95.210.140.0/24 maxlen: 24
                          95.210.143.0/24 maxlen: 24
                          95.210.142.0/24 maxlen: 24
                          95.210.152.0/24 maxlen: 24
                          95.210.157.0/24 maxlen: 24
                          95.210.156.0/24 maxlen: 24
                          95.210.169.0/24 maxlen: 24
                          95.210.255.0/24 maxlen: 24
                          95.210.254.0/24 maxlen: 24
                          5.61.197.0/24 maxlen: 24
                          5.61.199.0/24 maxlen: 24
                          5.61.198.0/24 maxlen: 24
                          5.61.193.0/24 maxlen: 24
                          5.61.195.0/24 maxlen: 24
                          95.210.11.0/24 maxlen: 24
                          95.210.10.0/24 maxlen: 24
                          95.210.7.0/24 maxlen: 24
                          95.210.12.0/24 maxlen: 24
                          95.210.13.0/24 maxlen: 24
                          95.210.79.0/24 maxlen: 24
                          95.210.82.0/24 maxlen: 24
                          95.210.81.0/24 maxlen: 24
                          95.210.83.0/24 maxlen: 24
                          95.210.94.0/24 maxlen: 24
                          95.210.93.0/24 maxlen: 24
                          95.210.105.0/24 maxlen: 24
                          95.210.104.0/24 maxlen: 24
                          95.210.110.0/24 maxlen: 24
                          95.210.109.0/24 maxlen: 24
                          95.210.108.0/24 maxlen: 24
                          95.210.107.0/24 maxlen: 24
                          95.210.128.0/24 maxlen: 24
                          95.210.37.0/24 maxlen: 24
                          95.210.36.0/24 maxlen: 24
                          95.210.35.0/24 maxlen: 24
                          95.210.34.0/24 maxlen: 24
                          95.210.43.0/24 maxlen: 24
                          95.210.40.0/24 maxlen: 24
                          95.210.42.0/24 maxlen: 24
                          95.210.41.0/24 maxlen: 24
                          95.210.55.0/24 maxlen: 24
                          95.210.61.0/24 maxlen: 24
                          95.210.63.0/24 maxlen: 24
                          95.210.71.0/24 maxlen: 24
                          95.210.68.0/24 maxlen: 24
                          95.210.70.0/24 maxlen: 24
                          95.210.69.0/24 maxlen: 24
                          95.210.78.0/24 maxlen: 24
                          95.210.75.0/24 maxlen: 24
                          95.210.77.0/24 maxlen: 24
                          95.210.76.0/24 maxlen: 24
                          95.210.73.0/24 maxlen: 24
                          95.210.72.0/24 maxlen: 24
                          88.202.116.0/22 maxlen: 22
                          5.175.64.0/20 maxlen: 20
                          88.202.68.0/23 maxlen: 23
                          88.202.70.0/23 maxlen: 23
                          88.202.76.0/23 maxlen: 23
                          88.202.72.0/22 maxlen: 22
                          213.209.164.0/24 maxlen: 24
                          213.209.163.0/24 maxlen: 24
                          213.209.161.0/24 maxlen: 24
                          213.209.162.0/24 maxlen: 24
                          213.209.169.0/24 maxlen: 24
                          213.209.170.0/24 maxlen: 24
                          88.202.0.0/17 maxlen: 17
                          88.202.0.0/18 maxlen: 18
                          84.254.164.0/23 maxlen: 23
                          84.254.176.0/21 maxlen: 21
                          84.254.184.0/22 maxlen: 22
                          176.227.128.0/20 maxlen: 20
                          84.254.128.0/18 maxlen: 18
                          84.254.188.0/23 maxlen: 23
                          95.210.192.0/20 maxlen: 20
                          95.210.192.0/19 maxlen: 19
                          95.210.224.0/20 maxlen: 20
                          95.210.160.0/19 maxlen: 19
                          95.210.240.0/21 maxlen: 21
                          95.210.252.0/23 maxlen: 23
                          95.210.248.0/22 maxlen: 22
                          5.61.192.0/21 maxlen: 21
                          95.210.0.0/22 maxlen: 22
                          95.210.8.0/21 maxlen: 21
                          95.210.0.0/16 maxlen: 16
                          213.209.184.0/22 maxlen: 22
                          95.210.96.0/21 maxlen: 24
                          95.210.112.0/22 maxlen: 22
                          95.210.116.0/22 maxlen: 22
                          185.28.64.0/24 maxlen: 24
                          95.210.32.0/23 maxlen: 23
                          95.210.44.0/23 maxlen: 23
                          185.28.65.0/24 maxlen: 24
                          95.210.46.0/23 maxlen: 23
                          95.210.48.0/22 maxlen: 22
                          95.210.64.0/20 maxlen: 20
                          88.202.85.0/24 maxlen: 24
                          88.202.81.0/24 maxlen: 24
                          88.202.84.0/24 maxlen: 24
                          88.202.79.0/24 maxlen: 24
                          88.202.88.0/24 maxlen: 24
                          88.202.90.0/24 maxlen: 24
                          88.202.87.0/24 maxlen: 24
                          88.202.86.0/24 maxlen: 24
                          88.202.96.0/24 maxlen: 24
                          88.202.95.0/24 maxlen: 24
                          88.202.98.0/24 maxlen: 24
                          88.202.97.0/24 maxlen: 24
                          88.202.93.0/24 maxlen: 24
                          88.202.105.0/24 maxlen: 24
                          88.202.103.0/24 maxlen: 24
                          88.202.102.0/24 maxlen: 24
                          88.202.104.0/24 maxlen: 24
                          88.202.99.0/24 maxlen: 24
                          88.202.101.0/24 maxlen: 24
                          88.202.100.0/24 maxlen: 24
                          88.202.112.0/24 maxlen: 24
                          88.202.106.0/24 maxlen: 24
                          88.202.107.0/24 maxlen: 24
                          88.202.123.0/24 maxlen: 24
                          88.202.122.0/24 maxlen: 24
                          88.202.121.0/24 maxlen: 24
                          88.202.30.0/24 maxlen: 24
                          88.202.32.0/24 maxlen: 24
                          5.175.64.0/24 maxlen: 24
                          88.202.51.0/24 maxlen: 24
                          88.202.47.0/24 maxlen: 24
                          88.202.46.0/24 maxlen: 24
                          88.202.48.0/24 maxlen: 24
                          5.175.68.0/24 maxlen: 24
                          5.175.71.0/24 maxlen: 24
                          5.175.70.0/24 maxlen: 24
                          5.175.67.0/24 maxlen: 24
                          5.175.69.0/24 maxlen: 24
                          88.202.55.0/24 maxlen: 24
                          5.175.66.0/24 maxlen: 24
                          5.175.65.0/24 maxlen: 24
                          5.175.74.0/24 maxlen: 24
                          5.175.78.0/24 maxlen: 24
                          5.175.77.0/24 maxlen: 24
                          88.202.64.0/24 maxlen: 24
                          88.202.61.0/24 maxlen: 24
                          5.175.76.0/24 maxlen: 24
                          88.202.63.0/24 maxlen: 24
                          5.175.75.0/24 maxlen: 24
                          88.202.62.0/24 maxlen: 24
                          5.175.73.0/24 maxlen: 24
                          5.175.72.0/24 maxlen: 24
                          88.202.66.0/24 maxlen: 24
                          5.175.79.0/24 maxlen: 24
                          213.209.160.0/19 maxlen: 19
                          213.209.172.0/22 maxlen: 24
                          2a00:ca0:201e::/48 maxlen: 48
                          2a00:ca0:2008::/48 maxlen: 48
                          2a00:ca0:2005::/48 maxlen: 48
                          2a00:ca0:2002::/48 maxlen: 48
                          2a00:ca0:2003::/48 maxlen: 48
                          2a00:ca0:2000::/48 maxlen: 48
                          2a00:ca0:2012::/48 maxlen: 48
                          2a00:ca0:200c::/48 maxlen: 48
                          2a00:ca0:200f::/48 maxlen: 48
                          2a00:ca0:2006::/48 maxlen: 48
                          2a00:ca0:200a::/48 maxlen: 48
                          2a00:ca0:2004::/48 maxlen: 48
                          2a00:ca0:2001::/48 maxlen: 48
                          2a00:ca0:2016::/48 maxlen: 48
                          2a00:ca0::/32 maxlen: 32
                          2a00:ca0:2013::/48 maxlen: 48
                          2a00:ca0:2017::/48 maxlen: 48
                          2a00:ca0:200e::/48 maxlen: 48
                          2a00:ca0:201d::/48 maxlen: 48
                          2a00:ca0:201a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 17 Apr 2023 07:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:8d:61:b6:52:e7:7c:4f:47:cb:9f:ac:c3:ab:6b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Apr 13 07:38:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba8fcf61dade4cd986c2ac4a64f2a41fc9452134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:f5:9c:cb:89:8b:2d:21:6e:da:71:c6:b6:
                    1e:07:a6:93:f0:6d:df:fd:63:f2:3c:64:58:0b:66:
                    f0:86:0e:44:26:db:44:f0:d1:58:40:16:b3:a9:f7:
                    d5:73:4e:de:8a:b6:58:a3:7b:28:f5:e3:9a:a2:5d:
                    3d:95:5e:4e:40:92:7e:6b:3c:52:2c:0f:9b:a8:2c:
                    be:30:b3:9d:91:6e:02:8a:44:88:41:ec:48:67:e7:
                    3f:8f:47:3d:d1:7a:3e:1b:6e:6d:f7:40:72:7b:d2:
                    a4:11:c6:7f:a8:19:21:14:13:52:c8:4b:e8:92:64:
                    bd:31:2e:af:b5:53:b6:f9:57:f0:f8:d8:eb:a1:c5:
                    e5:a2:6a:7f:fc:f2:b5:16:83:b0:0c:22:87:2f:46:
                    7d:60:ee:ff:86:88:ec:40:80:8e:f9:b9:f4:e5:2b:
                    d1:7e:ee:6d:69:25:84:75:4b:fc:11:ac:99:31:20:
                    fa:1e:5f:28:1b:16:b9:6c:4c:08:cd:9e:bf:4e:6a:
                    77:b9:e6:4f:5e:2e:57:bf:4a:67:0d:e0:75:38:0a:
                    9d:2d:bd:46:40:44:eb:8b:18:48:c2:f4:83:2a:db:
                    a7:54:50:48:08:61:06:ef:f3:17:14:25:ce:2a:be:
                    46:0f:40:2d:16:c4:ec:ff:a4:d2:61:ee:5b:e9:36:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:CF:61:DA:DE:4C:D9:86:C2:AC:4A:64:F2:A4:1F:C9:45:21:34
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/uo_PYdreTNmGwqxKZPKkH8lFITQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.192.0/21
                  5.175.64.0/20
                  84.254.128.0/18
                  88.202.0.0/17
                  95.210.0.0/16
                  176.227.128.0/20
                  185.28.64.0/23
                  213.209.160.0/19
                IPv6:
                  2a00:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:fc:2a:5f:ed:a4:ee:84:07:3e:64:b2:8d:ef:a5:32:07:
         48:53:cf:ca:e3:01:75:2f:9a:82:c8:e1:12:07:87:e7:11:a1:
         8f:12:7f:85:4d:78:c6:7c:63:48:6c:dd:28:d1:5b:ef:64:17:
         f6:60:83:c1:ff:29:5d:e6:cb:d3:ee:1b:d4:30:27:77:c1:e6:
         24:f2:2a:b7:82:67:a4:1d:5d:7e:d3:db:c4:a6:d4:b6:39:f9:
         1c:a7:b9:ef:e0:aa:55:5a:47:e8:0e:9a:19:2f:5d:51:d6:81:
         fd:44:b6:37:8a:a4:f5:36:36:d4:ad:52:bb:16:2b:ab:38:e0:
         87:41:6b:75:67:8f:08:0b:d7:21:75:c6:f2:ff:65:9a:58:1b:
         99:60:df:4a:a8:51:8d:44:e4:a3:da:7d:f9:84:3e:dd:83:8b:
         e9:0b:07:ce:b7:73:ac:c4:75:88:ad:27:b8:28:60:e6:48:95:
         ed:7c:19:b4:be:84:cf:08:f2:b6:b0:e5:04:28:2d:e2:6a:07:
         af:da:4b:54:6d:97:ce:6a:f0:c1:29:e5:9d:26:41:fd:10:73:
         04:d6:4d:aa:0f:75:b0:f3:ea:54:ef:22:a2:5a:76:23:47:66:
         0e:56:fd:3a:d6:5e:9c:d6:95:b8:be:bf:34:11:fb:43:6a:4a:
         b7:de:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:19 2024 by rpki-client on console-fra.rpki-client.org