Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/zK3IvDTH7klq4BeYFhgbJTkt_-4.roa
File:                     zK3IvDTH7klq4BeYFhgbJTkt_-4.roa (raw, json)
Hash identifier:          Y5yarCDoNx2UeGD3jMbenHw4zI0QbsFb4kLmGTc4oyM=
Subject key identifier:   CC:AD:C8:BC:34:C7:EE:49:6A:E0:17:98:16:18:1B:25:39:2D:FF:EE
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       018C01386210B0A00DB231E720284D1A8F2E
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/zK3IvDTH7klq4BeYFhgbJTkt_-4.roa
Signing time:             Fri 24 Nov 2023 12:05:21 +0000
ROA not before:           Fri 24 Nov 2023 12:05:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5089
IP address blocks:        86.6.0.0/17 maxlen: 17
                          86.6.0.0/16 maxlen: 16
                          82.33.0.0/16 maxlen: 16
                          86.20.0.0/16 maxlen: 16
                          82.20.0.0/14 maxlen: 14
                          80.235.192.0/18 maxlen: 18
                          77.101.0.0/16 maxlen: 16
                          194.168.0.0/17 maxlen: 17
                          194.168.0.0/16 maxlen: 16
                          80.235.128.0/18 maxlen: 18
                          80.235.128.0/17 maxlen: 17
                          86.6.128.0/17 maxlen: 17
                          80.194.0.0/15 maxlen: 15
                          92.234.128.0/17 maxlen: 17
                          82.32.0.0/16 maxlen: 16
                          82.32.0.0/15 maxlen: 15
                          77.100.0.0/16 maxlen: 16
                          81.100.0.0/15 maxlen: 15
                          77.100.0.0/15 maxlen: 15
                          81.100.0.0/14 maxlen: 14
                          82.32.0.0/12 maxlen: 12
                          86.5.128.0/17 maxlen: 17
                          193.39.64.0/24 maxlen: 24
                          82.46.0.0/15 maxlen: 15
                          82.45.0.0/16 maxlen: 16
                          92.234.0.0/17 maxlen: 17
                          92.234.0.0/16 maxlen: 16
                          86.5.0.0/17 maxlen: 17
                          86.5.0.0/16 maxlen: 16
                          77.99.0.0/16 maxlen: 16
                          193.193.96.0/19 maxlen: 19
                          193.193.96.0/20 maxlen: 20
                          193.193.112.0/20 maxlen: 20
                          82.44.0.0/16 maxlen: 16
                          82.44.0.0/15 maxlen: 15
                          77.98.0.0/16 maxlen: 16
                          77.98.0.0/15 maxlen: 15
                          81.98.0.0/15 maxlen: 15
                          80.192.0.0/15 maxlen: 15
                          80.192.0.0/14 maxlen: 14
                          86.4.0.0/16 maxlen: 16
                          62.31.0.0/16 maxlen: 16
                          82.4.0.0/14 maxlen: 14
                          92.233.0.0/16 maxlen: 16
                          82.16.0.0/13 maxlen: 13
                          86.16.0.0/13 maxlen: 13
                          217.137.128.0/17 maxlen: 17
                          82.43.0.0/16 maxlen: 16
                          82.16.0.0/14 maxlen: 14
                          86.16.0.0/14 maxlen: 14
                          77.97.0.0/16 maxlen: 16
                          92.232.0.0/16 maxlen: 16
                          92.232.0.0/15 maxlen: 15
                          194.117.146.0/24 maxlen: 24
                          62.30.0.0/16 maxlen: 16
                          62.30.0.0/15 maxlen: 15
                          77.96.0.0/13 maxlen: 13
                          86.2.0.0/15 maxlen: 15
                          77.96.0.0/17 maxlen: 17
                          77.96.0.0/16 maxlen: 16
                          81.96.0.0/15 maxlen: 15
                          81.96.0.0/14 maxlen: 14
                          81.96.0.0/12 maxlen: 12
                          77.96.128.0/17 maxlen: 17
                          217.137.0.0/17 maxlen: 17
                          81.110.0.0/15 maxlen: 15
                          217.137.0.0/16 maxlen: 16
                          82.28.0.0/14 maxlen: 14
                          82.0.0.0/11 maxlen: 11
                          86.0.0.0/11 maxlen: 11
                          86.1.0.0/16 maxlen: 16
                          82.42.0.0/16 maxlen: 16
                          82.42.0.0/15 maxlen: 15
                          80.0.0.0/13 maxlen: 17
                          82.0.0.0/13 maxlen: 13
                          86.0.0.0/13 maxlen: 13
                          81.108.0.0/15 maxlen: 15
                          81.108.0.0/14 maxlen: 14
                          86.0.0.0/16 maxlen: 16
                          86.0.0.0/15 maxlen: 15
                          82.0.0.0/14 maxlen: 14
                          86.0.0.0/14 maxlen: 14
                          213.81.0.0/17 maxlen: 17
                          213.81.0.0/18 maxlen: 18
                          213.81.64.0/18 maxlen: 18
                          86.14.0.0/15 maxlen: 15
                          82.41.0.0/16 maxlen: 16
                          195.188.0.0/17 maxlen: 17
                          195.188.0.0/16 maxlen: 16
                          62.255.128.0/17 maxlen: 17
                          62.255.128.0/18 maxlen: 18
                          86.13.0.0/16 maxlen: 16
                          213.107.0.0/17 maxlen: 17
                          213.107.0.0/16 maxlen: 16
                          62.255.64.0/18 maxlen: 18
                          94.175.0.0/16 maxlen: 16
                          195.188.128.0/17 maxlen: 17
                          213.148.32.0/19 maxlen: 19
                          213.148.32.0/20 maxlen: 20
                          213.148.48.0/20 maxlen: 20
                          82.40.0.0/16 maxlen: 16
                          82.40.0.0/15 maxlen: 15
                          213.107.128.0/17 maxlen: 17
                          80.255.192.0/19 maxlen: 19
                          62.255.192.0/18 maxlen: 18
                          86.12.0.0/17 maxlen: 17
                          86.12.0.0/16 maxlen: 16
                          82.39.0.0/16 maxlen: 16
                          82.12.0.0/14 maxlen: 14
                          193.39.32.0/19 maxlen: 19
                          193.39.32.0/20 maxlen: 20
                          213.106.128.0/17 maxlen: 17
                          94.173.128.0/17 maxlen: 17
                          62.254.128.0/17 maxlen: 17
                          62.254.128.0/18 maxlen: 18
                          62.255.0.0/17 maxlen: 17
                          62.255.0.0/18 maxlen: 18
                          86.12.128.0/17 maxlen: 17
                          193.39.48.0/20 maxlen: 20
                          62.254.192.0/18 maxlen: 18
                          94.174.0.0/16 maxlen: 16
                          94.174.0.0/15 maxlen: 15
                          213.105.128.0/17 maxlen: 17
                          193.38.64.0/19 maxlen: 19
                          193.38.64.0/18 maxlen: 18
                          94.173.0.0/17 maxlen: 17
                          94.173.0.0/16 maxlen: 16
                          62.253.128.0/17 maxlen: 17
                          86.11.0.0/16 maxlen: 16
                          82.38.0.0/16 maxlen: 16
                          82.38.0.0/15 maxlen: 15
                          213.106.0.0/17 maxlen: 17
                          213.106.0.0/16 maxlen: 16
                          62.254.64.0/18 maxlen: 18
                          81.106.0.0/15 maxlen: 15
                          193.38.96.0/19 maxlen: 19
                          62.254.0.0/18 maxlen: 18
                          62.254.0.0/17 maxlen: 17
                          62.253.0.0/17 maxlen: 17
                          86.10.128.0/17 maxlen: 17
                          213.104.128.0/17 maxlen: 17
                          62.252.192.0/18 maxlen: 18
                          82.24.0.0/13 maxlen: 13
                          86.24.0.0/13 maxlen: 13
                          212.24.64.0/20 maxlen: 20
                          212.24.64.0/19 maxlen: 19
                          212.24.80.0/20 maxlen: 20
                          82.24.0.0/14 maxlen: 14
                          213.105.0.0/17 maxlen: 17
                          213.105.0.0/16 maxlen: 16
                          62.252.0.0/17 maxlen: 17
                          62.252.0.0/18 maxlen: 18
                          62.252.0.0/14 maxlen: 18
                          62.252.128.0/17 maxlen: 17
                          62.252.128.0/18 maxlen: 18
                          86.10.0.0/17 maxlen: 17
                          86.10.0.0/16 maxlen: 16
                          82.37.0.0/16 maxlen: 16
                          213.104.0.0/17 maxlen: 17
                          194.117.128.0/19 maxlen: 19
                          194.117.128.0/20 maxlen: 20
                          213.104.0.0/16 maxlen: 16
                          81.104.0.0/15 maxlen: 15
                          62.252.64.0/18 maxlen: 18
                          194.117.144.0/20 maxlen: 20
                          81.104.0.0/14 maxlen: 14
                          213.104.0.0/14 maxlen: 14
                          77.103.0.0/16 maxlen: 16
                          86.8.128.0/17 maxlen: 17
                          86.22.0.0/15 maxlen: 15
                          82.36.0.0/16 maxlen: 16
                          82.36.0.0/15 maxlen: 15
                          92.238.0.0/15 maxlen: 15
                          86.9.0.0/16 maxlen: 16
                          213.48.64.0/18 maxlen: 18
                          212.250.128.0/17 maxlen: 17
                          213.48.0.0/18 maxlen: 18
                          213.48.0.0/17 maxlen: 17
                          213.48.0.0/16 maxlen: 16
                          77.102.0.0/16 maxlen: 16
                          77.102.0.0/15 maxlen: 15
                          81.102.0.0/15 maxlen: 15
                          86.8.0.0/13 maxlen: 13
                          82.8.0.0/13 maxlen: 13
                          213.48.192.0/18 maxlen: 18
                          86.8.0.0/17 maxlen: 17
                          86.8.0.0/16 maxlen: 16
                          86.21.128.0/17 maxlen: 17
                          213.48.128.0/18 maxlen: 18
                          82.35.0.0/16 maxlen: 16
                          213.48.128.0/17 maxlen: 17
                          82.8.0.0/14 maxlen: 14
                          92.236.0.0/15 maxlen: 15
                          86.7.0.0/16 maxlen: 16
                          92.236.0.0/14 maxlen: 14
                          82.34.0.0/16 maxlen: 16
                          82.34.0.0/15 maxlen: 15
                          194.168.128.0/17 maxlen: 17
                          212.250.0.0/17 maxlen: 17
                          212.250.0.0/16 maxlen: 16
                          86.21.0.0/17 maxlen: 17
                          86.21.0.0/16 maxlen: 16
                          2a02:88fe:8::/46 maxlen: 46
                          2a02:8801::/32 maxlen: 32
                          2a02:8880::/25 maxlen: 25

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:01:38:62:10:b0:a0:0d:b2:31:e7:20:28:4d:1a:8f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Nov 24 12:05:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ccadc8bc34c7ee496ae0179816181b25392dffee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:7d:7a:4a:66:80:a6:68:1c:15:4b:5c:73:
                    0f:b2:40:9d:a1:f0:16:c5:38:3f:e9:41:b1:49:86:
                    e3:21:7a:25:af:96:0d:bf:e1:40:fd:df:b9:cf:a6:
                    aa:65:e8:49:30:88:19:18:cb:4b:34:7d:86:4a:2e:
                    c3:42:e1:6d:05:c5:16:d1:87:2f:70:ce:bc:0c:ab:
                    a1:35:d5:8c:26:9c:7d:f2:ff:8d:d8:ce:67:cd:fc:
                    11:09:34:47:7c:dc:bb:82:d1:7a:7f:fd:ea:61:88:
                    1d:79:ec:fc:97:25:56:b4:40:ef:c6:96:5c:8e:5c:
                    6d:eb:70:0e:ae:57:3f:4f:c7:29:c2:ad:3a:b1:4b:
                    ac:cd:4d:dd:ca:64:a3:bd:ff:8a:4d:cf:89:eb:34:
                    00:ed:31:1f:ee:26:72:59:e2:f3:87:b6:98:33:c3:
                    99:35:ec:dd:3a:76:2a:dd:e5:20:29:8d:8d:65:1c:
                    28:13:29:5e:58:ea:18:b3:19:8f:23:38:a2:86:90:
                    74:6e:99:41:c1:6c:8e:51:6e:7f:60:e3:a4:54:df:
                    78:37:b2:cd:5b:b6:73:64:70:a8:9b:63:0f:7d:f2:
                    78:11:e3:4d:94:71:07:43:b2:7b:aa:57:dd:54:8b:
                    f4:72:b2:b3:1d:04:41:2f:48:4a:3d:d0:96:ec:27:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AD:C8:BC:34:C7:EE:49:6A:E0:17:98:16:18:1B:25:39:2D:FF:EE
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/zK3IvDTH7klq4BeYFhgbJTkt_-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.30.0.0/15
                  62.252.0.0/14
                  77.96.0.0/13
                  80.0.0.0/13
                  80.192.0.0/14
                  80.235.128.0/17
                  80.255.192.0/19
                  81.96.0.0/12
                  82.0.0.0-82.47.255.255
                  86.0.0.0/11
                  92.232.0.0-92.234.255.255
                  92.236.0.0/14
                  94.173.0.0-94.175.255.255
                  193.38.64.0/18
                  193.39.32.0-193.39.64.255
                  193.193.96.0/19
                  194.117.128.0/19
                  194.168.0.0/16
                  195.188.0.0/16
                  212.24.64.0/19
                  212.250.0.0/16
                  213.48.0.0/16
                  213.81.0.0/17
                  213.104.0.0/14
                  213.148.32.0/19
                  217.137.0.0/16
                IPv6:
                  2a02:8801::/32
                  2a02:8880::/25

    Signature Algorithm: sha256WithRSAEncryption
         d4:3e:8c:1d:9f:55:8d:b7:5c:e9:15:fe:0c:ad:16:03:ea:d6:
         a8:04:ae:61:e4:27:64:06:a8:1f:48:a2:5a:fa:75:60:f9:4c:
         d0:43:e7:f8:9e:df:ee:ff:e5:ac:67:a7:b5:a4:13:c1:31:0c:
         5a:ad:db:f8:ee:ca:7b:fa:a6:6a:04:14:ee:46:cd:ed:9c:77:
         3e:5f:63:c6:78:c4:e5:91:6c:36:ca:22:2e:5f:7d:bb:c6:f7:
         a3:1f:35:45:c9:8e:ae:b8:9e:a0:e3:11:ce:d7:d2:e1:77:0c:
         07:6e:ea:91:8b:f7:34:b1:b6:53:73:f4:c0:4c:3e:51:34:8e:
         be:64:ba:f9:7d:6b:df:e0:31:9b:f0:18:79:d1:57:0a:12:e6:
         2a:a8:d8:a5:a7:be:39:f3:3b:11:d1:ce:a0:cf:f4:d3:08:fa:
         46:d2:63:78:8d:58:aa:57:c4:ad:3e:da:a8:c9:8d:71:c4:10:
         1a:58:35:91:0d:52:25:42:f3:df:6e:b9:a2:c7:f1:fd:20:39:
         d5:5a:65:94:37:d2:56:f2:34:12:8f:26:25:6b:65:4e:ac:43:
         5a:b3:a3:60:54:2f:43:ce:53:16:6d:67:13:c9:59:82:cb:2f:
         e6:d1:e7:09:c3:d6:e9:d5:61:8b:c1:f6:f8:3e:04:66:72:3e:
         ff:33:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org