Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Bg7MDZzXDO4DeThdcTursXd8z0k.roa
File:                     Bg7MDZzXDO4DeThdcTursXd8z0k.roa (raw, json)
Hash identifier:          1sKRbto+5jYsri32FpygJXN7miHSbwMStGTH2QM8Ivw=
Subject key identifier:   06:0E:CC:0D:9C:D7:0C:EE:03:79:38:5D:71:3B:AB:B1:77:7C:CF:49
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       0189BBBE9CF29B926A2333A6FF6582390002
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Bg7MDZzXDO4DeThdcTursXd8z0k.roa
Signing time:             Thu 03 Aug 2023 14:12:58 +0000
ROA not before:           Thu 03 Aug 2023 14:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51559
IP address blocks:        95.173.178.0/24 maxlen: 24
                          95.173.177.0/24 maxlen: 24
                          95.173.179.0/24 maxlen: 24
                          95.173.185.0/24 maxlen: 24
                          95.173.184.0/24 maxlen: 24
                          95.173.186.0/24 maxlen: 24
                          95.173.181.0/24 maxlen: 24
                          95.173.183.0/24 maxlen: 24
                          95.173.180.0/24 maxlen: 24
                          95.173.189.0/24 maxlen: 24
                          95.173.188.0/24 maxlen: 24
                          95.173.190.0/24 maxlen: 24
                          95.173.187.0/24 maxlen: 24
                          95.173.191.0/24 maxlen: 24
                          93.113.62.0/24 maxlen: 24
                          93.113.61.0/24 maxlen: 24
                          93.113.63.0/24 maxlen: 24
                          93.113.60.0/24 maxlen: 24
                          95.173.161.0/24 maxlen: 24
                          95.173.160.0/24 maxlen: 24
                          95.173.163.0/24 maxlen: 24
                          95.173.162.0/24 maxlen: 24
                          95.173.164.0/24 maxlen: 24
                          95.173.166.0/24 maxlen: 24
                          95.173.165.0/24 maxlen: 24
                          95.173.171.0/24 maxlen: 24
                          95.173.172.0/24 maxlen: 24
                          95.173.168.0/24 maxlen: 24
                          95.173.167.0/24 maxlen: 24
                          95.173.170.0/24 maxlen: 24
                          95.173.169.0/24 maxlen: 24
                          31.192.215.0/24 maxlen: 24
                          89.252.160.0/24 maxlen: 24
                          89.252.161.0/24 maxlen: 24
                          89.252.166.0/24 maxlen: 24
                          89.252.163.0/24 maxlen: 24
                          89.252.162.0/24 maxlen: 24
                          89.252.165.0/24 maxlen: 24
                          89.252.164.0/24 maxlen: 24
                          89.252.170.0/24 maxlen: 24
                          89.252.169.0/24 maxlen: 24
                          89.252.172.0/24 maxlen: 24
                          89.252.171.0/24 maxlen: 24
                          89.252.168.0/24 maxlen: 24
                          89.252.167.0/24 maxlen: 24
                          89.252.173.0/24 maxlen: 24
                          89.252.175.0/24 maxlen: 24
                          89.252.174.0/24 maxlen: 24
                          89.252.177.0/24 maxlen: 24
                          89.252.176.0/24 maxlen: 24
                          31.192.208.0/24 maxlen: 24
                          31.192.213.0/24 maxlen: 24
                          31.192.210.0/24 maxlen: 24
                          31.192.209.0/24 maxlen: 24
                          159.253.38.0/24 maxlen: 24
                          159.253.36.0/24 maxlen: 24
                          159.253.35.0/24 maxlen: 24
                          159.253.32.0/24 maxlen: 24
                          159.253.34.0/24 maxlen: 24
                          159.253.33.0/24 maxlen: 24
                          159.253.43.0/24 maxlen: 24
                          159.253.42.0/24 maxlen: 24
                          159.253.44.0/24 maxlen: 24
                          159.253.39.0/24 maxlen: 24
                          159.253.41.0/24 maxlen: 24
                          159.253.40.0/24 maxlen: 24
                          159.253.46.0/24 maxlen: 24
                          159.253.45.0/24 maxlen: 24
                          159.253.47.0/24 maxlen: 24
                          89.43.64.0/24 maxlen: 24
                          89.43.67.0/24 maxlen: 24
                          89.43.66.0/24 maxlen: 24
                          89.43.65.0/24 maxlen: 24
                          89.252.173.119/32 maxlen: 32
                          89.43.30.0/24 maxlen: 24
                          89.43.29.0/24 maxlen: 24
                          89.43.31.0/24 maxlen: 24
                          89.43.28.0/24 maxlen: 24
                          89.252.131.0/24 maxlen: 24
                          89.252.128.0/24 maxlen: 24
                          89.252.130.0/24 maxlen: 24
                          89.252.129.0/24 maxlen: 24
                          89.252.139.0/24 maxlen: 24
                          89.252.135.0/24 maxlen: 24
                          89.252.134.0/24 maxlen: 24
                          89.252.137.0/24 maxlen: 24
                          89.252.136.0/24 maxlen: 24
                          89.252.145.0/24 maxlen: 24
                          89.252.142.0/24 maxlen: 24
                          89.252.144.0/24 maxlen: 24
                          89.252.143.0/24 maxlen: 24
                          89.252.140.0/24 maxlen: 24
                          89.252.146.0/24 maxlen: 24
                          89.252.147.0/24 maxlen: 24
                          89.252.152.0/24 maxlen: 24
                          89.252.149.0/24 maxlen: 24
                          89.252.148.0/24 maxlen: 24
                          89.252.150.0/24 maxlen: 24
                          89.252.156.0/24 maxlen: 24
                          89.252.155.0/24 maxlen: 24
                          89.252.158.0/24 maxlen: 24
                          94.102.2.0/24 maxlen: 24
                          94.102.1.0/24 maxlen: 24
                          94.102.4.0/24 maxlen: 24
                          94.102.3.0/24 maxlen: 24
                          94.102.0.0/24 maxlen: 24
                          94.102.6.0/24 maxlen: 24
                          94.102.5.0/24 maxlen: 24
                          94.102.7.0/24 maxlen: 24
                          94.102.9.0/24 maxlen: 24
                          94.102.8.0/24 maxlen: 24
                          94.102.11.0/24 maxlen: 24
                          94.102.10.0/24 maxlen: 24
                          185.95.85.0/24 maxlen: 24
                          185.95.84.0/24 maxlen: 24
                          94.102.15.0/24 maxlen: 24
                          94.102.13.0/24 maxlen: 24
                          94.102.14.0/24 maxlen: 24
                          185.95.87.0/24 maxlen: 24
                          185.95.86.0/24 maxlen: 24
                          93.115.78.0/24 maxlen: 24
                          93.115.77.0/24 maxlen: 24
                          93.115.76.0/24 maxlen: 24
                          93.115.79.0/24 maxlen: 24
                          2a03:2100:28::/48 maxlen: 48
                          2a03:2100:3::/48 maxlen: 48
                          2a03:2100:39::/48 maxlen: 48
                          2a03:2100:3c::/48 maxlen: 48
                          2a03:2100:17::/48 maxlen: 48
                          2a03:2100::/48 maxlen: 48
                          2a03:2100:36::/48 maxlen: 48
                          2a03:2100:11::/48 maxlen: 48
                          2a03:2100:14::/48 maxlen: 48
                          2a03:2100:25::/48 maxlen: 48
                          2a03:2100:33::/48 maxlen: 48
                          2a03:2100:e::/48 maxlen: 48
                          2a03:2100:22::/48 maxlen: 48
                          2a03:2100:b::/48 maxlen: 48
                          2a03:2100:1f::/48 maxlen: 48
                          2a03:2100:8::/48 maxlen: 48
                          2a03:2100:3e::/48 maxlen: 48
                          2a03:2100:19::/48 maxlen: 48
                          2a03:2100:1c::/48 maxlen: 48
                          2a03:2100:2d::/48 maxlen: 48
                          2a03:2100:3b::/48 maxlen: 48
                          2a03:2100:16::/48 maxlen: 48
                          2a03:2100:2a::/48 maxlen: 48
                          2a03:2100:5::/48 maxlen: 48
                          2a03:2100::/32 maxlen: 48
                          2a03:2100:38::/48 maxlen: 48
                          2a03:2100:13::/48 maxlen: 48
                          2a03:2100:27::/48 maxlen: 48
                          2a03:2100:2::/48 maxlen: 48
                          2a03:2100:10::/48 maxlen: 48
                          2a03:2100:21::/48 maxlen: 48
                          2a03:2100:24::/48 maxlen: 48
                          2a03:2100:35::/48 maxlen: 48
                          2a03:2100:1e::/48 maxlen: 48
                          2a03:2100:32::/48 maxlen: 48
                          2a03:2100:d::/48 maxlen: 48
                          2a03:2100:40::/48 maxlen: 48
                          2a03:2100:1b::/48 maxlen: 48
                          2a03:2100:2f::/48 maxlen: 48
                          2a03:2100:a::/48 maxlen: 48
                          2a03:2100:18::/48 maxlen: 48
                          2a03:2100:29::/48 maxlen: 48
                          2a03:2100:2c::/48 maxlen: 48
                          2a03:2100:7::/48 maxlen: 48
                          2a03:2100:3d::/48 maxlen: 48
                          2a03:2100:26::/48 maxlen: 48
                          2a03:2100:1::/48 maxlen: 48
                          2a03:2100:4::/48 maxlen: 48
                          2a03:2100:3a::/48 maxlen: 48
                          2a03:2100:15::/48 maxlen: 48
                          2a03:2100:23::/48 maxlen: 48
                          2a03:2100:37::/48 maxlen: 48
                          2a03:2100:12::/48 maxlen: 48
                          2a03:2100:20::/48 maxlen: 48
                          2a03:2100:34::/48 maxlen: 48
                          2a03:2100:f::/48 maxlen: 48
                          2a03:2102:1::/48 maxlen: 48
                          2a03:2100:2e::/48 maxlen: 48
                          2a03:2100:9::/48 maxlen: 48
                          2a03:2100:c::/48 maxlen: 48
                          2a03:2100:1d::/48 maxlen: 48
                          2a03:2100:2b::/48 maxlen: 48
                          2a03:2100:6::/48 maxlen: 48
                          2a02:f80::/32 maxlen: 32
                          2a03:2100:3f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 04 Aug 2023 08:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bb:be:9c:f2:9b:92:6a:23:33:a6:ff:65:82:39:00:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Aug  3 14:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=060ecc0d9cd70cee0379385d713babb1777ccf49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:c1:1c:96:92:79:2b:6b:d1:d3:3d:a5:85:
                    19:04:9d:13:d7:5e:b8:8b:e8:4b:ce:ea:05:61:df:
                    25:7e:c4:c8:4a:28:74:d4:f2:4f:8e:ae:79:8c:a4:
                    69:d3:0e:03:f0:41:f4:94:23:64:64:d5:16:a3:b0:
                    69:03:1a:02:da:5c:b6:58:b8:64:7d:1d:2b:6c:b5:
                    54:c8:46:22:45:90:68:ff:7a:3d:42:ca:53:32:b2:
                    d9:90:8a:f0:14:c2:cf:a8:05:ae:5b:db:7f:cc:89:
                    28:31:59:0d:89:fb:f1:a0:b4:d6:50:19:41:55:90:
                    a8:e5:6e:47:ab:e7:8e:e4:b8:e1:0c:4c:4a:05:06:
                    04:7d:79:7f:b8:e9:90:f5:52:39:25:3e:01:00:ce:
                    5a:3b:42:0c:b4:5f:b2:3c:2e:ea:f2:f6:53:45:51:
                    2a:be:82:33:9f:65:26:1a:fc:ef:53:4f:a1:ed:92:
                    73:1d:cf:3f:8c:de:35:c2:4d:94:af:53:e6:e6:93:
                    01:fa:4b:86:5e:a0:96:9f:52:a3:87:54:d6:4c:dd:
                    1f:a0:4a:18:a8:63:93:c4:6f:d9:43:99:3c:db:01:
                    3a:83:c8:fe:d5:5f:f4:22:94:53:39:c8:01:ea:4a:
                    9e:c7:09:f3:2d:69:73:c9:0f:87:01:df:eb:09:65:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0E:CC:0D:9C:D7:0C:EE:03:79:38:5D:71:3B:AB:B1:77:7C:CF:49
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Bg7MDZzXDO4DeThdcTursXd8z0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.192.208.0-31.192.210.255
                  31.192.213.0/24
                  31.192.215.0/24
                  89.43.28.0/22
                  89.43.64.0/22
                  89.252.128.0/22
                  89.252.134.0-89.252.137.255
                  89.252.139.0-89.252.140.255
                  89.252.142.0-89.252.150.255
                  89.252.152.0/24
                  89.252.155.0-89.252.156.255
                  89.252.158.0/24
                  89.252.160.0-89.252.177.255
                  93.113.60.0/22
                  93.115.76.0/22
                  94.102.0.0-94.102.11.255
                  94.102.13.0-94.102.15.255
                  95.173.160.0-95.173.172.255
                  95.173.177.0-95.173.181.255
                  95.173.183.0-95.173.191.255
                  159.253.32.0-159.253.36.255
                  159.253.38.0-159.253.47.255
                  185.95.84.0/22
                IPv6:
                  2a02:f80::/32
                  2a03:2100::/32
                  2a03:2102:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:59:7f:e0:b5:a8:b7:9f:b1:47:09:99:0b:6f:6d:46:c6:cc:
         0a:9a:1c:d4:cc:4d:8b:3c:bc:38:24:7f:03:18:3e:7c:e3:c6:
         86:01:53:f4:40:07:09:48:01:73:da:5b:04:3d:1b:16:27:bc:
         23:3b:79:24:64:83:df:37:3f:27:39:7a:aa:db:3b:7a:02:2b:
         36:83:d1:45:6c:11:19:9f:c2:d6:43:06:b9:2d:16:2b:cf:2f:
         ef:59:4d:f3:aa:48:7c:e0:0d:c4:5b:b2:3b:11:5f:9b:57:7a:
         59:92:ad:f5:88:87:72:19:21:cd:6f:67:78:1d:e7:84:d1:10:
         de:b1:08:8d:5b:ea:c8:38:68:8c:ce:dc:1d:87:30:bd:c6:fa:
         e4:9b:dc:88:27:14:c3:99:89:c4:8b:d2:34:ab:40:77:fe:15:
         1e:30:cd:25:91:fa:2c:98:1a:21:f3:0d:aa:91:1a:9e:ab:cc:
         9a:5c:4d:e3:0e:ea:1e:dd:c0:55:e4:d0:87:e3:90:75:4f:0a:
         8e:21:85:71:4a:57:4d:a4:57:02:e1:6a:68:43:21:84:95:9c:
         16:ec:72:c1:c9:78:ec:0b:e5:9e:00:eb:a3:56:32:c5:81:48:
         f6:61:4c:d2:2b:eb:e9:11:a2:13:c3:c2:f7:50:61:b6:c6:77:
         bb:fb:6f:e0
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISAYm7vpzym5JqIzOm/2WCOQACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjMwODAzMTQxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjBlY2MwZDljZDcwY2VlMDM3OTM4NWQ3MTNiYWJiMTc3N2NjZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxDBHJaSeStr0dM9pYUZBJ0T1164
i+hLzuoFYd8lfsTISih01PJPjq55jKRp0w4D8EH0lCNkZNUWo7BpAxoC2ly2WLhk
fR0rbLVUyEYiRZBo/3o9QspTMrLZkIrwFMLPqAWuW9t/zIkoMVkNifvxoLTWUBlB
VZCo5W5Hq+eO5LjhDExKBQYEfXl/uOmQ9VI5JT4BAM5aO0IMtF+yPC7q8vZTRVEq
voIzn2UmGvzvU0+h7ZJzHc8/jN41wk2Ur1Pm5pMB+kuGXqCWn1Kjh1TWTN0foEoY
qGOTxG/ZQ5k82wE6g8j+1V/0IpRTOcgB6kqexwnzLWlzyQ+HAd/rCWVk1QIDAQAB
o4IDGzCCAxcwHQYDVR0OBBYEFAYOzA2c1wzuA3k4XXE7q7F3fM9JMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvQmc3TURaelhETzREZVRoZGNUdXJzWGQ4ejBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB+AQCAAEwgfEw
DAMEBB/A0AMEAB/A0gMEAB/A1QMEAB/A1wMEAlkrHAMEAlkrQAMEAln8gDAMAwQB
WfyGAwQBWfyIMAwDBABZ/IsDBABZ/IwwDAMEAVn8jgMEAFn8lgMEAFn8mDAMAwQA
WfybAwQAWfycAwQAWfyeMAwDBAVZ/KADBAFZ/LADBAJdcTwDBAJdc0wwCwMDAV5m
AwQCXmYIMAwDBABeZg0DBAReZgAwDAMEBV+toAMEAF+trDAMAwQAX62xAwQBX620
MAwDBABfrbcDBAZfrYAwDAMEBZ/9IAMEAJ/9JDAMAwQBn/0mAwQEn/0gAwQCuV9U
MB0EAgACMBcDBQAqAg+AAwUAKgMhAAMHACoDIQIAATANBgkqhkiG9w0BAQsFAAOC
AQEABll/4LWot5+xRwmZC29tRsbMCpoc1MxNizy8OCR/Axg+fOPGhgFT9EAHCUgB
c9pbBD0bFie8Izt5JGSD3zc/Jzl6qts7egIrNoPRRWwRGZ/C1kMGuS0WK88v71lN
86pIfOANxFuyOxFfm1d6WZKt9YiHchkhzW9neB3nhNEQ3rEIjVvqyDhojM7cHYcw
vcb65JvciCcUw5mJxIvSNKtAd/4VHjDNJZH6LJgaIfMNqpEanqvMmlxN4w7qHt3A
VeTQh+OQdU8KjiGFcUpXTaRXAuFqaEMhhJWcFuxywcl47AvlngDro1YyxYFI9mFM
0ivr6RGiE8PC91BhtsZ3u/tv4A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:51 2024 by rpki-client on console-fra.rpki-client.org