Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/SAptJ4cCVXwu475d_SktWjig3Js.roa
File:                     SAptJ4cCVXwu475d_SktWjig3Js.roa (raw, json)
Hash identifier:          SfWFZQtmysI4x6rImfcS5Vb79Yc3nbCHsl9xTUtO7YA=
Subject key identifier:   48:0A:6D:27:87:02:55:7C:2E:E3:BE:5D:FD:29:2D:5A:38:A0:DC:9B
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       0189BC4446120D10CB6813EED2E6A58BA54B
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/SAptJ4cCVXwu475d_SktWjig3Js.roa
Signing time:             Thu 03 Aug 2023 16:38:58 +0000
ROA not before:           Thu 03 Aug 2023 16:38:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25211
IP address blocks:        94.26.79.0/24 maxlen: 24
                          94.26.89.0/24 maxlen: 24
                          94.26.90.0/24 maxlen: 24
                          94.26.28.0/24 maxlen: 24
                          94.26.29.0/24 maxlen: 24
                          185.96.253.0/24 maxlen: 24
                          185.96.252.0/24 maxlen: 24
                          185.96.255.0/24 maxlen: 24
                          94.26.76.0/24 maxlen: 24
                          94.26.78.0/24 maxlen: 24
                          94.26.77.0/24 maxlen: 24
                          91.92.33.0/24 maxlen: 24
                          78.159.128.0/24 maxlen: 24
                          91.92.34.0/24 maxlen: 24
                          91.92.35.0/24 maxlen: 24
                          78.159.129.0/24 maxlen: 24
                          78.159.137.0/24 maxlen: 24
                          91.92.40.0/24 maxlen: 24
                          91.92.43.0/24 maxlen: 24
                          78.159.138.0/24 maxlen: 24
                          91.92.44.0/24 maxlen: 24
                          93.152.205.0/24 maxlen: 24
                          93.152.206.0/24 maxlen: 24
                          91.92.41.0/24 maxlen: 24
                          91.92.42.0/24 maxlen: 24
                          78.159.136.0/24 maxlen: 24
                          78.159.139.0/24 maxlen: 24
                          93.152.213.0/24 maxlen: 24
                          93.152.208.0/24 maxlen: 24
                          91.92.46.0/24 maxlen: 24
                          93.152.209.0/24 maxlen: 24
                          93.152.212.0/24 maxlen: 24
                          93.152.210.0/24 maxlen: 24
                          91.92.47.0/24 maxlen: 24
                          91.92.45.0/24 maxlen: 24
                          93.152.207.0/24 maxlen: 24
                          91.92.50.0/24 maxlen: 24
                          91.92.49.0/24 maxlen: 24
                          91.92.51.0/24 maxlen: 24
                          93.152.219.0/24 maxlen: 24
                          93.152.215.0/24 maxlen: 24
                          91.92.53.0/24 maxlen: 24
                          93.152.216.0/24 maxlen: 24
                          93.152.214.0/24 maxlen: 24
                          91.92.52.0/24 maxlen: 24
                          93.152.218.0/24 maxlen: 24
                          78.159.152.0/22 maxlen: 22
                          78.159.150.0/24 maxlen: 24
                          78.159.149.0/24 maxlen: 24
                          93.152.217.0/24 maxlen: 24
                          93.152.225.0/24 maxlen: 24
                          93.152.222.0/24 maxlen: 24
                          93.152.223.0/24 maxlen: 24
                          93.152.224.0/24 maxlen: 24
                          93.152.220.0/24 maxlen: 24
                          93.152.221.0/24 maxlen: 24
                          78.159.158.0/24 maxlen: 24
                          78.159.159.0/24 maxlen: 24
                          93.152.226.0/24 maxlen: 24
                          78.159.156.0/24 maxlen: 24
                          78.159.157.0/24 maxlen: 24
                          93.152.230.0/24 maxlen: 24
                          93.152.227.0/24 maxlen: 24
                          212.102.105.0/24 maxlen: 24
                          212.102.107.0/24 maxlen: 24
                          45.141.232.0/24 maxlen: 24
                          45.141.233.0/24 maxlen: 24
                          45.141.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bc:44:46:12:0d:10:cb:68:13:ee:d2:e6:a5:8b:a5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Aug  3 16:38:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=480a6d278702557c2ee3be5dfd292d5a38a0dc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:53:ad:b7:2a:0c:5f:28:8a:cb:a6:d5:7d:
                    ee:3d:30:67:c5:3b:a6:d9:60:cc:d9:3c:db:d9:84:
                    45:21:4d:c9:88:90:4f:80:38:06:15:21:48:1b:05:
                    6a:1d:db:82:04:c5:75:56:39:68:62:2d:b1:2b:8d:
                    c2:0b:b2:b6:95:94:1a:25:63:a7:04:be:7b:98:89:
                    07:17:7c:33:2b:41:bb:e8:87:b2:3a:15:70:1b:37:
                    07:09:25:1b:58:8a:06:10:65:15:50:37:1a:7b:ce:
                    e3:dc:41:03:47:91:6c:82:20:b5:e4:ed:f2:7f:f4:
                    be:bf:94:52:2b:f1:6c:cd:7c:65:d9:5c:68:31:e8:
                    0f:ec:72:79:dd:16:9c:77:ae:e5:a3:7a:70:3b:0e:
                    66:cb:4b:5f:fc:8e:fd:2f:fb:07:1d:18:a6:f2:be:
                    cb:6d:dc:98:a5:22:d5:88:42:a7:32:56:47:c0:01:
                    27:3d:7f:22:57:96:06:fc:76:65:0c:49:d1:b3:0b:
                    fa:fb:27:95:82:ef:f8:85:b2:1e:5b:8f:6e:83:4f:
                    bd:69:23:92:3b:14:8f:8d:69:b2:9a:a9:99:c2:d3:
                    18:3e:c4:06:ad:15:3c:62:4d:70:7f:a3:d9:29:66:
                    52:4f:57:c7:5f:32:ae:1e:27:bb:69:00:9a:6c:93:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0A:6D:27:87:02:55:7C:2E:E3:BE:5D:FD:29:2D:5A:38:A0:DC:9B
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/SAptJ4cCVXwu475d_SktWjig3Js.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.232.0/23
                  45.141.235.0/24
                  78.159.128.0/23
                  78.159.136.0/22
                  78.159.149.0-78.159.150.255
                  78.159.152.0/21
                  91.92.33.0-91.92.35.255
                  91.92.40.0/21
                  91.92.49.0-91.92.53.255
                  93.152.205.0-93.152.210.255
                  93.152.212.0-93.152.227.255
                  93.152.230.0/24
                  94.26.28.0/23
                  94.26.76.0/22
                  94.26.89.0-94.26.90.255
                  185.96.252.0/23
                  185.96.255.0/24
                  212.102.105.0/24
                  212.102.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:31:e9:72:91:ee:8c:76:26:e9:69:61:d3:27:34:1a:d3:
         a8:e8:43:08:c1:94:af:06:31:b0:f0:f0:e2:ba:fb:f8:63:7b:
         78:76:0b:e8:93:60:a8:c8:a4:2c:bc:32:31:e5:85:61:f7:d5:
         3a:3a:0c:83:b1:a6:f7:e3:df:56:79:c1:23:7a:12:f7:07:63:
         e3:89:e6:08:e8:ac:9a:eb:c7:2c:e4:a6:6e:28:99:23:54:54:
         a4:1b:b2:b8:38:25:2e:53:fe:8a:d9:0e:f3:41:3a:57:10:c2:
         d6:71:57:ef:ae:ef:37:09:8c:c6:85:7d:13:f9:06:73:a0:e9:
         b8:7f:fa:cd:e2:63:e3:71:68:60:02:ae:4e:08:ce:b7:3c:8c:
         6a:0e:22:30:66:a2:2e:f8:fd:54:41:d8:35:6d:bf:99:fe:4b:
         4b:52:ca:07:56:9c:ad:06:a0:9d:4b:27:d2:6a:64:dc:8a:99:
         e2:a5:38:a4:69:53:96:c9:b0:70:e8:b4:83:66:28:e9:e7:34:
         85:93:ed:0a:a0:08:1c:80:b5:09:5d:50:3f:83:e2:e3:4e:31:
         df:31:50:23:00:4b:6c:db:dd:be:9a:08:fd:3d:44:b6:62:80:
         de:d2:a0:f7:06:2c:26:52:b8:00:1d:f2:41:ab:e0:3e:31:a8:
         b0:1f:71:71
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAYm8REYSDRDLaBPu0uali6VLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjMwODAzMTYzODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODBhNmQyNzg3MDI1NTdjMmVlM2JlNWRmZDI5MmQ1YTM4YTBkYzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIBTrbcqDF8oisum1X3uPTBnxTum
2WDM2Tzb2YRFIU3JiJBPgDgGFSFIGwVqHduCBMV1VjloYi2xK43CC7K2lZQaJWOn
BL57mIkHF3wzK0G76IeyOhVwGzcHCSUbWIoGEGUVUDcae87j3EEDR5FsgiC15O3y
f/S+v5RSK/FszXxl2VxoMegP7HJ53Racd67lo3pwOw5my0tf/I79L/sHHRim8r7L
bdyYpSLViEKnMlZHwAEnPX8iV5YG/HZlDEnRswv6+yeVgu/4hbIeW49ug0+9aSOS
OxSPjWmymqmZwtMYPsQGrRU8Yk1wf6PZKWZST1fHXzKuHie7aQCabJPyrQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFEgKbSeHAlV8LuO+Xf0pLVo4oNybMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvU0FwdEo0Y0NWWHd1NDc1ZF9Ta3RXamlnM0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAEt
jegDBAAtjesDBAFOn4ADBAJOn4gwDAMEAE6flQMEAE6flgMEA06fmDAMAwQAW1wh
AwQCW1wgAwQDW1woMAwDBABbXDEDBAFbXDQwDAMEAF2YzQMEAF2Y0jAMAwQCXZjU
AwQCXZjgAwQAXZjmAwQBXhocAwQCXhpMMAwDBABeGlkDBABeGloDBAG5YPwDBAC5
YP8DBADUZmkDBADUZmswDQYJKoZIhvcNAQELBQADggEBADW3Melyke6MdibpaWHT
JzQa06joQwjBlK8GMbDw8OK6+/hje3h2C+iTYKjIpCy8MjHlhWH31To6DIOxpvfj
31Z5wSN6EvcHY+OJ5gjorJrrxyzkpm4omSNUVKQbsrg4JS5T/orZDvNBOlcQwtZx
V++u7zcJjMaFfRP5BnOg6bh/+s3iY+NxaGACrk4Izrc8jGoOIjBmoi74/VRB2DVt
v5n+S0tSygdWnK0GoJ1LJ9JqZNyKmeKlOKRpU5bJsHDotINmKOnnNIWT7QqgCByA
tQldUD+D4uNOMd8xUCMAS2zb3b6aCP09RLZigN7SoPcGLCZSuAAd8kGr4D4xqLAf
cXE=
Generated at Mon Aug 28 16:36:42 2023 by rpki-client on console-fra.rpki-client.org