Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa
File:                     VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa (raw, json)
Hash identifier:          R1nssIrWAaXiVUZv/Mk3jYy538CHrqdTuBDt46dagsU=
Subject key identifier:   55:48:DC:14:79:72:27:0B:D4:F2:59:D8:82:79:C2:0E:DA:E4:0F:E6
Certificate issuer:       /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial:       018C448AB4D10DA19805FF5B1FD45E09C812
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa
Signing time:             Thu 07 Dec 2023 13:49:50 +0000
ROA not before:           Thu 07 Dec 2023 13:49:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21246
IP address blocks:        80.80.162.0/24 maxlen: 24
                          80.80.161.0/24 maxlen: 24
                          80.80.160.0/20 maxlen: 20
                          80.80.160.0/24 maxlen: 24
                          80.80.166.0/24 maxlen: 24
                          80.80.164.0/23 maxlen: 23
                          80.80.163.0/24 maxlen: 24
                          80.80.169.0/24 maxlen: 24
                          80.80.168.0/24 maxlen: 24
                          80.80.167.0/24 maxlen: 24
                          80.80.172.0/24 maxlen: 24
                          80.80.171.0/24 maxlen: 24
                          80.80.170.0/24 maxlen: 24
                          80.80.173.0/24 maxlen: 24
                          80.80.175.0/24 maxlen: 24
                          80.80.174.0/24 maxlen: 24
                          46.99.149.0/24 maxlen: 24
                          46.99.148.0/24 maxlen: 24
                          46.99.147.0/24 maxlen: 24
                          46.99.146.0/24 maxlen: 24
                          46.99.152.0/22 maxlen: 22
                          46.99.151.0/24 maxlen: 24
                          46.99.150.0/24 maxlen: 24
                          46.99.156.0/23 maxlen: 23
                          46.99.159.0/24 maxlen: 24
                          46.99.158.0/24 maxlen: 24
                          46.99.163.0/24 maxlen: 24
                          46.99.162.0/24 maxlen: 24
                          46.99.161.0/24 maxlen: 24
                          46.99.160.0/24 maxlen: 24
                          46.99.166.0/24 maxlen: 24
                          46.99.165.0/24 maxlen: 24
                          46.99.164.0/24 maxlen: 24
                          46.99.170.0/24 maxlen: 24
                          46.99.169.0/24 maxlen: 24
                          46.99.168.0/24 maxlen: 24
                          46.99.167.0/24 maxlen: 24
                          46.99.171.0/24 maxlen: 24
                          46.99.179.0/24 maxlen: 24
                          46.99.178.0/24 maxlen: 24
                          46.99.173.0/24 maxlen: 24
                          46.99.177.0/24 maxlen: 24
                          46.99.176.0/24 maxlen: 24
                          46.99.175.0/24 maxlen: 24
                          46.99.174.0/24 maxlen: 24
                          46.99.180.0/24 maxlen: 24
                          46.99.184.0/24 maxlen: 24
                          46.99.183.0/24 maxlen: 24
                          46.99.182.0/24 maxlen: 24
                          46.99.181.0/24 maxlen: 24
                          46.99.186.0/24 maxlen: 24
                          46.99.185.0/24 maxlen: 24
                          46.99.187.0/24 maxlen: 24
                          46.99.190.0/24 maxlen: 24
                          46.99.189.0/24 maxlen: 24
                          46.99.188.0/24 maxlen: 24
                          46.99.192.0/24 maxlen: 24
                          46.99.196.0/24 maxlen: 24
                          46.99.199.0/24 maxlen: 24
                          46.99.128.0/24 maxlen: 24
                          46.99.131.0/24 maxlen: 24
                          46.99.130.0/24 maxlen: 24
                          46.99.129.0/24 maxlen: 24
                          46.99.132.0/24 maxlen: 24
                          46.99.135.0/24 maxlen: 24
                          46.99.134.0/24 maxlen: 24
                          46.99.133.0/24 maxlen: 24
                          46.99.138.0/24 maxlen: 24
                          46.99.137.0/24 maxlen: 24
                          46.99.136.0/24 maxlen: 24
                          46.99.139.0/24 maxlen: 24
                          46.99.142.0/24 maxlen: 24
                          46.99.141.0/24 maxlen: 24
                          46.99.140.0/24 maxlen: 24
                          46.99.145.0/24 maxlen: 24
                          46.99.144.0/24 maxlen: 24
                          46.99.143.0/24 maxlen: 24
                          46.99.254.0/23 maxlen: 23
                          91.187.97.0/24 maxlen: 24
                          91.187.96.0/19 maxlen: 19
                          91.187.96.0/24 maxlen: 24
                          46.99.203.0/24 maxlen: 24
                          46.99.202.0/23 maxlen: 23
                          46.99.202.0/24 maxlen: 24
                          91.187.98.0/24 maxlen: 24
                          91.187.100.0/24 maxlen: 24
                          91.187.99.0/24 maxlen: 24
                          91.187.104.0/24 maxlen: 24
                          91.187.104.0/23 maxlen: 23
                          91.187.103.0/24 maxlen: 24
                          91.187.102.0/24 maxlen: 24
                          91.187.101.0/24 maxlen: 24
                          91.187.107.0/24 maxlen: 24
                          91.187.106.0/24 maxlen: 24
                          91.187.111.0/24 maxlen: 24
                          91.187.110.0/24 maxlen: 24
                          91.187.109.0/24 maxlen: 24
                          91.187.108.0/24 maxlen: 24
                          91.187.112.0/24 maxlen: 24
                          91.187.114.0/24 maxlen: 24
                          91.187.113.0/24 maxlen: 24
                          46.99.224.0/20 maxlen: 20
                          91.187.117.0/24 maxlen: 24
                          91.187.116.0/24 maxlen: 24
                          91.187.115.0/24 maxlen: 24
                          91.187.118.0/24 maxlen: 24
                          91.187.125.0/24 maxlen: 24
                          91.187.121.0/24 maxlen: 24
                          91.187.120.0/24 maxlen: 24
                          91.187.119.0/24 maxlen: 24
                          91.187.124.0/24 maxlen: 24
                          91.187.123.0/24 maxlen: 24
                          91.187.122.0/24 maxlen: 24
                          91.187.127.0/24 maxlen: 24
                          91.187.126.0/24 maxlen: 24
                          46.99.239.0/24 maxlen: 24
                          46.99.250.0/24 maxlen: 24
                          46.99.249.0/24 maxlen: 24
                          46.99.252.0/23 maxlen: 23
                          46.99.251.0/24 maxlen: 24
                          46.99.64.0/19 maxlen: 19
                          46.99.64.0/18 maxlen: 18
                          46.99.0.0/18 maxlen: 18
                          46.99.0.0/16 maxlen: 16
                          185.78.224.0/22 maxlen: 22
                          46.99.32.0/19 maxlen: 19
                          2a03:4b80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:44:8a:b4:d1:0d:a1:98:05:ff:5b:1f:d4:5e:09:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
        Validity
            Not Before: Dec  7 13:49:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5548dc147972270bd4f259d88279c20edae40fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:af:b4:90:79:88:29:0a:08:5f:50:f3:2c:
                    94:d7:c4:72:24:18:21:b9:0d:db:7d:41:5c:1e:a1:
                    5c:79:d5:66:6e:16:a1:0f:6b:25:74:53:13:ad:01:
                    90:2e:6c:ba:97:71:2b:24:7f:a9:32:62:99:e3:34:
                    03:51:cb:65:20:40:24:b4:47:29:93:49:75:d5:1a:
                    7e:b3:bd:42:4e:48:08:9e:e7:e4:21:f2:c1:b6:80:
                    72:5b:ad:8b:a3:29:1c:07:38:76:57:bb:c0:57:bb:
                    b5:00:fe:2f:1e:6d:14:88:30:3e:91:36:94:4a:14:
                    37:55:b4:d4:f1:e3:f1:12:b8:0b:5f:c6:0a:8e:42:
                    b4:11:5c:e2:b3:05:5e:08:04:af:d5:47:41:a8:a8:
                    62:6f:6f:d4:d2:df:7b:20:a7:6a:6e:7f:45:94:4c:
                    72:a2:da:9b:ce:82:4d:f8:af:ca:58:f8:f8:3a:af:
                    7c:22:e0:90:31:8c:bf:0b:73:56:1e:0a:78:1a:e8:
                    5e:6a:14:2d:f1:96:7e:2e:19:4f:38:92:fd:8b:ba:
                    95:18:e8:10:1b:7f:ca:6c:26:f0:5b:40:11:07:cc:
                    ec:83:2c:38:21:20:e1:63:59:e8:8e:c8:06:d1:aa:
                    89:9a:40:a0:43:ed:8f:b8:d7:18:08:f6:b3:af:70:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:DC:14:79:72:27:0B:D4:F2:59:D8:82:79:C2:0E:DA:E4:0F:E6
            X509v3 Authority Key Identifier:
                keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/VUjcFHlyJwvU8lnYgnnCDtrkD-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.99.0.0/16
                  80.80.160.0/20
                  91.187.96.0/19
                  185.78.224.0/22
                IPv6:
                  2a03:4b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:ae:81:9a:2a:7d:2a:23:e8:b3:98:be:6f:c9:77:64:7a:8f:
         9f:2e:8c:4a:34:67:e4:43:46:1b:bf:a3:bf:af:1b:74:e5:71:
         1d:0c:c1:6a:56:39:22:79:9d:62:85:80:c7:b5:e0:7d:99:c1:
         45:48:3b:b2:0b:aa:3e:14:50:1f:54:42:16:46:14:3b:51:b0:
         db:5b:cb:29:47:14:d6:f5:17:9f:04:84:98:d1:a4:50:69:5e:
         80:d8:e6:cc:3c:4e:6b:8e:9f:d6:ce:29:e7:a5:3e:15:e9:7d:
         5e:c9:df:40:94:dc:93:39:e6:82:69:96:fc:8a:de:99:ac:5b:
         f8:77:7c:13:d1:60:6e:1c:e1:59:57:a3:ac:eb:7a:86:8c:cb:
         64:aa:31:a0:66:4e:c4:ad:33:bf:d6:2a:a5:c7:a9:2f:82:f1:
         00:a8:4e:5f:3e:cb:75:5a:7b:74:74:8e:bd:dc:42:e9:f8:90:
         cc:64:b6:2d:11:9c:8a:15:fa:c7:28:fd:77:15:b1:7f:72:ae:
         30:ec:65:0f:52:e5:e3:00:cb:30:d9:a9:eb:ef:e5:2f:43:e9:
         99:ee:19:46:5b:d7:44:23:5b:c2:b3:d6:36:98:ca:02:c5:03:
         29:21:8c:61:40:95:61:e1:b9:01:40:a4:86:47:2b:39:fe:34:
         cd:19:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:03 2024 by rpki-client on console-ams.rpki-client.org