Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/c6S7iH6Mw2kKB0YTZtL_riq-4X0.roa
File:                     c6S7iH6Mw2kKB0YTZtL_riq-4X0.roa (raw, json)
Hash identifier:          MIIjo1DTSjHp1O/0aKR3fY06u8d5wO83dMom2hIDXYI=
Subject key identifier:   73:A4:BB:88:7E:8C:C3:69:0A:07:46:13:66:D2:FF:AE:2A:BE:E1:7D
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       0192514D89AB339BD31E42C6C5AC2DC1931C
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/c6S7iH6Mw2kKB0YTZtL_riq-4X0.roa
Signing time:             Thu 03 Oct 2024 07:34:48 +0000
ROA not before:           Thu 03 Oct 2024 07:34:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216071
IP address blocks:        77.238.224.0/24 maxlen: 24
                          77.238.225.0/24 maxlen: 24
                          77.238.226.0/24 maxlen: 24
                          77.238.227.0/24 maxlen: 24
                          77.238.228.0/24 maxlen: 24
                          77.238.229.0/24 maxlen: 24
                          77.238.230.0/24 maxlen: 24
                          77.238.231.0/24 maxlen: 24
                          77.238.232.0/24 maxlen: 24
                          77.238.233.0/24 maxlen: 24
                          77.238.234.0/24 maxlen: 24
                          77.238.235.0/24 maxlen: 24
                          77.238.236.0/24 maxlen: 24
                          77.238.237.0/24 maxlen: 24
                          77.238.238.0/24 maxlen: 24
                          77.238.239.0/24 maxlen: 24
                          77.238.240.0/24 maxlen: 24
                          77.238.241.0/24 maxlen: 24
                          77.238.242.0/24 maxlen: 24
                          77.238.243.0/24 maxlen: 24
                          77.238.244.0/24 maxlen: 24
                          77.238.245.0/24 maxlen: 24
                          77.238.246.0/24 maxlen: 24
                          77.238.247.0/24 maxlen: 24
                          77.238.248.0/24 maxlen: 24
                          77.238.249.0/24 maxlen: 24
                          77.238.250.0/24 maxlen: 24
                          77.238.251.0/24 maxlen: 24
                          77.238.252.0/24 maxlen: 24
                          77.238.253.0/24 maxlen: 24
                          77.238.254.0/24 maxlen: 24
                          77.238.255.0/24 maxlen: 24
                          80.85.244.0/24 maxlen: 24
                          80.85.245.0/24 maxlen: 24
                          80.85.246.0/24 maxlen: 24
                          80.85.247.0/24 maxlen: 24
                          88.210.3.0/24 maxlen: 24
                          88.210.6.0/24 maxlen: 24
                          88.210.9.0/24 maxlen: 24
                          88.210.10.0/24 maxlen: 24
                          88.210.11.0/24 maxlen: 24
                          88.210.12.0/24 maxlen: 24
                          88.210.13.0/24 maxlen: 24
                          88.210.14.0/24 maxlen: 24
                          91.246.41.0/24 maxlen: 24
                          93.183.124.0/24 maxlen: 24
                          93.183.125.0/24 maxlen: 24
                          93.183.126.0/24 maxlen: 24
                          93.183.127.0/24 maxlen: 24
                          94.103.80.0/24 maxlen: 24
                          94.103.81.0/24 maxlen: 24
                          94.103.82.0/24 maxlen: 24
                          94.103.94.0/24 maxlen: 24
                          94.103.95.0/24 maxlen: 24
                          109.234.33.0/24 maxlen: 24
                          109.234.34.0/24 maxlen: 24
                          109.234.35.0/24 maxlen: 24
                          109.234.36.0/24 maxlen: 24
                          109.234.37.0/24 maxlen: 24
                          109.234.38.0/24 maxlen: 24
                          109.234.39.0/24 maxlen: 24
                          185.121.232.0/24 maxlen: 24
                          185.121.233.0/24 maxlen: 24
                          185.121.234.0/24 maxlen: 24
                          185.121.235.0/24 maxlen: 24
                          185.157.212.0/24 maxlen: 24
                          185.157.213.0/24 maxlen: 24
                          185.157.214.0/24 maxlen: 24
                          185.157.215.0/24 maxlen: 24
                          185.245.104.0/24 maxlen: 24
                          185.245.105.0/24 maxlen: 24
                          185.245.106.0/24 maxlen: 24
                          185.245.107.0/24 maxlen: 24
                          193.33.194.0/24 maxlen: 24
                          193.33.195.0/24 maxlen: 24
                          193.178.169.0/24 maxlen: 24
                          193.178.172.0/24 maxlen: 24
                          193.178.174.0/24 maxlen: 24
                          194.164.32.0/24 maxlen: 24
                          194.164.33.0/24 maxlen: 24
                          194.164.34.0/24 maxlen: 24
                          194.164.35.0/24 maxlen: 24
                          195.2.86.0/24 maxlen: 24
                          195.2.92.0/24 maxlen: 24
                          195.2.93.0/24 maxlen: 24
                          195.200.16.0/24 maxlen: 24
                          195.200.17.0/24 maxlen: 24
                          195.200.18.0/24 maxlen: 24
                          195.200.19.0/24 maxlen: 24
                          195.200.26.0/24 maxlen: 24
                          195.200.28.0/24 maxlen: 24
                          195.200.29.0/24 maxlen: 24
                          195.200.30.0/24 maxlen: 24
                          195.200.31.0/24 maxlen: 24
                          212.34.144.0/24 maxlen: 24
                          212.34.145.0/24 maxlen: 24
                          212.34.146.0/24 maxlen: 24
                          212.34.147.0/24 maxlen: 24
                          212.34.148.0/24 maxlen: 24
                          212.34.149.0/24 maxlen: 24
                          212.34.150.0/24 maxlen: 24
                          212.34.151.0/24 maxlen: 24
                          212.34.152.0/24 maxlen: 24
                          212.34.153.0/24 maxlen: 24
                          212.34.154.0/24 maxlen: 24
                          212.34.155.0/24 maxlen: 24
                          212.118.36.0/24 maxlen: 24
                          212.118.37.0/24 maxlen: 24
                          212.118.38.0/24 maxlen: 24
                          212.118.39.0/24 maxlen: 24
                          212.118.40.0/24 maxlen: 24
                          212.118.41.0/24 maxlen: 24
                          212.118.42.0/24 maxlen: 24
                          212.118.43.0/24 maxlen: 24
                          2a06:7740::/48 maxlen: 48
                          2a0d:8480:1::/48 maxlen: 48
                          2a0d:8480:3::/48 maxlen: 48
                          2a14:1e00:1::/48 maxlen: 48
                          2a14:1e00:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 05:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:51:4d:89:ab:33:9b:d3:1e:42:c6:c5:ac:2d:c1:93:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Oct  3 07:34:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=73a4bb887e8cc3690a07461366d2ffae2abee17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:3e:46:83:7b:01:f9:5f:83:5d:6c:3f:6c:
                    24:53:0f:fa:bb:cf:62:9e:7b:9c:7d:c9:17:42:09:
                    0c:59:41:80:ac:29:fe:ca:36:7c:3b:93:21:a7:13:
                    df:81:be:57:d3:06:84:0b:14:a7:27:db:bb:c5:9c:
                    9b:9e:37:3b:f4:fa:4c:08:bd:0b:c7:70:83:54:b8:
                    bd:b4:56:7a:c5:41:f2:52:e0:c5:a8:cd:d5:02:e9:
                    77:4a:a7:88:12:0f:ec:23:f2:3f:2f:ee:00:a9:3a:
                    f9:fe:99:9a:c5:6a:4d:5d:33:27:51:fc:50:38:c9:
                    ef:65:1b:2d:b6:05:df:97:20:fa:14:b2:6c:cd:ba:
                    8b:00:f3:23:ff:39:e6:74:f8:b7:8e:1f:64:af:43:
                    6c:c9:5a:22:7d:e7:20:3f:6b:01:42:99:fe:4a:3c:
                    0e:9f:06:f7:f6:9d:4a:34:dc:f8:19:67:20:93:c6:
                    57:0e:b2:b6:2e:84:25:09:4d:92:35:bd:c0:68:d5:
                    58:a5:00:de:ae:a6:2f:a0:06:fd:81:0e:59:32:49:
                    d3:07:53:fc:4a:2d:ab:ac:04:64:03:5f:f9:27:6c:
                    99:0b:18:81:d0:c8:a7:92:3b:4c:e9:20:36:c4:3f:
                    f5:c8:8d:f9:a1:79:e5:cf:46:17:6e:9d:fe:d8:95:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A4:BB:88:7E:8C:C3:69:0A:07:46:13:66:D2:FF:AE:2A:BE:E1:7D
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/c6S7iH6Mw2kKB0YTZtL_riq-4X0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.238.224.0/19
                  80.85.244.0/22
                  88.210.3.0/24
                  88.210.6.0/24
                  88.210.9.0-88.210.14.255
                  91.246.41.0/24
                  93.183.124.0/22
                  94.103.80.0-94.103.82.255
                  94.103.94.0/23
                  109.234.33.0-109.234.39.255
                  185.121.232.0/22
                  185.157.212.0/22
                  185.245.104.0/22
                  193.33.194.0/23
                  193.178.169.0/24
                  193.178.172.0/24
                  193.178.174.0/24
                  194.164.32.0/22
                  195.2.86.0/24
                  195.2.92.0/23
                  195.200.16.0/22
                  195.200.26.0/24
                  195.200.28.0/22
                  212.34.144.0-212.34.155.255
                  212.118.36.0-212.118.43.255
                IPv6:
                  2a06:7740::/48
                  2a0d:8480:1::/48
                  2a0d:8480:3::/48
                  2a14:1e00:1::-2a14:1e00:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:64:40:de:07:a3:83:5a:6c:e6:22:b8:9e:8d:29:b8:80:
         e2:fa:fb:59:9d:8e:7c:d2:96:b8:92:1d:4d:86:6d:b7:aa:01:
         84:48:13:87:58:6a:36:64:40:11:49:1b:6b:9b:64:0b:db:3c:
         6f:8f:43:d6:f2:99:7b:df:6a:7a:4f:6f:dc:48:ba:84:8b:23:
         96:14:a4:1c:f2:92:aa:0e:a4:84:a3:24:e7:32:d5:35:b7:db:
         c4:c8:eb:28:f9:6d:6c:ef:a9:23:9a:93:b4:b0:d8:80:e3:b5:
         d9:8b:21:89:83:c4:7c:71:35:6f:34:59:c4:e6:7b:28:0c:d5:
         5d:8a:45:6d:ff:f0:a1:6e:f7:7b:43:02:c2:08:84:71:56:73:
         62:48:db:d1:c3:d3:66:ab:b3:14:5e:1a:89:bc:38:64:3e:e3:
         b1:5b:9c:78:5e:79:ee:c0:19:2e:68:30:4a:53:f4:46:49:10:
         ae:60:84:c9:ef:05:f1:51:86:71:0b:6d:49:5a:7d:d4:cb:3f:
         14:59:a5:8c:e8:4f:90:dd:9c:c8:b4:9a:49:e3:2b:f0:57:7d:
         32:d0:d6:d7:79:d3:24:21:41:8f:1f:f5:4a:20:7f:a6:5f:07:
         ff:11:6d:f3:c7:ef:f2:96:09:8b:5b:49:b3:e4:d2:4b:4e:2f:
         bf:dd:be:6a
-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISAZJRTYmrM5vTHkLGxawtwZMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDY0MTQ4NmJkYzk4ZDRhN2RlMDkyOGE0MmQ3ZDY4ZTYw
MTVmMzAwHhcNMjQxMDAzMDczNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2E0YmI4ODdlOGNjMzY5MGEwNzQ2MTM2NmQyZmZhZTJhYmVlMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5s+RoN7Aflfg11sP2wkUw/6u89i
nnucfckXQgkMWUGArCn+yjZ8O5MhpxPfgb5X0waECxSnJ9u7xZybnjc79PpMCL0L
x3CDVLi9tFZ6xUHyUuDFqM3VAul3SqeIEg/sI/I/L+4AqTr5/pmaxWpNXTMnUfxQ
OMnvZRsttgXflyD6FLJszbqLAPMj/znmdPi3jh9kr0NsyVoifecgP2sBQpn+SjwO
nwb39p1KNNz4GWcgk8ZXDrK2LoQlCU2SNb3AaNVYpQDerqYvoAb9gQ5ZMknTB1P8
Si2rrARkA1/5J2yZCxiB0MinkjtM6SA2xD/1yI35oXnlz0YXbp3+2JVRgQIDAQAB
o4IC/zCCAvswHQYDVR0OBBYEFHOku4h+jMNpCgdGE2bS/64qvuF9MB8GA1UdIwQY
MBaAFFbWQUhr3JjUp94JKKQtfWjmAV8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2Et
ZTNlMDRiZDRmMjQyLzEvYzZTN2lINk13MmtLQjBZVFp0TF9yaXEtNFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2EtZTNlMDRiZDRmMjQy
LzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEwYIKwYBBQUHAQcBAf8EggECMIH/MIHFBAIAATCBvgME
BU3u4AMEAlBV9AMEAFjSAwMEAFjSBjAMAwQAWNIJAwQAWNIOAwQAW/YpAwQCXbd8
MAwDBAReZ1ADBABeZ1IDBAFeZ14wDAMEAG3qIQMEA23qIAMEArl56AMEArmd1AME
Arn1aAMEAcEhwgMEAMGyqQMEAMGyrAMEAMGyrgMEAsKkIAMEAMMCVgMEAcMCXAME
AsPIEAMEAMPIGgMEAsPIHDAMAwQE1CKQAwQC1CKYMAwDBALUdiQDBALUdigwNQQC
AAIwLwMHACoGd0AAAAMHACoNhIAAAQMHACoNhIAAAzASAwcAKhQeAAABAwcAKhQe
AAACMA0GCSqGSIb3DQEBCwUAA4IBAQCKhGRA3gejg1ps5iK4no0puIDi+vtZnY58
0pa4kh1Nhm23qgGESBOHWGo2ZEARSRtrm2QL2zxvj0PW8pl732p6T2/cSLqEiyOW
FKQc8pKqDqSEoyTnMtU1t9vEyOso+W1s76kjmpO0sNiA47XZiyGJg8R8cTVvNFnE
5nsoDNVdikVt//Chbvd7QwLCCIRxVnNiSNvRw9Nmq7MUXhqJvDhkPuOxW5x4Xnnu
wBkuaDBKU/RGSRCuYITJ7wXxUYZxC21JWn3Uyz8UWaWM6E+Q3ZzItJpJ4yvwV30y
0NbXedMkIUGPH/VKIH+mXwf/EW3zx+/ylgmLW0mz5NJLTi+/3b5q
Generated at Thu Oct 17 07:20:44 2024 by rpki-client on console-fra.rpki-client.org