Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/ezPoqad2EAwuhC4sx_VSS5R52l8.roa
File:                     ezPoqad2EAwuhC4sx_VSS5R52l8.roa (raw, json)
Hash identifier:          Mpo54Cju+z6V1YWJsWEZY7kkLb9fhNakd6UmVTpFYQg=
Subject key identifier:   7B:33:E8:A9:A7:76:10:0C:2E:84:2E:2C:C7:F5:52:4B:94:79:DA:5F
Certificate issuer:       /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial:       01863AD255F566A02FB11A2F723A248BA734
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/ezPoqad2EAwuhC4sx_VSS5R52l8.roa
Signing time:             Fri 10 Feb 2023 10:15:08 +0000
ROA not before:           Fri 10 Feb 2023 10:15:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12302
IP address blocks:        81.12.216.0/21 maxlen: 21
                          81.12.224.0/21 maxlen: 21
                          81.12.231.0/24 maxlen: 24
                          81.12.230.0/24 maxlen: 24
                          81.12.229.0/24 maxlen: 24
                          81.12.228.0/24 maxlen: 24
                          81.12.232.0/21 maxlen: 21
                          81.12.245.0/24 maxlen: 24
                          81.12.243.0/24 maxlen: 24
                          81.12.242.0/24 maxlen: 24
                          81.12.240.0/21 maxlen: 21
                          81.12.246.0/24 maxlen: 24
                          81.12.248.0/21 maxlen: 21
                          81.12.247.0/24 maxlen: 24
                          81.12.160.0/21 maxlen: 21
                          81.12.168.0/21 maxlen: 21
                          81.12.176.0/21 maxlen: 21
                          81.12.184.0/21 maxlen: 21
                          81.12.192.0/24 maxlen: 24
                          81.12.192.0/21 maxlen: 21
                          81.12.195.0/24 maxlen: 24
                          81.12.199.0/24 maxlen: 24
                          81.12.200.0/21 maxlen: 21
                          81.12.200.0/23 maxlen: 23
                          81.12.208.0/21 maxlen: 21
                          136.255.224.0/20 maxlen: 20
                          136.255.251.0/24 maxlen: 24
                          81.12.128.0/17 maxlen: 17
                          81.12.132.0/23 maxlen: 23
                          81.12.130.0/24 maxlen: 24
                          81.12.128.0/23 maxlen: 23
                          136.255.0.0/16 maxlen: 24
                          81.12.128.0/21 maxlen: 21
                          81.12.136.0/21 maxlen: 21
                          81.12.134.0/24 maxlen: 24
                          81.12.144.0/21 maxlen: 21
                          81.12.152.0/21 maxlen: 21
                          81.12.153.0/24 maxlen: 24
                          81.12.159.0/24 maxlen: 24
                          213.233.123.0/24 maxlen: 24
                          213.233.122.0/24 maxlen: 24
                          213.233.121.0/24 maxlen: 24
                          213.233.120.0/24 maxlen: 24
                          213.233.119.0/24 maxlen: 24
                          213.233.125.0/24 maxlen: 24
                          213.233.124.0/24 maxlen: 24
                          213.233.127.0/24 maxlen: 24
                          213.233.126.0/24 maxlen: 24
                          165.78.160.0/19 maxlen: 19
                          213.233.67.0/24 maxlen: 24
                          213.233.66.0/24 maxlen: 24
                          213.233.65.0/24 maxlen: 24
                          213.233.71.0/24 maxlen: 24
                          213.233.70.0/24 maxlen: 24
                          213.233.69.0/24 maxlen: 24
                          213.233.68.0/24 maxlen: 24
                          213.233.74.0/24 maxlen: 24
                          213.233.73.0/24 maxlen: 24
                          213.233.72.0/24 maxlen: 24
                          213.233.78.0/24 maxlen: 24
                          213.233.77.0/24 maxlen: 24
                          213.233.76.0/24 maxlen: 24
                          213.233.75.0/24 maxlen: 24
                          213.233.81.0/24 maxlen: 24
                          213.233.80.0/24 maxlen: 24
                          213.233.79.0/24 maxlen: 24
                          213.233.85.0/24 maxlen: 24
                          165.78.96.0/19 maxlen: 19
                          213.233.84.0/24 maxlen: 24
                          213.233.83.0/24 maxlen: 24
                          213.233.82.0/24 maxlen: 24
                          213.233.88.0/24 maxlen: 24
                          213.233.87.0/24 maxlen: 24
                          213.233.86.0/24 maxlen: 24
                          213.233.91.0/24 maxlen: 24
                          213.233.90.0/24 maxlen: 24
                          213.233.89.0/24 maxlen: 24
                          213.233.95.0/24 maxlen: 24
                          213.233.94.0/24 maxlen: 24
                          213.233.93.0/24 maxlen: 24
                          213.233.92.0/24 maxlen: 24
                          213.233.98.0/24 maxlen: 24
                          213.233.97.0/24 maxlen: 24
                          213.233.96.0/24 maxlen: 24
                          213.233.102.0/24 maxlen: 24
                          213.233.101.0/24 maxlen: 24
                          213.233.100.0/24 maxlen: 24
                          213.233.99.0/24 maxlen: 24
                          213.233.105.0/24 maxlen: 24
                          213.233.104.0/24 maxlen: 24
                          213.233.103.0/24 maxlen: 24
                          213.233.109.0/24 maxlen: 24
                          213.233.108.0/24 maxlen: 24
                          213.233.107.0/24 maxlen: 24
                          213.233.106.0/24 maxlen: 24
                          213.233.112.0/24 maxlen: 24
                          213.233.111.0/24 maxlen: 24
                          213.233.110.0/24 maxlen: 24
                          213.233.118.0/24 maxlen: 24
                          213.233.117.0/24 maxlen: 24
                          213.233.116.0/24 maxlen: 24
                          165.78.128.0/21 maxlen: 21
                          165.78.128.0/19 maxlen: 19
                          213.233.115.0/24 maxlen: 24
                          213.233.114.0/24 maxlen: 24
                          213.233.113.0/24 maxlen: 24
                          165.78.192.0/21 maxlen: 21
                          165.78.192.0/19 maxlen: 19
                          165.78.224.0/19 maxlen: 19
                          46.97.232.0/21 maxlen: 21
                          46.97.240.0/21 maxlen: 21
                          46.97.248.0/21 maxlen: 21
                          46.97.176.0/21 maxlen: 21
                          46.97.184.0/21 maxlen: 21
                          46.97.192.0/21 maxlen: 21
                          46.97.200.0/21 maxlen: 21
                          46.97.208.0/21 maxlen: 21
                          46.97.216.0/21 maxlen: 21
                          46.97.224.0/21 maxlen: 21
                          217.10.192.0/24 maxlen: 24
                          217.10.193.0/24 maxlen: 24
                          217.10.199.0/24 maxlen: 24
                          217.10.198.0/24 maxlen: 24
                          217.10.197.0/24 maxlen: 24
                          217.10.196.0/24 maxlen: 24
                          217.10.195.0/24 maxlen: 24
                          165.78.32.0/19 maxlen: 19
                          217.10.194.0/24 maxlen: 24
                          217.10.200.0/24 maxlen: 24
                          217.10.206.0/24 maxlen: 24
                          217.10.205.0/24 maxlen: 24
                          217.10.204.0/24 maxlen: 24
                          217.10.203.0/24 maxlen: 24
                          217.10.202.0/24 maxlen: 24
                          217.10.201.0/24 maxlen: 24
                          217.10.207.0/24 maxlen: 24
                          217.10.213.0/24 maxlen: 24
                          217.10.212.0/24 maxlen: 24
                          217.10.211.0/24 maxlen: 24
                          217.10.210.0/24 maxlen: 24
                          217.10.209.0/24 maxlen: 24
                          217.10.208.0/24 maxlen: 24
                          217.10.214.0/24 maxlen: 24
                          217.10.219.0/24 maxlen: 24
                          217.10.218.0/24 maxlen: 24
                          217.10.217.0/24 maxlen: 24
                          217.10.216.0/24 maxlen: 24
                          217.10.215.0/24 maxlen: 24
                          217.10.221.0/24 maxlen: 24
                          217.10.220.0/24 maxlen: 24
                          165.78.64.0/21 maxlen: 21
                          165.78.64.0/19 maxlen: 19
                          217.10.223.0/24 maxlen: 24
                          217.10.222.0/24 maxlen: 24
                          213.233.64.0/24 maxlen: 24
                          165.78.0.0/21 maxlen: 21
                          165.78.0.0/19 maxlen: 19
                          165.78.0.0/16 maxlen: 16
                          46.97.16.0/21 maxlen: 21
                          46.97.24.0/21 maxlen: 21
                          46.97.32.0/21 maxlen: 21
                          46.97.40.0/21 maxlen: 21
                          46.97.48.0/21 maxlen: 21
                          46.97.56.0/21 maxlen: 21
                          46.97.64.0/21 maxlen: 21
                          46.97.0.0/21 maxlen: 21
                          46.97.8.0/21 maxlen: 21
                          46.97.0.0/16 maxlen: 16
                          46.97.120.0/21 maxlen: 21
                          46.97.128.0/24 maxlen: 24
                          46.97.128.0/21 maxlen: 21
                          46.97.136.0/21 maxlen: 21
                          46.97.144.0/21 maxlen: 21
                          46.97.152.0/24 maxlen: 24
                          46.97.152.0/21 maxlen: 21
                          46.97.153.0/24 maxlen: 24
                          46.97.156.0/24 maxlen: 24
                          46.97.155.0/24 maxlen: 24
                          46.97.160.0/21 maxlen: 21
                          46.97.168.0/21 maxlen: 21
                          46.97.72.0/21 maxlen: 21
                          46.97.80.0/21 maxlen: 21
                          46.97.88.0/21 maxlen: 21
                          46.97.96.0/21 maxlen: 21
                          46.97.104.0/21 maxlen: 21
                          46.97.104.0/24 maxlen: 24
                          46.97.112.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:d2:55:f5:66:a0:2f:b1:1a:2f:72:3a:24:8b:a7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
        Validity
            Not Before: Feb 10 10:15:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b33e8a9a776100c2e842e2cc7f5524b9479da5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:ec:2f:ae:cb:da:b9:50:31:0c:bf:04:b9:
                    d2:65:59:ac:aa:5e:3c:2a:98:e9:6c:50:fc:cb:a1:
                    0a:9d:22:ba:ab:1d:4a:9c:59:05:dd:cf:8b:53:b9:
                    ee:28:8d:a0:b4:52:b4:69:24:ae:ae:05:9e:39:94:
                    2b:b5:26:99:34:e9:8a:4e:4a:c6:e9:25:65:ca:c8:
                    1e:c3:b9:84:99:ab:0a:8f:7c:06:f7:e1:75:1d:c0:
                    ed:04:09:bd:f8:23:f0:26:ce:f8:7b:95:6d:28:dd:
                    e6:f1:4d:27:3a:0d:19:e7:e2:ef:05:7b:86:d2:e5:
                    f3:e9:32:d7:54:e0:70:3d:4c:ec:14:c8:3a:54:3b:
                    a4:79:c0:1d:da:d3:7d:e5:37:f3:9e:86:55:91:f5:
                    b3:07:68:db:79:4f:b7:42:48:0f:6f:50:53:d4:40:
                    52:ea:81:b8:fe:70:fe:a9:0a:bc:04:dc:03:a3:5b:
                    e6:c8:2b:7f:d3:36:41:b9:14:a6:e8:96:1f:90:33:
                    a3:40:18:88:3b:85:bf:7a:cd:46:32:39:89:95:13:
                    b1:5d:45:4d:ba:9f:4e:70:e6:b2:87:6e:d6:ae:da:
                    f9:46:02:39:9c:ee:d5:f8:a7:4a:c3:41:5f:0d:5a:
                    f9:34:66:7f:50:43:05:a0:52:42:dd:75:c5:af:58:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:E8:A9:A7:76:10:0C:2E:84:2E:2C:C7:F5:52:4B:94:79:DA:5F
            X509v3 Authority Key Identifier:
                keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/ezPoqad2EAwuhC4sx_VSS5R52l8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.97.0.0/16
                  81.12.128.0/17
                  136.255.0.0/16
                  165.78.0.0/16
                  213.233.64.0/18
                  217.10.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:12:3c:24:dd:d6:d6:84:c2:dd:ea:f0:30:9d:5e:79:35:
         db:c9:bb:d4:5f:b4:d4:60:80:dd:fc:e4:e5:5e:6c:bc:15:91:
         57:f2:67:b4:f6:8d:94:25:f0:4e:2e:11:1b:40:b7:33:06:a0:
         af:c4:7a:08:99:b4:59:12:ca:05:1c:eb:70:6b:5d:c7:c2:60:
         b8:f0:4c:92:8e:75:a0:81:81:f4:f9:04:5c:2e:e3:f3:f0:8b:
         27:41:0b:9e:d8:0d:ef:7c:47:64:c7:d9:d8:08:c4:98:2d:b9:
         b5:2d:3c:bc:31:b5:67:03:8b:ae:24:6e:15:67:e5:f6:b8:e8:
         86:70:22:12:df:db:4a:56:29:f8:c4:88:af:2c:d3:ad:30:7b:
         2b:01:2f:9f:33:ac:1c:b3:ef:cd:8a:2f:2a:b2:b3:88:ec:cd:
         0d:aa:5b:64:d3:cf:49:82:3e:61:ff:ff:e9:00:ec:c6:ba:9b:
         59:34:7b:41:d6:7f:ba:04:75:45:64:71:d2:be:80:af:1f:87:
         26:1d:87:5c:46:0c:ea:69:ff:46:e0:f9:6c:53:4b:ff:84:be:
         25:99:d2:2d:f4:37:b2:a3:8f:94:3e:22:80:c2:18:7a:ef:24:
         ee:62:33:69:48:45:ca:2e:28:0e:71:3d:be:de:6e:4c:2b:25:
         a5:d8:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:47 2024 by rpki-client on console-fra.rpki-client.org