Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/aDkzMTui-2O2zbL4CydiW9tTBTc.roa
File:                     aDkzMTui-2O2zbL4CydiW9tTBTc.roa (raw, json)
Hash identifier:          MDF+S53mz5e8rUENHhYDdwOSwnvqr0lAI7WR8kfKK9I=
Subject key identifier:   68:39:33:31:3B:A2:FB:63:B6:CD:B2:F8:0B:27:62:5B:DB:53:05:37
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       018A87C8FAB4BA9E6DCE6317A79F01F7C309
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/aDkzMTui-2O2zbL4CydiW9tTBTc.roa
Signing time:             Tue 12 Sep 2023 05:06:50 +0000
ROA not before:           Tue 12 Sep 2023 05:06:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8895
IP address blocks:        212.26.37.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 24
                          212.26.38.0/24 maxlen: 25
                          212.26.41.0/24 maxlen: 24
                          212.26.40.0/24 maxlen: 24
                          212.26.39.0/24 maxlen: 25
                          212.26.44.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.46.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.51.0/24 maxlen: 24
                          212.26.50.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 24
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.8.0/24 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.82.0/24 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.96.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.97.0/24 maxlen: 24
                          212.138.104.0/24 maxlen: 25
                          212.138.108.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.127.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.130.0/24 maxlen: 24
                          212.138.41.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.42.0/24 maxlen: 25
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.190.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.153.0/24 maxlen: 24
                          212.138.157.0/24 maxlen: 24
                          212.138.166.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.162.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.172.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.177.0/24 maxlen: 24
                          212.138.183.0/24 maxlen: 25
                          212.138.181.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.0.0/16 maxlen: 16
                          91.229.52.0/22 maxlen: 22
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490::/48 maxlen: 48
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 07:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:c8:fa:b4:ba:9e:6d:ce:63:17:a7:9f:01:f7:c3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Sep 12 05:06:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=683933313ba2fb63b6cdb2f80b27625bdb530537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:f9:46:70:35:be:e5:60:c8:a6:78:91:61:
                    1c:50:83:12:cf:48:e2:d0:b0:04:7f:9e:81:2b:8e:
                    e8:06:08:d2:8c:bb:11:db:69:d3:f9:af:45:fd:4d:
                    b3:7d:05:2c:fb:ba:b5:2c:41:b6:2f:ff:3a:f1:ff:
                    8c:ef:fd:41:d1:b0:9c:86:2d:7a:7f:ae:da:d7:1e:
                    e6:d7:01:aa:b7:b2:94:a5:f7:87:ba:30:a4:c3:6d:
                    15:34:b8:70:d6:74:e9:a4:e4:c1:cf:34:0a:22:7a:
                    d6:32:18:08:f9:65:e8:7a:40:70:4e:e7:4e:c5:69:
                    3d:51:ac:19:81:5f:29:af:9e:63:9a:23:00:84:91:
                    6b:ce:bd:52:bf:e8:ea:33:8a:15:c7:17:99:0f:63:
                    9c:07:1a:bf:0d:e7:4f:5b:a3:7b:ee:b2:1d:30:29:
                    42:b4:e3:02:28:bf:06:af:76:1c:ac:90:f4:50:5a:
                    42:4f:cd:11:ed:e7:2d:97:3f:47:9e:79:ba:be:b3:
                    19:40:fe:62:f0:ac:5b:8f:71:77:2f:15:61:91:40:
                    1b:8d:68:04:93:1a:68:e9:af:93:5a:c8:55:9e:a9:
                    74:ac:43:08:44:21:8e:9a:af:d3:10:32:aa:72:72:
                    e1:ad:0f:df:58:f2:50:8b:7f:6a:e6:d0:e3:48:66:
                    7a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:39:33:31:3B:A2:FB:63:B6:CD:B2:F8:0B:27:62:5B:DB:53:05:37
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/aDkzMTui-2O2zbL4CydiW9tTBTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:8b:2e:7c:72:f3:2c:1a:5a:b3:7c:01:2e:71:ee:bb:82:
         2d:b5:6b:62:c5:b7:13:89:bb:9f:7e:6d:77:f8:fe:cb:b2:e4:
         66:65:17:22:bc:3f:bc:6e:19:04:c8:75:22:0b:c1:9d:53:04:
         29:89:53:ed:45:18:4b:e5:30:52:76:64:f3:79:e3:a3:aa:e7:
         d8:e4:58:f5:03:eb:3e:86:7f:17:4b:47:a8:a3:a4:42:8f:0a:
         27:39:b2:8f:14:46:05:49:3c:0a:e6:77:93:2a:65:dd:0b:ea:
         dd:ae:43:4b:2c:a5:76:a1:5d:76:0c:f0:04:df:82:63:d9:72:
         4f:f1:17:3e:ef:e0:f8:ae:de:d0:49:6e:92:a4:67:72:73:d4:
         60:7f:a1:ce:4f:46:e0:75:e4:7b:cc:97:bf:42:11:97:5d:c5:
         08:33:28:75:b7:dd:46:4c:53:9f:a2:8f:cd:4b:65:2d:f9:91:
         ef:f8:1a:3b:55:d6:b8:0d:a8:6d:09:a0:c7:88:f1:b5:25:19:
         56:b8:5e:37:e7:8b:3c:a0:2a:53:ba:4e:49:7c:e9:29:f8:ac:
         a1:4e:f0:90:5f:9d:dc:41:e2:3d:0f:a7:fa:e0:ee:b9:29:dc:
         de:08:e7:f8:06:76:2c:de:6c:9e:95:6e:08:f9:31:a7:f4:e3:
         a8:06:8e:8c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYqHyPq0up5tzmMXp58B98MJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjMwOTEyMDUwNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODM5MzMzMTNiYTJmYjYzYjZjZGIyZjgwYjI3NjI1YmRiNTMwNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWL5RnA1vuVgyKZ4kWEcUIMSz0ji
0LAEf56BK47oBgjSjLsR22nT+a9F/U2zfQUs+7q1LEG2L/868f+M7/1B0bCchi16
f67a1x7m1wGqt7KUpfeHujCkw20VNLhw1nTppOTBzzQKInrWMhgI+WXoekBwTudO
xWk9UawZgV8pr55jmiMAhJFrzr1Sv+jqM4oVxxeZD2OcBxq/DedPW6N77rIdMClC
tOMCKL8Gr3YcrJD0UFpCT80R7ectlz9Hnnm6vrMZQP5i8Kxbj3F3LxVhkUAbjWgE
kxpo6a+TWshVnql0rEMIRCGOmq/TEDKqcnLhrQ/fWPJQi39q5tDjSGZ6cwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGg5MzE7ovtjts2y+AsnYlvbUwU3MB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvYURrek1UdWktMk8yemJMNEN5ZGlXOXRUQlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQCW+U0AwQH
1BoAAwMA1IowDQQCAAIwBwMFACABFJAwDQYJKoZIhvcNAQELBQADggEBADqOiy58
cvMsGlqzfAEuce67gi21a2LFtxOJu59+bXf4/suy5GZlFyK8P7xuGQTIdSILwZ1T
BCmJU+1FGEvlMFJ2ZPN546Oq59jkWPUD6z6GfxdLR6ijpEKPCic5so8URgVJPArm
d5MqZd0L6t2uQ0sspXahXXYM8ATfgmPZck/xFz7v4Piu3tBJbpKkZ3Jz1GB/oc5P
RuB15HvMl79CEZddxQgzKHW33UZMU5+ij81LZS35ke/4GjtV1rgNqG0JoMeI8bUl
GVa4XjfnizygKlO6Tkl86Sn4rKFO8JBfndxB4j0Pp/rg7rkp3N4I5/gGdizebJ6V
bgj5Maf046gGjow=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org