Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/wsy9zv3v5aUSgLhFvi2c0JFfihc.roa
File:                     wsy9zv3v5aUSgLhFvi2c0JFfihc.roa (raw, json)
Hash identifier:          c2+msxCgvKeDIzG92nYCoipnac9Z/upKjwC6woCTKYs=
Subject key identifier:   C2:CC:BD:CE:FD:EF:E5:A5:12:80:B8:45:BE:2D:9C:D0:91:5F:8A:17
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       018CA5D96A4D7EC7066A68EF3F4813699EA7
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/wsy9zv3v5aUSgLhFvi2c0JFfihc.roa
Signing time:             Tue 26 Dec 2023 11:18:58 +0000
ROA not before:           Tue 26 Dec 2023 11:18:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        212.26.37.0/24 maxlen: 24
                          212.26.38.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.39.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.46.0/24 maxlen: 24
                          212.26.51.0/24 maxlen: 24
                          212.26.50.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.72.0/24 maxlen: 24
                          212.26.76.0/24 maxlen: 24
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 24
                          45.94.14.0/24 maxlen: 24
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/24 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.84.0/23 maxlen: 24
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.96.0/24 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 25
                          212.138.108.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.126.0/24 maxlen: 25
                          212.138.130.0/24 maxlen: 24
                          212.138.41.0/24 maxlen: 24
                          212.138.43.0/24 maxlen: 24
                          212.138.42.0/24 maxlen: 25
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.190.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.192.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.153.0/24 maxlen: 24
                          212.138.157.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.166.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.170.0/24 maxlen: 25
                          212.138.168.0/24 maxlen: 24
                          212.138.172.0/24 maxlen: 24
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.181.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.180.0/24 maxlen: 25
                          212.138.0.0/16 maxlen: 16
                          91.229.52.0/22 maxlen: 22
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1497:2::/48 maxlen: 48
                          2001:1490::/48 maxlen: 48
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 27 Dec 2023 04:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a5:d9:6a:4d:7e:c7:06:6a:68:ef:3f:48:13:69:9e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Dec 26 11:18:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2ccbdcefdefe5a51280b845be2d9cd0915f8a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:50:2d:e2:e3:5e:6a:68:73:e6:a4:68:16:
                    79:3e:48:72:4b:b6:c6:90:54:68:3c:6b:8a:1c:ec:
                    a9:d8:c2:6d:d6:06:6c:37:44:87:05:94:13:49:9b:
                    59:8f:3e:8f:1e:24:64:df:32:ec:9d:b3:42:f7:f6:
                    2e:f7:2b:6b:b0:43:c5:4b:37:3a:8b:43:b3:f7:c7:
                    de:96:dc:b7:41:f0:a3:14:0e:68:55:5e:96:83:62:
                    cd:77:e1:6d:19:ab:f1:0f:7e:55:5f:49:93:e7:06:
                    15:e9:47:c8:2d:b9:51:ef:ff:04:7a:42:1d:7c:fe:
                    44:8e:4b:d1:56:af:85:a1:c8:25:1d:59:90:8f:3c:
                    93:5a:ef:02:68:83:88:80:7c:40:6b:c4:31:ce:0c:
                    2d:87:62:b3:d7:8c:00:99:2d:aa:a1:e4:69:e5:23:
                    67:e9:e5:a5:ca:b5:17:50:43:68:c4:8f:81:d6:c6:
                    99:72:dd:50:e4:df:0e:62:2c:93:9d:42:1b:6a:86:
                    a9:31:e9:78:cd:a4:b6:78:96:0d:83:3b:44:75:d8:
                    0e:9b:ab:c5:5d:15:fd:d1:29:10:c1:f6:ec:12:b7:
                    a9:7a:f7:21:20:22:d3:6e:32:8d:a8:6f:0a:6b:6d:
                    89:c7:ef:a6:64:9f:5f:33:79:6f:f6:ff:e0:7a:ab:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:BD:CE:FD:EF:E5:A5:12:80:B8:45:BE:2D:9C:D0:91:5F:8A:17
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/wsy9zv3v5aUSgLhFvi2c0JFfihc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.14.0/24
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32
                  2001:1497:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:06:b0:92:a0:be:60:bc:d7:db:ee:90:c4:44:ba:a1:a4:
         5e:69:64:b2:da:30:3b:c8:84:df:5f:c4:19:48:b9:d9:c1:0c:
         05:fe:18:c8:b6:f0:a2:58:25:e8:80:50:92:c5:11:55:c0:28:
         db:f8:e4:2b:98:9d:2c:7e:e7:b3:04:ca:c4:1a:8f:ba:79:ae:
         e2:bc:4e:1b:cd:dc:71:a6:94:7d:62:dd:61:da:c1:81:b2:d1:
         ff:6f:9f:cd:8b:91:a1:1d:0d:a8:40:15:fd:83:fd:1a:5e:90:
         e3:a0:55:15:ac:3b:32:4c:fc:a1:8d:12:6f:ab:b1:0c:4e:8d:
         72:e0:85:ef:07:d4:2e:b5:39:23:a7:2c:b4:4b:99:56:b1:05:
         de:d9:0a:a3:9e:53:fe:9d:44:a9:12:5b:0f:4b:55:ae:6b:f7:
         ac:83:53:5a:91:af:fa:de:41:66:4a:66:8b:a5:d1:e7:c4:14:
         6a:14:e7:67:28:45:f2:5e:d1:61:e0:26:7e:08:8b:37:21:67:
         46:1a:37:62:80:f5:0d:49:12:d5:c8:da:b4:cb:b8:25:e9:da:
         fe:e0:9f:01:e5:ca:f1:07:bd:97:8c:d4:91:c5:74:0c:a1:70:
         23:35:95:ab:52:23:6a:53:86:85:8f:b1:62:41:8d:33:d1:2a:
         20:c4:f0:58
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYyl2WpNfscGamjvP0gTaZ6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjMxMjI2MTExODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmNjYmRjZWZkZWZlNWE1MTI4MGI4NDViZTJkOWNkMDkxNWY4YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwpQLeLjXmpoc+akaBZ5PkhyS7bG
kFRoPGuKHOyp2MJt1gZsN0SHBZQTSZtZjz6PHiRk3zLsnbNC9/Yu9ytrsEPFSzc6
i0Oz98felty3QfCjFA5oVV6Wg2LNd+FtGavxD35VX0mT5wYV6UfILblR7/8EekId
fP5EjkvRVq+FocglHVmQjzyTWu8CaIOIgHxAa8Qxzgwth2Kz14wAmS2qoeRp5SNn
6eWlyrUXUENoxI+B1saZct1Q5N8OYiyTnUIbaoapMel4zaS2eJYNgztEddgOm6vF
XRX90SkQwfbsErepevchICLTbjKNqG8Ka22Jx++mZJ9fM3lv9v/geqta+wIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFMLMvc797+WlEoC4Rb4tnNCRX4oXMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvd3N5OXp2M3Y1YVVTZ0xoRnZpMmMwSkZmaWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAdBAIAATAXAwQALV4OAwQC
W+U0AwQH1BoAAwMA1IowFgQCAAIwEAMFACABFJADBwAgARSXAAIwDQYJKoZIhvcN
AQELBQADggEBAE5cBrCSoL5gvNfb7pDERLqhpF5pZLLaMDvIhN9fxBlIudnBDAX+
GMi28KJYJeiAUJLFEVXAKNv45CuYnSx+57MEysQaj7p5ruK8ThvN3HGmlH1i3WHa
wYGy0f9vn82LkaEdDahAFf2D/RpekOOgVRWsOzJM/KGNEm+rsQxOjXLghe8H1C61
OSOnLLRLmVaxBd7ZCqOeU/6dRKkSWw9LVa5r96yDU1qRr/reQWZKZoul0efEFGoU
52coRfJe0WHgJn4IizchZ0YaN2KA9Q1JEtXI2rTLuCXp2v7gnwHlyvEHvZeM1JHF
dAyhcCM1latSI2pThoWPsWJBjTPRKiDE8Fg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org