Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa
File:                     o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa (raw, json)
Hash identifier:          p5yvHbZp84HLUaoSQjlHwi80wAdwNsix77oQW0gguQ0=
Subject key identifier:   A3:89:AA:64:B4:3F:65:CF:53:5D:FC:D7:4F:14:02:F1:B4:A7:FA:A0
Certificate issuer:       /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial:       018DD565649D756AF44670808A12119EFECB
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa
Signing time:             Fri 23 Feb 2024 09:56:48 +0000
ROA not before:           Fri 23 Feb 2024 09:56:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8851
IP address blocks:        62.164.128.0/18 maxlen: 18
                          62.164.131.0/24 maxlen: 24
                          62.164.132.0/22 maxlen: 22
                          62.164.136.0/22 maxlen: 22
                          62.164.140.0/24 maxlen: 24
                          62.164.144.0/21 maxlen: 21
                          62.164.145.0/24 maxlen: 24
                          62.164.146.0/24 maxlen: 24
                          62.164.147.0/24 maxlen: 24
                          62.164.152.0/24 maxlen: 24
                          62.164.168.0/24 maxlen: 24
                          62.164.169.0/24 maxlen: 24
                          62.164.171.0/24 maxlen: 24
                          62.164.176.0/24 maxlen: 24
                          62.164.178.0/24 maxlen: 24
                          62.164.179.0/24 maxlen: 24
                          62.164.180.0/24 maxlen: 24
                          62.164.183.0/24 maxlen: 24
                          62.164.184.0/24 maxlen: 24
                          62.164.186.0/24 maxlen: 24
                          62.164.187.0/24 maxlen: 24
                          62.164.188.0/24 maxlen: 24
                          62.164.189.0/24 maxlen: 24
                          62.164.190.0/24 maxlen: 24
                          62.164.191.0/24 maxlen: 24
                          62.164.192.0/21 maxlen: 21
                          62.164.196.0/24 maxlen: 24
                          62.164.199.0/24 maxlen: 24
                          62.169.150.0/24 maxlen: 24
                          62.169.154.0/24 maxlen: 24
                          86.54.6.0/24 maxlen: 24
                          86.54.7.0/24 maxlen: 24
                          86.54.10.0/24 maxlen: 24
                          86.54.27.0/24 maxlen: 24
                          86.54.43.0/24 maxlen: 24
                          86.54.44.0/24 maxlen: 24
                          86.54.45.0/24 maxlen: 24
                          86.54.80.0/24 maxlen: 24
                          86.54.87.0/24 maxlen: 24
                          86.54.96.0/24 maxlen: 24
                          86.54.97.0/24 maxlen: 24
                          86.54.98.0/24 maxlen: 24
                          86.54.100.0/23 maxlen: 23
                          86.54.102.0/24 maxlen: 24
                          86.54.103.0/24 maxlen: 24
                          86.54.104.0/24 maxlen: 24
                          86.54.106.0/24 maxlen: 24
                          86.54.108.0/24 maxlen: 24
                          86.54.109.0/24 maxlen: 24
                          86.54.111.0/24 maxlen: 24
                          86.54.112.0/24 maxlen: 24
                          86.54.113.0/24 maxlen: 24
                          86.54.114.0/24 maxlen: 24
                          86.54.115.0/24 maxlen: 24
                          86.54.116.0/24 maxlen: 24
                          86.54.117.0/24 maxlen: 24
                          86.54.118.0/24 maxlen: 24
                          86.54.119.0/24 maxlen: 24
                          86.54.120.0/24 maxlen: 24
                          86.54.121.0/24 maxlen: 24
                          86.54.122.0/24 maxlen: 24
                          86.54.124.0/24 maxlen: 24
                          86.54.127.0/24 maxlen: 24
                          86.54.128.0/24 maxlen: 24
                          86.54.129.0/24 maxlen: 24
                          86.54.130.0/24 maxlen: 24
                          86.54.131.0/24 maxlen: 24
                          86.54.134.0/24 maxlen: 24
                          86.54.142.0/24 maxlen: 24
                          86.54.143.0/24 maxlen: 24
                          86.54.148.0/24 maxlen: 24
                          86.54.149.0/24 maxlen: 24
                          86.54.150.0/24 maxlen: 24
                          86.54.161.0/24 maxlen: 24
                          86.54.162.0/24 maxlen: 24
                          86.54.164.0/24 maxlen: 24
                          86.54.173.0/24 maxlen: 24
                          86.54.174.0/24 maxlen: 24
                          86.54.177.0/24 maxlen: 24
                          86.54.178.0/24 maxlen: 24
                          86.54.180.0/24 maxlen: 24
                          86.54.183.0/24 maxlen: 24
                          86.54.185.0/24 maxlen: 24
                          86.54.200.0/24 maxlen: 24
                          86.54.210.0/24 maxlen: 24
                          86.54.212.0/24 maxlen: 24
                          86.54.224.0/24 maxlen: 24
                          86.54.230.0/24 maxlen: 24
                          86.54.234.0/24 maxlen: 24
                          86.54.248.0/24 maxlen: 24
                          193.108.169.0/24 maxlen: 24
                          194.164.2.0/24 maxlen: 24
                          194.164.12.0/24 maxlen: 24
                          194.164.38.0/24 maxlen: 24
                          194.164.80.0/22 maxlen: 22
                          194.164.85.0/24 maxlen: 24
                          194.164.86.0/24 maxlen: 24
                          194.164.97.0/24 maxlen: 24
                          194.164.100.0/24 maxlen: 24
                          194.164.104.0/24 maxlen: 24
                          194.164.106.0/24 maxlen: 24
                          194.164.114.0/24 maxlen: 24
                          194.164.140.0/22 maxlen: 22
                          194.164.144.0/24 maxlen: 24
                          194.164.181.0/24 maxlen: 24
                          194.164.223.0/24 maxlen: 24
                          194.164.231.0/24 maxlen: 24
                          194.164.232.0/24 maxlen: 24
                          194.164.238.0/24 maxlen: 24
                          194.164.241.0/24 maxlen: 24
                          194.164.242.0/23 maxlen: 23
                          194.164.247.0/24 maxlen: 24
                          195.26.228.0/24 maxlen: 24
                          195.26.236.0/24 maxlen: 24
                          195.184.228.0/23 maxlen: 23
                          195.184.236.0/24 maxlen: 24
                          195.184.245.0/24 maxlen: 24
                          195.200.0.0/19 maxlen: 19
                          195.200.22.0/24 maxlen: 24
                          195.200.27.0/24 maxlen: 24
                          212.32.28.0/24 maxlen: 24
                          212.32.42.0/24 maxlen: 24
                          212.32.44.0/24 maxlen: 24
                          212.32.55.0/24 maxlen: 24
                          212.32.66.0/24 maxlen: 24
                          212.47.80.0/23 maxlen: 23
                          212.47.84.0/24 maxlen: 24
                          212.56.57.0/24 maxlen: 24
                          213.254.171.0/24 maxlen: 24
                          213.254.178.0/24 maxlen: 24
                          213.254.185.0/24 maxlen: 24
                          217.154.12.0/24 maxlen: 24
                          217.154.25.0/24 maxlen: 24
                          217.154.28.0/24 maxlen: 24
                          217.154.30.0/24 maxlen: 24
                          217.154.31.0/24 maxlen: 24
                          217.154.39.0/24 maxlen: 24
                          217.154.46.0/24 maxlen: 24
                          217.154.49.0/24 maxlen: 24
                          217.154.72.0/23 maxlen: 23
                          217.154.90.0/24 maxlen: 24
                          217.154.96.0/24 maxlen: 24
                          217.154.103.0/24 maxlen: 24
                          217.154.104.0/24 maxlen: 24
                          217.154.109.0/24 maxlen: 24
                          217.154.110.0/23 maxlen: 23
                          217.154.122.0/23 maxlen: 23
                          217.154.127.0/24 maxlen: 24
                          217.154.131.0/24 maxlen: 24
                          217.154.132.0/22 maxlen: 22
                          217.154.137.0/24 maxlen: 24
                          217.154.138.0/24 maxlen: 24
                          217.154.141.0/24 maxlen: 24
                          217.154.151.0/24 maxlen: 24
                          217.154.157.0/24 maxlen: 24
                          217.154.158.0/24 maxlen: 24
                          217.154.176.0/24 maxlen: 24
                          217.154.187.0/24 maxlen: 24
                          217.154.209.0/24 maxlen: 24
                          217.154.219.0/24 maxlen: 24
                          217.154.221.0/24 maxlen: 24
                          217.154.230.0/24 maxlen: 24
                          217.154.236.0/24 maxlen: 24
                          217.154.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 09:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d5:65:64:9d:75:6a:f4:46:70:80:8a:12:11:9e:fe:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
        Validity
            Not Before: Feb 23 09:56:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a389aa64b43f65cf535dfcd74f1402f1b4a7faa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:1d:19:44:a5:a1:c3:8c:45:0c:76:46:4d:
                    db:14:0b:b3:1b:6e:07:10:77:25:ad:f4:59:08:a1:
                    d2:5c:e8:c1:58:3c:ca:b6:15:be:1e:75:12:07:17:
                    fa:04:78:dd:9c:89:4b:fb:54:90:56:e8:d6:7d:51:
                    fd:f9:cd:80:78:cd:30:c5:f7:5c:fd:a3:c8:88:0a:
                    91:9f:f6:ed:f1:3f:a8:0c:40:b9:24:d4:b8:f4:b2:
                    3e:c8:05:b8:a2:63:35:e5:21:5f:c2:b7:3c:32:c0:
                    e7:4d:5f:f8:ce:94:79:4a:20:a4:96:40:17:95:c3:
                    7e:e8:27:76:f4:fd:6b:d0:ff:0b:8e:a0:4e:d3:b8:
                    bf:98:13:09:61:a1:a0:bd:02:23:84:03:38:c1:a6:
                    0e:db:6f:c6:71:19:7b:2d:e3:b6:10:32:93:d1:76:
                    2e:16:85:70:d3:50:bc:1b:28:a7:21:56:56:ae:0c:
                    bd:b8:26:77:4b:d0:cd:7e:51:1b:39:57:59:6f:52:
                    64:49:95:fe:0c:ec:8d:34:4e:5e:96:5c:d4:77:4c:
                    eb:e8:68:30:01:40:de:19:ab:3e:6c:89:45:cf:2e:
                    1d:15:91:70:de:c7:38:4b:a6:96:c8:bc:f8:9e:5a:
                    ea:00:6e:c2:6c:bd:fb:fe:31:04:e0:cb:a9:8f:97:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:89:AA:64:B4:3F:65:CF:53:5D:FC:D7:4F:14:02:F1:B4:A7:FA:A0
            X509v3 Authority Key Identifier:
                keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.164.128.0-62.164.199.255
                  62.169.150.0/24
                  62.169.154.0/24
                  86.54.6.0/23
                  86.54.10.0/24
                  86.54.27.0/24
                  86.54.43.0-86.54.45.255
                  86.54.80.0/24
                  86.54.87.0/24
                  86.54.96.0-86.54.98.255
                  86.54.100.0-86.54.104.255
                  86.54.106.0/24
                  86.54.108.0/23
                  86.54.111.0-86.54.122.255
                  86.54.124.0/24
                  86.54.127.0-86.54.131.255
                  86.54.134.0/24
                  86.54.142.0/23
                  86.54.148.0-86.54.150.255
                  86.54.161.0-86.54.162.255
                  86.54.164.0/24
                  86.54.173.0-86.54.174.255
                  86.54.177.0-86.54.178.255
                  86.54.180.0/24
                  86.54.183.0/24
                  86.54.185.0/24
                  86.54.200.0/24
                  86.54.210.0/24
                  86.54.212.0/24
                  86.54.224.0/24
                  86.54.230.0/24
                  86.54.234.0/24
                  86.54.248.0/24
                  193.108.169.0/24
                  194.164.2.0/24
                  194.164.12.0/24
                  194.164.38.0/24
                  194.164.80.0/22
                  194.164.85.0-194.164.86.255
                  194.164.97.0/24
                  194.164.100.0/24
                  194.164.104.0/24
                  194.164.106.0/24
                  194.164.114.0/24
                  194.164.140.0-194.164.144.255
                  194.164.181.0/24
                  194.164.223.0/24
                  194.164.231.0-194.164.232.255
                  194.164.238.0/24
                  194.164.241.0-194.164.243.255
                  194.164.247.0/24
                  195.26.228.0/24
                  195.26.236.0/24
                  195.184.228.0/23
                  195.184.236.0/24
                  195.184.245.0/24
                  195.200.0.0/19
                  212.32.28.0/24
                  212.32.42.0/24
                  212.32.44.0/24
                  212.32.55.0/24
                  212.32.66.0/24
                  212.47.80.0/23
                  212.47.84.0/24
                  212.56.57.0/24
                  213.254.171.0/24
                  213.254.178.0/24
                  213.254.185.0/24
                  217.154.12.0/24
                  217.154.25.0/24
                  217.154.28.0/24
                  217.154.30.0/23
                  217.154.39.0/24
                  217.154.46.0/24
                  217.154.49.0/24
                  217.154.72.0/23
                  217.154.90.0/24
                  217.154.96.0/24
                  217.154.103.0-217.154.104.255
                  217.154.109.0-217.154.111.255
                  217.154.122.0/23
                  217.154.127.0/24
                  217.154.131.0-217.154.135.255
                  217.154.137.0-217.154.138.255
                  217.154.141.0/24
                  217.154.151.0/24
                  217.154.157.0-217.154.158.255
                  217.154.176.0/24
                  217.154.187.0/24
                  217.154.209.0/24
                  217.154.219.0/24
                  217.154.221.0/24
                  217.154.230.0/24
                  217.154.236.0/24
                  217.154.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:80:9c:51:1b:4e:e8:5f:8e:4b:8c:64:33:58:95:2d:bd:
         cb:bb:01:93:52:5e:82:07:54:c6:30:e5:98:90:1e:76:52:22:
         7e:8e:4e:8f:f3:8b:84:e2:48:fd:6c:d2:46:09:01:d9:1d:30:
         b3:2b:b7:c9:ab:35:c0:c4:40:fc:74:4f:2e:ed:6c:7f:02:39:
         8f:57:c1:4e:fe:d7:16:6e:ab:26:75:b6:f3:23:9f:18:37:9f:
         e5:10:89:e5:05:f1:80:fa:42:f4:9e:aa:e7:6f:90:8b:3d:bc:
         63:ae:d2:56:72:c3:e4:5e:5d:11:67:36:ee:ab:c4:27:67:71:
         36:0c:73:90:cb:2b:73:ff:08:27:a3:f4:57:3f:b5:34:7f:71:
         87:40:46:09:19:47:e7:da:5e:0a:69:da:c1:93:2c:37:e0:c1:
         e6:71:19:68:6c:45:e2:b3:13:f5:69:67:2f:17:f2:89:9f:37:
         f9:4e:0e:29:4b:3d:ea:70:4e:0a:4d:e8:91:4a:cd:7c:38:1d:
         95:50:29:56:c2:f3:87:be:92:c7:70:33:75:6b:14:56:ff:1d:
         1e:b1:84:16:ca:39:91:98:ce:57:ec:cf:a9:a6:e3:37:83:8f:
         82:37:d3:58:bc:0c:d7:a5:a8:02:bf:a0:12:56:f3:cc:27:17:
         09:5b:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 13:19:39 2024 by rpki-client on console-ams.rpki-client.org