Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/KsQSIp78TXhtLeEh8G8BPe6WC8M.roa
File:                     KsQSIp78TXhtLeEh8G8BPe6WC8M.roa (raw, json)
Hash identifier:          IVKIva5f5ixpPqc8v+raE6nEeNWRlp6JsPdniY8MNOQ=
Subject key identifier:   2A:C4:12:22:9E:FC:4D:78:6D:2D:E1:21:F0:6F:01:3D:EE:96:0B:C3
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       0187CC0A04EEE42ACF4EA01DF98AB7DAA716
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/KsQSIp78TXhtLeEh8G8BPe6WC8M.roa
Signing time:             Sat 29 Apr 2023 08:03:41 +0000
ROA not before:           Sat 29 Apr 2023 08:03:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54825
IP address blocks:        93.187.218.0/23 maxlen: 23
                          93.187.216.0/23 maxlen: 23
                          145.40.64.0/23 maxlen: 23
                          145.40.68.0/24 maxlen: 24
                          145.40.69.0/24 maxlen: 24
                          145.40.67.0/24 maxlen: 24
                          145.40.66.0/24 maxlen: 24
                          145.40.70.0/23 maxlen: 23
                          145.40.78.0/24 maxlen: 24
                          145.40.75.0/24 maxlen: 24
                          145.40.74.0/23 maxlen: 23
                          145.40.76.0/23 maxlen: 23
                          145.40.72.0/24 maxlen: 24
                          145.40.73.0/24 maxlen: 24
                          145.40.84.0/23 maxlen: 23
                          145.40.82.0/23 maxlen: 23
                          145.40.79.0/24 maxlen: 24
                          145.40.80.0/23 maxlen: 23
                          145.40.91.0/24 maxlen: 24
                          145.40.89.0/24 maxlen: 24
                          145.40.90.0/24 maxlen: 24
                          145.40.88.0/24 maxlen: 24
                          145.40.86.0/23 maxlen: 23
                          145.40.98.0/23 maxlen: 23
                          145.40.96.0/23 maxlen: 23
                          145.40.92.0/22 maxlen: 22
                          145.40.103.0/24 maxlen: 24
                          145.40.102.0/23 maxlen: 23
                          145.40.101.0/24 maxlen: 24
                          145.40.104.0/22 maxlen: 22
                          145.40.102.0/24 maxlen: 24
                          145.40.100.0/24 maxlen: 24
                          45.11.244.0/23 maxlen: 23
                          136.144.56.0/23 maxlen: 23
                          136.144.58.0/23 maxlen: 23
                          136.144.54.0/23 maxlen: 23
                          136.144.52.0/23 maxlen: 23
                          136.144.60.0/23 maxlen: 23
                          136.144.62.0/23 maxlen: 23
                          136.144.50.0/23 maxlen: 23
                          136.144.48.0/23 maxlen: 23
                          139.178.80.0/21 maxlen: 21
                          139.178.88.0/22 maxlen: 22
                          139.178.94.0/23 maxlen: 23
                          139.178.92.0/23 maxlen: 23
                          139.178.64.0/22 maxlen: 22
                          139.178.68.0/22 maxlen: 22
                          139.178.76.0/23 maxlen: 23
                          139.178.76.0/22 maxlen: 22
                          139.178.78.0/23 maxlen: 23
                          139.178.74.0/23 maxlen: 23
                          139.178.72.0/23 maxlen: 23
                          139.178.72.0/22 maxlen: 22
                          147.75.206.0/24 maxlen: 24
                          147.28.162.0/23 maxlen: 23
                          147.28.164.0/23 maxlen: 23
                          147.75.204.0/23 maxlen: 23
                          147.28.160.0/23 maxlen: 23
                          147.75.200.0/22 maxlen: 22
                          147.28.170.0/23 maxlen: 23
                          147.28.172.0/23 maxlen: 23
                          147.28.166.0/23 maxlen: 23
                          147.28.168.0/23 maxlen: 23
                          147.75.207.0/24 maxlen: 24
                          147.28.176.0/23 maxlen: 23
                          147.28.178.0/23 maxlen: 23
                          147.28.174.0/23 maxlen: 23
                          147.28.184.0/23 maxlen: 23
                          147.28.186.0/23 maxlen: 23
                          147.28.180.0/23 maxlen: 23
                          147.28.182.0/23 maxlen: 23
                          147.28.190.0/23 maxlen: 23
                          147.28.192.0/22 maxlen: 22
                          147.28.188.0/24 maxlen: 24
                          147.28.189.0/24 maxlen: 24
                          147.28.199.0/24 maxlen: 24
                          147.28.198.0/24 maxlen: 24
                          147.28.196.0/23 maxlen: 23
                          147.75.43.0/24 maxlen: 24
                          147.75.44.0/24 maxlen: 24
                          147.75.40.0/23 maxlen: 23
                          147.75.42.0/24 maxlen: 24
                          147.75.51.0/24 maxlen: 24
                          147.75.50.0/23 maxlen: 23
                          147.75.50.0/24 maxlen: 24
                          147.75.48.0/24 maxlen: 24
                          147.75.49.0/24 maxlen: 24
                          147.75.46.0/24 maxlen: 24
                          147.75.47.0/24 maxlen: 24
                          147.75.45.0/24 maxlen: 24
                          147.75.58.0/24 maxlen: 24
                          147.75.57.0/24 maxlen: 24
                          147.75.55.0/24 maxlen: 24
                          147.75.56.0/24 maxlen: 24
                          147.75.53.0/24 maxlen: 24
                          147.75.54.0/24 maxlen: 24
                          147.75.52.0/24 maxlen: 24
                          147.75.64.0/22 maxlen: 22
                          147.75.62.0/24 maxlen: 24
                          147.75.63.0/24 maxlen: 24
                          147.75.60.0/24 maxlen: 24
                          147.75.61.0/24 maxlen: 24
                          147.75.59.0/24 maxlen: 24
                          147.75.68.0/22 maxlen: 22
                          147.75.78.0/24 maxlen: 24
                          147.75.76.0/24 maxlen: 24
                          147.75.77.0/24 maxlen: 24
                          147.75.74.0/24 maxlen: 24
                          147.75.75.0/24 maxlen: 24
                          147.75.72.0/24 maxlen: 24
                          147.75.73.0/24 maxlen: 24
                          147.75.72.0/21 maxlen: 21
                          86.109.4.0/24 maxlen: 24
                          86.109.4.0/23 maxlen: 23
                          147.75.84.0/23 maxlen: 23
                          86.109.2.0/24 maxlen: 24
                          86.109.3.0/24 maxlen: 24
                          86.109.0.0/24 maxlen: 24
                          86.109.2.0/23 maxlen: 23
                          86.109.1.0/24 maxlen: 24
                          147.75.79.0/24 maxlen: 24
                          147.75.80.0/22 maxlen: 22
                          86.109.9.0/24 maxlen: 24
                          147.75.88.0/22 maxlen: 22
                          86.109.10.0/23 maxlen: 23
                          86.109.7.0/24 maxlen: 24
                          86.109.8.0/24 maxlen: 24
                          86.109.5.0/24 maxlen: 24
                          86.109.6.0/24 maxlen: 24
                          147.75.86.0/23 maxlen: 23
                          147.75.36.0/22 maxlen: 22
                          147.75.34.0/24 maxlen: 24
                          147.75.35.0/24 maxlen: 24
                          147.75.32.0/23 maxlen: 23
                          147.28.132.0/22 maxlen: 22
                          147.28.131.0/24 maxlen: 24
                          147.28.128.0/23 maxlen: 23
                          147.28.136.0/23 maxlen: 23
                          145.40.79.0/26 maxlen: 26
                          147.28.138.0/23 maxlen: 23
                          147.28.142.0/23 maxlen: 23
                          147.28.141.0/24 maxlen: 24
                          147.28.144.0/23 maxlen: 23
                          147.75.192.0/21 maxlen: 21
                          147.75.192.0/24 maxlen: 24
                          147.28.152.0/24 maxlen: 24
                          147.28.148.0/23 maxlen: 23
                          147.28.150.0/23 maxlen: 23
                          147.28.146.0/23 maxlen: 23
                          147.75.199.0/24 maxlen: 24
                          147.75.197.0/24 maxlen: 24
                          147.28.156.0/23 maxlen: 23
                          147.75.198.0/24 maxlen: 24
                          147.28.158.0/23 maxlen: 23
                          147.75.196.0/24 maxlen: 24
                          147.28.154.0/23 maxlen: 23
                          147.28.153.0/24 maxlen: 24
                          147.75.193.0/24 maxlen: 24
                          147.75.194.0/23 maxlen: 23
                          147.75.98.0/24 maxlen: 24
                          147.75.96.0/22 maxlen: 22
                          147.75.97.0/24 maxlen: 24
                          86.109.14.0/23 maxlen: 23
                          147.75.96.0/24 maxlen: 24
                          86.109.12.0/24 maxlen: 24
                          147.75.92.0/22 maxlen: 22
                          86.109.13.0/24 maxlen: 24
                          147.75.104.0/22 maxlen: 22
                          147.75.100.0/22 maxlen: 22
                          147.75.99.0/24 maxlen: 24
                          147.75.110.0/23 maxlen: 23
                          147.75.108.0/23 maxlen: 23
                          145.40.112.0/22 maxlen: 22
                          145.40.108.0/22 maxlen: 22
                          145.40.116.0/22 maxlen: 22
                          145.40.124.0/22 maxlen: 22
                          145.40.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:cc:0a:04:ee:e4:2a:cf:4e:a0:1d:f9:8a:b7:da:a7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Apr 29 08:03:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2ac412229efc4d786d2de121f06f013dee960bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:3a:04:c7:28:0c:eb:f8:3c:d1:f4:18:96:
                    49:ee:9a:66:74:34:d4:a7:ff:f3:6a:87:55:f0:a9:
                    1f:0f:96:cd:cd:3c:1c:3c:a5:7b:52:97:99:53:5f:
                    cc:32:ae:b2:f5:d7:14:e4:5e:38:38:c7:86:fe:45:
                    bd:be:3b:20:60:ae:f6:13:82:7d:44:84:ca:47:46:
                    7b:3d:b0:db:2e:71:71:56:ac:73:00:18:f9:a4:7f:
                    cb:bb:2a:dc:9a:49:94:f5:ee:16:b0:0b:ba:1e:62:
                    a0:24:8d:c6:63:09:cd:4e:a0:1f:bf:90:bb:b9:63:
                    78:15:3d:91:75:60:f5:92:8c:c2:f8:b3:0e:ce:d9:
                    1a:96:05:79:d6:bb:c1:c9:b8:7f:6a:04:8e:43:a0:
                    6c:ff:87:f9:4f:1a:34:cb:a5:d8:48:d0:6d:ba:0d:
                    27:63:a3:61:e3:2b:4f:a0:60:de:17:01:60:ea:62:
                    26:dd:6f:58:22:6d:ae:9f:21:f2:fe:bc:c7:da:06:
                    5a:49:43:ee:b5:0d:13:ff:35:87:79:1d:18:2b:f5:
                    5e:a4:e0:f5:89:54:37:7e:7a:4f:0f:79:da:d9:2e:
                    62:d6:06:23:cd:36:31:62:51:54:a9:50:c0:3c:35:
                    44:ef:da:c3:3c:cf:25:a5:18:84:c2:34:28:2f:b3:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:12:22:9E:FC:4D:78:6D:2D:E1:21:F0:6F:01:3D:EE:96:0B:C3
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/KsQSIp78TXhtLeEh8G8BPe6WC8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.244.0/23
                  86.109.0.0/20
                  93.187.216.0/22
                  136.144.48.0/20
                  139.178.64.0/19
                  145.40.64.0/18
                  147.28.128.0/23
                  147.28.131.0-147.28.139.255
                  147.28.141.0-147.28.199.255
                  147.75.32.0-147.75.111.255
                  147.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:3d:26:75:b3:3c:9b:54:63:70:b1:23:2a:3f:a4:66:eb:
         4a:03:b1:a0:35:0e:59:d6:89:33:0c:94:ac:39:cb:f6:d7:08:
         39:79:17:60:16:79:85:24:da:fa:cf:40:e6:81:75:b8:24:38:
         96:24:47:f3:17:dd:00:1f:a5:ee:eb:f8:fd:2d:73:a4:ce:49:
         86:6d:97:70:8e:81:45:e1:cb:ae:6f:12:8d:52:96:e4:1e:bc:
         7a:8e:e4:50:00:36:90:aa:4f:0e:26:55:f1:da:cf:e3:4c:45:
         ab:d3:85:0d:c3:e3:2b:79:25:7d:2c:37:b0:93:ab:49:1e:dd:
         4b:56:37:bf:f8:d8:be:96:dd:6b:96:2c:a0:27:3b:3f:28:0e:
         d4:10:24:06:51:88:c1:54:68:a3:9a:ac:a5:5c:da:7e:b0:fb:
         3d:b9:27:5d:b6:99:b8:e7:4e:e6:5b:e3:9d:4b:85:e8:8d:2c:
         6e:11:28:0f:0f:27:d8:8d:92:05:e0:a6:7c:82:8b:75:a2:94:
         fa:35:af:74:9d:21:9e:b8:c6:32:02:7e:5f:7f:ce:59:ba:46:
         15:77:fd:a2:3f:af:00:2e:37:3c:f7:11:f5:17:fb:41:a9:19:
         7f:d6:73:74:75:bd:2a:f9:b5:d4:c3:fc:83:df:bb:40:30:f8:
         97:d1:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:59 2023 by rpki-client on console.sobornost.net