Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/aU_G8ZlXr_oiYLogQR83-6NkPbE.roa
File:                     aU_G8ZlXr_oiYLogQR83-6NkPbE.roa (raw, json)
Hash identifier:          8VeyHvllMAtqBfINXDBegpFS5fEVKklVcagcfiVbqOM=
Subject key identifier:   69:4F:C6:F1:99:57:AF:FA:22:60:BA:20:41:1F:37:FB:A3:64:3D:B1
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       0186A43912FED1F2B2BFDEB72F89E2408F76
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/aU_G8ZlXr_oiYLogQR83-6NkPbE.roa
Signing time:             Thu 02 Mar 2023 21:27:29 +0000
ROA not before:           Thu 02 Mar 2023 21:27:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54825
IP address blocks:        93.187.218.0/23 maxlen: 23
                          93.187.216.0/23 maxlen: 23
                          145.40.64.0/23 maxlen: 23
                          145.40.68.0/24 maxlen: 24
                          145.40.69.0/24 maxlen: 24
                          145.40.67.0/24 maxlen: 24
                          145.40.66.0/24 maxlen: 24
                          145.40.70.0/23 maxlen: 23
                          145.40.78.0/24 maxlen: 24
                          145.40.75.0/24 maxlen: 24
                          145.40.74.0/23 maxlen: 23
                          145.40.76.0/23 maxlen: 23
                          145.40.72.0/24 maxlen: 24
                          145.40.73.0/24 maxlen: 24
                          145.40.84.0/23 maxlen: 23
                          145.40.82.0/23 maxlen: 23
                          145.40.79.0/24 maxlen: 24
                          145.40.80.0/23 maxlen: 23
                          145.40.91.0/24 maxlen: 24
                          145.40.89.0/24 maxlen: 24
                          145.40.90.0/24 maxlen: 24
                          145.40.88.0/24 maxlen: 24
                          145.40.86.0/23 maxlen: 23
                          145.40.98.0/23 maxlen: 23
                          145.40.96.0/23 maxlen: 23
                          145.40.92.0/22 maxlen: 22
                          145.40.103.0/24 maxlen: 24
                          145.40.102.0/23 maxlen: 23
                          145.40.101.0/24 maxlen: 24
                          145.40.104.0/22 maxlen: 22
                          145.40.102.0/24 maxlen: 24
                          145.40.100.0/24 maxlen: 24
                          45.11.244.0/23 maxlen: 23
                          136.144.56.0/23 maxlen: 23
                          136.144.58.0/23 maxlen: 23
                          136.144.54.0/23 maxlen: 23
                          136.144.52.0/23 maxlen: 23
                          136.144.60.0/23 maxlen: 23
                          136.144.62.0/23 maxlen: 23
                          136.144.50.0/23 maxlen: 23
                          136.144.48.0/23 maxlen: 23
                          139.178.80.0/21 maxlen: 21
                          139.178.88.0/22 maxlen: 22
                          139.178.94.0/23 maxlen: 23
                          139.178.92.0/23 maxlen: 23
                          139.178.64.0/22 maxlen: 22
                          139.178.68.0/22 maxlen: 22
                          139.178.76.0/23 maxlen: 23
                          139.178.76.0/22 maxlen: 22
                          139.178.78.0/23 maxlen: 23
                          139.178.74.0/23 maxlen: 23
                          139.178.72.0/23 maxlen: 23
                          139.178.72.0/22 maxlen: 22
                          147.75.206.0/24 maxlen: 24
                          147.28.162.0/23 maxlen: 23
                          147.28.164.0/23 maxlen: 23
                          147.75.204.0/23 maxlen: 23
                          147.28.160.0/23 maxlen: 23
                          147.75.200.0/22 maxlen: 22
                          147.28.170.0/23 maxlen: 23
                          147.28.172.0/23 maxlen: 23
                          147.28.166.0/23 maxlen: 23
                          147.28.168.0/23 maxlen: 23
                          147.75.207.0/24 maxlen: 24
                          147.28.176.0/23 maxlen: 23
                          147.28.178.0/23 maxlen: 23
                          147.28.174.0/23 maxlen: 23
                          147.28.184.0/23 maxlen: 23
                          147.28.186.0/23 maxlen: 23
                          147.28.180.0/23 maxlen: 23
                          147.28.182.0/23 maxlen: 23
                          147.28.190.0/23 maxlen: 23
                          147.28.192.0/22 maxlen: 22
                          147.28.188.0/24 maxlen: 24
                          147.75.43.0/24 maxlen: 24
                          147.75.44.0/24 maxlen: 24
                          147.75.40.0/23 maxlen: 23
                          147.75.42.0/24 maxlen: 24
                          147.75.51.0/24 maxlen: 24
                          147.75.50.0/23 maxlen: 23
                          147.75.50.0/24 maxlen: 24
                          147.75.48.0/24 maxlen: 24
                          147.75.49.0/24 maxlen: 24
                          147.75.46.0/24 maxlen: 24
                          147.75.47.0/24 maxlen: 24
                          147.75.45.0/24 maxlen: 24
                          147.75.58.0/24 maxlen: 24
                          147.75.57.0/24 maxlen: 24
                          147.75.55.0/24 maxlen: 24
                          147.75.56.0/24 maxlen: 24
                          147.75.53.0/24 maxlen: 24
                          147.75.54.0/24 maxlen: 24
                          147.75.52.0/24 maxlen: 24
                          147.75.64.0/22 maxlen: 22
                          147.75.62.0/24 maxlen: 24
                          147.75.63.0/24 maxlen: 24
                          147.75.60.0/24 maxlen: 24
                          147.75.61.0/24 maxlen: 24
                          147.75.59.0/24 maxlen: 24
                          147.75.68.0/22 maxlen: 22
                          147.75.78.0/24 maxlen: 24
                          147.75.76.0/24 maxlen: 24
                          147.75.77.0/24 maxlen: 24
                          147.75.74.0/24 maxlen: 24
                          147.75.75.0/24 maxlen: 24
                          147.75.72.0/24 maxlen: 24
                          147.75.73.0/24 maxlen: 24
                          147.75.72.0/21 maxlen: 21
                          86.109.4.0/24 maxlen: 24
                          86.109.4.0/23 maxlen: 23
                          147.75.84.0/23 maxlen: 23
                          86.109.2.0/24 maxlen: 24
                          86.109.3.0/24 maxlen: 24
                          86.109.0.0/24 maxlen: 24
                          86.109.2.0/23 maxlen: 23
                          86.109.1.0/24 maxlen: 24
                          147.75.79.0/24 maxlen: 24
                          147.75.80.0/22 maxlen: 22
                          86.109.9.0/24 maxlen: 24
                          147.75.88.0/22 maxlen: 22
                          86.109.10.0/23 maxlen: 23
                          86.109.7.0/24 maxlen: 24
                          86.109.8.0/24 maxlen: 24
                          86.109.5.0/24 maxlen: 24
                          86.109.6.0/24 maxlen: 24
                          147.75.86.0/23 maxlen: 23
                          147.75.36.0/22 maxlen: 22
                          147.75.34.0/24 maxlen: 24
                          147.75.35.0/24 maxlen: 24
                          147.75.32.0/23 maxlen: 23
                          147.28.132.0/22 maxlen: 22
                          147.28.131.0/24 maxlen: 24
                          147.28.128.0/23 maxlen: 23
                          147.28.136.0/23 maxlen: 23
                          145.40.79.0/26 maxlen: 26
                          147.28.138.0/23 maxlen: 23
                          147.28.142.0/23 maxlen: 23
                          147.28.141.0/24 maxlen: 24
                          147.28.144.0/23 maxlen: 23
                          147.75.192.0/21 maxlen: 21
                          147.75.192.0/24 maxlen: 24
                          147.28.152.0/24 maxlen: 24
                          147.28.148.0/23 maxlen: 23
                          147.28.150.0/23 maxlen: 23
                          147.28.146.0/23 maxlen: 23
                          147.75.199.0/24 maxlen: 24
                          147.75.197.0/24 maxlen: 24
                          147.28.156.0/23 maxlen: 23
                          147.75.198.0/24 maxlen: 24
                          147.28.158.0/23 maxlen: 23
                          147.75.196.0/24 maxlen: 24
                          147.28.154.0/23 maxlen: 23
                          147.28.153.0/24 maxlen: 24
                          147.75.193.0/24 maxlen: 24
                          147.75.194.0/23 maxlen: 23
                          147.75.98.0/24 maxlen: 24
                          147.75.96.0/22 maxlen: 22
                          147.75.97.0/24 maxlen: 24
                          86.109.14.0/23 maxlen: 23
                          147.75.96.0/24 maxlen: 24
                          86.109.12.0/24 maxlen: 24
                          147.75.92.0/22 maxlen: 22
                          86.109.13.0/24 maxlen: 24
                          147.75.104.0/22 maxlen: 22
                          147.75.100.0/22 maxlen: 22
                          147.75.99.0/24 maxlen: 24
                          147.75.110.0/23 maxlen: 23
                          147.75.108.0/23 maxlen: 23
                          145.40.112.0/22 maxlen: 22
                          145.40.108.0/22 maxlen: 22
                          145.40.116.0/22 maxlen: 22
                          145.40.124.0/22 maxlen: 22
                          145.40.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a4:39:12:fe:d1:f2:b2:bf:de:b7:2f:89:e2:40:8f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Mar  2 21:27:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=694fc6f19957affa2260ba20411f37fba3643db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:96:22:d4:7d:dd:2f:43:6c:fe:15:02:f0:
                    33:fb:29:46:a2:eb:b1:87:82:ad:45:91:5e:a9:8b:
                    57:eb:5f:92:0b:1c:33:e9:5b:0d:48:53:d5:81:3b:
                    57:be:4a:fe:71:15:90:d2:63:1b:ba:9a:fb:c6:1d:
                    77:7c:6b:89:6e:21:56:ce:a6:14:72:cd:c8:a1:f6:
                    4b:92:57:57:3f:59:ed:5e:00:7f:27:cf:41:51:dd:
                    34:1a:3c:26:41:57:13:80:2d:b0:f9:9e:d1:7b:63:
                    61:38:dc:22:44:9a:ed:7f:d5:ee:92:cd:71:ca:e1:
                    d4:2d:08:e2:4c:4d:c2:9a:f7:52:54:29:7c:1d:20:
                    4b:9b:7d:43:90:e3:df:98:ad:4e:fa:f1:c3:98:6a:
                    82:21:c6:d9:bd:e9:e0:42:42:e5:45:0a:a9:79:c4:
                    d9:3a:ae:ef:e9:04:44:c1:3e:79:57:ff:52:31:16:
                    db:7e:ab:53:61:2a:d8:c2:96:cc:ca:fb:7d:4d:4b:
                    cd:ba:4a:64:e6:9f:3a:be:61:be:07:58:d1:a2:65:
                    40:8a:fe:02:4d:cf:5d:24:ab:35:e1:16:7a:12:22:
                    01:78:bb:e8:b0:26:8d:05:1b:e3:08:32:b0:bc:77:
                    ab:ed:d3:80:a4:fe:b5:79:ad:a0:17:04:e2:35:2d:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:C6:F1:99:57:AF:FA:22:60:BA:20:41:1F:37:FB:A3:64:3D:B1
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/aU_G8ZlXr_oiYLogQR83-6NkPbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.244.0/23
                  86.109.0.0/20
                  93.187.216.0/22
                  136.144.48.0/20
                  139.178.64.0/19
                  145.40.64.0/18
                  147.28.128.0/23
                  147.28.131.0-147.28.139.255
                  147.28.141.0-147.28.188.255
                  147.28.190.0-147.28.195.255
                  147.75.32.0-147.75.111.255
                  147.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:8a:56:5a:af:a7:e9:72:e5:91:d9:02:c7:d9:12:2b:75:
         30:d0:b2:c7:f9:a5:c5:48:85:83:86:ea:dc:9b:70:a2:da:44:
         8b:ad:df:de:fc:22:8c:3d:38:1e:29:6c:66:cd:c8:02:ae:22:
         c7:da:3b:5d:4b:52:63:99:96:93:67:8f:e3:a4:90:93:2e:5c:
         e6:dd:55:f6:dc:9d:53:c5:f5:cc:b5:12:78:9e:b0:0d:59:83:
         8a:e2:41:fe:17:c2:3e:d5:58:0d:dc:b6:d4:af:07:07:90:14:
         ab:9c:c5:9b:82:0c:de:59:84:68:52:04:78:e9:49:63:09:d9:
         a1:b0:94:b3:3e:9b:d8:f5:6c:bb:f6:56:48:23:ba:9e:13:1d:
         a5:25:33:64:e0:ca:f9:f1:c8:f1:51:2e:60:ec:5a:97:e1:28:
         d6:94:90:8f:df:83:ee:9d:99:dc:61:f6:17:c6:ee:e0:71:d0:
         f0:ef:62:81:b4:33:70:67:db:30:2d:06:92:de:ac:fd:e1:f9:
         88:cc:3e:7b:d4:9c:1d:bb:85:4a:de:a7:71:44:d0:19:b4:2d:
         1b:42:18:64:2c:80:53:4e:4f:a3:85:56:d2:78:0f:51:bb:9a:
         4d:a9:df:35:1b:ac:36:ff:ef:7d:c3:4e:d7:b2:94:b2:8b:55:
         46:6a:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:59 2023 by rpki-client on console.sobornost.net