Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/ZUTOSXBNQEXgapp5n0bXxGSqn-0.roa
File:                     ZUTOSXBNQEXgapp5n0bXxGSqn-0.roa (raw, json)
Hash identifier:          +QV+OU5lCZhRBsamvSh0QWQQ3Qq/paE1XcdpKqcvDJg=
Subject key identifier:   65:44:CE:49:70:4D:40:45:E0:6A:9A:79:9F:46:D7:C4:64:AA:9F:ED
Certificate issuer:       /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial:       0185737AA5FFADCCDE0376A0502D69C0062B
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/ZUTOSXBNQEXgapp5n0bXxGSqn-0.roa
Signing time:             Mon 02 Jan 2023 17:14:55 +0000
ROA not before:           Mon 02 Jan 2023 17:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33915
IP address blocks:        94.208.0.0/13 maxlen: 13
                          83.80.0.0/13 maxlen: 13
                          213.73.128.0/17 maxlen: 17
                          213.73.128.0/18 maxlen: 18
                          80.114.0.0/18 maxlen: 18
                          80.114.0.0/17 maxlen: 17
                          212.127.128.0/18 maxlen: 18
                          212.127.128.0/17 maxlen: 17
                          83.80.0.0/14 maxlen: 14
                          94.208.0.0/14 maxlen: 14
                          85.147.128.0/17 maxlen: 17
                          217.101.0.0/17 maxlen: 17
                          82.74.0.0/15 maxlen: 15
                          217.101.0.0/16 maxlen: 16
                          213.73.192.0/18 maxlen: 18
                          80.114.64.0/18 maxlen: 18
                          212.127.192.0/18 maxlen: 18
                          89.220.192.0/18 maxlen: 18
                          212.120.64.0/19 maxlen: 19
                          212.120.64.0/18 maxlen: 18
                          212.120.96.0/19 maxlen: 19
                          217.120.0.0/15 maxlen: 15
                          85.147.0.0/17 maxlen: 17
                          85.147.0.0/16 maxlen: 16
                          217.120.0.0/14 maxlen: 14
                          217.105.128.0/19 maxlen: 19
                          217.105.128.0/18 maxlen: 18
                          80.112.64.0/18 maxlen: 18
                          217.105.160.0/19 maxlen: 19
                          217.105.64.0/18 maxlen: 18
                          80.112.0.0/18 maxlen: 18
                          80.112.0.0/17 maxlen: 17
                          62.145.192.0/18 maxlen: 18
                          217.105.96.0/19 maxlen: 19
                          89.220.128.0/18 maxlen: 18
                          89.220.128.0/17 maxlen: 17
                          84.106.0.0/15 maxlen: 15
                          82.72.0.0/15 maxlen: 15
                          82.72.0.0/14 maxlen: 14
                          82.151.160.0/20 maxlen: 20
                          82.151.160.0/19 maxlen: 19
                          82.151.176.0/20 maxlen: 20
                          84.24.0.0/13 maxlen: 13
                          217.105.64.0/19 maxlen: 19
                          213.51.0.0/16 maxlen: 16
                          84.24.0.0/14 maxlen: 14
                          212.204.160.0/19 maxlen: 19
                          217.104.64.0/18 maxlen: 18
                          217.63.224.0/19 maxlen: 19
                          94.212.0.0/14 maxlen: 14
                          83.84.0.0/14 maxlen: 14
                          217.104.0.0/18 maxlen: 18
                          217.104.0.0/17 maxlen: 17
                          84.104.0.0/15 maxlen: 15
                          84.104.0.0/14 maxlen: 14
                          217.63.192.0/19 maxlen: 19
                          217.63.192.0/18 maxlen: 18
                          82.217.128.0/17 maxlen: 17
                          217.102.192.0/20 maxlen: 20
                          217.102.192.0/19 maxlen: 19
                          217.102.208.0/20 maxlen: 20
                          217.62.128.0/17 maxlen: 17
                          217.63.0.0/19 maxlen: 19
                          217.63.0.0/18 maxlen: 18
                          212.204.128.0/19 maxlen: 19
                          212.204.128.0/18 maxlen: 18
                          217.63.32.0/19 maxlen: 19
                          80.115.160.0/19 maxlen: 19
                          84.28.0.0/14 maxlen: 14
                          80.115.128.0/18 maxlen: 18
                          80.115.128.0/19 maxlen: 19
                          217.102.160.0/19 maxlen: 19
                          217.62.0.0/17 maxlen: 17
                          217.62.0.0/16 maxlen: 16
                          82.217.0.0/17 maxlen: 17
                          82.217.0.0/16 maxlen: 16
                          217.102.128.0/18 maxlen: 18
                          217.102.128.0/19 maxlen: 19
                          80.114.192.0/19 maxlen: 19
                          80.114.192.0/18 maxlen: 18
                          212.54.32.0/19 maxlen: 19
                          212.54.32.0/20 maxlen: 20
                          212.54.48.0/20 maxlen: 20
                          80.114.224.0/19 maxlen: 19
                          213.34.96.0/20 maxlen: 20
                          213.34.96.0/19 maxlen: 19
                          82.101.192.0/19 maxlen: 19
                          82.101.192.0/18 maxlen: 18
                          80.115.64.0/18 maxlen: 18
                          213.34.112.0/20 maxlen: 20
                          217.122.0.0/15 maxlen: 15
                          82.101.224.0/19 maxlen: 19
                          217.101.128.0/17 maxlen: 17
                          80.115.0.0/18 maxlen: 18
                          80.115.0.0/17 maxlen: 17
                          2001:1c00::/23 maxlen: 23
                          2001:1c00::/24 maxlen: 24
                          2001:b88::/33 maxlen: 33
                          2001:1d00::/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:7a:a5:ff:ad:cc:de:03:76:a0:50:2d:69:c0:06:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
        Validity
            Not Before: Jan  2 17:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6544ce49704d4045e06a9a799f46d7c464aa9fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:9c:4b:d8:01:e5:bc:26:76:b1:b7:8a:cd:
                    84:e8:9a:1d:e7:c3:a0:07:c8:07:92:dd:ca:ec:53:
                    0e:48:91:9c:28:d5:89:4c:79:d5:e0:0f:15:d6:78:
                    3a:65:21:52:b1:01:13:3b:dd:1c:e7:f1:75:64:12:
                    dc:ee:68:d2:59:28:a7:7e:12:bc:1c:e1:61:c9:4d:
                    ea:f6:70:cb:56:0b:f3:20:86:ed:b4:90:7f:bb:3e:
                    4d:3b:fd:60:8c:52:f1:64:00:76:d5:b8:aa:38:2a:
                    39:4a:8f:75:0f:91:94:13:39:62:26:46:a1:0c:f3:
                    dd:05:dc:7e:cd:07:be:25:f7:01:35:0e:e0:44:de:
                    10:95:be:fd:1d:88:b1:7c:b5:aa:a7:79:20:ea:fc:
                    9b:13:fb:81:74:47:5d:39:3f:9b:f6:c0:2f:c1:c7:
                    ad:74:ee:8f:da:79:12:bc:a3:a1:41:8d:46:30:83:
                    8a:cb:ab:6e:3f:10:62:40:b2:02:ef:d3:30:30:fe:
                    b1:0c:2f:9f:30:cd:30:73:21:06:bf:f7:d3:f3:b6:
                    ac:af:a7:6d:a8:7c:62:fe:5d:16:26:4b:ac:7c:1a:
                    c0:41:37:0b:70:e5:40:4b:10:b3:1e:88:57:f5:0a:
                    dd:82:19:d9:1b:c4:f3:8e:eb:00:82:f1:a5:91:55:
                    39:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:CE:49:70:4D:40:45:E0:6A:9A:79:9F:46:D7:C4:64:AA:9F:ED
            X509v3 Authority Key Identifier:
                keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/ZUTOSXBNQEXgapp5n0bXxGSqn-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.145.192.0/18
                  80.112.0.0/17
                  80.114.0.0/17
                  80.114.192.0-80.115.191.255
                  82.72.0.0/14
                  82.101.192.0/18
                  82.151.160.0/19
                  82.217.0.0/16
                  83.80.0.0/13
                  84.24.0.0/13
                  84.104.0.0/14
                  85.147.0.0/16
                  89.220.128.0/17
                  94.208.0.0/13
                  212.54.32.0/19
                  212.120.64.0/18
                  212.127.128.0/17
                  212.204.128.0/18
                  213.34.96.0/19
                  213.51.0.0/16
                  213.73.128.0/17
                  217.62.0.0-217.63.63.255
                  217.63.192.0/18
                  217.101.0.0/16
                  217.102.128.0-217.102.223.255
                  217.104.0.0/17
                  217.105.64.0-217.105.191.255
                  217.120.0.0/14
                IPv6:
                  2001:b88::/33
                  2001:1c00::/23

    Signature Algorithm: sha256WithRSAEncryption
         98:72:a8:1a:cf:61:17:a9:92:57:1d:8d:8b:3e:3f:76:cc:af:
         e6:b3:d3:25:72:13:d6:21:f1:78:de:90:cf:26:5f:13:bb:21:
         6e:d3:1c:64:cb:f9:5b:a8:2f:8a:b7:85:9e:6d:b0:0c:52:ce:
         60:5f:c2:af:2a:6e:f1:2e:c5:3f:74:14:be:35:54:69:dd:48:
         90:7a:e5:15:15:ce:97:ca:3b:f1:b7:57:34:8a:28:0a:70:ef:
         da:4d:58:5e:09:a6:60:58:3c:5a:72:84:5a:fa:0a:8f:83:55:
         e1:55:c3:19:92:da:bc:b6:6f:1d:4e:2e:fe:e9:9d:56:d8:0e:
         4a:7a:fd:d0:c2:00:76:f2:90:7f:2d:ae:ce:08:f0:a1:4d:41:
         f9:47:46:2b:69:a0:cd:1c:3e:ef:21:7d:06:47:10:16:e4:bf:
         e6:35:cb:c5:21:64:85:ff:da:89:62:db:96:01:c4:12:00:1d:
         f3:b5:9c:81:c0:2d:33:e7:04:f6:bc:c1:b7:53:94:5a:95:81:
         f0:03:09:5b:bc:a3:d8:59:40:06:d1:f3:d2:e4:65:f0:06:6f:
         0f:da:2e:87:d1:c4:60:5c:70:66:20:64:a7:0e:68:f3:c3:bf:
         bc:47:11:55:c3:f8:39:f6:d6:51:3e:88:2d:bb:f6:b5:06:72:
         2e:0b:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net