Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/m1nlARTQnQqYwP6aIcLIQwkTkpE.roa
File:                     m1nlARTQnQqYwP6aIcLIQwkTkpE.roa (raw, json)
Hash identifier:          qaqkTyiCxuGp07lWLelSmdRMKUsUFrffpPmZvmexaXE=
Subject key identifier:   9B:59:E5:01:14:D0:9D:0A:98:C0:FE:9A:21:C2:C8:43:09:13:92:91
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       01870997AD455800C07670B91DED35414282
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/m1nlARTQnQqYwP6aIcLIQwkTkpE.roa
Signing time:             Wed 22 Mar 2023 13:52:27 +0000
ROA not before:           Wed 22 Mar 2023 13:52:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33915
IP address blocks:        213.127.128.0/17 maxlen: 17
                          213.93.128.0/17 maxlen: 17
                          213.160.252.0/22 maxlen: 22
                          213.160.248.0/21 maxlen: 21
                          213.160.248.0/22 maxlen: 22
                          213.46.128.0/17 maxlen: 17
                          62.195.0.0/16 maxlen: 16
                          212.187.64.0/18 maxlen: 18
                          62.194.0.0/16 maxlen: 16
                          62.194.0.0/15 maxlen: 15
                          213.93.0.0/17 maxlen: 17
                          213.93.0.0/16 maxlen: 16
                          212.187.0.0/18 maxlen: 18
                          212.187.0.0/17 maxlen: 17
                          80.113.0.0/17 maxlen: 17
                          80.113.0.0/16 maxlen: 16
                          213.126.128.0/18 maxlen: 18
                          213.126.128.0/17 maxlen: 17
                          80.113.128.0/17 maxlen: 17
                          213.127.0.0/17 maxlen: 17
                          213.127.0.0/16 maxlen: 16
                          213.160.192.0/19 maxlen: 19
                          213.160.192.0/20 maxlen: 20
                          213.160.208.0/20 maxlen: 20
                          213.126.192.0/18 maxlen: 18
                          77.248.0.0/15 maxlen: 15
                          77.248.0.0/14 maxlen: 14
                          213.46.0.0/17 maxlen: 17
                          213.46.0.0/16 maxlen: 16
                          24.132.128.0/17 maxlen: 17
                          80.85.32.0/20 maxlen: 20
                          217.105.240.0/20 maxlen: 20
                          89.99.0.0/16 maxlen: 16
                          217.105.224.0/20 maxlen: 20
                          217.105.224.0/19 maxlen: 19
                          213.124.224.0/19 maxlen: 19
                          217.104.192.0/18 maxlen: 18
                          89.98.0.0/16 maxlen: 16
                          89.98.0.0/15 maxlen: 15
                          213.124.160.0/20 maxlen: 20
                          213.124.160.0/19 maxlen: 19
                          213.124.176.0/20 maxlen: 20
                          217.104.128.0/18 maxlen: 18
                          217.104.128.0/17 maxlen: 17
                          213.124.192.0/19 maxlen: 19
                          213.124.192.0/18 maxlen: 18
                          24.132.0.0/17 maxlen: 17
                          24.132.0.0/16 maxlen: 16
                          217.105.32.0/19 maxlen: 19
                          178.85.0.0/16 maxlen: 16
                          217.105.0.0/18 maxlen: 18
                          217.105.0.0/19 maxlen: 19
                          31.151.0.0/17 maxlen: 17
                          31.151.0.0/16 maxlen: 16
                          217.63.128.0/18 maxlen: 18
                          217.63.128.0/19 maxlen: 19
                          95.97.0.0/16 maxlen: 16
                          178.84.0.0/16 maxlen: 16
                          178.84.0.0/15 maxlen: 15
                          31.151.128.0/17 maxlen: 17
                          212.178.32.0/19 maxlen: 19
                          212.178.32.0/20 maxlen: 20
                          217.63.160.0/19 maxlen: 19
                          212.178.48.0/20 maxlen: 20
                          185.137.202.0/23 maxlen: 23
                          185.137.200.0/23 maxlen: 23
                          185.137.200.0/22 maxlen: 22
                          80.57.0.0/16 maxlen: 16
                          217.103.0.0/17 maxlen: 17
                          217.103.0.0/16 maxlen: 16
                          95.96.0.0/16 maxlen: 16
                          95.96.0.0/15 maxlen: 15
                          62.163.128.0/17 maxlen: 17
                          212.83.64.0/19 maxlen: 19
                          212.83.64.0/20 maxlen: 20
                          217.103.128.0/17 maxlen: 17
                          212.83.80.0/20 maxlen: 20
                          80.56.0.0/16 maxlen: 16
                          80.56.0.0/15 maxlen: 15
                          92.110.0.0/15 maxlen: 15
                          217.102.64.0/18 maxlen: 18
                          217.102.0.0/18 maxlen: 18
                          217.102.0.0/17 maxlen: 17
                          46.129.0.0/17 maxlen: 17
                          46.129.0.0/16 maxlen: 16
                          46.129.128.0/17 maxlen: 17
                          62.163.0.0/17 maxlen: 17
                          62.163.0.0/16 maxlen: 16
                          81.175.96.0/19 maxlen: 19
                          62.108.0.0/20 maxlen: 20
                          62.108.0.0/19 maxlen: 19
                          62.108.16.0/20 maxlen: 20
                          92.108.0.0/15 maxlen: 15
                          92.108.0.0/14 maxlen: 14
                          213.34.0.0/19 maxlen: 19
                          213.34.0.0/20 maxlen: 20
                          213.34.16.0/20 maxlen: 20
                          185.94.92.0/22 maxlen: 22
                          81.175.64.0/19 maxlen: 19
                          81.175.64.0/18 maxlen: 18
                          77.250.0.0/15 maxlen: 15
                          2a02:a200::/28 maxlen: 28
                          2a02:a200::/27 maxlen: 27
                          2a02:a210::/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:97:ad:45:58:00:c0:76:70:b9:1d:ed:35:41:42:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Mar 22 13:52:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b59e50114d09d0a98c0fe9a21c2c84309139291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:c6:8b:cb:aa:e0:3b:e1:df:fa:e0:44:2e:
                    13:5e:d9:d1:b8:ee:39:33:31:f9:43:76:84:c9:bd:
                    87:0d:c1:f4:84:ca:12:0f:29:f0:7c:ae:ba:8d:d0:
                    93:4c:22:92:e4:aa:da:b4:d8:ee:7b:f4:c2:bd:33:
                    fa:5d:af:12:28:02:7a:58:37:07:be:ab:46:e9:be:
                    46:d9:89:aa:81:95:97:00:43:01:2b:84:dc:71:e4:
                    67:41:0b:66:44:4a:a4:9e:98:9a:94:c5:01:7d:ca:
                    9f:58:e9:08:c3:c6:e8:02:4a:3e:a4:19:8f:d6:ca:
                    a5:0d:b9:2f:34:f3:56:35:cc:0d:26:8e:39:6f:f5:
                    d2:0d:62:98:0f:83:f3:45:45:49:28:52:93:f4:14:
                    76:85:ce:ab:9b:53:83:b6:d3:62:36:a5:2b:7a:40:
                    a9:22:e0:33:f4:e7:0a:03:b0:60:c2:98:75:01:f4:
                    82:f9:db:90:04:17:ac:b8:48:f6:ac:65:05:c8:16:
                    59:93:33:ff:3a:f2:98:c8:71:f3:3c:2f:80:4f:80:
                    66:d6:1e:f0:f1:de:0c:5f:98:01:98:90:a8:71:46:
                    da:f6:4f:73:75:0f:b0:d3:58:32:91:b0:c7:6e:50:
                    31:9f:e8:1d:d1:eb:22:35:ac:93:fc:bd:1b:93:14:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:E5:01:14:D0:9D:0A:98:C0:FE:9A:21:C2:C8:43:09:13:92:91
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/m1nlARTQnQqYwP6aIcLIQwkTkpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.132.0.0/16
                  31.151.0.0/16
                  46.129.0.0/16
                  62.108.0.0/19
                  62.163.0.0/16
                  62.194.0.0/15
                  77.248.0.0/14
                  80.56.0.0/15
                  80.85.32.0/20
                  80.113.0.0/16
                  81.175.64.0/18
                  89.98.0.0/15
                  92.108.0.0/14
                  95.96.0.0/15
                  178.84.0.0/15
                  185.94.92.0/22
                  185.137.200.0/22
                  212.83.64.0/19
                  212.178.32.0/19
                  212.187.0.0/17
                  213.34.0.0/19
                  213.46.0.0/16
                  213.93.0.0/16
                  213.124.160.0-213.124.255.255
                  213.126.128.0-213.127.255.255
                  213.160.192.0/19
                  213.160.248.0/21
                  217.63.128.0/18
                  217.102.0.0/17
                  217.103.0.0/16
                  217.104.128.0-217.105.63.255
                  217.105.224.0/19
                IPv6:
                  2a02:a200::/27

    Signature Algorithm: sha256WithRSAEncryption
         62:83:34:26:09:51:6a:40:f8:15:75:79:18:b8:89:23:e2:a7:
         f1:3d:82:1b:a6:a1:fa:b3:c7:bf:a6:30:bd:34:f5:09:ea:3e:
         3f:44:a3:ed:8a:1d:5d:04:4b:e1:e5:eb:41:7b:4e:9e:e8:c0:
         8b:8f:19:98:1d:0a:a5:83:f8:13:12:17:d1:13:c8:31:cb:09:
         1e:d1:0b:11:04:c8:ee:16:24:c5:24:8a:74:74:ca:67:ec:3a:
         fc:22:8c:c6:43:d2:67:59:93:11:7b:7a:f7:a6:c5:ab:7d:2b:
         12:67:68:29:54:09:02:43:f8:15:30:8a:a7:c6:1c:78:38:35:
         23:dd:3b:d0:ad:d3:96:2b:25:89:03:46:10:a1:17:24:ee:c3:
         90:c1:39:df:a7:92:4c:11:36:92:9c:9f:bd:01:77:fa:b8:d4:
         97:1b:ff:34:0e:24:d0:44:64:3b:9e:87:e0:63:71:73:69:15:
         66:17:af:27:88:50:4d:a8:7a:8e:68:72:f4:c4:a5:5f:a1:c1:
         48:ef:c1:db:07:4f:90:c3:14:7f:8c:90:09:5e:ed:05:a1:5d:
         d1:a5:22:56:96:5a:fa:51:a0:32:4a:2d:f2:c7:b8:39:a8:8c:
         f1:78:80:cf:ac:5b:c1:70:60:c8:c4:dc:62:ee:d2:b0:b0:6f:
         b4:76:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net