Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa
File:                     sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa (raw, json)
Hash identifier:          jeLD+uX78qGvC25n9WT+vEXyb743d+wLL2MaAvAfMgI=
Subject key identifier:   B0:8B:1B:26:92:14:B4:63:1C:9C:AA:D0:97:4F:F2:F9:04:FF:9B:19
Certificate issuer:       /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial:       018CC3495E7DD745B83EE249A79D12D136EB
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa
Signing time:             Mon 01 Jan 2024 04:30:14 +0000
ROA not before:           Mon 01 Jan 2024 04:30:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     22773
IP address blocks:        2a12:73c4::/30 maxlen: 30
                          2a09:9f44::/30 maxlen: 30
                          2a12:7340::/30 maxlen: 30
                          2a12:a2c0::/30 maxlen: 30
                          2a11:ed00::/30 maxlen: 30
                          2a10:2504::/30 maxlen: 30
                          2a11:f304::/30 maxlen: 30
                          2a11:ef00::/30 maxlen: 30
                          2a12:a6c4::/30 maxlen: 30
                          2a12:a144::/30 maxlen: 30
                          2a12:7540::/30 maxlen: 30
                          2a12:9f40::/30 maxlen: 30
                          2a12:a544::/30 maxlen: 30
                          2a12:a140::/30 maxlen: 30
                          2a11:f504::/30 maxlen: 30
                          2a12:a6c0::/30 maxlen: 30
                          2a11:f100::/30 maxlen: 30
                          2a12:72c0::/30 maxlen: 30
                          2a12:a240::/30 maxlen: 30
                          2a12:a1c4::/30 maxlen: 30
                          2a12:a744::/30 maxlen: 30
                          2a12:9ec0::/30 maxlen: 30
                          2a12:74c0::/30 maxlen: 30
                          2a12:7244::/30 maxlen: 30
                          2a11:fb04::/30 maxlen: 30
                          2a12:a640::/30 maxlen: 30
                          2a10:1c84::/30 maxlen: 30
                          2a11:f904::/30 maxlen: 30
                          2a12:7444::/30 maxlen: 30
                          2a12:a244::/30 maxlen: 30
                          2a12:a1c0::/30 maxlen: 30
                          2a12:a740::/30 maxlen: 30
                          2a10:1c80::/30 maxlen: 30
                          2a12:72c4::/30 maxlen: 30
                          2a12:7440::/30 maxlen: 30
                          2a11:f900::/30 maxlen: 30
                          2a11:fb00::/30 maxlen: 30
                          2a12:74c4::/30 maxlen: 30
                          2a12:9ec4::/30 maxlen: 30
                          2a12:73c0::/30 maxlen: 30
                          2a09:9f40::/30 maxlen: 30
                          2a11:f300::/30 maxlen: 30
                          2a10:2500::/30 maxlen: 30
                          2a12:a2c4::/30 maxlen: 30
                          2a12:7344::/30 maxlen: 30
                          2a11:ed04::/30 maxlen: 30
                          2a12:a644::/30 maxlen: 30
                          2a12:a540::/30 maxlen: 30
                          2a11:f104::/30 maxlen: 30
                          2a11:f500::/30 maxlen: 30
                          2a12:7544::/30 maxlen: 30
                          2a12:9f44::/30 maxlen: 30
                          2a12:7240::/30 maxlen: 30
                          2a11:ef04::/30 maxlen: 30

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 20:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:5e:7d:d7:45:b8:3e:e2:49:a7:9d:12:d1:36:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
        Validity
            Not Before: Jan  1 04:30:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b08b1b269214b4631c9caad0974ff2f904ff9b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:a8:b3:da:7b:cb:a7:68:fc:b0:a1:04:18:
                    73:71:af:1d:b7:1b:25:d4:84:c8:8e:d5:ed:47:6e:
                    64:6a:dc:33:e8:4e:ff:4e:1a:b9:4d:eb:e8:26:af:
                    07:ef:4c:7c:7b:3e:df:7f:9d:5c:c0:74:22:ea:20:
                    f5:58:6e:19:fb:07:4f:1f:78:0d:4b:e1:6c:e1:9d:
                    d1:63:20:50:b2:6c:3e:2c:94:2e:28:a1:1f:22:e6:
                    72:75:eb:03:05:3b:14:b5:73:56:ce:4e:db:e8:0e:
                    f2:cb:dd:ff:fe:ed:b7:b7:77:e2:d3:6f:ea:e4:3a:
                    36:21:98:d3:cd:97:8e:07:f9:86:a3:b0:c8:a6:d7:
                    28:96:6e:34:7d:fb:50:e6:78:6d:38:2b:ed:f0:fc:
                    64:53:a3:9d:f7:f1:62:17:fd:11:f6:66:31:cf:03:
                    3c:63:69:23:56:9f:48:96:49:43:34:1b:86:1f:66:
                    4a:d4:70:30:f1:79:27:af:57:92:21:40:95:7c:f0:
                    51:59:16:c2:7d:63:15:cc:d7:ad:f6:22:94:68:b0:
                    37:f6:46:7f:97:fc:de:e4:16:81:cd:3c:77:98:1e:
                    28:a7:c1:54:25:f7:f4:84:56:1e:e3:e6:12:54:91:
                    f3:1d:82:cb:5a:fd:1d:0d:2a:66:a3:a1:55:a3:de:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8B:1B:26:92:14:B4:63:1C:9C:AA:D0:97:4F:F2:F9:04:FF:9B:19
            X509v3 Authority Key Identifier:
                keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:9f40::/29
                  2a10:1c80::/29
                  2a10:2500::/29
                  2a11:ed00::/29
                  2a11:ef00::/29
                  2a11:f100::/29
                  2a11:f300::/29
                  2a11:f500::/29
                  2a11:f900::/29
                  2a11:fb00::/29
                  2a12:7240::/29
                  2a12:72c0::/29
                  2a12:7340::/29
                  2a12:73c0::/29
                  2a12:7440::/29
                  2a12:74c0::/29
                  2a12:7540::/29
                  2a12:9ec0::/29
                  2a12:9f40::/29
                  2a12:a140::/29
                  2a12:a1c0::/29
                  2a12:a240::/29
                  2a12:a2c0::/29
                  2a12:a540::/29
                  2a12:a640::/29
                  2a12:a6c0::/29
                  2a12:a740::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:0c:78:ae:8d:5d:96:5a:7f:52:15:bc:38:cc:56:c6:65:
         d3:6a:d7:f4:52:5f:51:76:f4:71:5d:67:79:d7:97:2d:e3:17:
         ea:e5:a2:2e:cd:23:7a:7c:82:64:2f:68:90:ea:66:5f:ef:f9:
         1c:2c:f4:6a:2e:e7:47:b5:18:27:1c:12:cf:59:a9:d3:57:f3:
         78:fe:85:4b:34:47:d1:db:45:19:02:2c:7f:b6:f6:3c:13:1f:
         0a:8a:62:20:02:27:25:9e:bb:df:3c:cb:d8:65:1f:c0:ff:67:
         f9:9d:6b:8b:61:5b:45:f6:5c:ad:f4:14:50:0c:24:61:fd:2a:
         7f:14:68:8c:65:10:5e:9e:76:4c:22:7f:22:af:0c:3a:ff:c2:
         4b:87:1a:8e:25:b0:11:6b:77:d9:f5:a3:cc:dd:8d:ab:ed:07:
         b5:17:70:d5:18:94:c8:84:cc:67:0c:a5:44:c4:2e:95:c6:d0:
         02:58:47:f8:07:c1:72:17:48:98:e6:c5:f4:82:b3:4e:db:ef:
         33:0c:ed:30:80:63:f2:78:e5:2b:b8:d9:65:00:21:0b:39:e4:
         13:e1:8f:0b:57:9f:54:eb:72:ff:b7:36:39:40:90:f4:44:a7:
         98:c8:b1:67:ee:a3:52:22:95:62:9b:12:94:47:e9:6f:0e:8f:
         d0:2c:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org