Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/18GSUh-4owtpxvbx08DKY08Jwbo.roa
File:                     18GSUh-4owtpxvbx08DKY08Jwbo.roa (raw, json)
Hash identifier:          hsEiPkU7+H18oHtGS5wGPx3KtUThwh0exd49eK9EAww=
Subject key identifier:   D7:C1:92:52:1F:B8:A3:0B:69:C6:F6:F1:D3:C0:CA:63:4F:09:C1:BA
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       018CC8DFA4403D65FD2F31B1CAEBCBE1F3C5
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/18GSUh-4owtpxvbx08DKY08Jwbo.roa
Signing time:             Tue 02 Jan 2024 06:32:28 +0000
ROA not before:           Tue 02 Jan 2024 06:32:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202
IP address blocks:        2a03:5000:162::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 12:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:a4:40:3d:65:fd:2f:31:b1:ca:eb:cb:e1:f3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jan  2 06:32:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d7c192521fb8a30b69c6f6f1d3c0ca634f09c1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:34:d5:fb:71:51:3d:3d:3c:88:96:6c:7d:
                    71:48:60:79:a3:eb:1f:fd:d7:bb:f4:16:5e:ed:59:
                    49:01:d4:66:b6:3c:a2:b5:a6:52:a9:b7:48:e7:b2:
                    5d:82:14:61:36:aa:f2:0e:b1:b4:1b:32:fb:cb:53:
                    68:e9:ad:61:b8:3c:d3:3d:86:94:64:72:ec:b6:09:
                    81:d5:37:92:48:17:08:37:6b:56:a2:66:97:f8:21:
                    c3:a4:c3:94:17:31:7c:7a:b3:1c:ca:9f:e9:fe:8a:
                    22:d6:27:e0:93:87:18:db:0f:2d:f9:ad:19:66:ce:
                    d2:1b:1d:78:08:12:f8:77:a1:58:a0:b1:56:52:3a:
                    1d:1e:d2:52:53:72:c8:76:99:b3:db:3f:15:b6:48:
                    ff:7f:57:e4:4e:13:b0:1b:a7:0d:53:19:21:e9:ea:
                    81:07:9e:17:5f:bf:a2:88:27:9e:e4:36:30:c5:3b:
                    d8:46:21:a9:7f:42:b8:d2:5c:c3:3d:7c:b5:1a:fd:
                    b5:a7:f3:c0:ea:90:39:5f:b5:9e:86:04:ae:77:58:
                    ee:a0:77:33:23:bd:62:a9:99:89:cb:94:4e:aa:be:
                    2f:61:4d:32:3b:9d:77:a0:1a:9b:4b:1b:76:58:9a:
                    bb:48:d9:5b:8d:cc:da:3d:8c:9a:cc:52:be:42:7a:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C1:92:52:1F:B8:A3:0B:69:C6:F6:F1:D3:C0:CA:63:4F:09:C1:BA
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/18GSUh-4owtpxvbx08DKY08Jwbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:59:60:2c:41:f1:1a:6b:2d:11:6b:36:e8:f5:74:f5:9b:
         43:9c:05:2e:7a:fc:05:f6:eb:f3:6d:9f:8e:36:e6:e0:96:e6:
         41:c5:e1:3c:62:e8:d0:90:f6:43:42:81:0f:5a:e8:82:36:b0:
         5d:3e:a0:61:f3:ea:a8:5a:54:8a:3d:66:c2:54:43:88:21:97:
         7e:85:d0:ff:36:aa:17:35:e0:66:c2:ad:85:08:b8:1c:26:ff:
         2a:21:99:e1:68:f5:88:3f:1c:e0:47:a5:14:51:d8:a8:ed:7a:
         66:01:0d:71:51:62:4e:f4:57:51:64:c0:fe:7f:e8:b9:8e:bf:
         49:36:5d:e3:dc:e5:c6:4a:e0:92:3e:da:80:13:a2:8e:21:fc:
         92:f3:ca:75:70:4a:cf:95:d9:84:e7:ae:45:a5:ad:1f:b3:29:
         66:ce:55:63:e5:2f:1d:af:00:99:8f:3d:00:ab:05:74:0d:60:
         53:00:e6:41:36:1e:cc:00:5f:a6:c1:a7:8f:0c:cb:ed:fe:a8:
         f5:b2:36:9e:46:18:c6:b8:c8:f3:16:7d:b4:90:85:ba:54:09:
         19:dc:13:02:b8:0c:2a:a7:6f:14:f4:5e:1b:4f:92:26:3c:db:
         79:d9:8c:d9:0e:0c:f5:b0:f1:4f:28:89:d4:3b:31:71:3a:9f:
         ff:15:60:9c
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgISAYzI36RAPWX9LzGxyuvL4fPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm
MmNmNGUwHhcNMjQwMTAyMDYzMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2MxOTI1MjFmYjhhMzBiNjljNmY2ZjFkM2MwY2E2MzRmMDljMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmew01ftxUT09PIiWbH1xSGB5o+sf
/de79BZe7VlJAdRmtjyitaZSqbdI57JdghRhNqryDrG0GzL7y1No6a1huDzTPYaU
ZHLstgmB1TeSSBcIN2tWomaX+CHDpMOUFzF8erMcyp/p/ooi1ifgk4cY2w8t+a0Z
Zs7SGx14CBL4d6FYoLFWUjodHtJSU3LIdpmz2z8Vtkj/f1fkThOwG6cNUxkh6eqB
B54XX7+iiCee5DYwxTvYRiGpf0K40lzDPXy1Gv21p/PA6pA5X7WehgSud1juoHcz
I71iqZmJy5ROqr4vYU0yO513oBqbSxt2WJq7SNlbjczaPYyazFK+QnqJdwIDAQAB
o4IEFTCCBBEwHQYDVR0OBBYEFNfBklIfuKMLacb28dPAymNPCcG6MB8GA1UdIwQY
MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt
ODY0MjM4YmMwNDliLzEvMThHU1VoLTRvd3RweHZieDA4REtZMDhKd2JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli
LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICKQYIKwYBBQUHAQcBAf8EggIYMIICFDCCAhAEAgACMIIC
CDASAwcAKgNQAAABAwcAKgNQAAACMBIDBwAqA1AAABEDBwAqA1AAABIwEgMHACoD
UAAAIQMHACoDUAAAIjASAwcAKgNQAAAxAwcAKgNQAAAyMBIDBwAqA1AAAEEDBwAq
A1AAAEIwEgMHACoDUAAAUQMHACoDUAAAUjASAwcAKgNQAABhAwcAKgNQAABiMBID
BwAqA1AAAHEDBwAqA1AAAHIwEgMHACoDUAAAgQMHACoDUAAAgjASAwcAKgNQAACR
AwcAKgNQAACSMBIDBwAqA1AAAQEDBwAqA1AAAQIwEgMHACoDUAABEQMHACoDUAAB
EjASAwcAKgNQAAEhAwcAKgNQAAEiMBIDBwAqA1AAATEDBwAqA1AAATIwEgMHACoD
UAABQQMHACoDUAABQjASAwcAKgNQAAFRAwcAKgNQAAFSMBIDBwAqA1AAAWEDBwAq
A1AAAWIwEgMHACoDUAABcQMHACoDUAABcjASAwcAKgNQAAGBAwcAKgNQAAGCMBID
BwAqA1AAAZEDBwAqA1AAAZIwEgMHACoDUAACAQMHACoDUAACAjASAwcAKgNQAAIR
AwcAKgNQAAISMBIDBwAqA1AAAiEDBwAqA1AAAiIwEgMHACoDUAACMQMHACoDUAAC
MjASAwcAKgNQAAJBAwcAKgNQAAJCMBIDBwAqA1AAAlEDBwAqA1AAAlIwDQYJKoZI
hvcNAQELBQADggEBAAO7WWAsQfEaay0Razbo9XT1m0OcBS56/AX26/Ntn4425uCW
5kHF4Txi6NCQ9kNCgQ9a6II2sF0+oGHz6qhaVIo9ZsJUQ4ghl36F0P82qhc14GbC
rYUIuBwm/yohmeFo9Yg/HOBHpRRR2KjtemYBDXFRYk70V1FkwP5/6LmOv0k2XePc
5cZK4JI+2oAToo4h/JLzynVwSs+V2YTnrkWlrR+zKWbOVWPlLx2vAJmPPQCrBXQN
YFMA5kE2HswAX6bBp48My+3+qPWyNp5GGMa4yPMWfbSQhbpUCRncEwK4DCqnbxT0
XhtPkiY823nZjNkODPWw8U8oidQ7MXE6n/8VYJw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org