Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/9cKQLQFm-OHLSue94qhdkGhazzw.roa
File:                     9cKQLQFm-OHLSue94qhdkGhazzw.roa (raw, json)
Hash identifier:          N/D+mTUNaXyz7qdDODR7y+zCKWcFgbyBkwYy4qK3q5Q=
Subject key identifier:   F5:C2:90:2D:01:66:F8:E1:CB:4A:E7:BD:E2:A8:5D:90:68:5A:CF:3C
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       0191DC6A70CD9506CA7DD29356E05FBF8C25
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/9cKQLQFm-OHLSue94qhdkGhazzw.roa
Signing time:             Tue 10 Sep 2024 14:50:48 +0000
ROA not before:           Tue 10 Sep 2024 14:50:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202
IP address blocks:        195.203.156.0/22 maxlen: 22
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:20::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:30::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:dc:6a:70:cd:95:06:ca:7d:d2:93:56:e0:5f:bf:8c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Sep 10 14:50:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5c2902d0166f8e1cb4ae7bde2a85d90685acf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:1c:c4:7f:de:9a:db:c2:45:22:b3:e2:7a:
                    98:fc:49:71:69:44:05:eb:c6:d5:ba:0d:57:9a:a8:
                    c8:ef:03:5b:d6:6a:a2:ea:06:7a:a7:0d:a7:1b:c4:
                    6b:36:fc:66:18:a5:e6:61:10:0a:19:e0:a7:46:3f:
                    12:9e:04:15:61:9f:b2:13:0a:37:a9:7e:c0:25:3f:
                    f7:57:86:fa:06:9a:86:9c:4e:5a:35:65:53:f6:dc:
                    dd:52:19:77:01:3b:40:89:c2:8f:2d:33:85:9e:b2:
                    64:5b:79:02:2c:f0:81:aa:49:05:15:d3:72:b7:96:
                    d0:74:ba:bf:1b:cb:b7:b4:fb:03:32:a7:de:15:59:
                    58:9e:99:8a:c5:0e:f2:db:ab:4d:cb:67:05:d0:b0:
                    d2:e1:8c:f7:88:f3:ca:76:ed:48:c7:66:5e:27:36:
                    41:45:b8:2b:af:fb:2d:ac:0f:c2:17:a6:f9:98:ab:
                    dd:da:ad:55:39:0c:41:83:fa:86:ad:72:c2:db:41:
                    75:f2:55:28:c2:15:22:e6:09:9a:4f:37:ce:9e:50:
                    4d:63:3c:1d:d9:ed:46:99:75:22:8d:3c:58:8c:56:
                    06:12:42:0a:cd:87:9b:e9:56:5a:91:f4:17:47:10:
                    2d:c2:18:ab:c5:65:e6:ee:02:d9:27:fc:76:d3:92:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C2:90:2D:01:66:F8:E1:CB:4A:E7:BD:E2:A8:5D:90:68:5A:CF:3C
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/9cKQLQFm-OHLSue94qhdkGhazzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.203.156.0/22
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:f2:0f:c5:99:ae:ee:38:00:87:bc:c7:15:59:e8:c1:eb:
         ab:03:da:49:b9:bb:6f:0a:eb:72:a3:12:95:1b:f6:7a:f5:89:
         0d:21:07:7d:0d:89:2c:61:0b:5f:df:20:0c:81:96:54:4b:c8:
         cd:8e:1d:b4:11:e8:21:2a:65:a2:ee:6f:8e:c7:7c:3a:89:f2:
         96:db:79:01:30:c3:a5:dc:e0:dd:01:1c:2e:b9:ca:d9:7b:91:
         24:5d:af:4e:2e:f8:bb:8c:cb:bd:00:fe:02:6d:84:99:c0:7b:
         43:d2:2a:f1:ea:2c:9b:2a:64:41:40:a7:4d:bf:2c:e9:01:29:
         07:e0:bd:3e:9d:3f:03:72:2e:d0:f7:ef:aa:75:da:27:59:0b:
         eb:30:b8:3f:02:dd:38:db:50:99:91:2b:06:7e:81:19:95:32:
         98:54:5b:18:3b:e4:4f:96:55:77:6f:71:16:a2:bf:2e:85:f8:
         75:f6:bd:10:b0:c2:c0:d4:62:a5:7c:0d:bf:98:78:6f:96:b9:
         c1:e1:14:5e:65:7a:2a:d6:38:72:d4:18:48:61:49:0e:88:c8:
         b8:25:d8:92:15:45:ab:5d:c1:0d:83:75:7a:96:fe:54:8d:a5:
         bc:d0:0b:c3:5d:d1:c8:e6:a1:03:36:e0:aa:8f:dc:6f:f1:64:
         e7:b4:cf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 19:38:25 2024 by rpki-client on console-fra.rpki-client.org