Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/EgKNqKK-pE2-lWi5Bd6rBR-C5Zs.roa
File:                     EgKNqKK-pE2-lWi5Bd6rBR-C5Zs.roa (raw, json)
Hash identifier:          t3XzzFyDJ9W+A0bNDKuHQO7rfeXaZexmapZ2DcTXaDM=
Subject key identifier:   12:02:8D:A8:A2:BE:A4:4D:BE:95:68:B9:05:DE:AB:05:1F:82:E5:9B
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       01889077D5952FB0C9C2C49CB7F253ED484D
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/EgKNqKK-pE2-lWi5Bd6rBR-C5Zs.roa
Signing time:             Tue 06 Jun 2023 11:29:12 +0000
ROA not before:           Tue 06 Jun 2023 11:29:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203
IP address blocks:        2a03:5000:162::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:77:d5:95:2f:b0:c9:c2:c4:9c:b7:f2:53:ed:48:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jun  6 11:29:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12028da8a2bea44dbe9568b905deab051f82e59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:90:47:dc:4c:4b:b2:db:14:cb:0c:9b:0d:
                    61:7b:38:55:b1:54:0c:9c:4b:11:e6:1f:c2:08:ce:
                    cf:c6:3a:76:cd:1c:85:59:e1:49:64:48:ee:44:39:
                    83:d4:39:d4:6a:fc:08:5c:c4:00:05:54:9a:9a:fd:
                    5f:4b:ce:36:ea:8e:0e:cb:73:6d:d8:de:28:69:2e:
                    8c:b6:28:25:b4:3f:da:1f:4e:be:9a:88:5c:5b:f6:
                    05:2c:d7:15:29:41:22:3a:53:38:fd:b0:99:75:03:
                    f3:71:3b:47:92:98:61:90:e1:35:81:38:8e:a0:fe:
                    11:12:60:95:8f:5a:3e:e7:df:7b:c4:5d:6a:33:31:
                    fe:b3:b0:4f:0e:b0:b6:12:82:b0:7f:01:d7:a5:51:
                    5d:10:54:70:f2:1a:54:23:3f:60:ca:53:bb:4f:8a:
                    63:0c:30:ad:26:64:38:d6:f4:d9:34:51:da:6f:3b:
                    c2:ec:e8:32:76:12:29:0b:51:c0:9d:f3:5d:4a:35:
                    79:7e:78:06:48:7e:d7:ec:41:7a:36:d0:71:28:9d:
                    08:d7:f5:de:0f:9e:ef:92:e8:d9:c7:2b:13:e1:9e:
                    3e:a7:ee:cd:26:cd:23:9c:e7:36:ae:d8:66:3f:2b:
                    3d:e6:ad:20:90:7d:9b:e4:71:59:30:2e:45:b1:81:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:02:8D:A8:A2:BE:A4:4D:BE:95:68:B9:05:DE:AB:05:1F:82:E5:9B
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/EgKNqKK-pE2-lWi5Bd6rBR-C5Zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:19:3c:11:d9:a3:12:30:ee:21:3c:76:a5:30:cd:27:28:
         59:fe:e7:aa:33:53:ab:9b:a4:01:78:1e:fa:99:b0:6c:99:40:
         24:ef:b2:c6:c8:a6:65:5f:8e:94:a1:20:ed:d7:84:06:f9:29:
         72:8b:25:f6:00:f5:69:1b:d4:b7:4c:4e:fe:81:1f:c3:a2:d1:
         aa:97:b0:b3:72:7f:43:05:65:20:a8:e2:ad:b8:49:66:7e:e8:
         2a:c2:04:b1:bf:89:88:d2:d2:39:01:4e:90:d8:96:67:b0:94:
         19:33:50:eb:e4:7d:2d:95:9a:a0:1e:fe:82:ed:5b:f3:f9:b0:
         32:0d:7d:0e:e8:a1:b7:0a:21:d3:c8:0b:a6:81:49:46:6d:b1:
         e2:8b:ce:90:5b:5e:49:18:43:65:09:f5:a1:43:14:fc:cc:4a:
         90:1e:f8:2b:5e:ad:68:3f:c0:df:03:61:f3:7d:09:9a:e0:c7:
         db:d5:97:2e:48:70:25:c5:d7:75:c5:6a:18:e6:f1:1f:ff:70:
         30:6e:f7:f9:3c:d8:1c:cd:6e:68:3a:3c:80:be:e8:58:bc:48:
         07:2a:86:23:b7:04:89:3a:2e:c6:24:ad:ff:b4:79:3a:f5:00:
         7a:5c:98:d4:b0:07:45:e4:64:65:21:d6:1e:17:78:c8:f3:e9:
         38:1f:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org