Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMBRno_63j4YzPTV-a4TKXQC61E.roa
File:                     JMBRno_63j4YzPTV-a4TKXQC61E.roa (raw, json)
Hash identifier:          TwxT19MfI+IQzCJnhIOWIUiTJekZjWI68fqpt6uDVZg=
Subject key identifier:   24:C0:51:9E:8F:FA:DE:3E:18:CC:F4:D5:F9:AE:13:29:74:02:EB:51
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       01889077D612F4F8CC6A58E99822E61E9D4F
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMBRno_63j4YzPTV-a4TKXQC61E.roa
Signing time:             Tue 06 Jun 2023 11:29:12 +0000
ROA not before:           Tue 06 Jun 2023 11:29:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        2a03:5000:122::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:77:d6:12:f4:f8:cc:6a:58:e9:98:22:e6:1e:9d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jun  6 11:29:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24c0519e8ffade3e18ccf4d5f9ae13297402eb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:8f:7e:75:57:05:40:2b:37:44:80:26:06:
                    21:42:83:64:26:79:71:60:c2:fb:7c:37:14:73:0e:
                    fe:2d:cb:52:84:5f:0f:2a:29:bf:12:84:9b:ed:11:
                    13:c7:0a:29:22:1a:a3:f8:79:ac:82:a1:98:44:05:
                    b5:6c:20:bf:33:38:15:80:a5:ef:27:82:44:b5:3f:
                    09:94:f1:dc:a7:0c:ec:c3:0d:f2:c2:bc:85:e9:2d:
                    89:bc:81:60:61:e5:26:42:e6:38:13:90:37:10:ea:
                    fa:42:db:29:73:d0:1c:f6:23:b4:70:7b:9d:a3:4e:
                    9d:de:fe:42:b9:8a:47:21:f3:eb:58:7c:e6:a2:69:
                    02:c8:5b:22:5e:eb:9f:55:f5:b2:32:e0:2f:5d:cc:
                    3e:f9:1f:17:50:92:b6:c8:08:d2:29:01:d1:2f:98:
                    cd:d0:c8:75:33:3c:0c:2f:a0:2a:b5:81:03:f8:81:
                    7a:e9:5f:d6:9d:5f:8c:c6:72:3d:56:e6:3a:97:44:
                    4e:97:87:2c:2b:78:df:cd:07:69:bc:1b:6e:9d:ed:
                    10:86:c8:01:d0:c1:bb:de:bd:e1:7b:5c:b5:d5:9b:
                    15:d4:f6:f7:04:b1:0d:43:2c:d3:cc:a1:11:45:4a:
                    2e:47:7e:af:15:39:a5:25:a8:bc:b9:1a:25:5a:40:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C0:51:9E:8F:FA:DE:3E:18:CC:F4:D5:F9:AE:13:29:74:02:EB:51
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMBRno_63j4YzPTV-a4TKXQC61E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         bb:f4:7a:a7:c2:6e:81:49:17:aa:97:62:8a:2f:c5:6a:a0:d7:
         3d:85:65:21:bd:f7:fd:98:d2:c4:a4:d1:e4:90:3c:d9:5c:24:
         7d:fb:8e:a8:35:5c:1f:f6:4d:d9:a2:13:8e:b5:36:4a:3a:f3:
         fb:d7:29:4b:92:d1:f5:d2:d5:92:0d:52:b0:b1:d5:20:06:3c:
         59:34:73:87:77:45:72:ba:0d:09:ec:42:7d:0b:14:d2:63:ad:
         ec:27:0f:b0:08:79:dd:ac:5f:7c:a5:7b:b8:fe:4d:00:c3:27:
         8d:b6:6c:79:6a:1d:3b:d3:f7:14:d2:e4:86:2c:1d:8e:d2:fb:
         90:5d:93:bd:0a:63:89:62:aa:c4:0e:f2:14:f5:7d:01:24:f7:
         ee:50:94:c6:dc:dd:43:21:b4:22:ff:70:41:a4:e5:c9:68:c0:
         61:47:f2:a8:d4:af:11:f1:92:f9:43:6b:cc:b8:41:4f:f5:8a:
         67:a5:8f:83:58:f6:b1:9d:cc:8b:c4:b4:c3:86:e1:7b:cb:3b:
         ba:77:39:59:b6:6a:ee:d0:49:44:ff:ae:6b:2d:dd:9e:12:6d:
         10:ae:5e:9d:4d:a0:70:ab:d0:91:d0:f2:52:48:bc:34:b6:2e:
         0a:f7:3e:82:14:55:47:b3:9f:ba:4c:aa:0f:3a:83:70:07:4f:
         d1:47:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:18 2024 by rpki-client on console-ams.rpki-client.org