Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/TjwX_EaoOndgV-Pdwb_uBb_fwhY.roa
File:                     TjwX_EaoOndgV-Pdwb_uBb_fwhY.roa (raw, json)
Hash identifier:          KxbfSWLVcIIbCf3nRJtMSuEKipPV732mWNXtL7Q4bF8=
Subject key identifier:   4E:3C:17:FC:46:A8:3A:77:60:57:E3:DD:C1:BF:EE:05:BF:DF:C2:16
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       018CC8DFA4D4185427B600BA4EACB24F90A3
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/TjwX_EaoOndgV-Pdwb_uBb_fwhY.roa
Signing time:             Tue 02 Jan 2024 06:32:29 +0000
ROA not before:           Tue 02 Jan 2024 06:32:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3356
IP address blocks:        2a03:5000:122::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 12:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:a4:d4:18:54:27:b6:00:ba:4e:ac:b2:4f:90:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jan  2 06:32:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4e3c17fc46a83a776057e3ddc1bfee05bfdfc216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:f6:bb:78:8e:3c:55:b3:f2:1e:06:b6:e7:
                    7b:cf:23:c3:1c:08:93:63:31:d7:7b:d2:e1:77:8a:
                    f9:e8:07:af:62:d6:db:2d:41:2c:22:d2:ca:13:a2:
                    ba:04:0b:d3:85:2f:79:76:57:9a:82:43:68:b3:3c:
                    b3:c1:e9:5f:91:e2:6b:00:c7:3a:37:1e:57:db:2f:
                    11:3f:02:7d:c1:b4:bd:22:51:50:1a:fc:07:37:54:
                    00:4f:fa:fc:19:44:af:fd:7f:04:85:36:ed:76:37:
                    fe:f4:50:a6:c3:73:e5:58:1f:43:18:6c:b6:68:99:
                    08:40:fd:86:7a:7d:80:66:ea:70:59:c1:c3:4f:1d:
                    36:9d:c8:79:ce:e6:38:b2:0a:62:59:38:61:bb:6d:
                    90:e7:6d:0f:0f:d8:4b:b2:8e:9b:bd:e6:6f:69:72:
                    05:13:6a:bb:50:7c:f1:9e:9d:bc:51:c6:16:91:12:
                    1f:95:d9:23:00:36:f6:5b:0f:29:27:42:e7:8c:28:
                    64:b1:f4:85:f6:d5:25:ff:26:7e:b3:16:89:66:e5:
                    11:65:e9:08:5f:e9:fc:32:24:a6:88:f6:01:7d:4b:
                    6f:32:65:d0:a4:63:b9:ca:6d:99:7c:af:ca:3b:de:
                    63:90:24:82:fe:91:49:85:4d:3b:e6:ae:5f:12:bb:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3C:17:FC:46:A8:3A:77:60:57:E3:DD:C1:BF:EE:05:BF:DF:C2:16
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/TjwX_EaoOndgV-Pdwb_uBb_fwhY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b4:0a:d1:5d:42:ed:05:71:c7:b1:0f:85:00:ce:74:fc:b6:1e:
         b3:35:7c:70:b4:a5:c6:ec:e7:5e:45:f7:df:ef:c5:43:2d:29:
         e6:b8:04:1e:9c:e5:12:dd:31:a4:a1:fb:37:ab:3b:46:47:f4:
         82:d7:38:e9:8e:7e:f6:b1:34:51:0c:f7:fd:d5:ca:b0:c3:70:
         38:59:39:43:e1:2a:09:12:89:fe:1b:a9:74:ba:29:60:fa:3d:
         bc:48:9a:48:31:bf:5d:75:77:1a:9f:11:70:19:c4:29:fa:d5:
         4f:8e:7e:0e:29:a0:86:bd:d7:18:3c:f4:15:cc:f4:2e:f8:86:
         2f:b2:63:fd:99:ec:75:01:9d:67:68:37:1c:30:f0:61:fb:44:
         01:8e:b7:5e:46:6a:35:cb:55:b1:22:66:69:f7:2b:9a:c5:cb:
         b7:ee:93:75:2a:0a:73:e2:b7:1d:99:62:9a:07:2f:f9:ac:24:
         90:83:0d:bd:68:a1:07:df:d5:2d:0d:a7:b0:a7:df:d2:18:b8:
         94:bd:74:1a:b5:43:fa:a6:bf:a7:ba:2b:a0:6d:54:70:cd:73:
         5d:73:df:63:4b:7a:65:42:85:1f:4e:3f:36:dc:04:f7:af:1e:
         40:47:30:37:35:16:be:c5:cc:d6:c2:ec:18:ec:8e:6e:94:82:
         4f:60:90:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org