Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/_PX7XpfSye9ni19Yaa4kpoJC89s.roa
File:                     _PX7XpfSye9ni19Yaa4kpoJC89s.roa (raw, json)
Hash identifier:          i6w8TgWpJsFLBxgm0++HVZOU04znc8BiXC8C/s7KQQI=
Subject key identifier:   FC:F5:FB:5E:97:D2:C9:EF:67:8B:5F:58:69:AE:24:A6:82:42:F3:DB
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       018CC8DFA493CB42D87EE7C78A72E07040F8
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/_PX7XpfSye9ni19Yaa4kpoJC89s.roa
Signing time:             Tue 02 Jan 2024 06:32:29 +0000
ROA not before:           Tue 02 Jan 2024 06:32:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203
IP address blocks:        2a03:5000:162::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 12:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:a4:93:cb:42:d8:7e:e7:c7:8a:72:e0:70:40:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jan  2 06:32:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fcf5fb5e97d2c9ef678b5f5869ae24a68242f3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:cb:3a:39:c2:65:a7:68:b5:94:77:0d:13:
                    59:d9:2c:cd:47:c8:dc:7c:d4:af:68:be:cb:fe:06:
                    54:8f:dc:12:16:27:16:dd:a2:1b:8b:3f:56:59:e4:
                    fc:83:e0:8f:bb:58:e1:0a:12:7c:2a:f3:31:f6:bf:
                    38:36:5e:93:71:96:ee:f4:b8:c6:47:bf:2f:8d:11:
                    e5:8e:bf:ed:e9:c2:0e:fb:10:9e:72:c4:25:5c:70:
                    af:b8:b5:e8:5f:45:87:c7:a8:08:86:96:31:04:3a:
                    81:db:d0:c5:4d:fc:fd:24:b1:8c:13:34:38:a5:91:
                    04:c9:9c:99:6d:10:31:ba:67:8a:c1:24:0a:b6:bd:
                    d6:11:53:3a:d0:52:53:2d:bb:44:89:c3:5d:3e:79:
                    a5:3c:b4:b8:57:0b:b6:84:99:09:c0:85:b7:20:2c:
                    d2:a0:cc:6e:d0:35:b9:22:4a:4a:85:01:e2:48:b2:
                    fe:88:58:a6:d7:bd:e1:56:9f:ba:2a:62:7b:ac:76:
                    1f:e5:b1:a6:8c:53:e5:35:c8:3b:66:f1:d9:9e:d6:
                    30:ca:0e:eb:46:0b:17:25:5d:5c:b9:65:e3:3c:2d:
                    f5:18:c3:fe:40:ca:9b:d9:39:3f:ec:4a:3a:8e:09:
                    aa:e5:4b:b8:76:aa:4a:af:24:73:b3:ef:1c:df:cf:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:FB:5E:97:D2:C9:EF:67:8B:5F:58:69:AE:24:A6:82:42:F3:DB
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/_PX7XpfSye9ni19Yaa4kpoJC89s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         af:e9:35:31:82:81:9a:d8:f4:93:87:b7:9e:00:3c:0e:9a:24:
         55:ff:8b:8d:0c:93:51:13:fe:6a:35:91:fe:ef:da:f9:0b:a5:
         40:98:44:43:f0:ad:b9:b4:d8:44:be:c8:af:cd:31:80:c6:47:
         25:1a:0a:aa:da:7c:77:f9:a0:87:4d:3e:4a:83:fc:a2:a4:1e:
         c8:5b:b2:03:04:23:cb:fc:d4:a5:88:c2:dd:d3:30:ba:a0:6b:
         3d:bd:67:0f:70:7a:6a:a9:6b:dd:95:7b:06:0e:7a:4b:fd:a9:
         9d:b4:f2:85:4b:93:1d:67:9a:d7:54:1d:05:fb:eb:16:e3:25:
         6f:53:d0:54:b7:91:e0:ae:d9:13:6e:81:23:07:60:c8:cb:8b:
         ef:9e:d0:af:ca:00:0a:53:1c:9d:80:cf:b3:52:6c:12:cf:0f:
         94:2b:37:2c:c0:f2:cc:bc:c9:93:36:1d:69:59:22:77:ef:2f:
         de:53:e1:81:66:37:be:95:4f:94:0d:6a:12:a7:44:37:f6:31:
         7f:04:f6:40:dc:6f:18:eb:64:f5:80:ce:57:b3:1e:37:21:2a:
         52:78:f1:94:22:fd:9c:a7:37:65:ff:15:34:c7:46:c6:65:72:
         04:ac:9b:6a:05:07:13:45:a5:19:01:4d:43:1f:fa:b3:15:34:
         a0:b9:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org