Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/wVoSTIel_GpficjGMWFXPioeazU.roa
File:                     wVoSTIel_GpficjGMWFXPioeazU.roa (raw, json)
Hash identifier:          IvFEAU/lnLqU1PaEJsnI8gQGzJAmytjx4UfzDvMcPq4=
Subject key identifier:   C1:5A:12:4C:87:A5:FC:6A:5F:89:C8:C6:31:61:57:3E:2A:1E:6B:35
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       0191DC6A7204CC382C39A4D027C1EF338E08
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/wVoSTIel_GpficjGMWFXPioeazU.roa
Signing time:             Tue 10 Sep 2024 14:50:49 +0000
ROA not before:           Tue 10 Sep 2024 14:50:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3356
IP address blocks:        195.203.156.0/22 maxlen: 22
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:20::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:30::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:dc:6a:72:04:cc:38:2c:39:a4:d0:27:c1:ef:33:8e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Sep 10 14:50:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c15a124c87a5fc6a5f89c8c63161573e2a1e6b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:83:42:5b:31:62:5f:11:01:fe:99:48:84:
                    d6:32:23:11:6e:cc:a7:ab:a9:22:14:dd:b2:e6:22:
                    c2:41:97:b9:a0:b4:ee:78:e8:89:73:b7:b1:81:f4:
                    13:7e:eb:b1:3f:0a:bd:49:1b:f8:8f:d8:d5:ca:08:
                    a2:68:f6:f7:e8:21:80:5e:40:0d:e8:9f:b5:d2:87:
                    50:a2:6a:c0:3a:71:b2:b2:a3:06:85:34:67:f5:53:
                    a2:86:ea:4c:8a:6b:a9:7f:67:a2:71:b7:0f:a0:a6:
                    41:36:b5:f0:80:7e:4b:76:6b:07:19:ca:da:2e:31:
                    0c:61:f8:cb:b5:dd:18:8c:3e:ef:e4:a9:a3:37:b0:
                    a2:f8:39:ad:33:50:3a:b8:04:0d:a8:68:8a:bc:e4:
                    4c:28:7e:34:fa:be:fb:77:fb:6e:f0:36:93:fe:c7:
                    89:73:e9:b1:ed:bf:3b:c7:9f:7d:bd:43:e7:d8:fa:
                    70:28:bb:66:81:21:69:3a:4a:4f:f3:52:dd:00:69:
                    c5:39:c7:97:4e:64:32:03:8f:3b:40:89:82:72:3d:
                    07:51:90:e0:dd:32:c4:60:bd:1a:aa:f9:a1:10:ac:
                    ee:42:74:cf:0f:ea:48:0f:fe:4e:77:0f:a6:a3:ba:
                    42:7f:36:d2:01:7c:ef:04:18:9a:1d:c8:2e:06:44:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5A:12:4C:87:A5:FC:6A:5F:89:C8:C6:31:61:57:3E:2A:1E:6B:35
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/wVoSTIel_GpficjGMWFXPioeazU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.203.156.0/22
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c9:e8:c9:da:4e:d2:bf:dc:96:02:63:5f:9a:9d:31:73:cd:58:
         dd:a8:be:2f:60:83:d4:4d:8d:78:96:76:03:5d:52:3e:45:cd:
         6e:04:d7:d9:6d:5b:0b:a5:ac:58:e7:60:1b:36:1c:2e:09:57:
         b6:5c:7b:47:e3:56:78:f3:2d:b4:1a:25:d6:24:4d:b2:3e:69:
         1c:be:6b:5a:f5:12:23:f5:2e:13:e5:3f:8a:96:26:8d:23:f4:
         f9:4a:55:75:fa:85:f2:5e:44:5b:f9:04:a2:c0:6d:3b:fc:f3:
         e8:be:5d:79:5d:4c:a7:51:1e:6d:4a:0c:ca:81:a3:bb:0b:9a:
         6c:cf:3b:0b:0f:45:80:eb:fc:4a:6d:a7:34:47:7d:b2:d1:59:
         47:1c:a7:50:1f:1c:53:68:13:46:47:4b:53:58:1c:d9:9d:19:
         46:29:71:ee:34:7f:59:c9:72:54:bd:23:0f:88:06:09:83:27:
         9c:9b:4b:0d:6d:c8:10:0c:49:15:17:1a:e4:94:bc:a4:0b:74:
         24:35:c1:95:6c:ff:f1:0a:70:79:67:c9:6c:05:f5:f6:b2:23:
         87:8f:6c:bd:08:bf:38:89:6e:b3:59:3d:62:63:55:a2:02:e5:
         31:db:e6:f7:1f:5b:da:f7:a9:18:ed:e5:a2:2f:c5:e2:09:56:
         7f:18:eb:4a
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 10 20:38:14 2024 by rpki-client on console-ams.rpki-client.org