Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/yjAxeNLJpkMTgucNw7PnSVyQAYc.roa
File:                     yjAxeNLJpkMTgucNw7PnSVyQAYc.roa (raw, json)
Hash identifier:          YH/snMlYgWCnK6QFF+OCiTFVxayLpy9MN5EElminM/M=
Subject key identifier:   CA:30:31:78:D2:C9:A6:43:13:82:E7:0D:C3:B3:E7:49:5C:90:01:87
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       018B90653E3D78204106B8518E6CC5EDCAE4
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/yjAxeNLJpkMTgucNw7PnSVyQAYc.roa
Signing time:             Thu 02 Nov 2023 14:17:16 +0000
ROA not before:           Thu 02 Nov 2023 14:17:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3360
IP address blocks:        2a03:5000:22::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:30::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:20::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:90:65:3e:3d:78:20:41:06:b8:51:8e:6c:c5:ed:ca:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Nov  2 14:17:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca303178d2c9a6431382e70dc3b3e7495c900187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:0d:ff:8d:ab:55:e8:0f:ea:0c:95:3d:e8:
                    cf:8b:95:2e:8e:5b:f9:a0:b3:b0:02:08:d4:88:43:
                    3e:06:6a:b2:7f:10:0d:e4:d1:e2:7e:26:d2:e5:ed:
                    e5:79:40:c8:0d:bf:32:ad:93:58:dc:41:6a:3c:ce:
                    18:88:d4:05:73:3a:8f:e0:97:77:da:47:41:5d:bd:
                    c7:0b:e8:a6:85:44:50:45:9d:9e:8b:6f:8d:d9:23:
                    19:81:b9:09:5b:64:a4:35:fc:d8:72:8c:b9:95:28:
                    92:cf:56:e9:96:4e:bd:5c:03:70:6b:80:13:d1:dd:
                    b6:67:0f:58:8e:fa:91:eb:2f:3d:b3:a0:82:20:d0:
                    a5:01:8c:b6:d4:e0:5f:69:e4:87:d8:8e:56:fb:64:
                    6b:b3:00:a7:6c:d5:1b:85:50:80:50:a9:34:c7:f1:
                    05:40:94:66:7c:b4:9e:5e:e7:cc:31:fb:6e:da:db:
                    25:74:bd:65:d8:a1:88:0d:01:72:77:54:18:fb:ec:
                    1d:78:de:00:9b:04:b7:0c:34:b7:97:5f:62:cc:82:
                    ea:57:10:fe:94:b1:8e:cb:bf:63:81:a5:e4:5b:da:
                    eb:1e:fb:f5:b4:6b:e5:31:27:25:52:33:2e:f1:46:
                    6f:43:98:b3:72:29:94:4e:0c:4c:bb:d7:69:8a:d3:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:30:31:78:D2:C9:A6:43:13:82:E7:0D:C3:B3:E7:49:5C:90:01:87
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/yjAxeNLJpkMTgucNw7PnSVyQAYc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:9f:65:3b:48:79:38:f8:cd:38:a7:a7:21:02:8d:d2:07:
         8c:7e:86:c6:be:e7:cb:f3:4e:3d:44:fa:06:2b:04:61:d2:1d:
         07:f7:e9:95:64:ef:a5:d3:6e:40:6b:78:72:c3:46:57:55:d1:
         61:de:25:36:6c:a6:7b:32:27:17:22:d8:c4:b2:a7:5b:2e:24:
         1a:10:1e:f5:87:c7:f6:d6:7c:02:4f:1c:22:42:d1:cd:be:d7:
         d8:d8:66:a3:11:de:17:54:db:68:4b:91:b7:64:0f:45:9a:f0:
         f0:e8:5a:82:a3:42:4c:f8:ce:de:28:83:bf:71:06:e8:c2:e5:
         cd:44:de:33:cd:7c:4a:40:03:59:86:9e:01:e1:9e:62:93:78:
         c4:49:3e:5c:18:e1:a0:83:8a:96:ee:1f:d5:59:56:29:ac:94:
         63:fc:a3:a1:d4:1d:57:00:45:d3:e8:cb:3d:e2:4c:3c:c0:e1:
         59:fb:1b:70:aa:bc:3b:20:b8:e7:26:ef:f6:31:73:d8:91:c5:
         bc:67:99:e7:f2:19:0a:95:7e:f0:b6:77:46:b5:92:e3:d5:e7:
         b6:f4:e4:e4:e9:92:f0:f5:df:89:47:5a:49:0b:ad:51:63:a5:
         4e:e2:0c:96:31:b3:91:62:02:b6:b6:39:86:1e:da:c2:f6:69:
         2f:e3:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org