Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/2nnNsNe6SzVjraMiByrOU8pD-VM.roa
File:                     2nnNsNe6SzVjraMiByrOU8pD-VM.roa (raw, json)
Hash identifier:          Ba42SELxj3HmfJKya8lA2hbJY0qOe//lVPgI2qMBTbY=
Subject key identifier:   DA:79:CD:B0:D7:BA:4B:35:63:AD:A3:22:07:2A:CE:53:CA:43:F9:53
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       018F0BE85D4C0985A287A323C630FB852F4E
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/2nnNsNe6SzVjraMiByrOU8pD-VM.roa
Signing time:             Tue 23 Apr 2024 17:02:08 +0000
ROA not before:           Tue 23 Apr 2024 17:02:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63293
IP address blocks:        2a03:2887:ff02::/48 maxlen: 48
                          2a03:2887:ff03::/48 maxlen: 48
                          2a03:2887:ff04::/48 maxlen: 48
                          2a03:2887:ff18::/48 maxlen: 48
                          2a03:2887:ff19::/48 maxlen: 48
                          2a03:2887:ff1b::/48 maxlen: 48
                          2a03:2887:ff1c::/48 maxlen: 48
                          2a03:2887:ff1d::/48 maxlen: 48
                          2a03:2887:ff1e::/48 maxlen: 48
                          2a03:2887:ff1f::/48 maxlen: 48
                          2a03:2887:ff21::/48 maxlen: 48
                          2a03:2887:ff23::/48 maxlen: 48
                          2a03:2887:ff24::/48 maxlen: 48
                          2a03:2887:ff25::/48 maxlen: 48
                          2a03:2887:ff27::/48 maxlen: 48
                          2a03:2887:ff28::/48 maxlen: 48
                          2a03:2887:ff29::/48 maxlen: 48
                          2a03:2887:ff2a::/48 maxlen: 48
                          2a03:2887:ff2b::/48 maxlen: 48
                          2a03:2887:ff2e::/48 maxlen: 48
                          2a03:2887:ff2f::/48 maxlen: 48
                          2a03:2887:ff30::/48 maxlen: 48
                          2a03:2887:ff35::/48 maxlen: 48
                          2a03:2887:ff36::/48 maxlen: 48
                          2a03:2887:ff37::/48 maxlen: 48
                          2a03:2887:ff38::/48 maxlen: 48
                          2a03:2887:ff39::/48 maxlen: 48
                          2a03:2887:ff3a::/48 maxlen: 48
                          2a03:2887:ff3b::/48 maxlen: 48
                          2a03:2887:ff3f::/48 maxlen: 48
                          2a03:2887:ff40::/48 maxlen: 48
                          2a03:2887:ff41::/48 maxlen: 48
                          2a03:2887:ff43::/48 maxlen: 48
                          2a03:2887:ff44::/48 maxlen: 48
                          2a03:2887:ff45::/48 maxlen: 48
                          2a03:2887:ff48::/48 maxlen: 48
                          2a03:2887:ff49::/48 maxlen: 48
                          2a03:2887:ff4a::/48 maxlen: 48
                          2a03:2887:ff4b::/48 maxlen: 48
                          2a03:2887:ff4d::/48 maxlen: 48
                          2a03:2887:ff4e::/48 maxlen: 48
                          2a03:2887:ff4f::/48 maxlen: 48
                          2a03:2887:ff51::/48 maxlen: 48
                          2a03:2887:ff52::/48 maxlen: 48
                          2a03:2887:ff53::/48 maxlen: 48
                          2a03:2887:ff54::/48 maxlen: 48
                          2a03:2887:ff55::/48 maxlen: 48
                          2a03:2887:ff56::/48 maxlen: 48
                          2a03:2887:ff57::/48 maxlen: 48
                          2a03:2887:ff58::/48 maxlen: 48
                          2a03:2887:ff59::/48 maxlen: 48
                          2a03:2887:ff60::/48 maxlen: 48
                          2a03:2887:ff61::/48 maxlen: 48
                          2a03:2887:ff62::/48 maxlen: 48
                          2a03:2887:ff63::/48 maxlen: 48
                          2a03:2887:ff64::/48 maxlen: 48
                          2a03:2887:ff65::/48 maxlen: 48
                          2a03:2887:ff66::/48 maxlen: 48
                          2a03:2887:ff67::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 03 May 2024 17:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0b:e8:5d:4c:09:85:a2:87:a3:23:c6:30:fb:85:2f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Apr 23 17:02:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=da79cdb0d7ba4b3563ada322072ace53ca43f953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ae:da:85:2f:a3:d7:2c:02:42:a3:f8:9f:37:
                    3d:0c:5a:24:68:62:26:d5:39:5c:8f:fd:28:5f:ed:
                    44:3e:3f:82:5a:d4:a5:ad:4a:a0:ce:fd:e5:6b:b1:
                    b5:ec:94:48:c5:b3:30:4b:88:66:ef:84:0b:5b:eb:
                    fb:67:cd:ec:32:01:5d:ca:ec:96:8f:ad:71:04:6c:
                    4c:9a:bc:5b:8d:f4:9a:98:0c:66:67:fb:21:03:3c:
                    fc:98:7a:a2:34:a3:46:1f:31:9e:04:5c:a9:1b:31:
                    7c:df:70:1e:06:fd:c1:19:6b:2e:ab:fe:2e:c8:c6:
                    31:dc:18:cf:64:75:a7:60:b6:8f:57:18:29:3b:c8:
                    38:03:d5:4c:c9:42:6c:1a:64:9b:29:52:52:15:2a:
                    d5:27:18:e6:69:57:3d:5d:84:4d:41:3c:2b:04:13:
                    9a:11:37:e0:0b:14:c8:eb:19:a9:14:d4:9a:c2:da:
                    ce:69:b2:2f:f5:ba:80:1f:26:aa:ed:af:77:ff:54:
                    6e:d3:06:88:18:1e:49:a5:fd:5b:af:4e:45:20:4c:
                    20:3d:66:51:3a:f5:3c:bc:50:bc:80:6d:24:88:c7:
                    6e:0a:15:24:16:64:12:02:95:09:aa:27:8a:c1:c2:
                    d6:13:e6:ef:0b:80:2c:4b:bb:09:d5:a1:6e:3d:15:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:79:CD:B0:D7:BA:4B:35:63:AD:A3:22:07:2A:CE:53:CA:43:F9:53
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/2nnNsNe6SzVjraMiByrOU8pD-VM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2887:ff02::-2a03:2887:ff04:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff18::/47
                  2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff21::/48
                  2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff3f::-2a03:2887:ff41:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff43::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff48::/46
                  2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff60::/45

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:1a:b3:39:30:fc:a0:4f:5a:96:22:74:2d:6b:b0:42:ba:
         b2:be:f9:b1:d0:18:ad:9b:b7:f0:56:cc:68:3c:06:a1:f3:c0:
         9a:a3:4f:fd:d5:0b:f6:18:08:90:3c:88:63:a5:0f:66:b6:bd:
         14:07:fe:0d:bf:c4:bd:83:e4:21:34:5c:8b:58:09:24:35:93:
         0c:c0:2e:bb:7e:c5:3c:f0:ba:55:9a:58:09:40:d8:bf:0a:92:
         16:fc:a0:d9:91:7e:af:38:19:ae:28:af:5d:03:3c:d3:05:27:
         36:fe:8e:2f:2c:4a:60:9c:9c:de:36:e5:74:67:41:f8:e0:82:
         ba:cc:b6:95:ec:77:cb:53:f8:1b:ac:07:02:f8:5e:7b:4b:37:
         f1:c0:52:f0:bb:a2:19:69:7e:e6:e1:17:f4:8a:af:39:a6:c8:
         d5:24:81:a9:45:6b:ae:bc:97:17:02:ed:bb:9a:20:32:54:3b:
         b7:40:b7:4a:17:19:a6:19:ea:00:27:81:dd:5d:b8:b7:9e:18:
         c1:a8:9b:79:b3:05:2f:3e:a6:d9:28:3a:79:7a:6c:78:be:4c:
         7d:51:f6:21:76:6a:e1:86:cf:97:2d:88:25:35:2c:34:20:01:
         d6:2c:60:6c:52:a7:f7:30:95:39:fc:4b:05:73:7f:70:6a:11:
         cd:2f:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org