Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/DMysXsVt0KrOXpCX1RAC_Ag-qJg.roa
File:                     DMysXsVt0KrOXpCX1RAC_Ag-qJg.roa (raw, json)
Hash identifier:          rkOxqIqLBWE56V2iHua9y90kO8qO7URwzxOvuvWkLis=
Subject key identifier:   0C:CC:AC:5E:C5:6D:D0:AA:CE:5E:90:97:D5:10:02:FC:08:3E:A8:98
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       018C833DFAEBE45B335A0BF289111F975BBE
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/DMysXsVt0KrOXpCX1RAC_Ag-qJg.roa
Signing time:             Tue 19 Dec 2023 18:02:06 +0000
ROA not before:           Tue 19 Dec 2023 18:02:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63293
IP address blocks:        2a03:2887:ff30::/48 maxlen: 48
                          2a03:2887:ff55::/48 maxlen: 48
                          2a03:2887:ff3a::/48 maxlen: 48
                          2a03:2887:ff1f::/48 maxlen: 48
                          2a03:2887:ff04::/48 maxlen: 48
                          2a03:2887:ff44::/48 maxlen: 48
                          2a03:2887:ff29::/48 maxlen: 48
                          2a03:2887:ff4e::/48 maxlen: 48
                          2a03:2887:ff18::/48 maxlen: 48
                          2a03:2887:ff58::/48 maxlen: 48
                          2a03:2887:ff62::/48 maxlen: 48
                          2a03:2887:ff51::/48 maxlen: 48
                          2a03:2887:ff36::/48 maxlen: 48
                          2a03:2887:ff1b::/48 maxlen: 48
                          2a03:2887:ff40::/48 maxlen: 48
                          2a03:2887:ff25::/48 maxlen: 48
                          2a03:2887:ff4a::/48 maxlen: 48
                          2a03:2887:ff2f::/48 maxlen: 48
                          2a03:2887:ff54::/48 maxlen: 48
                          2a03:2887:ff39::/48 maxlen: 48
                          2a03:2887:ff1e::/48 maxlen: 48
                          2a03:2887:ff03::/48 maxlen: 48
                          2a03:2887:ff43::/48 maxlen: 48
                          2a03:2887:ff28::/48 maxlen: 48
                          2a03:2887:ff4d::/48 maxlen: 48
                          2a03:2887:ff57::/48 maxlen: 48
                          2a03:2887:ff21::/48 maxlen: 48
                          2a03:2887:ff2b::/48 maxlen: 48
                          2a03:2887:ff35::/48 maxlen: 48
                          2a03:2887:ff3f::/48 maxlen: 48
                          2a03:2887:ff24::/48 maxlen: 48
                          2a03:2887:ff49::/48 maxlen: 48
                          2a03:2887:ff2e::/48 maxlen: 48
                          2a03:2887:ff53::/48 maxlen: 48
                          2a03:2887:ff38::/48 maxlen: 48
                          2a03:2887:ff1d::/48 maxlen: 48
                          2a03:2887:ff02::/48 maxlen: 48
                          2a03:2887:ff27::/48 maxlen: 48
                          2a03:2887:ff56::/48 maxlen: 48
                          2a03:2887:ff3b::/48 maxlen: 48
                          2a03:2887:ff60::/48 maxlen: 48
                          2a03:2887:ff45::/48 maxlen: 48
                          2a03:2887:ff2a::/48 maxlen: 48
                          2a03:2887:ff4f::/48 maxlen: 48
                          2a03:2887:ff19::/48 maxlen: 48
                          2a03:2887:ff59::/48 maxlen: 48
                          2a03:2887:ff23::/48 maxlen: 48
                          2a03:2887:ff48::/48 maxlen: 48
                          2a03:2887:ff52::/48 maxlen: 48
                          2a03:2887:ff37::/48 maxlen: 48
                          2a03:2887:ff1c::/48 maxlen: 48
                          2a03:2887:ff41::/48 maxlen: 48
                          2a03:2887:ff4b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:83:3d:fa:eb:e4:5b:33:5a:0b:f2:89:11:1f:97:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Dec 19 18:02:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0cccac5ec56dd0aace5e9097d51002fc083ea898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:b1:7e:88:02:9f:9b:6f:4b:1d:97:2d:cc:
                    a8:55:f6:43:61:71:c0:58:7c:f7:2a:2d:45:7d:c2:
                    a3:c5:82:16:68:4b:29:d3:d9:19:48:7f:91:ff:85:
                    f0:91:a9:2b:2f:f8:56:56:9e:b5:a5:0c:1b:8c:26:
                    5b:3a:b0:29:2a:5c:69:38:67:ed:e5:8a:9f:84:93:
                    fd:a2:fc:dd:32:d5:34:7d:59:39:1d:72:91:8f:42:
                    13:d8:83:0e:66:18:42:a9:0c:ac:02:40:c8:ba:50:
                    4c:6d:ae:37:35:26:58:e1:55:b3:13:5d:33:c1:5a:
                    05:9f:d3:a4:92:6b:91:76:73:62:d4:80:e4:74:d4:
                    5e:eb:31:2b:a0:48:95:6a:36:39:1a:b9:82:62:b5:
                    97:df:0e:d2:ce:89:37:76:ea:71:6a:13:ca:51:d5:
                    e4:a8:0a:30:bd:b6:0e:50:27:0e:3b:8a:db:f5:18:
                    6f:d1:c4:ef:69:40:96:fc:59:1a:7b:84:5a:9e:9c:
                    63:36:cd:e2:50:1b:c2:26:bd:6e:5d:c9:39:fd:c1:
                    5d:d4:fa:1d:56:b2:c7:39:88:e8:1a:c4:39:30:6b:
                    ad:0a:4b:bc:e9:e5:4d:97:39:32:82:84:da:42:f2:
                    8f:b8:09:23:af:33:96:bc:e5:a6:3a:19:a7:9f:12:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:AC:5E:C5:6D:D0:AA:CE:5E:90:97:D5:10:02:FC:08:3E:A8:98
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/DMysXsVt0KrOXpCX1RAC_Ag-qJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2887:ff02::-2a03:2887:ff04:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff18::/47
                  2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff21::/48
                  2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff3f::-2a03:2887:ff41:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff43::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff48::/46
                  2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff60::/48
                  2a03:2887:ff62::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:21:cf:05:7b:94:c3:77:37:fe:6e:b8:60:c0:08:bf:ee:24:
         6e:c8:50:77:78:0a:b3:77:bc:7e:8d:e6:bb:61:66:f2:8a:a2:
         4c:93:ca:92:03:a2:dd:52:ef:53:38:a3:1e:f6:f5:30:e4:64:
         13:ca:ba:26:c9:a3:7b:c5:3b:bd:57:74:53:ac:b3:6c:c5:49:
         c3:8d:bc:f4:4c:97:63:8f:4e:78:72:e5:0c:41:63:90:e4:be:
         ab:b5:09:70:3b:5a:8e:09:e9:6a:94:88:18:5e:40:37:d7:b6:
         fb:18:bf:3b:23:a0:cf:a2:5d:5c:60:d9:83:07:b2:a5:93:e2:
         0a:75:08:66:cb:22:c8:31:17:b9:47:e9:fd:f5:9a:86:fb:87:
         9b:92:33:2e:68:45:7b:8e:87:4e:42:1d:ca:0b:a1:60:4e:49:
         51:31:31:2c:51:c5:78:3a:2c:d3:8d:d4:5b:d6:4f:60:60:36:
         90:e4:8a:f3:0c:6c:e6:6f:8f:58:5a:95:b6:66:84:b3:bd:73:
         bb:d0:22:d0:50:23:41:0a:41:c8:cd:2e:fb:29:b8:90:8c:16:
         04:76:5f:04:b6:ff:4a:06:64:f9:ff:d1:48:05:7a:11:ba:18:
         87:3d:51:e2:66:51:d7:26:90:ea:cf:6a:ae:24:7d:4a:4e:87:
         2d:a6:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:57 2024 by rpki-client on console-fra.rpki-client.org