Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/SNAfaedbX4PvZL3vavw2u6ziySM.roa
File:                     SNAfaedbX4PvZL3vavw2u6ziySM.roa (raw, json)
Hash identifier:          JTZKj1IInZGRPWnWXHGhmh8gbI2d6VR+IMOq0lUPM2c=
Subject key identifier:   48:D0:1F:69:E7:5B:5F:83:EF:64:BD:EF:6A:FC:36:BB:AC:E2:C9:23
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       018FEE807860C5CA25ED9B75386865653971
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/SNAfaedbX4PvZL3vavw2u6ziySM.roa
Signing time:             Thu 06 Jun 2024 17:02:27 +0000
ROA not before:           Thu 06 Jun 2024 17:02:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63293
IP address blocks:        2a03:2887:ff02::/48 maxlen: 48
                          2a03:2887:ff03::/48 maxlen: 48
                          2a03:2887:ff04::/48 maxlen: 48
                          2a03:2887:ff18::/48 maxlen: 48
                          2a03:2887:ff19::/48 maxlen: 48
                          2a03:2887:ff1b::/48 maxlen: 48
                          2a03:2887:ff1c::/48 maxlen: 48
                          2a03:2887:ff1d::/48 maxlen: 48
                          2a03:2887:ff1e::/48 maxlen: 48
                          2a03:2887:ff1f::/48 maxlen: 48
                          2a03:2887:ff21::/48 maxlen: 48
                          2a03:2887:ff23::/48 maxlen: 48
                          2a03:2887:ff24::/48 maxlen: 48
                          2a03:2887:ff25::/48 maxlen: 48
                          2a03:2887:ff27::/48 maxlen: 48
                          2a03:2887:ff28::/48 maxlen: 48
                          2a03:2887:ff29::/48 maxlen: 48
                          2a03:2887:ff2a::/48 maxlen: 48
                          2a03:2887:ff2b::/48 maxlen: 48
                          2a03:2887:ff2e::/48 maxlen: 48
                          2a03:2887:ff2f::/48 maxlen: 48
                          2a03:2887:ff30::/48 maxlen: 48
                          2a03:2887:ff33::/48 maxlen: 48
                          2a03:2887:ff35::/48 maxlen: 48
                          2a03:2887:ff36::/48 maxlen: 48
                          2a03:2887:ff37::/48 maxlen: 48
                          2a03:2887:ff38::/48 maxlen: 48
                          2a03:2887:ff39::/48 maxlen: 48
                          2a03:2887:ff3a::/48 maxlen: 48
                          2a03:2887:ff3b::/48 maxlen: 48
                          2a03:2887:ff3f::/48 maxlen: 48
                          2a03:2887:ff40::/48 maxlen: 48
                          2a03:2887:ff41::/48 maxlen: 48
                          2a03:2887:ff42::/48 maxlen: 48
                          2a03:2887:ff43::/48 maxlen: 48
                          2a03:2887:ff44::/48 maxlen: 48
                          2a03:2887:ff45::/48 maxlen: 48
                          2a03:2887:ff48::/48 maxlen: 48
                          2a03:2887:ff49::/48 maxlen: 48
                          2a03:2887:ff4a::/48 maxlen: 48
                          2a03:2887:ff4b::/48 maxlen: 48
                          2a03:2887:ff4d::/48 maxlen: 48
                          2a03:2887:ff4e::/48 maxlen: 48
                          2a03:2887:ff4f::/48 maxlen: 48
                          2a03:2887:ff51::/48 maxlen: 48
                          2a03:2887:ff52::/48 maxlen: 48
                          2a03:2887:ff53::/48 maxlen: 48
                          2a03:2887:ff54::/48 maxlen: 48
                          2a03:2887:ff55::/48 maxlen: 48
                          2a03:2887:ff56::/48 maxlen: 48
                          2a03:2887:ff57::/48 maxlen: 48
                          2a03:2887:ff58::/48 maxlen: 48
                          2a03:2887:ff59::/48 maxlen: 48
                          2a03:2887:ff60::/48 maxlen: 48
                          2a03:2887:ff61::/48 maxlen: 48
                          2a03:2887:ff62::/48 maxlen: 48
                          2a03:2887:ff63::/48 maxlen: 48
                          2a03:2887:ff64::/48 maxlen: 48
                          2a03:2887:ff65::/48 maxlen: 48
                          2a03:2887:ff66::/48 maxlen: 48
                          2a03:2887:ff67::/48 maxlen: 48
                          2a03:2887:ff68::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 17:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ee:80:78:60:c5:ca:25:ed:9b:75:38:68:65:65:39:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Jun  6 17:02:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=48d01f69e75b5f83ef64bdef6afc36bbace2c923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:74:e4:88:c0:8c:61:29:51:de:50:a1:21:
                    4a:bd:84:d5:ab:6a:bb:5a:a5:9b:8e:e1:ce:7b:61:
                    06:95:ea:7c:b9:d1:56:fc:a1:18:ce:1e:ac:c6:74:
                    c1:c2:1a:6f:69:ad:5d:9a:22:a9:ea:c3:1b:f5:30:
                    5d:c8:9c:26:42:35:90:ef:d1:04:e5:cf:d8:a4:fa:
                    7b:67:91:d7:ca:76:08:be:ce:ba:e9:9c:e7:aa:96:
                    49:45:dd:df:9f:5f:b7:bc:cb:f3:93:f4:71:4c:9c:
                    31:eb:94:ed:29:98:69:43:68:ff:d2:c5:ce:fd:a7:
                    5e:55:8c:97:af:4d:e8:ea:03:aa:2a:cc:32:7a:9c:
                    c7:a5:39:8d:f5:11:16:bd:ef:a6:e4:38:f4:a1:e2:
                    19:7a:92:17:82:3e:4a:a2:1a:b8:7f:a6:17:44:74:
                    91:85:b3:cd:cb:a9:eb:47:53:05:35:6b:37:60:ca:
                    e4:fa:1d:15:4a:a0:33:4b:92:a9:a3:19:81:8a:31:
                    8c:c4:86:03:3b:c9:c6:0e:34:56:5d:74:b1:e0:56:
                    54:d0:33:96:eb:c8:67:00:e3:e5:ed:b0:ca:4c:95:
                    9b:cb:f6:e0:57:92:15:70:cc:9f:a8:bc:14:0a:92:
                    90:3f:31:06:c9:17:f5:cc:80:83:80:ef:51:0b:b6:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:1F:69:E7:5B:5F:83:EF:64:BD:EF:6A:FC:36:BB:AC:E2:C9:23
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/SNAfaedbX4PvZL3vavw2u6ziySM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2887:ff02::-2a03:2887:ff04:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff18::/47
                  2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff21::/48
                  2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff33::/48
                  2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff48::/46
                  2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff60::-2a03:2887:ff68:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         79:f1:ab:dc:71:88:db:58:cc:47:77:ad:b6:33:d2:2f:5f:79:
         d8:06:64:03:8c:ca:03:77:ed:a3:d8:2f:6b:e4:a7:a5:76:ff:
         05:62:7e:99:ef:f8:b2:94:dd:d5:fb:78:19:0c:30:e4:67:3d:
         e7:41:15:1c:fa:7d:07:6e:03:96:d7:74:7e:a9:4c:99:c7:c0:
         fd:db:a7:ab:fd:87:09:79:1b:a5:22:bb:89:a8:f1:67:36:72:
         79:5d:1d:3f:2b:3a:88:86:02:7d:86:26:60:99:7f:0c:57:38:
         56:19:22:09:b0:b9:87:3c:e0:3f:21:de:c5:c9:04:90:2f:14:
         54:f4:0a:eb:07:19:86:d9:94:9a:a0:d8:c8:26:bf:23:29:f4:
         3d:d4:f1:74:78:80:0c:94:7e:26:72:d7:f9:5c:2a:af:80:20:
         f7:0b:d1:35:01:cf:0e:7c:33:4e:24:55:4d:8d:e2:48:26:1b:
         b0:2d:aa:23:77:ab:c1:f8:3d:63:82:17:f1:6a:c5:b4:cd:3d:
         a1:68:59:3a:99:b1:73:bc:87:b4:b2:a7:dc:1d:35:80:82:ba:
         03:df:2e:f4:05:cb:e3:fe:3f:d5:d3:41:4e:b0:68:03:4f:2d:
         82:ee:7e:ea:4d:38:c5:2e:08:b6:0c:d3:05:97:fa:83:27:0c:
         93:16:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 23:17:50 2024 by rpki-client on console-ams.rpki-client.org