Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/TM3wZCRk-vVZrRaq3t4qNDuqsLE.roa
File:                     TM3wZCRk-vVZrRaq3t4qNDuqsLE.roa (raw, json)
Hash identifier:          AID5n7RZYADQBfAPlhmju5AdoFqsWOscgSpxKwkEoDk=
Subject key identifier:   4C:CD:F0:64:24:64:FA:F5:59:AD:16:AA:DE:DE:2A:34:3B:AA:B0:B1
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       018F3F67C6D7C0F3DBE284208CEC5EFF3A23
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/TM3wZCRk-vVZrRaq3t4qNDuqsLE.roa
Signing time:             Fri 03 May 2024 17:01:56 +0000
ROA not before:           Fri 03 May 2024 17:01:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63293
IP address blocks:        2a03:2887:ff02::/48 maxlen: 48
                          2a03:2887:ff03::/48 maxlen: 48
                          2a03:2887:ff04::/48 maxlen: 48
                          2a03:2887:ff18::/48 maxlen: 48
                          2a03:2887:ff19::/48 maxlen: 48
                          2a03:2887:ff1b::/48 maxlen: 48
                          2a03:2887:ff1c::/48 maxlen: 48
                          2a03:2887:ff1d::/48 maxlen: 48
                          2a03:2887:ff1e::/48 maxlen: 48
                          2a03:2887:ff1f::/48 maxlen: 48
                          2a03:2887:ff21::/48 maxlen: 48
                          2a03:2887:ff23::/48 maxlen: 48
                          2a03:2887:ff24::/48 maxlen: 48
                          2a03:2887:ff25::/48 maxlen: 48
                          2a03:2887:ff27::/48 maxlen: 48
                          2a03:2887:ff28::/48 maxlen: 48
                          2a03:2887:ff29::/48 maxlen: 48
                          2a03:2887:ff2a::/48 maxlen: 48
                          2a03:2887:ff2b::/48 maxlen: 48
                          2a03:2887:ff2e::/48 maxlen: 48
                          2a03:2887:ff2f::/48 maxlen: 48
                          2a03:2887:ff30::/48 maxlen: 48
                          2a03:2887:ff35::/48 maxlen: 48
                          2a03:2887:ff36::/48 maxlen: 48
                          2a03:2887:ff37::/48 maxlen: 48
                          2a03:2887:ff38::/48 maxlen: 48
                          2a03:2887:ff39::/48 maxlen: 48
                          2a03:2887:ff3a::/48 maxlen: 48
                          2a03:2887:ff3b::/48 maxlen: 48
                          2a03:2887:ff3f::/48 maxlen: 48
                          2a03:2887:ff40::/48 maxlen: 48
                          2a03:2887:ff41::/48 maxlen: 48
                          2a03:2887:ff43::/48 maxlen: 48
                          2a03:2887:ff44::/48 maxlen: 48
                          2a03:2887:ff45::/48 maxlen: 48
                          2a03:2887:ff48::/48 maxlen: 48
                          2a03:2887:ff49::/48 maxlen: 48
                          2a03:2887:ff4a::/48 maxlen: 48
                          2a03:2887:ff4b::/48 maxlen: 48
                          2a03:2887:ff4d::/48 maxlen: 48
                          2a03:2887:ff4e::/48 maxlen: 48
                          2a03:2887:ff4f::/48 maxlen: 48
                          2a03:2887:ff51::/48 maxlen: 48
                          2a03:2887:ff52::/48 maxlen: 48
                          2a03:2887:ff53::/48 maxlen: 48
                          2a03:2887:ff54::/48 maxlen: 48
                          2a03:2887:ff55::/48 maxlen: 48
                          2a03:2887:ff56::/48 maxlen: 48
                          2a03:2887:ff57::/48 maxlen: 48
                          2a03:2887:ff58::/48 maxlen: 48
                          2a03:2887:ff59::/48 maxlen: 48
                          2a03:2887:ff60::/48 maxlen: 48
                          2a03:2887:ff61::/48 maxlen: 48
                          2a03:2887:ff62::/48 maxlen: 48
                          2a03:2887:ff63::/48 maxlen: 48
                          2a03:2887:ff64::/48 maxlen: 48
                          2a03:2887:ff65::/48 maxlen: 48
                          2a03:2887:ff66::/48 maxlen: 48
                          2a03:2887:ff67::/48 maxlen: 48
                          2a03:2887:ff68::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 09 May 2024 17:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:67:c6:d7:c0:f3:db:e2:84:20:8c:ec:5e:ff:3a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: May  3 17:01:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4ccdf0642464faf559ad16aadede2a343baab0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:d6:eb:53:18:4f:54:2d:66:6c:c6:a3:55:
                    8d:b5:68:e5:1f:e2:70:b5:c5:08:ce:4a:7d:c1:38:
                    c7:44:86:f1:94:24:46:3c:3f:1f:8b:e8:ea:d8:e7:
                    6b:15:02:d3:8b:8f:03:fc:2e:c5:a5:85:16:9b:6c:
                    cd:1d:e2:37:ab:8a:20:5a:5d:30:41:16:31:dc:be:
                    a9:94:46:fe:da:d1:61:9e:d5:3c:72:af:20:24:0a:
                    c0:8c:42:dc:2c:51:27:0e:13:3a:8b:0b:fa:bb:21:
                    49:f9:2d:e9:0a:e5:98:b5:b5:c3:80:f1:54:c7:b0:
                    7c:aa:6d:c5:28:bc:23:66:54:a4:c9:ea:53:a7:88:
                    7b:f2:ad:c8:9b:e1:33:df:50:d3:a5:7a:88:df:33:
                    43:97:f1:fa:f7:65:2f:fc:50:33:ea:1c:8f:44:54:
                    2f:cf:63:bf:9b:f9:23:c1:44:db:1c:81:64:1e:e9:
                    c6:a6:49:a0:5b:de:44:79:32:d4:72:c6:a7:8a:92:
                    66:b0:80:3f:10:f1:dd:3c:6d:64:e8:d1:07:f5:13:
                    7b:fb:b4:d6:d1:45:80:6a:2b:d6:e9:8e:fe:40:c7:
                    21:e9:f5:6f:1e:5c:5c:f3:57:ec:b2:7a:55:58:96:
                    b8:a4:a4:b6:55:e1:0c:84:74:ed:c4:6d:eb:d5:37:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:F0:64:24:64:FA:F5:59:AD:16:AA:DE:DE:2A:34:3B:AA:B0:B1
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/TM3wZCRk-vVZrRaq3t4qNDuqsLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2887:ff02::-2a03:2887:ff04:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff18::/47
                  2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff21::/48
                  2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff3f::-2a03:2887:ff41:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff43::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff48::/46
                  2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff60::-2a03:2887:ff68:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         41:11:8a:e6:15:60:40:27:73:9f:2f:1e:85:29:c9:1d:fd:73:
         9a:bc:33:a5:e6:34:f8:11:17:ad:45:f5:a2:27:83:08:bf:eb:
         71:da:48:f4:96:b5:fe:4c:75:d7:8d:1b:f7:f3:3a:33:2f:94:
         d4:f9:f3:4e:29:2a:ed:c8:fd:b9:39:1e:e3:43:87:91:e8:9a:
         8b:26:4a:36:5f:f1:a7:c8:cd:2e:52:64:12:98:14:81:63:16:
         a3:65:51:ad:10:c0:22:a4:58:f6:99:a3:77:f9:87:ef:df:fd:
         22:3a:49:79:75:16:e1:ba:28:ac:46:b5:51:06:e2:ab:2b:e1:
         fe:1e:71:7a:b5:02:0c:37:df:6e:8e:80:71:39:ac:60:92:8a:
         4e:c5:65:9d:10:9a:de:43:13:49:0b:ca:01:c0:63:ee:80:30:
         3c:59:aa:5e:e4:a6:b2:d5:56:0b:1f:34:a3:c8:10:6f:ef:63:
         a9:bd:f9:ed:19:fa:d8:c7:cc:72:8f:d8:9e:36:36:65:75:5a:
         e1:a2:c7:b5:83:aa:f2:cc:8a:9e:57:8c:da:cd:11:3e:88:e7:
         cb:27:78:2c:27:0d:25:6a:93:89:4f:b6:89:d6:eb:71:ea:14:
         ab:4c:d6:2b:19:f7:cb:3b:ba:c0:19:a7:11:f8:5e:a6:0d:8a:
         e6:73:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org