Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/uiTCRfgARTEXH3NLNTYHzR_Dpk8.roa
File:                     uiTCRfgARTEXH3NLNTYHzR_Dpk8.roa (raw, json)
Hash identifier:          8YRR9HpPlnasbZLSL/JbXxKvKw5M5IcOhfd8DAb8fSg=
Subject key identifier:   BA:24:C2:45:F8:00:45:31:17:1F:73:4B:35:36:07:CD:1F:C3:A6:4F
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       0196CFBF1BD9F1844DFCB3C6729B260A8A29
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/uiTCRfgARTEXH3NLNTYHzR_Dpk8.roa
Signing time:             Wed 14 May 2025 17:02:10 +0000
ROA not before:           Wed 14 May 2025 17:02:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     63293
IP address blocks:        2a03:2887:ff00::/48 maxlen: 48
                          2a03:2887:ff02::/48 maxlen: 48
                          2a03:2887:ff03::/48 maxlen: 48
                          2a03:2887:ff04::/48 maxlen: 48
                          2a03:2887:ff05::/48 maxlen: 48
                          2a03:2887:ff06::/48 maxlen: 48
                          2a03:2887:ff07::/48 maxlen: 48
                          2a03:2887:ff08::/48 maxlen: 48
                          2a03:2887:ff09::/48 maxlen: 48
                          2a03:2887:ff0a::/48 maxlen: 48
                          2a03:2887:ff18::/48 maxlen: 48
                          2a03:2887:ff19::/48 maxlen: 48
                          2a03:2887:ff1b::/48 maxlen: 48
                          2a03:2887:ff1c::/48 maxlen: 48
                          2a03:2887:ff1d::/48 maxlen: 48
                          2a03:2887:ff1e::/48 maxlen: 48
                          2a03:2887:ff1f::/48 maxlen: 48
                          2a03:2887:ff20::/48 maxlen: 48
                          2a03:2887:ff21::/48 maxlen: 48
                          2a03:2887:ff23::/48 maxlen: 48
                          2a03:2887:ff24::/48 maxlen: 48
                          2a03:2887:ff25::/48 maxlen: 48
                          2a03:2887:ff27::/48 maxlen: 48
                          2a03:2887:ff28::/48 maxlen: 48
                          2a03:2887:ff29::/48 maxlen: 48
                          2a03:2887:ff2a::/48 maxlen: 48
                          2a03:2887:ff2b::/48 maxlen: 48
                          2a03:2887:ff2e::/48 maxlen: 48
                          2a03:2887:ff2f::/48 maxlen: 48
                          2a03:2887:ff30::/48 maxlen: 48
                          2a03:2887:ff33::/48 maxlen: 48
                          2a03:2887:ff35::/48 maxlen: 48
                          2a03:2887:ff36::/48 maxlen: 48
                          2a03:2887:ff37::/48 maxlen: 48
                          2a03:2887:ff38::/48 maxlen: 48
                          2a03:2887:ff39::/48 maxlen: 48
                          2a03:2887:ff3a::/48 maxlen: 48
                          2a03:2887:ff3b::/48 maxlen: 48
                          2a03:2887:ff3f::/48 maxlen: 48
                          2a03:2887:ff40::/48 maxlen: 48
                          2a03:2887:ff41::/48 maxlen: 48
                          2a03:2887:ff42::/48 maxlen: 48
                          2a03:2887:ff43::/48 maxlen: 48
                          2a03:2887:ff44::/48 maxlen: 48
                          2a03:2887:ff45::/48 maxlen: 48
                          2a03:2887:ff48::/48 maxlen: 48
                          2a03:2887:ff49::/48 maxlen: 48
                          2a03:2887:ff4a::/48 maxlen: 48
                          2a03:2887:ff4b::/48 maxlen: 48
                          2a03:2887:ff4d::/48 maxlen: 48
                          2a03:2887:ff4e::/48 maxlen: 48
                          2a03:2887:ff4f::/48 maxlen: 48
                          2a03:2887:ff51::/48 maxlen: 48
                          2a03:2887:ff52::/48 maxlen: 48
                          2a03:2887:ff53::/48 maxlen: 48
                          2a03:2887:ff54::/48 maxlen: 48
                          2a03:2887:ff55::/48 maxlen: 48
                          2a03:2887:ff56::/48 maxlen: 48
                          2a03:2887:ff57::/48 maxlen: 48
                          2a03:2887:ff58::/48 maxlen: 48
                          2a03:2887:ff59::/48 maxlen: 48
                          2a03:2887:ff60::/48 maxlen: 48
                          2a03:2887:ff61::/48 maxlen: 48
                          2a03:2887:ff62::/48 maxlen: 48
                          2a03:2887:ff63::/48 maxlen: 48
                          2a03:2887:ff64::/48 maxlen: 48
                          2a03:2887:ff65::/48 maxlen: 48
                          2a03:2887:ff66::/48 maxlen: 48
                          2a03:2887:ff67::/48 maxlen: 48
                          2a03:2887:ff68::/48 maxlen: 48
                          2a03:2887:ff69::/48 maxlen: 48
                          2a03:2887:ff70::/48 maxlen: 48
                          2a03:2887:ff71::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 17:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:bf:1b:d9:f1:84:4d:fc:b3:c6:72:9b:26:0a:8a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: May 14 17:02:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ba24c245f8004531171f734b353607cd1fc3a64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c0:24:b1:f5:38:74:d9:7c:24:59:4e:b6:ac:
                    80:80:14:9f:b3:df:2f:c8:36:00:bd:fd:a3:e2:b4:
                    6c:d3:3c:97:68:48:2b:d4:13:23:de:a6:4c:1f:5a:
                    45:1a:81:29:ae:59:48:a7:81:4f:ff:53:3f:8a:8f:
                    f3:2c:61:69:0e:2c:a8:84:64:41:c1:17:6d:62:7a:
                    c4:b5:31:fe:fa:f1:5c:90:73:17:a7:94:af:f5:56:
                    c3:49:13:3b:50:9d:65:8a:cd:84:a4:2d:64:2e:1a:
                    77:16:37:85:05:a2:e4:5e:c0:7b:98:47:e7:ee:fb:
                    6b:dc:9e:00:8a:8f:67:73:37:03:3d:d0:3e:75:9d:
                    c6:0b:3e:49:39:7f:ad:97:2f:de:70:b0:69:ca:88:
                    99:67:d6:96:d7:85:52:db:51:61:b0:62:be:ec:ea:
                    d8:e8:f5:17:9f:41:f8:d9:35:69:b5:9e:cf:37:20:
                    66:b9:bd:2d:c5:00:84:99:44:79:67:ea:df:eb:1b:
                    58:0a:20:c5:99:29:33:a8:64:d8:a3:90:d4:e4:f9:
                    d7:bc:c8:1b:4e:ad:51:bc:bc:04:9d:6b:94:f0:e0:
                    64:f5:34:c4:02:22:89:ee:9e:2f:64:2f:5b:30:22:
                    13:01:db:41:22:58:0f:e5:96:61:84:c9:17:04:70:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:C2:45:F8:00:45:31:17:1F:73:4B:35:36:07:CD:1F:C3:A6:4F
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/uiTCRfgARTEXH3NLNTYHzR_Dpk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2887:ff00::/48
                  2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff18::/47
                  2a03:2887:ff1b::-2a03:2887:ff21:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff33::/48
                  2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff48::/46
                  2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff60::-2a03:2887:ff69:ffff:ffff:ffff:ffff:ffff
                  2a03:2887:ff70::/47

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:e4:c2:b1:7f:ba:8e:d1:a1:dc:7e:9b:31:63:f6:43:0c:
         a7:6c:4d:fe:ba:1c:eb:d8:a7:b0:e5:0e:db:7c:72:bc:6d:6e:
         f3:81:b2:5e:9d:a6:85:ce:20:79:f0:04:e5:f5:cc:04:05:4a:
         b8:9b:02:bb:c7:2d:8a:0a:dc:9c:54:d8:79:86:0f:a5:3b:6a:
         25:3d:f0:20:66:73:7f:55:5a:1d:40:7d:7f:08:22:03:60:7e:
         2b:a6:cd:ae:3b:f4:6a:69:94:f2:04:e9:0b:31:61:34:51:98:
         ed:da:ab:f5:0c:e5:91:54:21:68:91:1b:3c:85:cd:fd:f0:c5:
         cb:d5:1a:9c:2e:c1:12:ed:c1:67:3e:9c:77:c9:49:3d:de:09:
         48:04:0d:3a:46:f9:f8:12:9a:b9:61:af:39:b7:b7:73:08:5a:
         e5:40:fa:4c:1a:25:d1:f7:9b:ce:87:fb:68:df:ab:af:74:1f:
         9a:57:e0:a9:4c:8e:a9:b3:fa:d3:fc:0b:ad:47:ca:14:3b:46:
         d0:c2:f1:5d:e7:23:c5:d1:37:fb:7b:3d:51:10:e6:b6:67:b9:
         df:6c:69:7b:f5:7d:ae:4f:cb:a9:9b:4e:dc:7d:7f:25:42:e5:
         21:c3:27:d5:4f:aa:e5:6c:13:1c:7c:05:f8:1a:2e:e0:7e:93:
         60:06:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:22:36 2025 by rpki-client