Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/xZzN-aXFgzE5FhO_ZO3m4_OWWYs.roa
File:                     xZzN-aXFgzE5FhO_ZO3m4_OWWYs.roa (raw, json)
Hash identifier:          4rt2Ax4W3gN+qE/RlNAzFiiLqodHLamYZtD91rY+k50=
Subject key identifier:   C5:9C:CD:F9:A5:C5:83:31:39:16:13:BF:64:ED:E6:E3:F3:96:59:8B
Certificate issuer:       /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial:       018EF4A260529996A7ED42781AECCD792C57
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/xZzN-aXFgzE5FhO_ZO3m4_OWWYs.roa
Signing time:             Fri 19 Apr 2024 04:34:25 +0000
ROA not before:           Fri 19 Apr 2024 04:34:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199326
IP address blocks:        2a13:7700::/29 maxlen: 29
                          2a13:7700::/40 maxlen: 40
                          2a13:7705::/48 maxlen: 48
                          2a13:7705:a::/48 maxlen: 48
                          2a13:7705:10::/48 maxlen: 48
                          2a13:7705:80::/48 maxlen: 48
                          2a13:7705:90::/48 maxlen: 48
                          2a13:7705:ff00::/40 maxlen: 40
                          2a13:7705:ff00::/48 maxlen: 48
                          2a13:7705:ff01::/48 maxlen: 48
                          2a13:7705:ff04::/48 maxlen: 48
                          2a13:7705:ff08::/48 maxlen: 48
                          2a13:7705:ff10::/48 maxlen: 48
                          2a13:7705:ff14::/48 maxlen: 48
                          2a13:7705:ff18::/48 maxlen: 48
                          2a13:7705:ff1c::/48 maxlen: 48
                          2a13:7705:ff20::/48 maxlen: 48
                          2a13:7705:ff24::/48 maxlen: 48
                          2a13:7705:ff28::/48 maxlen: 48
                          2a13:7705:ff2c::/48 maxlen: 48
                          2a13:7705:ff30::/48 maxlen: 48
                          2a13:7705:ff34::/48 maxlen: 48
                          2a13:7705:ff38::/48 maxlen: 48
                          2a13:7705:ff3c::/48 maxlen: 48
                          2a13:7705:ff40::/48 maxlen: 48
                          2a13:7705:ff44::/48 maxlen: 48
                          2a13:7705:ff4c::/48 maxlen: 48
                          2a13:7705:ff50::/48 maxlen: 48
                          2a13:7705:ff54::/48 maxlen: 48
                          2a13:7705:ff58::/48 maxlen: 48
                          2a13:7705:ff5c::/48 maxlen: 48
                          2a13:7705:ff60::/48 maxlen: 48
                          2a13:7705:ff64::/48 maxlen: 48
                          2a13:7705:ff68::/48 maxlen: 48
                          2a13:7705:ff6c::/48 maxlen: 48
                          2a13:7705:ff70::/48 maxlen: 48
                          2a13:7705:ff74::/48 maxlen: 48
                          2a13:7705:ff78::/48 maxlen: 48
                          2a13:7705:ff7c::/48 maxlen: 48
                          2a13:7705:ff80::/48 maxlen: 48
                          2a13:7705:ff84::/48 maxlen: 48
                          2a13:7705:ff88::/48 maxlen: 48
                          2a13:7705:ff8c::/48 maxlen: 48
                          2a13:7705:ff90::/48 maxlen: 48
                          2a13:7705:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 20:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f4:a2:60:52:99:96:a7:ed:42:78:1a:ec:cd:79:2c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
        Validity
            Not Before: Apr 19 04:34:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c59ccdf9a5c58331391613bf64ede6e3f396598b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:2a:67:f0:04:6c:00:d5:ca:f3:7e:d6:36:
                    51:c1:fc:85:ce:50:d5:e5:75:7e:df:a1:ee:68:3b:
                    b5:26:55:d6:b1:52:04:10:56:52:db:17:71:15:fe:
                    ae:80:56:d6:d7:b5:0a:1e:de:b6:97:bb:32:20:38:
                    65:e2:af:e5:04:e3:95:0c:af:51:01:02:f6:77:f0:
                    7e:a0:bc:fb:cd:26:dc:a0:22:3f:d8:5d:9a:c3:3d:
                    e2:7f:14:af:b4:8e:b9:34:33:7e:e2:f2:60:8c:33:
                    e2:a4:2e:50:12:ce:4d:3f:07:09:55:3b:9b:60:88:
                    83:8e:ab:1f:eb:2e:e2:ff:5e:95:98:0f:83:c6:1c:
                    30:91:a6:94:2d:d7:94:89:c7:43:ee:70:90:82:11:
                    ee:77:d1:2e:9c:2c:7a:1e:83:d9:48:97:c0:30:37:
                    ea:99:de:b2:d0:0a:8e:2d:92:54:90:ee:aa:f3:cc:
                    cc:4d:35:f5:bb:dd:fa:90:76:8a:b9:8e:ec:b1:e9:
                    f5:50:5d:43:ec:b9:6d:0c:f2:01:7f:28:ef:08:11:
                    d6:a1:0e:64:7d:ff:47:12:30:25:97:fd:7c:b1:28:
                    29:4f:46:bc:a7:4c:f3:7f:db:1a:79:ec:84:6f:04:
                    49:2b:3f:7f:82:90:c6:ed:f5:cd:0f:a8:68:dd:47:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9C:CD:F9:A5:C5:83:31:39:16:13:BF:64:ED:E6:E3:F3:96:59:8B
            X509v3 Authority Key Identifier:
                keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/xZzN-aXFgzE5FhO_ZO3m4_OWWYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7700::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:79:b0:91:ea:e0:01:04:21:60:5b:6d:25:88:e5:1a:36:16:
         0a:fd:c9:ea:e7:f0:73:98:e6:6e:15:05:7f:09:af:90:6d:35:
         6b:0b:52:7e:b6:b7:21:76:4a:dc:39:d5:e5:11:7f:ea:6f:29:
         11:f8:12:73:51:62:ea:26:a7:c0:46:73:c1:78:2c:57:6c:bf:
         80:d0:8d:ae:3b:ba:3b:28:d5:6b:7f:f8:6a:d3:c3:95:10:68:
         a5:0a:b9:e0:21:49:48:1a:ba:4a:6c:a5:e1:96:c8:98:e1:d5:
         f4:79:6a:55:c1:df:73:2b:a7:df:49:9e:9a:df:9f:9a:99:b4:
         ee:8c:94:df:dc:1b:f4:62:60:e1:2a:62:8b:9c:39:44:4d:77:
         88:66:e6:1c:24:33:56:1e:e4:78:24:93:24:d4:3c:91:ed:14:
         86:ef:1f:b8:f5:c4:01:50:70:cf:cc:b2:4e:93:0a:3c:87:d5:
         c7:1b:85:4a:74:ef:27:25:0d:f4:e5:21:3f:e7:ec:c6:b7:a8:
         c6:8d:3e:54:54:49:f3:65:fb:2c:69:c5:ba:eb:8c:d8:ab:49:
         78:d4:f5:3f:ef:71:3a:14:1f:35:01:41:67:24:bf:6e:89:47:
         3e:fc:b3:7b:35:0b:1e:74:7a:ab:b3:ef:93:f0:72:b7:22:33:
         92:c2:f5:ba
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY70omBSmZan7UJ4GuzNeSxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNmMyOTU4MTQ1ZjQ1ZmFkNWRhZWViMzhiNzViNTJjMDk2
NjEwNDYwHhcNMjQwNDE5MDQzNDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTljY2RmOWE1YzU4MzMxMzkxNjEzYmY2NGVkZTZlM2YzOTY1OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4qZ/AEbADVyvN+1jZRwfyFzlDV
5XV+36HuaDu1JlXWsVIEEFZS2xdxFf6ugFbW17UKHt62l7syIDhl4q/lBOOVDK9R
AQL2d/B+oLz7zSbcoCI/2F2awz3ifxSvtI65NDN+4vJgjDPipC5QEs5NPwcJVTub
YIiDjqsf6y7i/16VmA+DxhwwkaaULdeUicdD7nCQghHud9EunCx6HoPZSJfAMDfq
md6y0AqOLZJUkO6q88zMTTX1u936kHaKuY7ssen1UF1D7LltDPIBfyjvCBHWoQ5k
ff9HEjAll/18sSgpT0a8p0zzf9saeeyEbwRJKz9/gpDG7fXND6ho3UfB2QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMWczfmlxYMxORYTv2Tt5uPzllmLMB8GA1UdIwQY
MBaAFD1sKVgUX0X61drus4t1tSwJZhBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQt
NWUxYjA3ODg5MjNiLzEveFp6Ti1hWEZnekU1RmhPX1pPM200X09XV1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQtNWUxYjA3ODg5MjNi
LzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhN3ADAN
BgkqhkiG9w0BAQsFAAOCAQEAFnmwkergAQQhYFttJYjlGjYWCv3J6ufwc5jmbhUF
fwmvkG01awtSfra3IXZK3DnV5RF/6m8pEfgSc1Fi6ianwEZzwXgsV2y/gNCNrju6
OyjVa3/4atPDlRBopQq54CFJSBq6Smyl4ZbImOHV9HlqVcHfcyun30memt+fmpm0
7oyU39wb9GJg4Spii5w5RE13iGbmHCQzVh7keCSTJNQ8ke0Uhu8fuPXEAVBwz8yy
TpMKPIfVxxuFSnTvJyUN9OUhP+fsxreoxo0+VFRJ82X7LGnFuuuM2KtJeNT1P+9x
OhQfNQFBZyS/bolHPvyzezULHnR6q7Pvk/BytyIzksL1ug==
-----END CERTIFICATE-----
Generated at Tue Apr 30 22:16:23 2024 by rpki-client on console-fra.rpki-client.org