Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vulaEu0YTwiOhdgyjNQOlVw6X5Y.roa
File:                     vulaEu0YTwiOhdgyjNQOlVw6X5Y.roa (raw, json)
Hash identifier:          xbgT43YOqWW1KlXRDvZCVtQRHaJbEFe+px8LUBrcgoo=
Subject key identifier:   BE:E9:5A:12:ED:18:4F:08:8E:85:D8:32:8C:D4:0E:95:5C:3A:5F:96
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019017D9E685697C7B2514BAA98BDA92D9E3
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vulaEu0YTwiOhdgyjNQOlVw6X5Y.roa
Signing time:             Fri 14 Jun 2024 17:44:34 +0000
ROA not before:           Fri 14 Jun 2024 17:44:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4140::/29 maxlen: 48
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:4::/48 maxlen: 48
                          2a05:4140:5::/48 maxlen: 48
                          2a05:4140:8::/48 maxlen: 48
                          2a05:4140:9::/48 maxlen: 48
                          2a05:4140:10::/48 maxlen: 48
                          2a05:4140:15::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48
                          2a05:4140:29::/48 maxlen: 48
                          2a05:4140:30::/48 maxlen: 48
                          2a05:4140:31::/48 maxlen: 48
                          2a05:4140:32::/48 maxlen: 48
                          2a05:4140:33::/48 maxlen: 48
                          2a05:4140:34::/48 maxlen: 48
                          2a05:4140:35::/48 maxlen: 64
                          2a05:4140:36::/48 maxlen: 48
                          2a05:4140:37::/48 maxlen: 48
                          2a05:4140:48::/48 maxlen: 48
                          2a05:4140:100::/40 maxlen: 48
                          2a05:4140:187::/48 maxlen: 48
                          2a05:4140:190::/48 maxlen: 48
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4145::/32 maxlen: 32
                          2a05:4147::/32 maxlen: 32
                          2a11:e100::/29 maxlen: 48
                          2a11:e102::/32 maxlen: 32
                          2a11:e103::/32 maxlen: 32
                          2a11:e107::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sun 27 Oct 2024 15:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:17:d9:e6:85:69:7c:7b:25:14:ba:a9:8b:da:92:d9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jun 14 17:44:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bee95a12ed184f088e85d8328cd40e955c3a5f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:ef:79:5f:a7:6c:77:79:69:f3:ac:83:1a:
                    a1:de:89:12:90:1c:f6:47:72:e9:b4:32:53:dc:87:
                    12:be:d7:7a:c7:25:f6:22:f7:c9:65:6d:16:15:0e:
                    c0:7a:f0:6b:a1:c8:7b:25:55:f1:bb:9f:64:29:d2:
                    8c:78:d8:f9:41:b2:7e:cd:02:98:3d:f1:8e:4c:df:
                    a2:bb:e8:40:28:ee:d8:bf:46:94:81:b0:f4:62:f4:
                    04:aa:07:25:19:8c:16:66:cb:c6:6a:c5:8b:ae:c6:
                    6c:40:48:50:35:b1:f6:81:b8:0d:15:27:03:08:f5:
                    ad:84:57:39:20:f6:3c:f3:e6:b8:af:e7:ae:56:47:
                    3d:db:dc:b1:20:a6:b8:39:3b:cc:26:b9:d4:9d:7a:
                    b1:85:db:66:25:8b:12:07:71:78:d9:ba:bc:8b:55:
                    92:88:3e:0a:30:fe:c1:c9:a9:11:05:45:e4:4c:4b:
                    78:70:50:eb:f8:5a:13:ac:e0:a8:07:18:d1:58:ea:
                    81:dc:3b:33:41:e7:a8:5b:49:06:e5:b9:58:dc:81:
                    37:79:f0:35:0c:32:37:2b:23:4f:44:f9:e1:1b:15:
                    9c:4a:e6:a9:b0:f8:c5:94:f8:cb:89:87:4f:67:3a:
                    93:e6:b5:48:ef:45:70:0a:79:d1:bb:66:7c:a5:23:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E9:5A:12:ED:18:4F:08:8E:85:D8:32:8C:D4:0E:95:5C:3A:5F:96
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vulaEu0YTwiOhdgyjNQOlVw6X5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140::/29
                  2a11:e100::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:82:ac:f0:1e:0c:d6:5c:9a:78:1a:c7:a9:72:28:80:d9:fa:
         2e:55:e2:e9:94:00:07:47:f4:02:e2:d9:bc:18:f5:98:85:37:
         5e:7a:06:49:58:31:20:89:ce:58:fe:3a:01:b5:21:17:0e:b4:
         a5:76:16:4e:00:13:14:38:76:6b:9d:7d:0d:06:35:fe:63:20:
         2a:df:75:c5:b2:16:87:81:9f:90:b5:69:d2:07:8b:1b:12:c3:
         50:a1:49:1f:b4:97:c9:63:ad:f7:32:48:7a:1e:7c:33:10:50:
         6a:a1:3c:f7:6f:d7:af:33:e6:5c:6f:5f:e5:76:9d:4e:b3:13:
         4a:35:59:8c:61:f6:09:1b:73:c2:76:63:e1:39:e0:43:ce:6e:
         5c:7b:0c:40:71:c2:5d:4c:59:30:50:20:13:6f:b9:c4:69:df:
         25:5d:13:91:d8:d4:8c:f9:20:84:be:6e:d9:45:39:ad:6a:26:
         70:c5:0e:48:d0:f3:b9:d4:9f:bf:0c:a9:31:8e:88:92:46:00:
         1d:86:28:b4:43:3f:ab:ff:17:cb:1a:f4:32:35:a1:5c:fa:d0:
         2f:af:50:50:00:d7:a3:4e:38:70:17:25:15:30:1d:96:3a:ee:
         78:12:ef:82:d8:ca:34:68:ed:58:b2:fa:11:fa:e1:03:f5:25:
         3c:8f:87:fb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZAX2eaFaXx7JRS6qYvaktnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjQwNjE0MTc0NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWU5NWExMmVkMTg0ZjA4OGU4NWQ4MzI4Y2Q0MGU5NTVjM2E1Zjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreXveV+nbHd5afOsgxqh3okSkBz2
R3LptDJT3IcSvtd6xyX2IvfJZW0WFQ7AevBroch7JVXxu59kKdKMeNj5QbJ+zQKY
PfGOTN+iu+hAKO7Yv0aUgbD0YvQEqgclGYwWZsvGasWLrsZsQEhQNbH2gbgNFScD
CPWthFc5IPY88+a4r+euVkc929yxIKa4OTvMJrnUnXqxhdtmJYsSB3F42bq8i1WS
iD4KMP7ByakRBUXkTEt4cFDr+FoTrOCoBxjRWOqB3DszQeeoW0kG5blY3IE3efA1
DDI3KyNPRPnhGxWcSuapsPjFlPjLiYdPZzqT5rVI70VwCnnRu2Z8pSOxbQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL7pWhLtGE8IjoXYMozUDpVcOl+WMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvdnVsYUV1MFlUd2lPaGRneWpOUU9sVnc2WDVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgVBQAMF
AyoR4QAwDQYJKoZIhvcNAQELBQADggEBAFeCrPAeDNZcmngax6lyKIDZ+i5V4umU
AAdH9ALi2bwY9ZiFN156BklYMSCJzlj+OgG1IRcOtKV2Fk4AExQ4dmudfQ0GNf5j
ICrfdcWyFoeBn5C1adIHixsSw1ChSR+0l8ljrfcySHoefDMQUGqhPPdv168z5lxv
X+V2nU6zE0o1WYxh9gkbc8J2Y+E54EPOblx7DEBxwl1MWTBQIBNvucRp3yVdE5HY
1Iz5IIS+btlFOa1qJnDFDkjQ87nUn78MqTGOiJJGAB2GKLRDP6v/F8sa9DI1oVz6
0C+vUFAA16NOOHAXJRUwHZY67ngS74LYyjRo7Viy+hH64QP1JTyPh/s=
-----END CERTIFICATE-----
Generated at Sun Oct 27 17:39:01 2024 by rpki-client on console-fra.rpki-client.org