Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vO3t0H0-y24mICo0PY04h2hz4H8.roa
File:                     vO3t0H0-y24mICo0PY04h2hz4H8.roa (raw, json)
Hash identifier:          wWB2GCNjNuQ5DyhUKNT+gYMIi/q+GxQ3oRn5eBcFfTk=
Subject key identifier:   BC:ED:ED:D0:7D:3E:CB:6E:26:20:2A:34:3D:8D:38:87:68:73:E0:7F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018E01A3642D50BCF417522938C14632BE43
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vO3t0H0-y24mICo0PY04h2hz4H8.roa
Signing time:             Sun 03 Mar 2024 00:07:48 +0000
ROA not before:           Sun 03 Mar 2024 00:07:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215828
IP address blocks:        2a0e:b107:27d0::/46 maxlen: 48
                          2a0e:b107:27d4::/46 maxlen: 48
                          2a0e:b107:27f4::/46 maxlen: 48
                          2a0e:b107:27f8::/46 maxlen: 48
                          2a0e:b107:27fc::/46 maxlen: 48
                          2a0e:b107:2800::/46 maxlen: 48
                          2a0e:b107:2804::/46 maxlen: 48
                          2a0e:b107:2810::/46 maxlen: 48
                          2a0e:b107:2814::/46 maxlen: 48
                          2a0e:b107:2818::/46 maxlen: 48
                          2a0e:b107:281c::/46 maxlen: 48
                          2a0e:b107:2820::/46 maxlen: 48
                          2a0e:b107:2824::/46 maxlen: 48
                          2a0e:b107:2828::/46 maxlen: 48
                          2a0e:b107:282c::/46 maxlen: 48
                          2a0e:b107:2840::/46 maxlen: 48
                          2a0e:b107:2844::/46 maxlen: 48
                          2a0e:b107:2858::/46 maxlen: 48
                          2a0e:b107:285c::/46 maxlen: 48
                          2a0e:b107:2860::/46 maxlen: 48
                          2a0e:b107:2864::/46 maxlen: 48
                          2a0e:b107:2868::/46 maxlen: 48
                          2a0e:b107:286c::/46 maxlen: 48
                          2a0e:b107:2870::/46 maxlen: 48
                          2a0e:b107:2874::/46 maxlen: 48
                          2a0e:b107:2878::/46 maxlen: 48
                          2a0e:b107:287c::/46 maxlen: 48
                          2a0e:b107:2888::/46 maxlen: 48
                          2a0e:b107:288c::/46 maxlen: 48
                          2a0e:b107:2890::/46 maxlen: 48
                          2a0e:b107:2894::/46 maxlen: 48
                          2a0e:b107:2898::/46 maxlen: 48
                          2a0e:b107:289c::/46 maxlen: 48
                          2a0e:b107:28a0::/46 maxlen: 48
                          2a0e:b107:28b0::/46 maxlen: 48
                          2a0e:b107:28b4::/46 maxlen: 48

Validation:               Failed, certificate revoked on Sat 30 Mar 2024 16:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:01:a3:64:2d:50:bc:f4:17:52:29:38:c1:46:32:be:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  3 00:07:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bcededd07d3ecb6e26202a343d8d38876873e07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:09:8f:2e:27:7e:23:11:52:5f:47:de:ce:
                    6d:d0:a8:d0:b5:1d:fb:af:09:9c:e3:db:42:b7:f1:
                    cc:e6:ea:ee:8a:fd:de:96:57:2e:a7:5f:1f:5f:f8:
                    28:d3:c5:fc:a2:11:64:96:77:d1:ce:87:47:27:95:
                    bc:41:06:7e:da:62:5b:3b:2c:65:6d:2b:56:19:dd:
                    65:6b:65:7b:3e:5e:34:e3:05:43:fa:fc:9c:a2:0b:
                    7f:f5:3b:0e:48:8a:e7:ef:0e:2a:95:cc:14:e6:d6:
                    3e:38:89:18:c6:f5:9e:c8:0e:be:6c:ce:4a:5c:5b:
                    c1:8b:81:33:d1:9d:3e:03:fe:9c:da:b0:a9:54:03:
                    45:5a:48:61:a0:ea:53:85:65:58:ab:69:d2:d5:12:
                    4b:68:e3:bb:9c:e5:8e:be:ca:db:ab:bc:8c:3d:99:
                    46:f7:39:fb:a8:d0:7f:aa:2a:ec:57:59:48:31:74:
                    a8:f2:a0:d2:60:fb:21:ea:4d:f7:ea:20:31:15:0e:
                    90:e3:c9:20:4b:8a:fd:14:c4:32:72:a7:4f:81:28:
                    58:06:88:11:57:9a:90:64:76:59:49:4f:11:6a:57:
                    4f:8a:6a:34:a3:18:11:e7:45:ce:6e:87:f7:d8:cf:
                    53:8f:59:93:db:9c:cd:9f:71:4a:86:c4:15:c8:9d:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:ED:D0:7D:3E:CB:6E:26:20:2A:34:3D:8D:38:87:68:73:E0:7F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vO3t0H0-y24mICo0PY04h2hz4H8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27d0::/45
                  2a0e:b107:27f4::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:2810::-2a0e:b107:282f:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:2840::/45
                  2a0e:b107:2858::-2a0e:b107:287f:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:2888::-2a0e:b107:28a3:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:28b0::/45

    Signature Algorithm: sha256WithRSAEncryption
         cb:bd:04:44:80:f0:5f:0a:8d:99:86:f4:0a:9e:50:38:b3:af:
         7c:49:41:e3:af:64:f2:32:22:b9:96:c0:d0:75:57:a4:d5:a0:
         e8:16:c3:5e:17:a8:56:1a:8a:28:bc:14:a2:4f:d1:96:51:ae:
         38:89:9a:de:d9:23:d7:2c:2c:cf:9f:bb:d6:5f:65:8f:cb:ac:
         b8:da:53:78:77:a9:16:b8:b4:90:3d:53:37:83:74:26:e7:01:
         14:32:c0:03:b4:0b:a2:89:64:92:e3:a5:73:64:34:a1:22:9f:
         b3:23:df:df:7a:97:72:5d:58:ce:27:0a:c1:57:5c:9e:89:5e:
         02:64:47:f0:ee:6a:f1:10:18:69:f0:57:4f:45:13:77:42:3e:
         b1:a7:40:c8:bf:b7:ca:06:d5:5f:a7:a5:92:e1:ab:d5:e8:f2:
         14:33:ed:0b:1e:f1:f2:71:57:19:77:76:b5:2d:f6:21:d9:55:
         cd:b4:de:81:24:e4:01:af:89:65:9d:06:e7:eb:a5:76:56:eb:
         88:79:fa:32:64:2e:75:8f:48:20:bd:0a:ef:ce:65:ca:f0:4d:
         0a:c9:33:5b:df:ca:bb:14:9a:fe:df:c6:45:17:05:f2:95:48:
         a7:2b:f9:31:42:e1:63:71:75:72:cc:c7:c7:0c:ec:11:6f:53:
         da:ce:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 17:56:56 2024 by rpki-client on console-ams.rpki-client.org