Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/0o0JzutPa6211xr7SHkz36HsivU.roa
File:                     0o0JzutPa6211xr7SHkz36HsivU.roa (raw, json)
Hash identifier:          DmVcj+5Y+KywPDd8d4WloeuDd3b91dMulr9vV1bpVZ4=
Subject key identifier:   D2:8D:09:CE:EB:4F:6B:AD:B5:D7:1A:FB:48:79:33:DF:A1:EC:8A:F5
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       0190EDD25C5EF4416CF993BD5D58BC6CF227
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/0o0JzutPa6211xr7SHkz36HsivU.roa
Signing time:             Fri 26 Jul 2024 06:55:04 +0000
ROA not before:           Fri 26 Jul 2024 06:55:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c41::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:1c44::/48 maxlen: 48
                          2a06:98c0:1c45::/48 maxlen: 48
                          2a06:98c0:1c46::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:40::/48 maxlen: 48
                          2a06:98c1:41::/48 maxlen: 48
                          2a06:98c1:42::/48 maxlen: 48
                          2a06:98c1:43::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 20:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ed:d2:5c:5e:f4:41:6c:f9:93:bd:5d:58:bc:6c:f2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jul 26 06:55:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d28d09ceeb4f6badb5d71afb487933dfa1ec8af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:7f:e9:2d:f1:71:ad:2e:27:ac:a1:2b:2e:
                    08:7c:e7:2e:e4:8c:81:82:56:94:eb:6a:c2:1a:d3:
                    8c:98:f3:32:b0:7b:cd:58:31:64:b4:94:79:08:3f:
                    f3:0b:fe:db:57:d5:e0:64:2e:32:8e:71:81:85:35:
                    d5:10:ad:b7:ad:53:3d:a4:41:83:d6:43:fd:8e:6d:
                    58:53:9a:dc:92:0c:15:1d:9a:74:1c:c0:ec:86:38:
                    3b:46:5d:9f:c6:cc:82:f3:5d:00:83:c7:30:d2:37:
                    2d:7c:fa:67:16:6b:b0:42:08:5a:e9:f5:fd:3f:81:
                    a1:06:64:fe:65:c3:32:f9:fb:0d:cc:40:b7:b0:0e:
                    b6:02:5b:6f:3d:df:cc:a5:6a:0e:f4:5c:32:c8:e7:
                    d4:7a:18:b6:4a:ef:d5:74:30:97:7b:26:fd:aa:30:
                    db:4a:70:69:14:0c:dd:71:94:30:4c:3a:03:24:37:
                    9d:0d:70:a9:ff:f3:a6:69:94:e1:a5:4b:e5:86:09:
                    3d:7a:bb:d1:12:5b:ae:93:53:a5:a3:1a:02:4c:d0:
                    54:64:b4:0f:43:4e:4f:c2:4b:19:c3:53:c6:eb:28:
                    02:f7:91:87:54:b9:ad:98:9b:30:17:5f:5a:93:62:
                    17:7b:22:8c:44:5e:70:75:b7:d6:5a:d0:5f:88:c2:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8D:09:CE:EB:4F:6B:AD:B5:D7:1A:FB:48:79:33:DF:A1:EC:8A:F5
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/0o0JzutPa6211xr7SHkz36HsivU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c46:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:40::/46
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:93:e6:6e:b9:72:77:33:a8:32:79:50:c7:b5:12:cd:b9:a8:
         3c:08:3c:91:29:8f:b8:8b:e5:19:70:1e:d8:de:bb:ed:74:41:
         6c:89:be:70:a6:3b:9a:78:3e:25:1d:8b:7d:71:28:e3:91:f6:
         f3:92:f9:5a:69:90:36:f9:a7:c0:2e:e5:8d:bf:e5:84:d2:dc:
         43:86:b3:c0:fd:1a:6b:56:ab:59:15:ed:4b:a9:9f:eb:38:92:
         21:48:b4:8f:e1:0c:35:6d:7a:4d:9b:5e:94:d7:09:f0:14:d3:
         9c:e2:fe:cc:08:98:e3:5e:f4:ff:60:fc:8b:88:35:82:51:9b:
         28:74:37:11:7f:10:58:9a:46:71:09:b8:72:60:41:16:d3:92:
         95:da:4b:f5:32:26:bd:3b:93:7b:6f:23:6a:05:33:b3:d8:df:
         05:f7:ee:cb:57:6d:11:97:e7:d3:88:da:9c:aa:99:68:e8:18:
         e4:b2:f7:40:6d:b3:96:a2:77:32:1d:6d:2a:ed:f3:1a:24:e6:
         e7:b4:1e:cb:32:94:3f:c3:24:58:24:3f:98:93:e5:c8:49:e8:
         ea:fb:6b:ba:35:80:2d:c0:38:6a:2d:28:af:9f:71:29:6c:ec:
         c3:9a:69:79:48:5d:66:73:94:73:f7:b0:aa:74:16:9d:0b:aa:
         3d:e7:d1:f6
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAZDt0lxe9EFs+ZO9XVi8bPInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjQwNzI2MDY1NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjhkMDljZWViNGY2YmFkYjVkNzFhZmI0ODc5MzNkZmExZWM4YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrJ/6S3xca0uJ6yhKy4IfOcu5IyB
glaU62rCGtOMmPMysHvNWDFktJR5CD/zC/7bV9XgZC4yjnGBhTXVEK23rVM9pEGD
1kP9jm1YU5rckgwVHZp0HMDshjg7Rl2fxsyC810Ag8cw0jctfPpnFmuwQgha6fX9
P4GhBmT+ZcMy+fsNzEC3sA62AltvPd/MpWoO9FwyyOfUehi2Su/VdDCXeyb9qjDb
SnBpFAzdcZQwTDoDJDedDXCp//OmaZThpUvlhgk9ervREluuk1OloxoCTNBUZLQP
Q05PwksZw1PG6ygC95GHVLmtmJswF19ak2IXeyKMRF5wdbfWWtBfiMJTXQIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFNKNCc7rT2uttdca+0h5M9+h7Ir1MB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvMG8wSnp1dFBhNjIxMXhyN1NIa3ozNkhzaXZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TA+BAIAATA4MAwDBAaN
ZUADBAGNZUwwDAMEAY1lUgMEB41lADAMAwQFvHJgAwQAvHJoMAwDBAG8cmoDBAS8
cmAwgY4EAgACMIGHMBEDBgIqBpjAHAMHACoGmMAcCjASAwcCKgaYwBwMAwcAKgaY
wBwQMBIDBwUqBpjAHCADBwAqBpjAHEYwEgMHACoGmMA2GQMHACoGmMA2GgMHAioG
mMEAQDASAwcEKgaYwQBQAwcAKgaYwQBYAwcEKgaYwTEAAwcCKgaYwTEgAwcAKgaY
wTIAMA0GCSqGSIb3DQEBCwUAA4IBAQAgk+ZuuXJ3M6gyeVDHtRLNuag8CDyRKY+4
i+UZcB7Y3rvtdEFsib5wpjuaeD4lHYt9cSjjkfbzkvlaaZA2+afALuWNv+WE0txD
hrPA/RprVqtZFe1LqZ/rOJIhSLSP4Qw1bXpNm16U1wnwFNOc4v7MCJjjXvT/YPyL
iDWCUZsodDcRfxBYmkZxCbhyYEEW05KV2kv1Mia9O5N7byNqBTOz2N8F9+7LV20R
l+fTiNqcqplo6BjksvdAbbOWoncyHW0q7fMaJObntB7LMpQ/wyRYJD+Yk+XISejq
+2u6NYAtwDhqLSivn3EpbOzDmml5SF1mc5Rz97CqdBadC6o959H2
-----END CERTIFICATE-----
Generated at Tue Aug 6 23:21:00 2024 by rpki-client on console-ams.rpki-client.org