Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/6TT9Vx-iQajBf_2AdooJiVM-fsg.roa
File:                     6TT9Vx-iQajBf_2AdooJiVM-fsg.roa (raw, json)
Hash identifier:          xb4bDrdPjufkFg+3tMHHcBOfDtRH98C+nmPCAScvI28=
Subject key identifier:   E9:34:FD:57:1F:A2:41:A8:C1:7F:FD:80:76:8A:09:89:53:3E:7E:C8
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       018F3047943C3A4540AA8AA97AB2D7D653AD
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/6TT9Vx-iQajBf_2AdooJiVM-fsg.roa
Signing time:             Tue 30 Apr 2024 18:32:28 +0000
ROA not before:           Tue 30 Apr 2024 18:32:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 21:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:30:47:94:3c:3a:45:40:aa:8a:a9:7a:b2:d7:d6:53:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Apr 30 18:32:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e934fd571fa241a8c17ffd80768a0989533e7ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:83:7b:5d:bf:80:5a:f2:4e:ea:93:9b:aa:
                    3c:a9:47:9e:48:ea:b6:98:e1:9e:ae:3a:32:87:17:
                    13:1d:66:76:de:f0:19:5c:14:1d:e2:3c:cb:d2:bd:
                    72:2f:6c:85:a1:50:ef:a7:4a:c4:5f:f1:98:10:66:
                    04:d4:bb:d8:18:d1:7e:19:f0:57:21:61:6a:aa:41:
                    8c:92:29:9d:6a:c9:a0:db:de:92:fe:0b:bb:83:36:
                    14:3d:7e:41:e5:75:11:5d:76:3e:b9:d6:c3:5f:02:
                    9a:e0:ad:84:03:3e:27:ad:ae:69:b0:7a:96:14:1f:
                    df:28:2f:1a:56:20:eb:4a:d8:ff:1c:3c:7e:9b:84:
                    83:18:0b:2f:b9:06:a7:f8:6a:0d:09:25:a1:f0:d2:
                    62:5e:39:c8:47:b8:9c:bc:cd:9b:ee:98:54:3a:e5:
                    b8:dc:6b:79:1a:17:25:ba:bf:83:de:7f:ea:63:da:
                    c8:ee:b4:4d:b3:a2:67:70:5c:6e:0a:23:e6:36:9e:
                    b5:4d:d7:cc:ab:eb:de:38:cc:e9:02:60:12:61:a0:
                    a4:b5:15:25:f5:f7:ba:2f:80:09:77:d8:e8:06:69:
                    5c:f8:3d:b2:6d:cd:23:af:1c:32:bd:0b:06:88:6b:
                    d4:ac:da:d9:47:ff:75:9d:56:0f:c4:ad:36:c7:23:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:FD:57:1F:A2:41:A8:C1:7F:FD:80:76:8A:09:89:53:3E:7E:C8
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/6TT9Vx-iQajBf_2AdooJiVM-fsg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c40:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:23:55:83:9e:80:ac:f4:dd:ac:84:67:71:7a:d6:6f:fe:21:
         9a:41:fd:30:68:0b:9a:13:87:bf:52:3d:3b:54:93:40:44:2a:
         27:ac:90:dc:ec:6c:f0:4c:ab:e6:94:87:c9:a1:8e:84:dd:f4:
         3a:49:c9:1c:6d:f3:4f:8d:69:c1:cb:17:59:a9:fb:a7:72:a1:
         2c:cd:9a:0f:da:cd:a4:bc:11:74:fe:bd:f3:62:59:9e:37:01:
         e6:84:3c:e1:25:d1:62:6e:6a:00:6c:1a:82:e1:06:43:fe:00:
         b0:c8:49:14:e4:c8:15:08:06:81:62:f1:53:39:b5:56:12:31:
         c2:67:2d:0e:e3:23:27:b3:62:b5:e5:e8:ad:dc:f7:6f:57:7b:
         8c:99:5a:ed:ed:4d:48:c0:ea:6d:33:c0:89:4b:7c:f2:01:99:
         b7:2f:7e:65:1e:4c:ca:83:7e:e9:d8:2e:9e:93:43:fe:42:2a:
         d8:25:88:75:b9:27:cf:18:2b:98:60:80:45:bd:83:a1:b2:e8:
         af:33:b2:58:ae:bf:4e:34:6a:c2:3d:9d:f7:50:6d:21:01:c7:
         a9:35:77:41:0b:c4:a9:bb:fe:8c:a4:ed:74:6d:b8:0b:8c:9a:
         1f:79:2a:a8:dd:48:9f:24:43:71:4c:06:05:4f:ee:83:23:03:
         72:35:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org