Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/BJDhx0b-XCzKcr24-kbLmvJh8sk.roa
File:                     BJDhx0b-XCzKcr24-kbLmvJh8sk.roa (raw, json)
Hash identifier:          sE3uC4x5vl02fFgsnBA/H/NxmzPWJoX92tA5LpG+wp4=
Subject key identifier:   04:90:E1:C7:46:FE:5C:2C:CA:72:BD:B8:FA:46:CB:9A:F2:61:F2:C9
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       0193DBDFE6269CC180FB277029CB52C766D2
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/BJDhx0b-XCzKcr24-kbLmvJh8sk.roa
Signing time:             Wed 18 Dec 2024 22:25:03 +0000
ROA not before:           Wed 18 Dec 2024 22:25:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c41::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:1c44::/48 maxlen: 48
                          2a06:98c0:1c45::/48 maxlen: 48
                          2a06:98c0:1c46::/48 maxlen: 48
                          2a06:98c0:1c47::/48 maxlen: 48
                          2a06:98c0:1c48::/48 maxlen: 48
                          2a06:98c0:1c49::/48 maxlen: 48
                          2a06:98c0:1c4b::/48 maxlen: 48
                          2a06:98c0:1c4c::/48 maxlen: 48
                          2a06:98c0:1c4d::/48 maxlen: 48
                          2a06:98c0:1c4e::/48 maxlen: 48
                          2a06:98c0:1c4f::/48 maxlen: 48
                          2a06:98c0:1c50::/48 maxlen: 48
                          2a06:98c0:1c51::/48 maxlen: 48
                          2a06:98c0:1c52::/48 maxlen: 48
                          2a06:98c0:1c53::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:40::/48 maxlen: 48
                          2a06:98c1:41::/48 maxlen: 48
                          2a06:98c1:42::/48 maxlen: 48
                          2a06:98c1:43::/48 maxlen: 48
                          2a06:98c1:48::/48 maxlen: 48
                          2a06:98c1:49::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 17:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:db:df:e6:26:9c:c1:80:fb:27:70:29:cb:52:c7:66:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Dec 18 22:25:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0490e1c746fe5c2cca72bdb8fa46cb9af261f2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b9:e6:00:28:4c:29:bf:2c:90:e7:b9:5d:16:
                    c0:d4:12:3f:6c:95:f9:4e:40:e9:3a:8b:bb:7e:cc:
                    52:43:2d:e8:16:26:86:99:52:57:58:37:ad:fd:fc:
                    94:ba:93:63:14:fd:03:3d:6b:a7:b2:b4:3c:f0:79:
                    22:65:99:10:38:f3:d3:1c:ff:5b:01:65:1f:a4:48:
                    9e:c9:8c:ad:a0:55:23:77:64:2f:36:f1:a2:c6:ca:
                    40:66:d0:04:b3:a9:dc:fe:f6:52:61:09:4d:08:8d:
                    ee:61:3e:76:1e:f7:ee:ce:4d:76:7d:21:79:26:26:
                    8b:4f:8f:af:94:e3:fb:bb:99:f4:b7:87:09:12:22:
                    fc:75:9f:94:6e:24:5f:7d:a1:7b:87:98:8e:26:81:
                    0f:f6:e5:ca:e2:db:c7:8b:1e:e2:ff:b2:aa:50:01:
                    cf:79:a9:69:d1:5b:5e:2e:29:71:0a:86:db:9b:55:
                    a6:15:ac:c1:a6:02:d9:54:4b:8b:42:d9:f9:2d:11:
                    f2:62:71:30:21:04:1e:62:cf:14:08:0a:85:13:4e:
                    3d:28:3c:8d:da:34:74:63:5f:36:cf:0b:02:ac:78:
                    51:b7:12:41:bc:a0:c0:b5:95:aa:10:80:ae:08:59:
                    96:72:7b:fb:f3:77:95:02:91:41:5b:32:24:71:4b:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:90:E1:C7:46:FE:5C:2C:CA:72:BD:B8:FA:46:CB:9A:F2:61:F2:C9
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/BJDhx0b-XCzKcr24-kbLmvJh8sk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c4b::-2a06:98c0:1c53:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:40::/46
                  2a06:98c1:48::/47
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:68:42:1e:3a:45:2a:cb:8a:04:4c:6e:2a:e8:d0:d9:9f:
         0e:86:78:40:ca:00:50:27:c9:ec:49:70:5f:e7:63:5b:53:19:
         66:c1:5a:97:ba:d7:07:d4:8d:79:e1:69:6e:21:68:0a:6f:80:
         a4:38:70:43:8c:11:a4:a5:dc:b4:80:af:bc:ef:84:84:77:2a:
         67:ab:11:ff:c3:5f:ec:d1:de:53:0d:d7:92:3e:b9:fb:73:eb:
         89:7e:20:11:b9:bb:d6:2a:82:df:0b:51:37:be:41:41:03:25:
         08:e8:ef:df:51:7b:e1:fb:5e:24:99:84:f6:43:d5:b1:a2:55:
         f8:40:cf:9d:af:a4:f2:76:d7:38:f1:9e:ff:5c:51:c8:c0:b8:
         77:35:b0:17:7c:c1:b7:92:7a:4b:59:e4:2b:dc:d6:02:6e:22:
         96:d2:d9:ce:c7:58:8a:74:53:ab:3f:50:0c:d5:50:50:fd:35:
         97:43:f2:8c:17:11:b0:d9:c0:9e:9b:b1:56:ea:3b:53:a7:4a:
         e4:d3:f5:2f:c6:77:57:46:74:74:83:b5:75:31:f6:b3:f2:49:
         c4:38:39:7e:7a:1f:fc:12:c7:d0:9a:7f:f8:7f:31:69:64:9a:
         d4:13:e8:1c:d0:7f:1d:d8:d0:b7:05:05:11:78:1d:cd:3a:5c:
         94:71:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:11:28 2025 by rpki-client