Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/C6jCH14sIdw6X_etfeqNvyUdeMw.roa
File:                     C6jCH14sIdw6X_etfeqNvyUdeMw.roa (raw, json)
Hash identifier:          kik9lrEGMEu72zj+RL6Nei9NAoiN52SaDnj6pXg8Pv8=
Subject key identifier:   0B:A8:C2:1F:5E:2C:21:DC:3A:5F:F7:AD:7D:EA:8D:BF:25:1D:78:CC
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       018D774D61C171236A742A8CD3B67B7C054A
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/C6jCH14sIdw6X_etfeqNvyUdeMw.roa
Signing time:             Mon 05 Feb 2024 03:26:16 +0000
ROA not before:           Mon 05 Feb 2024 03:26:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 23:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:77:4d:61:c1:71:23:6a:74:2a:8c:d3:b6:7b:7c:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Feb  5 03:26:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ba8c21f5e2c21dc3a5ff7ad7dea8dbf251d78cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:24:2a:a6:34:44:ae:4f:1c:ac:9f:44:09:
                    29:56:4e:36:94:8b:2d:de:cf:44:ee:d1:76:bb:1c:
                    ae:94:3f:4b:6f:23:84:93:1f:d4:2a:f8:06:52:ea:
                    5f:f8:8a:35:88:e6:50:7d:79:43:a2:35:6e:e5:fd:
                    fd:f2:51:90:9e:07:30:51:3a:73:6c:9e:1d:b4:7c:
                    2c:37:a2:09:9d:4e:d2:c4:f8:7c:fa:9f:8b:73:2f:
                    d4:2e:91:d4:5d:55:67:5c:80:a5:4e:9b:04:13:51:
                    fb:22:f3:9d:06:fa:25:92:18:4e:36:d8:99:96:91:
                    fe:06:bb:f9:d3:7d:7c:8b:29:c0:12:12:1f:e4:d1:
                    a6:1e:01:24:12:cc:eb:68:7c:2d:12:eb:c8:33:59:
                    86:9b:50:45:9e:aa:9b:d5:d4:e2:aa:e4:ad:fa:71:
                    fa:b5:8d:4e:86:4c:b4:25:07:27:bf:75:15:85:56:
                    9d:d6:0f:97:9d:bc:74:73:bb:71:44:f4:88:4d:a8:
                    ae:ab:b4:e0:f3:49:bd:bb:8c:46:b6:8a:41:49:3f:
                    cc:aa:94:cd:ac:e8:13:94:3c:67:b8:4c:bd:ec:bb:
                    ce:80:c0:96:02:bf:a2:00:0d:eb:0a:b3:bf:d5:8f:
                    8d:9a:b9:d5:47:d7:1b:92:9b:a2:ea:0d:9e:e1:b2:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:C2:1F:5E:2C:21:DC:3A:5F:F7:AD:7D:EA:8D:BF:25:1D:78:CC
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/C6jCH14sIdw6X_etfeqNvyUdeMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c30:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:a5:2f:d6:b4:e9:2e:05:c8:89:0b:21:b3:a5:24:37:b3:
         00:f8:3d:e3:fa:75:43:08:71:80:64:51:f9:17:3e:09:b8:87:
         ba:96:33:2a:ca:b6:a7:41:f9:ce:0b:91:1d:26:26:07:6f:b4:
         56:32:54:83:af:3a:c7:3a:21:24:06:92:53:05:92:33:57:1e:
         95:8c:3a:6f:11:e3:0e:b9:b0:7e:a0:b6:ab:c4:9e:ee:ba:ad:
         96:a1:24:28:91:16:f9:26:3b:a6:ff:41:67:f2:75:a1:81:22:
         be:37:13:ae:42:15:7d:4a:80:7a:25:ea:e1:2c:01:2c:df:0f:
         38:04:f7:27:e5:ab:c8:93:85:d6:d7:c3:5a:b5:d8:83:99:90:
         28:6a:b6:33:75:d2:5c:64:7c:04:68:cd:dd:97:11:85:af:88:
         fd:77:8a:6c:91:23:05:fd:7f:8a:2e:8d:98:eb:6b:0b:20:66:
         94:7e:cf:99:8e:5a:fc:30:b9:f7:5c:67:68:ae:d0:3c:6e:72:
         5f:28:d5:72:b7:81:38:40:01:29:38:36:a5:a0:51:b8:d7:aa:
         4a:e8:3f:73:69:f3:c2:56:41:71:5b:2c:a4:bd:b9:8b:6b:f2:
         68:a2:4a:a7:74:35:33:a1:c8:b6:96:32:e0:43:6f:6f:74:64:
         2a:1e:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:48 2024 by rpki-client on console-ams.rpki-client.org