Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/KBom1euJ_cziuHA9nvWDADh70vM.roa
File:                     KBom1euJ_cziuHA9nvWDADh70vM.roa (raw, json)
Hash identifier:          ywU3dpn2bcGdqlyS2LGbHod8a9kbIvWMaDnS3RytWL0=
Subject key identifier:   28:1A:26:D5:EB:89:FD:CC:E2:B8:70:3D:9E:F5:83:00:38:7B:D2:F3
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       0191807E3E25E307EA1304428779D06DF563
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/KBom1euJ_cziuHA9nvWDADh70vM.roa
Signing time:             Fri 23 Aug 2024 18:27:22 +0000
ROA not before:           Fri 23 Aug 2024 18:27:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c41::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:1c44::/48 maxlen: 48
                          2a06:98c0:1c45::/48 maxlen: 48
                          2a06:98c0:1c46::/48 maxlen: 48
                          2a06:98c0:1c47::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:40::/48 maxlen: 48
                          2a06:98c1:41::/48 maxlen: 48
                          2a06:98c1:42::/48 maxlen: 48
                          2a06:98c1:43::/48 maxlen: 48
                          2a06:98c1:48::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 08:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:80:7e:3e:25:e3:07:ea:13:04:42:87:79:d0:6d:f5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Aug 23 18:27:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=281a26d5eb89fdcce2b8703d9ef58300387bd2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:ea:00:70:2b:9a:d6:ba:96:d0:1b:5c:25:
                    f5:7f:49:73:95:27:b7:30:2b:14:42:f3:d1:b3:f2:
                    7b:17:16:61:91:1e:ba:e6:4c:d8:d4:d7:80:ce:60:
                    b2:05:19:fc:85:04:45:1e:64:0f:d9:f9:f9:62:3c:
                    02:b0:dd:b1:53:4c:6b:f1:c4:0d:4c:b6:ae:79:cf:
                    c0:a2:d5:b5:f1:3c:4a:d2:b3:4c:34:76:8e:f6:8c:
                    58:1b:71:d2:94:71:47:7d:90:d4:44:0c:1b:c1:5f:
                    97:f5:98:88:c6:8a:10:1c:51:83:e9:87:51:89:f6:
                    3f:78:df:b2:5d:ea:05:61:2e:74:be:3d:03:44:42:
                    9a:60:d6:55:4e:b2:a8:5e:e8:b0:ac:29:44:b5:82:
                    12:37:22:36:5d:6a:ac:e7:fe:02:94:62:86:21:7c:
                    b1:d1:a9:d3:20:2e:83:1e:30:1b:ca:a2:3a:3a:40:
                    46:c4:ac:9c:10:9d:75:7c:17:ac:b6:23:99:05:99:
                    d1:41:50:62:f0:5b:91:f9:fa:13:be:75:c0:0e:a9:
                    93:83:53:37:d1:bf:30:8b:43:22:67:93:a1:70:b1:
                    ae:2a:b5:9a:a6:ac:89:7f:1d:ca:c0:27:4a:99:af:
                    63:94:f6:bd:68:01:2b:c7:b4:48:3c:fc:c6:aa:ce:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1A:26:D5:EB:89:FD:CC:E2:B8:70:3D:9E:F5:83:00:38:7B:D2:F3
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/KBom1euJ_cziuHA9nvWDADh70vM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c47:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:40::/46
                  2a06:98c1:48::/48
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:90:e9:fb:f7:fa:58:e0:79:91:e5:99:63:1a:78:61:08:78:
         46:d2:58:83:2c:f0:b1:01:45:1c:9a:b5:bb:b6:7e:ee:2d:f7:
         06:88:2b:6e:c6:3c:3d:02:af:32:ef:bd:98:47:36:4b:92:64:
         16:2d:47:12:a3:50:dc:17:d1:2d:77:98:14:94:1f:62:c2:c2:
         74:a3:92:f2:b2:fd:3e:43:e1:de:b4:93:f1:b3:2a:67:46:9a:
         04:f9:23:f7:c8:45:9d:d7:68:a8:0c:01:72:9a:16:70:fa:16:
         2d:a5:2e:5f:f3:de:7b:da:ca:ea:33:f7:27:3a:72:5e:26:44:
         ea:d9:eb:37:b4:65:3a:a0:35:bf:ad:04:81:9a:7b:5b:e0:25:
         cf:c3:06:42:b5:a3:09:50:2a:74:e3:8c:82:6e:21:0f:76:67:
         89:49:92:21:3b:0d:ff:80:a8:80:d6:03:09:5b:e3:00:98:86:
         ec:86:ab:9e:96:c8:4d:2f:e3:18:12:7c:87:29:6a:a6:03:b6:
         21:65:45:fe:ef:5f:8a:79:7a:70:1e:80:b3:95:e6:74:f4:69:
         37:66:15:de:0d:a5:62:1e:e5:8f:08:b7:4a:d3:07:dc:c6:46:
         7e:06:0b:bf:48:26:66:ce:65:31:b4:7d:f1:2c:69:6d:a3:b0:
         88:8d:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 11:05:45 2024 by rpki-client on console-fra.rpki-client.org