Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/LJnMUIiraA7u_j_Se4e0FeaGRm0.roa
File:                     LJnMUIiraA7u_j_Se4e0FeaGRm0.roa (raw, json)
Hash identifier:          Yqo79w8EPucpArNiYhIKCKZGrHvMRc8bJ+2Ley4iu6o=
Subject key identifier:   2C:99:CC:50:88:AB:68:0E:EE:FE:3F:D2:7B:87:B4:15:E6:86:46:6D
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       0191C14B98DB5166393071672B2F3BF74095
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/LJnMUIiraA7u_j_Se4e0FeaGRm0.roa
Signing time:             Thu 05 Sep 2024 08:27:22 +0000
ROA not before:           Thu 05 Sep 2024 08:27:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c41::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:1c44::/48 maxlen: 48
                          2a06:98c0:1c45::/48 maxlen: 48
                          2a06:98c0:1c46::/48 maxlen: 48
                          2a06:98c0:1c47::/48 maxlen: 48
                          2a06:98c0:1c4a::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:40::/48 maxlen: 48
                          2a06:98c1:41::/48 maxlen: 48
                          2a06:98c1:42::/48 maxlen: 48
                          2a06:98c1:43::/48 maxlen: 48
                          2a06:98c1:48::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 10:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c1:4b:98:db:51:66:39:30:71:67:2b:2f:3b:f7:40:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Sep  5 08:27:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2c99cc5088ab680eeefe3fd27b87b415e686466d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:bc:21:18:7f:ff:05:a6:30:6e:b1:1f:49:
                    aa:66:99:75:48:1d:b8:8d:b4:e2:38:1b:e5:d3:a4:
                    c6:6d:ee:d5:b7:7f:24:1b:ea:a4:a5:f2:aa:58:f0:
                    e5:33:65:f9:dc:45:81:a9:d8:66:ae:ba:44:a2:fa:
                    dc:00:6e:a3:a2:4a:72:36:cd:07:92:d1:49:f9:25:
                    4e:b0:19:8e:bb:27:5c:21:59:79:c7:b6:dc:dc:f2:
                    13:ec:00:59:7b:1f:8c:76:a6:ba:99:87:b2:b0:bb:
                    36:83:66:0c:9c:70:c1:9e:93:9d:c0:17:c5:72:be:
                    1b:4f:66:28:a3:af:bc:47:1d:c9:77:af:4e:32:87:
                    71:d4:42:9a:28:54:57:24:4f:7c:70:3e:d9:96:12:
                    9b:f0:1d:bf:11:d5:63:d0:c7:eb:8b:d4:7a:b7:3e:
                    a5:63:42:a3:ac:5c:3f:b2:31:65:da:59:46:e7:30:
                    4f:8d:c9:eb:b3:c7:2e:8f:a0:bd:0a:56:bd:80:93:
                    3e:c0:06:fd:d5:30:82:2f:f5:de:5f:ff:50:56:bc:
                    87:41:ba:c9:41:ab:23:24:9a:71:6d:2e:0b:2a:25:
                    85:e4:59:a7:83:d8:65:67:ec:cd:f1:66:86:74:aa:
                    1a:34:0a:cd:49:ce:83:bd:d1:49:38:37:50:6b:0f:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:99:CC:50:88:AB:68:0E:EE:FE:3F:D2:7B:87:B4:15:E6:86:46:6D
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/LJnMUIiraA7u_j_Se4e0FeaGRm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c47:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c4a::/48
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:40::/46
                  2a06:98c1:48::/48
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:bb:49:0f:2e:66:ad:e4:00:a9:28:05:0a:62:4e:a3:7f:
         ad:59:18:6d:a2:7d:74:8c:6e:6f:31:fd:0f:31:5f:cb:0c:9e:
         fc:c7:fb:d6:03:1c:bb:3c:6d:bf:27:68:a3:ac:2c:6b:9b:42:
         5b:6d:80:5a:7d:e0:39:a4:54:d2:de:bc:39:e6:76:d0:30:26:
         c2:29:41:be:a8:17:d2:45:49:2a:5a:8a:2d:ec:6f:37:6f:57:
         79:e1:c3:c4:3a:6b:40:23:59:c5:1c:3a:e5:45:bd:90:d3:6b:
         79:5f:af:f4:f2:78:87:d2:24:8a:9b:24:31:92:5a:d9:13:1e:
         48:d7:f1:4b:09:be:09:c2:3a:6d:41:b7:fb:0c:0f:53:63:7e:
         50:ef:e0:93:98:d3:90:14:12:38:15:6d:83:4f:d3:97:aa:13:
         ee:4f:99:5d:34:79:1e:17:26:f7:9b:34:ca:f0:fc:ba:7e:fa:
         c0:31:01:64:7d:38:f1:d1:2a:19:a2:ac:fc:7d:ab:66:44:8b:
         c9:97:01:b4:e8:e0:a9:08:09:c4:63:6f:d6:b3:71:91:87:ab:
         3e:86:f9:d5:f0:45:5c:bc:d2:75:94:b3:a7:59:33:b2:f9:66:
         69:89:ce:3f:b0:4a:46:20:0a:96:37:a8:74:7c:1c:ce:6f:93:
         8c:9f:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 13:05:01 2024 by rpki-client on console-fra.rpki-client.org