Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/Y7ODuhjoxaXjUSyfz-X3A6GLTow.roa
File:                     Y7ODuhjoxaXjUSyfz-X3A6GLTow.roa (raw, json)
Hash identifier:          1TpHlf2a/OcovFMq/ZnhTw6S0kHj8QBys4oYmA0jisw=
Subject key identifier:   63:B3:83:BA:18:E8:C5:A5:E3:51:2C:9F:CF:E5:F7:03:A1:8B:4E:8C
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       0191294C7EFFBAF2D1530A8498BBCF7B9A5F
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/Y7ODuhjoxaXjUSyfz-X3A6GLTow.roa
Signing time:             Tue 06 Aug 2024 20:06:04 +0000
ROA not before:           Tue 06 Aug 2024 20:06:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c41::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:1c44::/48 maxlen: 48
                          2a06:98c0:1c45::/48 maxlen: 48
                          2a06:98c0:1c46::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:40::/48 maxlen: 48
                          2a06:98c1:41::/48 maxlen: 48
                          2a06:98c1:42::/48 maxlen: 48
                          2a06:98c1:43::/48 maxlen: 48
                          2a06:98c1:48::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 22:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:29:4c:7e:ff:ba:f2:d1:53:0a:84:98:bb:cf:7b:9a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Aug  6 20:06:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=63b383ba18e8c5a5e3512c9fcfe5f703a18b4e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:71:0e:e5:ac:c8:9c:f6:d2:e5:dd:1e:d0:
                    ba:73:b7:eb:09:29:26:7a:59:1d:aa:43:fd:51:91:
                    17:7a:cb:be:09:b3:1b:a1:96:48:c3:ae:ec:63:30:
                    6c:ee:16:10:03:ce:66:13:c3:56:e7:e2:e4:85:41:
                    13:6c:29:4d:cb:1e:be:9c:a6:9d:d0:cb:8e:a1:dd:
                    50:ce:a2:55:f3:65:cc:69:07:24:bf:83:79:b5:69:
                    83:65:12:5f:6c:58:71:cc:5c:a4:dc:37:ea:44:b6:
                    55:40:7a:e1:3d:6f:81:39:70:d5:85:81:16:2d:d7:
                    24:8f:8d:21:b8:17:25:87:d1:0e:14:fc:d0:c9:bc:
                    47:67:4e:7f:87:4f:25:79:b6:22:eb:cf:45:d9:60:
                    34:17:ea:e9:55:77:bf:c4:3b:db:9e:0c:01:6c:e6:
                    69:71:94:6d:ad:9b:81:65:de:6f:7b:c1:94:f9:d6:
                    00:9d:10:9b:0e:2e:23:11:c0:6e:63:d2:2d:03:7e:
                    78:00:b7:74:b6:2e:3f:8e:98:2b:3a:d7:5b:e9:dc:
                    d0:b8:e4:b6:21:d0:6c:4b:0d:da:e9:c5:6f:f8:43:
                    d6:c2:b7:9a:5c:6e:9a:37:b0:b6:95:62:76:f8:ac:
                    06:90:87:4e:a7:f5:bd:62:9b:71:1a:5c:db:84:b9:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:83:BA:18:E8:C5:A5:E3:51:2C:9F:CF:E5:F7:03:A1:8B:4E:8C
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/Y7ODuhjoxaXjUSyfz-X3A6GLTow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c46:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:40::/46
                  2a06:98c1:48::/48
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:7e:f2:c7:54:76:85:bb:b9:37:95:e5:3e:cf:ea:bc:10:2a:
         06:d1:c4:26:ee:6e:e7:a0:51:79:1c:ed:cf:a0:52:ac:81:77:
         b4:ac:b0:dd:e3:11:22:a2:c0:6d:07:67:34:4c:11:15:e5:fb:
         7f:f0:ab:12:73:65:92:15:28:ff:00:8a:a3:17:f6:0e:89:8c:
         77:d8:ca:46:d4:20:78:c3:9f:9c:69:77:17:53:ea:8b:77:cf:
         3b:dd:28:2b:7c:7f:3b:f9:8c:11:4b:c2:aa:31:27:69:58:c4:
         4a:21:c8:41:3b:f7:c5:92:be:52:7d:3b:0d:56:19:47:15:09:
         77:0c:fd:23:42:10:8f:59:33:55:be:13:02:2f:f8:f8:5b:ae:
         57:36:64:5e:ca:79:09:44:c0:e8:6c:7c:e0:19:ab:d8:d0:a2:
         1f:f1:05:dc:03:9e:1a:68:68:df:0f:e3:bd:da:c8:5a:1f:64:
         04:4f:68:7f:d5:f2:7c:fe:d8:80:af:a3:8a:bc:fb:41:f2:f6:
         cc:14:7f:9b:89:0b:72:4e:b6:d2:96:43:dc:c9:1b:44:34:0f:
         0f:59:bd:1e:04:5d:f6:03:6b:11:df:14:3a:22:3a:a0:f9:34:
         b4:18:c4:2d:a7:6c:ca:d7:19:6b:6d:6b:f1:99:6f:cb:8d:11:
         f0:ad:ed:bf
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAZEpTH7/uvLRUwqEmLvPe5pfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjQwODA2MjAwNjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2IzODNiYTE4ZThjNWE1ZTM1MTJjOWZjZmU1ZjcwM2ExOGI0ZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhxDuWsyJz20uXdHtC6c7frCSkm
elkdqkP9UZEXesu+CbMboZZIw67sYzBs7hYQA85mE8NW5+LkhUETbClNyx6+nKad
0MuOod1QzqJV82XMaQckv4N5tWmDZRJfbFhxzFyk3DfqRLZVQHrhPW+BOXDVhYEW
Ldckj40huBclh9EOFPzQybxHZ05/h08lebYi689F2WA0F+rpVXe/xDvbngwBbOZp
cZRtrZuBZd5ve8GU+dYAnRCbDi4jEcBuY9ItA354ALd0ti4/jpgrOtdb6dzQuOS2
IdBsSw3a6cVv+EPWwreaXG6aN7C2lWJ2+KwGkIdOp/W9YptxGlzbhLngKwIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFGOzg7oY6MWl41Esn8/l9wOhi06MMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvWTdPRHVoam94YVhqVVN5ZnotWDNBNkdMVG93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jA+BAIAATA4MAwDBAaN
ZUADBAGNZUwwDAMEAY1lUgMEB41lADAMAwQFvHJgAwQAvHJoMAwDBAG8cmoDBAS8
cmAwgZcEAgACMIGQMBEDBgIqBpjAHAMHACoGmMAcCjASAwcCKgaYwBwMAwcAKgaY
wBwQMBIDBwUqBpjAHCADBwAqBpjAHEYwEgMHACoGmMA2GQMHACoGmMA2GgMHAioG
mMEAQAMHACoGmMEASDASAwcEKgaYwQBQAwcAKgaYwQBYAwcEKgaYwTEAAwcCKgaY
wTEgAwcAKgaYwTIAMA0GCSqGSIb3DQEBCwUAA4IBAQAefvLHVHaFu7k3leU+z+q8
ECoG0cQm7m7noFF5HO3PoFKsgXe0rLDd4xEiosBtB2c0TBEV5ft/8KsSc2WSFSj/
AIqjF/YOiYx32MpG1CB4w5+caXcXU+qLd8873SgrfH87+YwRS8KqMSdpWMRKIchB
O/fFkr5SfTsNVhlHFQl3DP0jQhCPWTNVvhMCL/j4W65XNmReynkJRMDobHzgGavY
0KIf8QXcA54aaGjfD+O92shaH2QET2h/1fJ8/tiAr6OKvPtB8vbMFH+biQtyTrbS
lkPcyRtENA8PWb0eBF32A2sR3xQ6Ijqg+TS0GMQtp2zK1xlrbWvxmW/LjRHwre2/
-----END CERTIFICATE-----
Generated at Fri Aug 16 00:39:39 2024 by rpki-client on console-ams.rpki-client.org