Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/dKHEfXzLH-gOM16gf6Kx-26Eerk.roa
File:                     dKHEfXzLH-gOM16gf6Kx-26Eerk.roa (raw, json)
Hash identifier:          iM0+C8flnBw3TrukGth+YFjgHjL5lUXVCcGIOkaw0m8=
Subject key identifier:   74:A1:C4:7D:7C:CB:1F:E8:0E:33:5E:A0:7F:A2:B1:FB:6E:84:7A:B9
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       018FDFF419DE2E9CA2012D4AE4EB5ED64960
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/dKHEfXzLH-gOM16gf6Kx-26Eerk.roa
Signing time:             Mon 03 Jun 2024 21:14:27 +0000
ROA not before:           Mon 03 Jun 2024 21:14:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 02:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:df:f4:19:de:2e:9c:a2:01:2d:4a:e4:eb:5e:d6:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jun  3 21:14:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=74a1c47d7ccb1fe80e335ea07fa2b1fb6e847ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:5e:ab:6b:36:19:5e:e7:04:d4:bd:10:bb:
                    ee:2f:58:5c:47:d6:62:22:19:e5:2d:58:c1:9a:7f:
                    88:47:0c:db:cd:81:98:fd:3a:66:01:28:5f:95:6c:
                    d4:ac:f1:fb:ee:9d:44:65:b6:0f:2e:05:2b:7e:3a:
                    48:d9:c0:83:e3:2c:24:c3:b0:61:b7:a9:be:79:06:
                    b0:4c:e6:20:90:31:ce:f6:6c:96:86:db:e7:ab:2d:
                    b1:21:93:3d:3c:9f:58:c0:b1:6e:a6:d8:75:f2:67:
                    a7:16:d2:84:17:5b:75:20:94:28:1d:6a:20:26:14:
                    94:43:01:1e:0f:83:8c:89:6b:16:ba:6b:7f:71:3a:
                    d2:03:a8:21:98:57:5d:59:ca:62:8a:30:29:98:b8:
                    f3:5e:bc:6d:f1:b9:df:e9:7e:46:8c:3d:04:d7:9b:
                    c1:81:7d:3e:a7:a1:e9:f7:13:e7:84:52:da:7d:7e:
                    06:db:71:22:c3:3c:d6:a1:34:8a:68:ba:b9:ae:69:
                    cb:66:96:aa:7b:51:c1:20:39:53:7f:11:63:49:91:
                    2c:61:23:3e:ef:2f:c0:4d:b7:fd:69:ef:5e:2e:16:
                    1a:5d:18:92:c0:a4:b4:57:05:3c:a2:a8:2d:3f:f2:
                    a1:d5:37:b6:f8:9f:76:d2:9b:ce:cb:dc:cb:83:ab:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:C4:7D:7C:CB:1F:E8:0E:33:5E:A0:7F:A2:B1:FB:6E:84:7A:B9
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/dKHEfXzLH-gOM16gf6Kx-26Eerk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c40:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c42::/47
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:af:ee:91:3a:27:1d:dd:62:89:8f:26:ca:42:c8:9f:9d:
         60:a0:35:6b:2a:2a:bf:bb:b8:4c:e1:3a:90:45:a9:7b:41:31:
         cd:c9:00:08:3e:62:77:da:f1:cd:2c:53:59:2b:19:c0:85:c2:
         5f:41:f4:9e:96:63:98:96:84:88:de:8a:e9:06:c4:61:b7:f1:
         3d:72:82:3f:32:7a:df:6d:b4:34:f5:df:00:d8:ae:e6:5b:5f:
         b4:13:f2:04:3d:4b:fb:a2:7f:21:0d:f3:fb:2f:df:48:46:49:
         c8:21:8a:cd:af:85:7a:85:5c:c3:5a:ed:1b:4e:92:b0:34:ac:
         93:5d:9b:aa:18:39:46:da:76:99:40:75:07:16:d2:f6:22:e6:
         ef:20:fd:e7:b6:a7:fa:ae:a7:5e:94:15:7f:40:0e:d8:7e:4d:
         0a:52:48:ca:38:05:61:cb:a3:48:58:75:1c:b5:65:1d:2a:01:
         47:88:48:36:42:41:fc:a3:79:05:83:e1:9b:7e:e2:3a:16:21:
         a0:08:a1:60:13:63:c7:fc:07:eb:fd:85:ba:0c:bb:ef:93:bc:
         49:dc:45:be:9e:4a:8d:52:58:ff:62:89:ec:47:47:58:c7:55:
         d2:6d:54:dd:e3:a8:40:da:0b:ef:86:33:58:f9:10:5d:2b:f9:
         7f:c6:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org