Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/q8VRpseBWigkE302i3J9Q4Wfufo.roa
File:                     q8VRpseBWigkE302i3J9Q4Wfufo.roa (raw, json)
Hash identifier:          4WLTlweT/MdcfKX/bREKRtznIdb9UujK+QEfYDrwHpA=
Subject key identifier:   AB:C5:51:A6:C7:81:5A:28:24:13:7D:36:8B:72:7D:43:85:9F:B9:FA
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       018D7C3BE0EC1618C5095FADD8AE51CEF17E
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/q8VRpseBWigkE302i3J9Q4Wfufo.roa
Signing time:             Tue 06 Feb 2024 02:25:15 +0000
ROA not before:           Tue 06 Feb 2024 02:25:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7c:3b:e0:ec:16:18:c5:09:5f:ad:d8:ae:51:ce:f1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Feb  6 02:25:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=abc551a6c7815a2824137d368b727d43859fb9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:96:c5:bb:2a:be:2a:92:92:96:76:d0:c4:
                    90:b6:20:71:ab:81:77:5e:d4:91:64:69:7f:34:eb:
                    41:fb:a4:59:b3:37:b4:b6:3f:9b:c5:0e:c7:07:50:
                    0c:fc:7d:76:1c:3b:f6:d9:82:34:3b:51:b0:a5:ae:
                    25:16:8c:a5:5c:57:51:df:01:dd:1a:68:d4:13:41:
                    a2:77:7a:ee:6b:95:0e:66:a7:fd:d3:13:a0:d4:04:
                    2f:3b:8a:0b:8c:02:ae:b3:19:09:3c:41:4f:f9:56:
                    6a:ce:64:48:b3:04:43:49:cf:a9:90:a2:00:a7:88:
                    c6:81:b9:5d:39:15:a1:58:e8:6b:24:c5:28:63:4b:
                    fc:1e:6a:1f:a6:ca:8d:5c:fd:d7:58:3d:9b:37:03:
                    cf:ac:84:ce:e4:d8:8b:c5:12:d8:1a:00:c7:0a:bf:
                    b4:c5:70:9f:6a:0b:9f:a6:e2:87:22:6a:28:07:30:
                    f9:a5:fe:99:4f:14:a5:f6:07:13:b6:16:81:b5:ed:
                    66:5b:96:5a:71:a9:f0:f1:fb:0e:1c:ab:cc:fe:52:
                    fe:a9:dc:64:e9:e4:92:ff:fe:db:30:1f:93:40:d1:
                    d7:48:7b:c1:43:ea:b5:56:12:62:79:c9:09:bc:98:
                    fa:8b:8b:d3:9b:d6:14:42:f1:7b:8c:05:91:33:dc:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C5:51:A6:C7:81:5A:28:24:13:7D:36:8B:72:7D:43:85:9F:B9:FA
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/q8VRpseBWigkE302i3J9Q4Wfufo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c30:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c32::-2a06:98c0:1c37:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:ea:b3:08:2f:77:99:de:c3:fb:0b:e0:01:a5:c2:19:9c:
         8c:91:c4:40:17:ed:1f:a8:0a:44:6b:1f:6e:75:e0:af:bd:ea:
         43:15:80:44:2d:89:05:9e:12:e7:e8:f9:b3:4d:4b:e7:5e:5e:
         af:3d:15:95:96:a8:b2:65:37:d7:5d:95:4c:b6:fd:00:ff:ee:
         5e:0e:df:c4:04:5b:96:f0:09:e5:e5:e3:c3:ce:a1:45:d2:f5:
         ba:42:d5:22:e3:bf:5e:fe:fc:59:b8:8f:fa:65:02:fe:a4:ad:
         6e:6b:70:74:43:f1:58:9a:51:53:96:37:fc:41:7f:37:bf:64:
         cc:67:70:09:97:db:9a:1a:e4:f1:d3:6e:d8:a8:88:b6:9d:31:
         8c:d4:cd:6e:e2:eb:63:8e:3f:b0:fe:99:44:87:3f:7c:27:85:
         6f:4f:f7:2d:9d:5e:cc:ad:e4:e9:fa:6e:c4:b6:ac:04:a2:10:
         f6:8b:6a:96:60:14:6d:80:46:76:eb:94:48:5c:59:9f:9b:6f:
         40:5d:ae:c1:71:71:e8:aa:2e:8a:0b:73:80:ad:ec:ef:9b:33:
         75:30:43:dc:ff:33:72:d8:14:4d:ae:ee:53:20:3b:06:9d:db:
         f0:ba:c1:59:bf:de:68:a2:c3:0a:b6:41:52:9b:ff:1c:aa:d9:
         0d:44:79:f4
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAY18O+DsFhjFCV+t2K5RzvF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjQwMjA2MDIyNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmM1NTFhNmM3ODE1YTI4MjQxMzdkMzY4YjcyN2Q0Mzg1OWZiOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySSWxbsqviqSkpZ20MSQtiBxq4F3
XtSRZGl/NOtB+6RZsze0tj+bxQ7HB1AM/H12HDv22YI0O1Gwpa4lFoylXFdR3wHd
GmjUE0Gid3rua5UOZqf90xOg1AQvO4oLjAKusxkJPEFP+VZqzmRIswRDSc+pkKIA
p4jGgbldORWhWOhrJMUoY0v8HmofpsqNXP3XWD2bNwPPrITO5NiLxRLYGgDHCr+0
xXCfagufpuKHImooBzD5pf6ZTxSl9gcTthaBte1mW5Zacanw8fsOHKvM/lL+qdxk
6eSS//7bMB+TQNHXSHvBQ+q1VhJieckJvJj6i4vTm9YUQvF7jAWRM9zqAwIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFKvFUabHgVooJBN9NotyfUOFn7n6MB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvcThWUnBzZUJXaWdrRTMwMmkzSjlRNFdmdWZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzA+BAIAATA4MAwDBAaN
ZUADBAGNZUwwDAMEAY1lUgMEB41lADAMAwQFvHJgAwQAvHJoMAwDBAG8cmoDBAS8
cmAwgYQEAgACMH4wEQMGAioGmMAcAwcAKgaYwBwKMBIDBwIqBpjAHAwDBwAqBpjA
HBAwEgMHBSoGmMAcIAMHACoGmMAcMDASAwcBKgaYwBwyAwcDKgaYwBwwMBIDBwQq
BpjBAFADBwAqBpjBAFgDBwQqBpjBMQADBwIqBpjBMSADBwAqBpjBMgAwDQYJKoZI
hvcNAQELBQADggEBAAQO6rMIL3eZ3sP7C+ABpcIZnIyRxEAX7R+oCkRrH2514K+9
6kMVgEQtiQWeEufo+bNNS+deXq89FZWWqLJlN9ddlUy2/QD/7l4O38QEW5bwCeXl
48POoUXS9bpC1SLjv17+/Fm4j/plAv6krW5rcHRD8ViaUVOWN/xBfze/ZMxncAmX
25oa5PHTbtioiLadMYzUzW7i62OOP7D+mUSHP3wnhW9P9y2dXsyt5On6bsS2rASi
EPaLapZgFG2ARnbrlEhcWZ+bb0BdrsFxceiqLooLc4Ct7O+bM3UwQ9z/M3LYFE2u
7lMgOwad2/C6wVm/3miiwwq2QVKb/xyq2Q1EefQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:49 2024 by rpki-client on console-ams.rpki-client.org