Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/rlng6QP_NQJKujl5knXN_GJwV_k.roa
File:                     rlng6QP_NQJKujl5knXN_GJwV_k.roa (raw, json)
Hash identifier:          ClGRN/PCbKCT5gpp4NymQ43fBPmjPLV6s67Nmh/FRvQ=
Subject key identifier:   AE:59:E0:E9:03:FF:35:02:4A:BA:39:79:92:75:CD:FC:62:70:57:F9
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       018612E73D463A82E71759E39F293E4D5AE2
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/rlng6QP_NQJKujl5knXN_GJwV_k.roa
Signing time:             Thu 02 Feb 2023 16:13:09 +0000
ROA not before:           Thu 02 Feb 2023 16:13:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13335
IP address blocks:        188.114.98.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.96.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.75.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.82.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.87.0/24 maxlen: 24
                          141.101.90.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.112.0/23 maxlen: 23
                          141.101.107.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.114.0/23 maxlen: 23
                          141.101.64.0/24 maxlen: 24
                          141.101.120.0/22 maxlen: 22
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 09 Mar 2023 17:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:12:e7:3d:46:3a:82:e7:17:59:e3:9f:29:3e:4d:5a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Feb  2 16:13:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ae59e0e903ff35024aba39799275cdfc627057f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:58:39:e6:ae:36:44:dc:0a:5f:02:cf:af:67:
                    53:3c:c9:3f:78:8a:65:4d:82:8c:33:f4:37:ee:01:
                    3d:78:0e:88:78:25:d5:ad:e0:4b:8f:52:27:29:5a:
                    2a:e9:69:fb:7b:c5:0e:9d:06:21:7c:45:cc:e0:fd:
                    42:41:59:54:3e:0b:8a:89:e7:39:e7:4c:26:9f:db:
                    6e:7c:9b:98:ac:7b:2a:fa:12:8f:05:a9:dd:8e:d4:
                    89:88:12:d1:89:70:95:64:57:35:cc:3a:36:56:a8:
                    76:76:9e:59:dd:45:8b:66:cc:e7:70:33:77:23:e5:
                    92:d2:38:71:fa:ba:17:0f:e7:75:ec:3c:c5:7c:b7:
                    9e:f1:8b:77:a9:b8:82:14:88:d9:0a:59:3d:29:95:
                    c7:77:7c:3b:26:25:8e:17:54:ea:54:73:a7:f8:1a:
                    36:b6:a2:d9:8e:96:78:aa:ce:41:a3:b9:c1:86:7e:
                    31:fd:ce:e8:e9:2d:27:b1:70:e1:5d:d4:19:21:c3:
                    39:a3:95:7b:95:95:df:15:10:28:03:9c:64:49:a4:
                    ae:3b:ba:78:45:84:9f:02:8b:ed:b1:69:8c:a8:21:
                    74:c8:a0:58:bc:ef:06:e3:3c:a9:f4:56:30:82:97:
                    a3:bd:3d:08:13:06:11:2d:3b:ec:ad:66:5b:9e:80:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:59:E0:E9:03:FF:35:02:4A:BA:39:79:92:75:CD:FC:62:70:57:F9
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/rlng6QP_NQJKujl5knXN_GJwV_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::/46
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:8a:0d:3c:89:a2:f2:88:1b:07:89:fb:a6:e5:fe:45:ed:
         12:cf:c0:07:d6:2e:29:73:ad:ed:87:7a:07:c2:46:fc:94:8b:
         7b:95:87:96:58:74:ab:9c:8b:52:f7:fd:fd:00:d0:32:b9:b1:
         f7:0d:2e:28:0a:43:dc:a2:93:ae:ed:f3:dc:f0:ec:a1:a9:7b:
         56:b1:44:71:5f:ed:f2:e2:88:b5:74:8b:97:47:6b:ca:bf:dd:
         d3:2c:d5:fb:b6:a9:4f:3f:ce:fe:fe:2f:4e:c9:d6:fe:39:3f:
         37:59:85:32:83:e8:5d:40:c7:0e:86:33:c3:bc:a5:7c:a8:c5:
         4a:3c:0d:c5:64:a5:9a:86:fb:0b:da:8f:c2:69:bf:8c:70:c3:
         91:17:d4:66:8b:e8:c6:ae:e6:f5:a1:cb:c2:fd:06:ac:03:09:
         27:fb:6c:23:05:c6:f6:2b:48:2d:97:a7:a9:00:9f:30:c0:d5:
         2e:fe:be:99:95:f3:96:8b:c6:ad:3d:e2:0c:a6:32:5b:c7:33:
         5d:68:60:ac:a1:06:27:63:93:d3:62:ab:8f:9d:5e:85:f9:cf:
         2a:a5:be:ad:82:cf:53:07:31:00:3c:73:97:f4:b8:e5:0b:ab:
         6f:9e:d8:21:53:96:b8:5b:80:dd:21:54:e3:96:ed:7b:76:dd:
         53:84:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:49 2024 by rpki-client on console-ams.rpki-client.org