Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/sjArp4iV9o_wMinDwPnA5FbWxTg.roa
File:                     sjArp4iV9o_wMinDwPnA5FbWxTg.roa (raw, json)
Hash identifier:          H5moMzqkR83b1r3Btr79CVXaEh+VFaHWpy2YiXG+I9k=
Subject key identifier:   B2:30:2B:A7:88:95:F6:8F:F0:32:29:C3:C0:F9:C0:E4:56:D6:C5:38
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       018D6082B940FF39EE3131199C690942F748
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/sjArp4iV9o_wMinDwPnA5FbWxTg.roa
Signing time:             Wed 31 Jan 2024 17:13:16 +0000
ROA not before:           Wed 31 Jan 2024 17:13:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c00::/48 maxlen: 48
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 01:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:60:82:b9:40:ff:39:ee:31:31:19:9c:69:09:42:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jan 31 17:13:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b2302ba78895f68ff03229c3c0f9c0e456d6c538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:59:6e:81:10:83:61:13:39:95:3e:11:19:
                    78:f3:cc:31:57:12:c9:c5:41:de:d7:60:9c:7c:6b:
                    bd:0b:5d:4a:9f:8e:81:e3:04:25:5a:12:65:d5:a5:
                    3c:ce:3c:52:a8:45:ce:62:fe:42:36:27:d9:71:70:
                    b7:0e:a8:ae:6e:ec:66:d5:11:ba:28:16:28:92:70:
                    a3:02:cb:10:f6:8e:35:14:81:d7:0c:8d:05:c9:12:
                    ff:c5:3d:7c:4e:fe:9f:ce:fa:53:a9:5b:6b:80:10:
                    42:cf:d0:5a:ef:65:24:eb:dc:ce:69:ca:81:62:6f:
                    3a:87:22:7f:3c:50:12:ed:cc:ed:a4:8d:52:31:57:
                    02:4b:ce:29:91:56:2b:85:ba:bb:d8:eb:2c:2f:7f:
                    34:5f:58:ad:db:16:ad:4e:95:f5:8e:e6:06:da:d6:
                    2c:4a:59:95:2f:30:1f:8f:1d:13:a1:dc:32:31:f9:
                    b1:8d:cd:63:a5:41:8c:cb:90:b9:0b:ce:16:a6:ea:
                    4f:e2:ed:69:3a:e2:00:65:b1:53:d9:4b:8b:97:b3:
                    c6:fd:14:38:44:44:41:a9:93:2a:a0:8b:b4:f1:d6:
                    f8:61:ca:e6:fb:ed:72:46:89:23:ce:2e:52:3a:bb:
                    c7:d8:53:37:e9:88:1a:f9:6e:8c:1a:17:28:88:7c:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:2B:A7:88:95:F6:8F:F0:32:29:C3:C0:F9:C0:E4:56:D6:C5:38
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/sjArp4iV9o_wMinDwPnA5FbWxTg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c2b:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:06:13:c3:27:5d:03:0d:7e:b4:ea:09:87:af:c2:72:0c:ed:
         5d:06:14:12:c0:ca:64:10:23:c7:ac:91:bf:1e:45:7c:c1:34:
         e4:44:07:af:35:b9:a2:5a:df:90:6d:47:3e:51:ab:b6:30:1c:
         05:c7:02:aa:09:dd:21:71:68:15:d7:40:e3:a2:83:c1:6c:20:
         99:11:56:eb:2e:43:7e:aa:8d:05:8c:43:cf:b9:bb:cc:ac:69:
         39:9d:f5:31:13:82:cc:44:bd:7f:13:6c:6a:1d:f1:30:4e:04:
         90:89:24:fd:4b:0a:00:80:5b:b5:77:a3:dd:09:50:1c:ac:50:
         d3:1a:dc:44:b0:b0:6a:f6:e4:55:be:1e:c2:b8:5f:47:96:8e:
         30:97:aa:95:b3:9a:99:92:ec:08:3d:bd:7a:3f:f7:df:47:22:
         2c:93:76:13:df:1c:68:97:33:38:fb:10:c0:a1:2a:28:cf:fc:
         83:91:12:db:44:6e:25:fb:ef:88:1a:c7:09:2b:85:5b:53:2b:
         c2:3b:dd:28:e0:8b:b2:c0:03:77:80:f7:9e:8e:2c:3d:71:05:
         7d:3f:68:a6:8e:8d:ca:b8:63:cb:23:db:c3:3a:40:f7:41:49:
         d7:59:b5:60:e5:d7:35:d4:2f:bd:8d:fa:dd:11:51:7d:5d:7c:
         e9:7c:65:b6
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAY1ggrlA/znuMTEZnGkJQvdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjQwMTMxMTcxMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjMwMmJhNzg4OTVmNjhmZjAzMjI5YzNjMGY5YzBlNDU2ZDZjNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi95ZboEQg2ETOZU+ERl488wxVxLJ
xUHe12CcfGu9C11Kn46B4wQlWhJl1aU8zjxSqEXOYv5CNifZcXC3Dqiubuxm1RG6
KBYoknCjAssQ9o41FIHXDI0FyRL/xT18Tv6fzvpTqVtrgBBCz9Ba72Uk69zOacqB
Ym86hyJ/PFAS7cztpI1SMVcCS84pkVYrhbq72OssL380X1it2xatTpX1juYG2tYs
SlmVLzAfjx0TodwyMfmxjc1jpUGMy5C5C84WpupP4u1pOuIAZbFT2UuLl7PG/RQ4
RERBqZMqoIu08db4Ycrm++1yRokjzi5SOrvH2FM36Yga+W6MGhcoiHxMuwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFLIwK6eIlfaP8DIpw8D5wORW1sU4MB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvc2pBcnA0aVY5b193TWluRHdQbkE1RmJXeFRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjA+BAIAATA4MAwDBAaN
ZUADBAGNZUwwDAMEAY1lUgMEB41lADAMAwQFvHJgAwQAvHJoMAwDBAG8cmoDBAS8
cmAwcAQCAAIwajARAwYCKgaYwBwDBwAqBpjAHAowEgMHAioGmMAcDAMHACoGmMAc
EDASAwcFKgaYwBwgAwcCKgaYwBwoMBIDBwQqBpjBAFADBwAqBpjBAFgDBwQqBpjB
MQADBwIqBpjBMSADBwAqBpjBMgAwDQYJKoZIhvcNAQELBQADggEBACgGE8MnXQMN
frTqCYevwnIM7V0GFBLAymQQI8eskb8eRXzBNOREB681uaJa35BtRz5Rq7YwHAXH
AqoJ3SFxaBXXQOOig8FsIJkRVusuQ36qjQWMQ8+5u8ysaTmd9TETgsxEvX8TbGod
8TBOBJCJJP1LCgCAW7V3o90JUBysUNMa3ESwsGr25FW+HsK4X0eWjjCXqpWzmpmS
7Ag9vXo/999HIiyTdhPfHGiXMzj7EMChKijP/IOREttEbiX774gaxwkrhVtTK8I7
3Sjgi7LAA3eA956OLD1xBX0/aKaOjcq4Y8sj28M6QPdBSddZtWDl1zXUL72N+t0R
UX1dfOl8ZbY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:49 2024 by rpki-client on console-ams.rpki-client.org