Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/wjOUy4n1HYeqZ4zANrgbV78Sz4Y.roa
File:                     wjOUy4n1HYeqZ4zANrgbV78Sz4Y.roa (raw, json)
Hash identifier:          4oFJ2JHBWhsIV7quuYHouuzfxjI9uoFWvmuBnjxI//I=
Subject key identifier:   C2:33:94:CB:89:F5:1D:87:AA:67:8C:C0:36:B8:1B:57:BF:12:CF:86
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       018DA13DDA5D96DC9436BF2A917427EC3BCB
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/wjOUy4n1HYeqZ4zANrgbV78Sz4Y.roa
Signing time:             Tue 13 Feb 2024 06:53:21 +0000
ROA not before:           Tue 13 Feb 2024 06:53:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     33915
IP address blocks:        2a07:3500:1240::/46 maxlen: 46
                          2a07:3500:12d0::/48 maxlen: 48
                          2a07:3500:12f8::/48 maxlen: 48
                          2a07:3500:15a0::/48 maxlen: 48
                          2a07:3500:15c0::/48 maxlen: 48
                          2a07:3500:1890::/48 maxlen: 48
                          2a07:3500:1b90::/48 maxlen: 48
                          2a07:3501:1340::/48 maxlen: 48
                          2a07:3502:1050::/48 maxlen: 48
                          2a07:3502:1060::/48 maxlen: 48
                          2a07:3502:10a1::/48 maxlen: 48
                          2a07:3502:10c0::/48 maxlen: 48
                          2a07:3502:11a0::/46 maxlen: 46

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 08:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a1:3d:da:5d:96:dc:94:36:bf:2a:91:74:27:ec:3b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Feb 13 06:53:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c23394cb89f51d87aa678cc036b81b57bf12cf86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:37:1c:e4:c7:7a:24:ab:47:0b:ac:2a:93:
                    fb:d6:40:4a:fe:b1:4f:d1:52:42:c6:ed:0f:7a:cf:
                    0c:6b:ea:0e:12:31:a9:f7:c2:a3:f5:c6:8a:f9:e0:
                    a9:3b:1d:67:aa:ea:65:55:9a:c0:47:ac:96:5f:4f:
                    62:ed:39:16:f1:13:aa:87:9d:18:04:df:50:de:dd:
                    a5:a5:db:a3:d9:05:e8:4e:f1:06:d3:60:ff:00:f7:
                    4a:87:9d:ac:fe:c2:63:f9:13:8d:05:84:25:10:b1:
                    b8:a7:cd:f4:19:95:8f:31:c7:a3:da:ae:97:ee:47:
                    70:9a:28:77:f5:26:8c:c5:5c:d8:cf:d4:96:9e:64:
                    9d:ca:15:7e:cb:48:11:92:43:60:47:71:f2:48:8a:
                    67:f2:0b:75:23:c7:f7:11:bb:7b:ca:dc:85:03:82:
                    84:a0:f8:e6:b6:8f:5b:0b:ad:93:52:e6:9b:32:3f:
                    8d:24:4a:26:d3:70:29:98:a4:e6:ee:a7:d3:36:22:
                    dd:1a:e0:21:03:a0:ae:85:93:c8:de:d2:35:a8:ed:
                    ec:e4:9b:dd:46:8d:3d:6e:c5:af:eb:1a:f3:1b:66:
                    75:3b:71:20:fa:b5:8c:63:15:e3:ed:dc:2b:21:8d:
                    69:08:f2:87:5f:ca:c1:f8:b0:16:8f:e1:ad:ce:fb:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:33:94:CB:89:F5:1D:87:AA:67:8C:C0:36:B8:1B:57:BF:12:CF:86
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/wjOUy4n1HYeqZ4zANrgbV78Sz4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:3500:1240::/46
                  2a07:3500:12d0::/48
                  2a07:3500:12f8::/48
                  2a07:3500:15a0::/48
                  2a07:3500:15c0::/48
                  2a07:3500:1890::/48
                  2a07:3500:1b90::/48
                  2a07:3501:1340::/48
                  2a07:3502:1050::/48
                  2a07:3502:1060::/48
                  2a07:3502:10a1::/48
                  2a07:3502:10c0::/48
                  2a07:3502:11a0::/46

    Signature Algorithm: sha256WithRSAEncryption
         cd:35:a8:ac:4f:36:cd:af:42:46:cd:3d:86:f4:70:3b:00:b6:
         59:3c:95:a7:18:b0:11:09:e6:bd:33:fa:0f:17:a4:91:f9:8a:
         5f:27:dd:38:ff:45:3b:03:5f:90:70:41:ae:e7:8b:b3:0d:b7:
         9a:37:dc:97:4b:8b:0d:60:ac:5b:2f:50:49:8e:ff:24:4d:b2:
         7b:b8:1f:99:58:8f:df:77:32:b5:32:87:66:aa:d0:b0:e6:b7:
         e8:d1:a9:df:2b:af:b5:cb:18:7f:32:ca:8d:d1:75:44:b1:b8:
         e0:74:5b:db:64:b3:57:61:9d:2f:b4:ed:09:42:4f:d4:83:87:
         ee:65:86:25:43:d7:72:7a:3d:3f:d8:69:a6:31:27:77:8e:51:
         38:9f:bf:eb:ac:e3:b0:6d:74:94:60:a7:2d:62:65:7c:c9:22:
         0f:3f:9f:bd:c9:58:67:ea:e2:df:5d:2e:af:54:85:ed:a0:20:
         3d:13:d8:3c:18:ae:c1:b6:a4:07:7c:50:b1:d1:70:9f:49:a1:
         c0:0d:7e:45:1f:fd:08:02:4e:a2:79:dd:48:91:57:31:15:10:
         87:10:40:4b:ed:e0:7f:1f:72:20:88:ae:ab:00:98:23:5b:16:
         cb:d3:a0:f8:a7:67:29:7b:e6:9b:04:4f:79:f3:7e:e5:2c:b1:
         58:5e:e9:93
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAY2hPdpdltyUNr8qkXQn7DvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjQwMjEzMDY1MzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjMzOTRjYjg5ZjUxZDg3YWE2NzhjYzAzNmI4MWI1N2JmMTJjZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dM3HOTHeiSrRwusKpP71kBK/rFP
0VJCxu0Pes8Ma+oOEjGp98Kj9caK+eCpOx1nquplVZrAR6yWX09i7TkW8ROqh50Y
BN9Q3t2lpduj2QXoTvEG02D/APdKh52s/sJj+RONBYQlELG4p830GZWPMcej2q6X
7kdwmih39SaMxVzYz9SWnmSdyhV+y0gRkkNgR3HySIpn8gt1I8f3Ebt7ytyFA4KE
oPjmto9bC62TUuabMj+NJEom03ApmKTm7qfTNiLdGuAhA6CuhZPI3tI1qO3s5Jvd
Ro09bsWv6xrzG2Z1O3Eg+rWMYxXj7dwrIY1pCPKHX8rB+LAWj+GtzvuYlwIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFMIzlMuJ9R2HqmeMwDa4G1e/Es+GMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvd2pPVXk0bjFIWWVxWjR6QU5yZ2JWNzhTejRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wewQCAAIwdQMHAioHNQAS
QAMHACoHNQAS0AMHACoHNQAS+AMHACoHNQAVoAMHACoHNQAVwAMHACoHNQAYkAMH
ACoHNQAbkAMHACoHNQETQAMHACoHNQIQUAMHACoHNQIQYAMHACoHNQIQoQMHACoH
NQIQwAMHAioHNQIRoDANBgkqhkiG9w0BAQsFAAOCAQEAzTWorE82za9CRs09hvRw
OwC2WTyVpxiwEQnmvTP6DxekkfmKXyfdOP9FOwNfkHBBrueLsw23mjfcl0uLDWCs
Wy9QSY7/JE2ye7gfmViP33cytTKHZqrQsOa36NGp3yuvtcsYfzLKjdF1RLG44HRb
22SzV2GdL7TtCUJP1IOH7mWGJUPXcno9P9hppjEnd45ROJ+/66zjsG10lGCnLWJl
fMkiDz+fvclYZ+ri310ur1SF7aAgPRPYPBiuwbakB3xQsdFwn0mhwA1+RR/9CAJO
onndSJFXMRUQhxBAS+3gfx9yIIiuqwCYI1sWy9Og+KdnKXvmmwRPefN+5SyxWF7p
kw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org