Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/tvlSB3DK__oshCBLvo2bgKPJ8jE.roa
File:                     tvlSB3DK__oshCBLvo2bgKPJ8jE.roa (raw, json)
Hash identifier:          Wd8ivzkSiuJgGAb5dbmmBsQf8Tqnq+k/F5ilIG2jsVc=
Subject key identifier:   B6:F9:52:07:70:CA:FF:FA:2C:84:20:4B:BE:8D:9B:80:A3:C9:F2:31
Certificate issuer:       /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial:       019223697CC8AA1301E4F7784F8A85E38DA3
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/tvlSB3DK__oshCBLvo2bgKPJ8jE.roa
Signing time:             Tue 24 Sep 2024 09:42:48 +0000
ROA not before:           Tue 24 Sep 2024 09:42:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210333
IP address blocks:        185.202.96.0/23 maxlen: 24
                          185.202.98.0/23 maxlen: 24
                          213.109.144.0/24 maxlen: 24
                          2a11:6a40::/40 maxlen: 48
                          2a11:6a40:100::/40 maxlen: 48
                          2a11:6a40:ff8::/46 maxlen: 48
                          2a11:6a40:fff::/48 maxlen: 48
                          2a11:6a40:2000::/44 maxlen: 48
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 11:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:23:69:7c:c8:aa:13:01:e4:f7:78:4f:8a:85:e3:8d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
        Validity
            Not Before: Sep 24 09:42:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b6f9520770cafffa2c84204bbe8d9b80a3c9f231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:12:fe:3f:6d:42:da:fe:4c:48:a2:fa:ac:
                    7b:18:9c:f6:fd:9c:b6:64:6b:40:ff:0b:e7:95:c4:
                    79:18:b8:98:7b:94:4e:6c:73:53:56:e1:5d:a0:c1:
                    a0:66:1c:b0:49:5d:cd:ea:76:cb:1c:d5:99:09:47:
                    99:5c:88:d8:56:c6:0d:f5:fa:42:73:27:7e:9e:53:
                    a4:47:de:97:17:52:f4:4c:f3:67:33:43:c8:6c:9c:
                    d9:78:50:43:df:2e:b7:94:04:d8:b9:b4:20:b2:b8:
                    97:d7:38:d6:a7:32:45:a3:cf:b4:62:87:c3:be:a8:
                    d5:6f:9b:ab:62:b0:a6:c8:88:9f:0a:9d:ff:bb:b6:
                    31:3d:9f:a8:35:30:90:a6:ff:53:df:9d:57:0b:be:
                    78:4b:42:7c:ff:e2:4f:77:00:25:82:be:fc:84:4e:
                    e9:fe:52:33:eb:7e:2a:be:93:16:1e:f7:53:76:64:
                    25:7d:61:98:c0:41:d6:72:58:11:aa:dc:a7:3d:47:
                    1c:26:8f:e8:f7:4e:33:6c:94:c1:5f:58:84:d8:8a:
                    2d:1b:fd:e6:25:6a:55:fc:9f:a4:a9:39:3a:b8:7c:
                    ea:0e:41:af:e8:6b:cf:4a:02:e5:40:83:35:f1:09:
                    6d:f5:41:d4:7a:9f:ea:ce:36:92:0f:84:da:8d:d7:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:52:07:70:CA:FF:FA:2C:84:20:4B:BE:8D:9B:80:A3:C9:F2:31
            X509v3 Authority Key Identifier:
                keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/tvlSB3DK__oshCBLvo2bgKPJ8jE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.96.0/22
                  213.109.144.0/24
                IPv6:
                  2a11:6a40::/39
                  2a11:6a40:ff8::/46
                  2a11:6a40:fff::/48
                  2a11:6a40:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:ee:5d:4e:26:19:8b:97:e0:f3:3e:39:51:41:75:2a:59:
         ef:3f:38:da:25:d2:d4:55:34:89:d6:88:4d:30:44:8b:2a:b3:
         57:b0:46:0b:bd:b9:b7:55:91:32:ad:d9:28:f3:22:7e:d6:1e:
         ed:e9:90:ef:6f:50:d1:d2:6c:94:aa:c5:6d:c6:6a:5c:d8:b1:
         31:4b:63:20:46:9f:fc:d2:3d:52:c4:08:f4:5e:c7:bc:9a:6d:
         cf:df:3d:02:cb:9f:6b:43:4d:5e:f9:fa:3e:d1:64:40:eb:6d:
         4c:3c:bf:16:d0:f8:55:66:be:ad:0d:44:99:b3:38:e1:2a:43:
         0d:28:5b:4e:9f:08:a6:82:82:57:0f:8a:9e:2a:b2:9e:5c:dc:
         a9:a1:25:02:50:67:84:7a:df:a6:ec:13:91:db:29:16:9d:dc:
         a3:8e:0d:0f:43:26:e3:8b:ce:29:eb:b8:02:70:6d:d9:2f:ad:
         06:98:e4:ad:5b:ab:45:13:5a:52:67:cc:06:dd:5f:c2:fe:08:
         2d:d4:2d:69:e4:49:37:ec:60:83:9a:3f:c8:e3:da:09:88:aa:
         1f:f5:ef:52:2f:0f:f9:db:86:46:79:8f:5c:da:14:30:4a:ba:
         07:b4:99:36:55:c4:c5:52:b7:f2:ed:43:73:9d:ca:61:e8:bc:
         56:fc:2e:ea
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZIjaXzIqhMB5Pd4T4qF442jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMzhmYmZlYTU3Njg0NzljODYzMDA5MDZlNzRlYjI1NGRj
YjVjNjkwHhcNMjQwOTI0MDk0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmY5NTIwNzcwY2FmZmZhMmM4NDIwNGJiZThkOWI4MGEzYzlmMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4IS/j9tQtr+TEii+qx7GJz2/Zy2
ZGtA/wvnlcR5GLiYe5RObHNTVuFdoMGgZhywSV3N6nbLHNWZCUeZXIjYVsYN9fpC
cyd+nlOkR96XF1L0TPNnM0PIbJzZeFBD3y63lATYubQgsriX1zjWpzJFo8+0YofD
vqjVb5urYrCmyIifCp3/u7YxPZ+oNTCQpv9T351XC754S0J8/+JPdwAlgr78hE7p
/lIz634qvpMWHvdTdmQlfWGYwEHWclgRqtynPUccJo/o904zbJTBX1iE2IotG/3m
JWpV/J+kqTk6uHzqDkGv6GvPSgLlQIM18Qlt9UHUep/qzjaSD4TajdfOlwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFLb5Ugdwyv/6LIQgS76Nm4CjyfIxMB8GA1UdIwQY
MBaAFHI4+/6ldoR5yGMAkG506yVNy1xpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEt
YmUxMGU4YjRhMDBlLzEvdHZsU0IzREtfX29zaENCTHZvMmJnS1BKOGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEtYmUxMGU4YjRhMDBl
LzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzASBAIAATAMAwQCucpgAwQA
1W2QMCkEAgACMCMDBgEqEWpAAAMHAioRakAP+AMHACoRakAP/wMHBCoRakAgADAN
BgkqhkiG9w0BAQsFAAOCAQEAVqnuXU4mGYuX4PM+OVFBdSpZ7z842iXS1FU0idaI
TTBEiyqzV7BGC725t1WRMq3ZKPMiftYe7emQ729Q0dJslKrFbcZqXNixMUtjIEaf
/NI9UsQI9F7HvJptz989Asufa0NNXvn6PtFkQOttTDy/FtD4VWa+rQ1EmbM44SpD
DShbTp8IpoKCVw+KniqynlzcqaElAlBnhHrfpuwTkdspFp3co44ND0Mm44vOKeu4
AnBt2S+tBpjkrVurRRNaUmfMBt1fwv4ILdQtaeRJN+xgg5o/yOPaCYiqH/XvUi8P
+duGRnmPXNoUMEq6B7SZNlXExVK38u1Dc53KYei8Vvwu6g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:36 2025 by rpki-client