Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/97ece8NtO5yhjSvcnGgbQsJI-os.roa
File:                     97ece8NtO5yhjSvcnGgbQsJI-os.roa (raw, json)
Hash identifier:          uNn+6xoDLbcUor3mT29nG4kyGkZ/At9FEoc2a+wzAzI=
Subject key identifier:   F7:B7:9C:7B:C3:6D:3B:9C:A1:8D:2B:DC:9C:68:1B:42:C2:48:FA:8B
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       018D5DA12A0B4742BE8BAA803EB3F5302041
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/97ece8NtO5yhjSvcnGgbQsJI-os.roa
Signing time:             Wed 31 Jan 2024 03:47:39 +0000
ROA not before:           Wed 31 Jan 2024 03:47:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48503
IP address blocks:        217.76.66.0/24 maxlen: 24
                          217.76.70.0/24 maxlen: 24
                          2a03:32c0::/48 maxlen: 48
                          2a03:32c0:1::/48 maxlen: 48
                          2a03:32c0:2::/48 maxlen: 48
                          2a03:32c0:3::/48 maxlen: 48
                          2a03:32c0:4::/48 maxlen: 48
                          2a03:32c0:5::/48 maxlen: 48
                          2a03:32c0:6::/48 maxlen: 48
                          2a03:32c0:7::/48 maxlen: 48
                          2a03:32c0:1000::/48 maxlen: 48
                          2a03:32c0:1001::/48 maxlen: 48
                          2a03:32c0:1002::/48 maxlen: 48
                          2a03:32c0:1003::/48 maxlen: 48
                          2a03:32c0:1004::/48 maxlen: 48
                          2a03:32c0:1005::/48 maxlen: 48
                          2a03:32c0:1006::/48 maxlen: 48
                          2a03:32c0:1007::/48 maxlen: 48
                          2a03:32c0:1008::/48 maxlen: 48
                          2a03:32c0:1009::/48 maxlen: 48
                          2a03:32c0:2000::/48 maxlen: 48
                          2a03:32c0:2001::/48 maxlen: 48
                          2a03:32c0:2002::/48 maxlen: 48
                          2a03:32c0:2003::/48 maxlen: 48
                          2a03:32c0:2004::/48 maxlen: 48
                          2a03:32c0:2005::/48 maxlen: 48
                          2a03:32c0:2006::/48 maxlen: 48
                          2a03:32c0:2007::/48 maxlen: 48
                          2a03:32c0:2008::/48 maxlen: 48
                          2a03:32c0:2009::/48 maxlen: 48
                          2a03:32c0:3000::/48 maxlen: 48
                          2a03:32c0:3001::/48 maxlen: 48
                          2a03:32c0:3002::/48 maxlen: 48
                          2a03:32c0:3003::/48 maxlen: 48
                          2a03:32c0:3004::/48 maxlen: 48
                          2a03:32c0:3005::/48 maxlen: 48
                          2a03:32c0:3006::/48 maxlen: 48
                          2a03:32c0:3007::/48 maxlen: 48
                          2a03:32c0:3008::/48 maxlen: 48
                          2a03:32c0:3009::/48 maxlen: 48
                          2a03:32c0:4000::/48 maxlen: 48
                          2a03:32c0:4001::/48 maxlen: 48
                          2a03:32c0:4002::/48 maxlen: 48
                          2a03:32c0:4003::/48 maxlen: 48
                          2a03:32c0:4004::/48 maxlen: 48
                          2a03:32c0:4005::/48 maxlen: 48
                          2a03:32c0:4006::/48 maxlen: 48
                          2a03:32c0:4007::/48 maxlen: 48
                          2a03:32c0:4008::/48 maxlen: 48
                          2a03:32c0:4009::/48 maxlen: 48
                          2a03:32c0:5000::/48 maxlen: 48
                          2a03:32c0:5001::/48 maxlen: 48
                          2a03:32c0:5002::/48 maxlen: 48
                          2a03:32c0:5003::/48 maxlen: 48
                          2a03:32c0:5004::/48 maxlen: 48
                          2a03:32c0:5005::/48 maxlen: 48
                          2a03:32c0:5006::/48 maxlen: 48
                          2a03:32c0:5007::/48 maxlen: 48
                          2a03:32c0:5008::/48 maxlen: 48
                          2a03:32c0:5009::/48 maxlen: 48
                          2a03:32c0:6000::/48 maxlen: 48
                          2a03:32c0:6001::/48 maxlen: 48
                          2a03:32c0:6002::/48 maxlen: 48
                          2a03:32c0:6003::/48 maxlen: 48
                          2a03:32c0:6004::/48 maxlen: 48
                          2a03:32c0:6005::/48 maxlen: 48
                          2a03:32c0:6006::/48 maxlen: 48
                          2a03:32c0:6007::/48 maxlen: 48
                          2a03:32c0:6008::/48 maxlen: 48
                          2a03:32c0:6009::/48 maxlen: 48
                          2a03:32c0:7000::/48 maxlen: 48
                          2a03:32c0:7001::/48 maxlen: 48
                          2a03:32c0:7008::/48 maxlen: 48
                          2a03:32c0:7009::/48 maxlen: 48
                          2a03:32c0:8000::/48 maxlen: 48
                          2a03:32c0:8001::/48 maxlen: 48
                          2a03:32c0:8002::/48 maxlen: 48
                          2a03:32c0:8003::/48 maxlen: 48
                          2a03:32c0:8004::/48 maxlen: 48
                          2a03:32c0:8005::/48 maxlen: 48
                          2a03:32c0:8006::/48 maxlen: 48
                          2a03:32c0:8007::/48 maxlen: 48
                          2a03:32c0:8008::/48 maxlen: 48
                          2a03:32c0:8009::/48 maxlen: 48
                          2a03:32c0:9000::/48 maxlen: 48
                          2a03:32c0:9001::/48 maxlen: 48
                          2a03:32c0:9002::/48 maxlen: 48
                          2a03:32c0:9003::/48 maxlen: 48
                          2a03:32c0:9004::/48 maxlen: 48
                          2a03:32c0:9005::/48 maxlen: 48
                          2a03:32c0:9006::/48 maxlen: 48
                          2a03:32c0:9007::/48 maxlen: 48
                          2a03:32c0:a000::/48 maxlen: 48
                          2a03:32c0:a001::/48 maxlen: 48
                          2a03:32c0:a002::/48 maxlen: 48
                          2a03:32c0:a003::/48 maxlen: 48
                          2a03:32c0:a004::/48 maxlen: 48
                          2a03:32c0:a005::/48 maxlen: 48
                          2a03:32c0:a006::/48 maxlen: 48
                          2a03:32c0:a007::/48 maxlen: 48
                          2a03:32c0:a008::/48 maxlen: 48
                          2a03:32c0:a009::/48 maxlen: 48
                          2a03:32c0:b000::/48 maxlen: 48
                          2a03:32c0:b001::/48 maxlen: 48
                          2a03:32c0:b002::/48 maxlen: 48
                          2a03:32c0:b003::/48 maxlen: 48
                          2a03:32c0:b004::/48 maxlen: 48
                          2a03:32c0:b005::/48 maxlen: 48
                          2a03:32c0:b006::/48 maxlen: 48
                          2a03:32c0:b007::/48 maxlen: 48
                          2a03:32c0:b008::/48 maxlen: 48
                          2a03:32c0:b009::/48 maxlen: 48
                          2a03:32c0:c008::/48 maxlen: 48
                          2a03:32c0:d008::/48 maxlen: 48
                          2a03:32c0:e000::/48 maxlen: 48
                          2a03:32c0:e001::/48 maxlen: 48
                          2a03:32c0:e002::/48 maxlen: 48
                          2a03:32c0:e003::/48 maxlen: 48
                          2a03:32c0:e004::/48 maxlen: 48
                          2a03:32c0:e005::/48 maxlen: 48
                          2a03:32c0:e006::/48 maxlen: 48
                          2a03:32c0:e007::/48 maxlen: 48
                          2a03:32c0:e008::/48 maxlen: 48
                          2a03:32c0:e009::/48 maxlen: 48
                          2a03:32c0:f008::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 03:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5d:a1:2a:0b:47:42:be:8b:aa:80:3e:b3:f5:30:20:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: Jan 31 03:47:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f7b79c7bc36d3b9ca18d2bdc9c681b42c248fa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:29:29:0c:12:2c:32:fd:87:f9:ee:6e:bd:
                    2d:44:4a:33:15:a1:35:43:f8:64:40:3e:b3:f2:78:
                    62:90:44:1e:8c:19:63:76:68:67:0b:70:66:4c:c7:
                    37:16:29:56:41:6a:bf:9c:c2:84:3f:62:8e:88:d2:
                    fa:f8:8b:3e:6a:f4:0b:37:4d:64:92:db:87:45:a5:
                    53:1b:0a:be:70:fc:bd:86:04:d0:99:f2:8f:fa:ce:
                    8a:c6:40:23:06:44:a4:ba:0a:36:c0:32:b3:8b:eb:
                    9d:3d:98:43:13:42:39:c5:f4:69:29:61:3d:7e:1d:
                    7d:b4:55:10:6e:ef:24:7d:4a:fc:47:fd:92:ea:dc:
                    b4:92:d5:d5:b8:fa:6c:8c:bc:bd:9e:4f:e0:b9:2c:
                    d9:f9:40:27:f3:a7:c7:d6:49:ca:fd:00:0c:14:7e:
                    1e:ed:42:f5:ff:be:fe:12:02:33:d1:f1:41:5f:74:
                    54:d6:01:d1:54:56:82:21:46:29:0d:ec:e3:5f:df:
                    4c:2a:ef:4d:00:30:e3:b4:5d:9c:58:06:af:5b:2c:
                    eb:6c:71:c3:0b:d0:c0:db:4c:84:67:cc:6d:b2:5e:
                    d0:30:45:b1:bf:1e:da:9e:89:4c:df:65:c3:1a:ea:
                    07:ea:75:ff:4b:d0:bb:4c:67:0e:1a:66:77:9b:d6:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B7:9C:7B:C3:6D:3B:9C:A1:8D:2B:DC:9C:68:1B:42:C2:48:FA:8B
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/97ece8NtO5yhjSvcnGgbQsJI-os.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.76.66.0/24
                  217.76.70.0/24
                IPv6:
                  2a03:32c0::/45
                  2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:4000::-2a03:32c0:4009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:5000::-2a03:32c0:5009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:6000::-2a03:32c0:6009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:7000::/47
                  2a03:32c0:7008::/47
                  2a03:32c0:8000::-2a03:32c0:8009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:9000::/45
                  2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:c008::/48
                  2a03:32c0:d008::/48
                  2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:f008::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:8e:58:1c:a8:b8:1f:7e:d8:af:46:41:57:2b:fd:15:50:fa:
         31:cd:35:d1:a5:5f:0d:f4:47:53:10:af:95:e6:b3:79:2c:ea:
         2d:47:93:9e:f8:68:6d:f1:cf:d7:51:3a:e7:35:7a:6d:7c:3e:
         0d:c4:cb:d3:55:c9:b1:05:dd:3c:00:62:90:0e:0d:8b:c7:cb:
         79:b2:83:4e:76:3d:d7:0a:0a:73:7b:c3:5e:fe:84:c3:29:83:
         e7:be:31:c6:ca:a3:5e:04:d0:57:c8:7a:05:f4:2f:e2:43:c8:
         87:f0:f4:e9:8c:b8:5e:07:0b:d7:f6:1a:1f:d6:6b:d7:ab:f5:
         13:58:f8:2b:11:86:1d:de:b5:b3:67:66:b1:8b:f8:95:c8:ea:
         df:aa:30:2d:99:5a:2b:be:51:93:d9:7f:0e:d3:8a:7a:eb:0d:
         fc:b2:43:e5:08:18:52:de:74:5c:34:fe:8b:aa:4c:5e:c1:ff:
         6a:5e:48:be:e9:b1:c6:ae:7b:3b:33:7d:18:87:ab:1d:d3:07:
         3d:6e:0f:af:ce:3b:93:61:3d:a4:b6:d8:c1:90:65:d0:25:c4:
         1c:5c:49:8b:d8:87:1d:c1:8f:f7:91:aa:1b:fd:a3:d4:58:0a:
         f3:1f:cd:e6:0c:42:fc:38:5d:3d:f2:f0:8e:49:47:df:0d:6d:
         d4:36:a8:ca
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgISAY1doSoLR0K+i6qAPrP1MCBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjQwMTMxMDM0NzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2I3OWM3YmMzNmQzYjljYTE4ZDJiZGM5YzY4MWI0MmMyNDhmYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRMpKQwSLDL9h/nubr0tREozFaE1
Q/hkQD6z8nhikEQejBljdmhnC3BmTMc3FilWQWq/nMKEP2KOiNL6+Is+avQLN01k
ktuHRaVTGwq+cPy9hgTQmfKP+s6KxkAjBkSkugo2wDKzi+udPZhDE0I5xfRpKWE9
fh19tFUQbu8kfUr8R/2S6ty0ktXVuPpsjLy9nk/guSzZ+UAn86fH1knK/QAMFH4e
7UL1/77+EgIz0fFBX3RU1gHRVFaCIUYpDezjX99MKu9NADDjtF2cWAavWyzrbHHD
C9DA20yEZ8xtsl7QMEWxvx7anolM32XDGuoH6nX/S9C7TGcOGmZ3m9YKIQIDAQAB
o4IDHTCCAxkwHQYDVR0OBBYEFPe3nHvDbTucoY0r3JxoG0LCSPqLMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvOTdlY2U4TnRPNXloalN2Y25HZ2JRc0pJLW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMQYIKwYBBQUHAQcBAf8EggEgMIIBHDASBAIAATAMAwQA
2UxCAwQA2UxGMIIBBAQCAAIwgf0DBwMqAzLAAAAwEQMGBCoDMsAQAwcBKgMywBAI
MBEDBgUqAzLAIAMHASoDMsAgCDARAwYEKgMywDADBwEqAzLAMAgwEQMGBioDMsBA
AwcBKgMywEAIMBEDBgQqAzLAUAMHASoDMsBQCDARAwYFKgMywGADBwEqAzLAYAgD
BwEqAzLAcAADBwEqAzLAcAgwEQMGByoDMsCAAwcBKgMywIAIAwcDKgMywJAAMBED
BgUqAzLAoAMHASoDMsCgCDARAwYEKgMywLADBwEqAzLAsAgDBwAqAzLAwAgDBwAq
AzLA0AgwEQMGBSoDMsDgAwcBKgMywOAIAwcAKgMywPAIMA0GCSqGSIb3DQEBCwUA
A4IBAQDEjlgcqLgfftivRkFXK/0VUPoxzTXRpV8N9EdTEK+V5rN5LOotR5Oe+Ght
8c/XUTrnNXptfD4NxMvTVcmxBd08AGKQDg2Lx8t5soNOdj3XCgpze8Ne/oTDKYPn
vjHGyqNeBNBXyHoF9C/iQ8iH8PTpjLheBwvX9hof1mvXq/UTWPgrEYYd3rWzZ2ax
i/iVyOrfqjAtmVorvlGT2X8O04p66w38skPlCBhS3nRcNP6Lqkxewf9qXki+6bHG
rns7M30Yh6sd0wc9bg+vzjuTYT2kttjBkGXQJcQcXEmL2IcdwY/3kaob/aPUWArz
H83mDEL8OF098vCOSUffDW3UNqjK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org