Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/cLFkb5GXeLqeMzVPTeJfD6Y6jwc.roa
File:                     cLFkb5GXeLqeMzVPTeJfD6Y6jwc.roa (raw, json)
Hash identifier:          23DhW1vbhcBZxkm90UII+r2b2pWlNqXgy9a5Rxclw0g=
Subject key identifier:   70:B1:64:6F:91:97:78:BA:9E:33:35:4F:4D:E2:5F:0F:A6:3A:8F:07
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       018D62BFD79927B9BA85B979891936ECBDF1
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/cLFkb5GXeLqeMzVPTeJfD6Y6jwc.roa
Signing time:             Thu 01 Feb 2024 03:39:16 +0000
ROA not before:           Thu 01 Feb 2024 03:39:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48503
IP address blocks:        217.76.66.0/24 maxlen: 24
                          217.76.70.0/24 maxlen: 24
                          2a03:32c0::/48 maxlen: 48
                          2a03:32c0:1::/48 maxlen: 48
                          2a03:32c0:2::/48 maxlen: 48
                          2a03:32c0:3::/48 maxlen: 48
                          2a03:32c0:4::/48 maxlen: 48
                          2a03:32c0:5::/48 maxlen: 48
                          2a03:32c0:6::/48 maxlen: 48
                          2a03:32c0:7::/48 maxlen: 48
                          2a03:32c0:1000::/48 maxlen: 48
                          2a03:32c0:1001::/48 maxlen: 48
                          2a03:32c0:1002::/48 maxlen: 48
                          2a03:32c0:1003::/48 maxlen: 48
                          2a03:32c0:1004::/48 maxlen: 48
                          2a03:32c0:1005::/48 maxlen: 48
                          2a03:32c0:1006::/48 maxlen: 48
                          2a03:32c0:1007::/48 maxlen: 48
                          2a03:32c0:1008::/48 maxlen: 48
                          2a03:32c0:1009::/48 maxlen: 48
                          2a03:32c0:2000::/48 maxlen: 48
                          2a03:32c0:2001::/48 maxlen: 48
                          2a03:32c0:2002::/48 maxlen: 48
                          2a03:32c0:2003::/48 maxlen: 48
                          2a03:32c0:2004::/48 maxlen: 48
                          2a03:32c0:2005::/48 maxlen: 48
                          2a03:32c0:2006::/48 maxlen: 48
                          2a03:32c0:2007::/48 maxlen: 48
                          2a03:32c0:2008::/48 maxlen: 48
                          2a03:32c0:2009::/48 maxlen: 48
                          2a03:32c0:3000::/48 maxlen: 48
                          2a03:32c0:3001::/48 maxlen: 48
                          2a03:32c0:3002::/48 maxlen: 48
                          2a03:32c0:3003::/48 maxlen: 48
                          2a03:32c0:3004::/48 maxlen: 48
                          2a03:32c0:3005::/48 maxlen: 48
                          2a03:32c0:3006::/48 maxlen: 48
                          2a03:32c0:3007::/48 maxlen: 48
                          2a03:32c0:3008::/48 maxlen: 48
                          2a03:32c0:3009::/48 maxlen: 48
                          2a03:32c0:4000::/48 maxlen: 48
                          2a03:32c0:4001::/48 maxlen: 48
                          2a03:32c0:4002::/48 maxlen: 48
                          2a03:32c0:4003::/48 maxlen: 48
                          2a03:32c0:4004::/48 maxlen: 48
                          2a03:32c0:4005::/48 maxlen: 48
                          2a03:32c0:4006::/48 maxlen: 48
                          2a03:32c0:4007::/48 maxlen: 48
                          2a03:32c0:4008::/48 maxlen: 48
                          2a03:32c0:4009::/48 maxlen: 48
                          2a03:32c0:5000::/48 maxlen: 48
                          2a03:32c0:5001::/48 maxlen: 48
                          2a03:32c0:5002::/48 maxlen: 48
                          2a03:32c0:5003::/48 maxlen: 48
                          2a03:32c0:5004::/48 maxlen: 48
                          2a03:32c0:5005::/48 maxlen: 48
                          2a03:32c0:5006::/48 maxlen: 48
                          2a03:32c0:5007::/48 maxlen: 48
                          2a03:32c0:5008::/48 maxlen: 48
                          2a03:32c0:5009::/48 maxlen: 48
                          2a03:32c0:6000::/48 maxlen: 48
                          2a03:32c0:6001::/48 maxlen: 48
                          2a03:32c0:6002::/48 maxlen: 48
                          2a03:32c0:6003::/48 maxlen: 48
                          2a03:32c0:6004::/48 maxlen: 48
                          2a03:32c0:6005::/48 maxlen: 48
                          2a03:32c0:6006::/48 maxlen: 48
                          2a03:32c0:6007::/48 maxlen: 48
                          2a03:32c0:6008::/48 maxlen: 48
                          2a03:32c0:6009::/48 maxlen: 48
                          2a03:32c0:7000::/48 maxlen: 48
                          2a03:32c0:7001::/48 maxlen: 48
                          2a03:32c0:7008::/48 maxlen: 48
                          2a03:32c0:7009::/48 maxlen: 48
                          2a03:32c0:8000::/48 maxlen: 48
                          2a03:32c0:8001::/48 maxlen: 48
                          2a03:32c0:8002::/48 maxlen: 48
                          2a03:32c0:8003::/48 maxlen: 48
                          2a03:32c0:8004::/48 maxlen: 48
                          2a03:32c0:8005::/48 maxlen: 48
                          2a03:32c0:8006::/48 maxlen: 48
                          2a03:32c0:8007::/48 maxlen: 48
                          2a03:32c0:8008::/48 maxlen: 48
                          2a03:32c0:8009::/48 maxlen: 48
                          2a03:32c0:9000::/48 maxlen: 48
                          2a03:32c0:9001::/48 maxlen: 48
                          2a03:32c0:9002::/48 maxlen: 48
                          2a03:32c0:9003::/48 maxlen: 48
                          2a03:32c0:9004::/48 maxlen: 48
                          2a03:32c0:9005::/48 maxlen: 48
                          2a03:32c0:9006::/48 maxlen: 48
                          2a03:32c0:9007::/48 maxlen: 48
                          2a03:32c0:9008::/48 maxlen: 48
                          2a03:32c0:9009::/48 maxlen: 48
                          2a03:32c0:a000::/48 maxlen: 48
                          2a03:32c0:a001::/48 maxlen: 48
                          2a03:32c0:a002::/48 maxlen: 48
                          2a03:32c0:a003::/48 maxlen: 48
                          2a03:32c0:a004::/48 maxlen: 48
                          2a03:32c0:a005::/48 maxlen: 48
                          2a03:32c0:a006::/48 maxlen: 48
                          2a03:32c0:a007::/48 maxlen: 48
                          2a03:32c0:a008::/48 maxlen: 48
                          2a03:32c0:a009::/48 maxlen: 48
                          2a03:32c0:b000::/48 maxlen: 48
                          2a03:32c0:b001::/48 maxlen: 48
                          2a03:32c0:b002::/48 maxlen: 48
                          2a03:32c0:b003::/48 maxlen: 48
                          2a03:32c0:b004::/48 maxlen: 48
                          2a03:32c0:b005::/48 maxlen: 48
                          2a03:32c0:b006::/48 maxlen: 48
                          2a03:32c0:b007::/48 maxlen: 48
                          2a03:32c0:b008::/48 maxlen: 48
                          2a03:32c0:b009::/48 maxlen: 48
                          2a03:32c0:c008::/48 maxlen: 48
                          2a03:32c0:d008::/48 maxlen: 48
                          2a03:32c0:e000::/48 maxlen: 48
                          2a03:32c0:e001::/48 maxlen: 48
                          2a03:32c0:e002::/48 maxlen: 48
                          2a03:32c0:e003::/48 maxlen: 48
                          2a03:32c0:e004::/48 maxlen: 48
                          2a03:32c0:e005::/48 maxlen: 48
                          2a03:32c0:e006::/48 maxlen: 48
                          2a03:32c0:e007::/48 maxlen: 48
                          2a03:32c0:e008::/48 maxlen: 48
                          2a03:32c0:e009::/48 maxlen: 48
                          2a03:32c0:f008::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 02:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:62:bf:d7:99:27:b9:ba:85:b9:79:89:19:36:ec:bd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: Feb  1 03:39:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=70b1646f919778ba9e33354f4de25f0fa63a8f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:16:11:b0:0a:47:4f:58:a4:a9:45:57:c9:2c:
                    7a:c0:73:32:e8:0e:ca:f7:c4:b2:d7:5a:b2:f4:b1:
                    db:19:19:31:0d:0f:a2:9c:7c:cd:ca:87:57:d1:27:
                    e4:42:a3:2c:6a:e5:10:9f:88:ff:f8:a4:41:a9:45:
                    f3:54:3c:72:f0:e5:08:67:40:63:1f:f1:a3:db:a8:
                    85:22:78:52:87:a5:8e:77:87:c8:0a:33:c6:8a:ef:
                    a1:62:94:14:cb:02:82:7e:ce:d2:15:08:90:c1:93:
                    fd:b4:c0:f6:9e:65:74:73:6e:5b:b1:b6:68:e1:ad:
                    2c:3a:85:3f:03:20:e0:97:60:01:81:69:64:51:53:
                    44:71:0e:ed:29:c2:55:ba:de:35:04:84:93:55:ee:
                    cc:2b:25:ac:24:0c:5b:14:99:1d:7d:b8:a9:29:0b:
                    36:ad:40:59:f9:6b:47:6c:d1:81:2b:fc:49:94:2b:
                    b9:a7:25:b8:05:b8:ed:e7:f1:ad:b3:77:21:e9:cf:
                    5b:84:49:1a:83:46:cc:a8:88:35:06:2f:e0:2d:b8:
                    33:b1:1f:0a:25:da:dd:8d:4c:37:b4:17:e2:d9:45:
                    77:cf:ca:a5:3c:e1:be:c4:31:44:73:39:41:2a:b8:
                    59:9c:f2:74:8b:25:6c:58:48:3b:c9:40:fe:83:0e:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B1:64:6F:91:97:78:BA:9E:33:35:4F:4D:E2:5F:0F:A6:3A:8F:07
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/cLFkb5GXeLqeMzVPTeJfD6Y6jwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.76.66.0/24
                  217.76.70.0/24
                IPv6:
                  2a03:32c0::/45
                  2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:4000::-2a03:32c0:4009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:5000::-2a03:32c0:5009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:6000::-2a03:32c0:6009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:7000::/47
                  2a03:32c0:7008::/47
                  2a03:32c0:8000::-2a03:32c0:8009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:9000::-2a03:32c0:9009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:c008::/48
                  2a03:32c0:d008::/48
                  2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:f008::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:a8:8b:99:f5:c8:ee:0c:ab:1f:cf:02:82:c8:1d:4d:51:d3:
         1f:fd:94:cd:3c:59:e3:91:fc:77:af:d7:d4:12:c3:41:f3:8d:
         e3:84:ba:e9:a3:5b:66:b2:f3:57:28:30:ce:2d:8c:5b:b0:8d:
         a3:54:af:3d:73:3d:4b:ba:21:ad:ef:a9:7b:d4:90:9e:3e:6e:
         41:ba:d2:70:e8:45:e9:44:9b:f1:96:9e:77:e6:7f:0c:d5:1e:
         ea:f2:49:4c:3c:29:4d:c2:fc:17:d7:41:b5:46:11:27:35:59:
         58:1b:e2:61:c5:f8:e8:02:1a:ff:6f:78:56:48:05:a3:c4:5c:
         37:be:ef:f4:fe:eb:ed:20:20:d7:fd:85:74:1a:9b:0b:89:28:
         e2:ed:fd:c9:2f:2f:0f:b5:27:cd:81:ff:45:08:78:82:89:8f:
         13:a1:14:c2:4a:06:51:71:bb:e2:2f:6c:1c:92:21:f4:5b:2d:
         b0:d9:43:1e:52:a3:95:92:ad:22:c5:c4:e3:35:c4:95:6a:af:
         a4:7b:3d:8b:98:1b:5e:b5:4e:90:fe:ae:38:21:dc:a1:ea:a2:
         3b:8c:36:42:03:ec:5e:b2:40:7a:a6:fe:60:ab:2d:57:c3:13:
         21:4f:19:4e:22:98:bc:1c:19:8a:e0:78:8e:3a:bb:85:e3:c5:
         60:dd:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:54 2024 by rpki-client on console-ams.rpki-client.org