Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/uJUNFujKGGZIy_VpIfBX9KEgNpk.roa
File:                     uJUNFujKGGZIy_VpIfBX9KEgNpk.roa (raw, json)
Hash identifier:          +0Z5QQxAutA/LsLTXEkKoMNPq21tr1w+THsUU1vuv2s=
Subject key identifier:   B8:95:0D:16:E8:CA:18:66:48:CB:F5:69:21:F0:57:F4:A1:20:36:99
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       018D5447F94C646AFB4874E764E651ACC4E4
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/uJUNFujKGGZIy_VpIfBX9KEgNpk.roa
Signing time:             Mon 29 Jan 2024 08:13:39 +0000
ROA not before:           Mon 29 Jan 2024 08:13:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48503
IP address blocks:        217.76.66.0/24 maxlen: 24
                          217.76.70.0/24 maxlen: 24
                          2a03:32c0::/48 maxlen: 48
                          2a03:32c0:1::/48 maxlen: 48
                          2a03:32c0:2::/48 maxlen: 48
                          2a03:32c0:3::/48 maxlen: 48
                          2a03:32c0:4::/48 maxlen: 48
                          2a03:32c0:5::/48 maxlen: 48
                          2a03:32c0:6::/48 maxlen: 48
                          2a03:32c0:7::/48 maxlen: 48
                          2a03:32c0:1000::/48 maxlen: 48
                          2a03:32c0:1001::/48 maxlen: 48
                          2a03:32c0:1002::/48 maxlen: 48
                          2a03:32c0:1003::/48 maxlen: 48
                          2a03:32c0:1004::/48 maxlen: 48
                          2a03:32c0:1005::/48 maxlen: 48
                          2a03:32c0:1006::/48 maxlen: 48
                          2a03:32c0:1007::/48 maxlen: 48
                          2a03:32c0:1008::/48 maxlen: 48
                          2a03:32c0:1009::/48 maxlen: 48
                          2a03:32c0:2000::/48 maxlen: 48
                          2a03:32c0:2001::/48 maxlen: 48
                          2a03:32c0:2002::/48 maxlen: 48
                          2a03:32c0:2003::/48 maxlen: 48
                          2a03:32c0:2004::/48 maxlen: 48
                          2a03:32c0:2005::/48 maxlen: 48
                          2a03:32c0:2006::/48 maxlen: 48
                          2a03:32c0:2007::/48 maxlen: 48
                          2a03:32c0:2008::/48 maxlen: 48
                          2a03:32c0:2009::/48 maxlen: 48
                          2a03:32c0:3000::/48 maxlen: 48
                          2a03:32c0:3001::/48 maxlen: 48
                          2a03:32c0:3002::/48 maxlen: 48
                          2a03:32c0:3003::/48 maxlen: 48
                          2a03:32c0:3004::/48 maxlen: 48
                          2a03:32c0:3005::/48 maxlen: 48
                          2a03:32c0:3006::/48 maxlen: 48
                          2a03:32c0:3007::/48 maxlen: 48
                          2a03:32c0:3008::/48 maxlen: 48
                          2a03:32c0:3009::/48 maxlen: 48
                          2a03:32c0:4000::/48 maxlen: 48
                          2a03:32c0:4001::/48 maxlen: 48
                          2a03:32c0:4002::/48 maxlen: 48
                          2a03:32c0:4003::/48 maxlen: 48
                          2a03:32c0:4004::/48 maxlen: 48
                          2a03:32c0:4005::/48 maxlen: 48
                          2a03:32c0:4006::/48 maxlen: 48
                          2a03:32c0:4007::/48 maxlen: 48
                          2a03:32c0:5000::/48 maxlen: 48
                          2a03:32c0:5001::/48 maxlen: 48
                          2a03:32c0:5002::/48 maxlen: 48
                          2a03:32c0:5003::/48 maxlen: 48
                          2a03:32c0:5004::/48 maxlen: 48
                          2a03:32c0:5005::/48 maxlen: 48
                          2a03:32c0:5006::/48 maxlen: 48
                          2a03:32c0:5007::/48 maxlen: 48
                          2a03:32c0:6000::/48 maxlen: 48
                          2a03:32c0:6001::/48 maxlen: 48
                          2a03:32c0:6002::/48 maxlen: 48
                          2a03:32c0:6003::/48 maxlen: 48
                          2a03:32c0:6004::/48 maxlen: 48
                          2a03:32c0:6005::/48 maxlen: 48
                          2a03:32c0:6006::/48 maxlen: 48
                          2a03:32c0:6007::/48 maxlen: 48
                          2a03:32c0:7000::/48 maxlen: 48
                          2a03:32c0:7001::/48 maxlen: 48
                          2a03:32c0:8000::/48 maxlen: 48
                          2a03:32c0:8001::/48 maxlen: 48
                          2a03:32c0:8002::/48 maxlen: 48
                          2a03:32c0:8003::/48 maxlen: 48
                          2a03:32c0:8004::/48 maxlen: 48
                          2a03:32c0:8005::/48 maxlen: 48
                          2a03:32c0:8006::/48 maxlen: 48
                          2a03:32c0:8007::/48 maxlen: 48
                          2a03:32c0:9000::/48 maxlen: 48
                          2a03:32c0:9001::/48 maxlen: 48
                          2a03:32c0:9002::/48 maxlen: 48
                          2a03:32c0:9003::/48 maxlen: 48
                          2a03:32c0:9004::/48 maxlen: 48
                          2a03:32c0:9005::/48 maxlen: 48
                          2a03:32c0:9006::/48 maxlen: 48
                          2a03:32c0:9007::/48 maxlen: 48
                          2a03:32c0:a000::/48 maxlen: 48
                          2a03:32c0:a001::/48 maxlen: 48
                          2a03:32c0:a002::/48 maxlen: 48
                          2a03:32c0:a003::/48 maxlen: 48
                          2a03:32c0:a004::/48 maxlen: 48
                          2a03:32c0:a005::/48 maxlen: 48
                          2a03:32c0:a006::/48 maxlen: 48
                          2a03:32c0:a007::/48 maxlen: 48
                          2a03:32c0:a008::/48 maxlen: 48
                          2a03:32c0:a009::/48 maxlen: 48
                          2a03:32c0:b000::/48 maxlen: 48
                          2a03:32c0:b001::/48 maxlen: 48
                          2a03:32c0:b002::/48 maxlen: 48
                          2a03:32c0:b003::/48 maxlen: 48
                          2a03:32c0:b004::/48 maxlen: 48
                          2a03:32c0:b005::/48 maxlen: 48
                          2a03:32c0:b006::/48 maxlen: 48
                          2a03:32c0:b007::/48 maxlen: 48
                          2a03:32c0:b008::/48 maxlen: 48
                          2a03:32c0:b009::/48 maxlen: 48
                          2a03:32c0:c008::/48 maxlen: 48
                          2a03:32c0:d008::/48 maxlen: 48
                          2a03:32c0:e000::/48 maxlen: 48
                          2a03:32c0:e001::/48 maxlen: 48
                          2a03:32c0:e002::/48 maxlen: 48
                          2a03:32c0:e003::/48 maxlen: 48
                          2a03:32c0:e004::/48 maxlen: 48
                          2a03:32c0:e005::/48 maxlen: 48
                          2a03:32c0:e006::/48 maxlen: 48
                          2a03:32c0:e007::/48 maxlen: 48
                          2a03:32c0:e008::/48 maxlen: 48
                          2a03:32c0:e009::/48 maxlen: 48
                          2a03:32c0:f008::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:54:47:f9:4c:64:6a:fb:48:74:e7:64:e6:51:ac:c4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: Jan 29 08:13:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b8950d16e8ca186648cbf56921f057f4a1203699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:92:5c:cb:fc:c5:50:9b:eb:74:76:b5:22:
                    ef:d1:e1:ed:13:b2:80:74:74:99:c2:ab:da:79:d5:
                    32:fa:9c:80:ce:01:43:c5:c0:38:78:fb:58:f8:e2:
                    f8:37:09:ec:84:e8:46:f6:b4:6a:02:5b:37:22:68:
                    c1:ac:d9:25:db:88:2e:38:5f:24:2a:2e:7d:4d:4c:
                    a5:a1:d2:99:12:95:2a:df:42:b9:a8:41:fb:92:0d:
                    58:a8:3c:3e:9b:41:a8:90:bf:d3:0f:b1:72:94:5c:
                    30:65:cd:37:a7:41:27:a8:ba:00:59:39:e0:a5:bd:
                    74:83:dd:56:86:88:38:84:61:09:35:23:93:bc:aa:
                    8d:f0:46:b4:61:de:9b:dc:79:23:7a:93:17:e1:29:
                    59:fd:14:39:ea:01:33:d2:d1:86:8e:81:45:08:e0:
                    20:bc:71:82:22:cb:22:13:18:ed:e1:d1:73:05:fa:
                    6a:44:e2:06:4a:aa:c6:30:6d:1a:59:a2:85:f5:0e:
                    c1:fa:fe:f4:c3:96:8b:a1:c3:da:65:d0:45:ce:73:
                    c1:85:64:8d:0e:13:e4:83:d5:cb:51:d9:53:67:9a:
                    d5:f1:a3:a5:f6:3c:a4:13:84:1f:30:c7:01:1f:62:
                    53:59:a4:d2:a2:d9:ee:2b:eb:b1:8d:91:40:02:1d:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:95:0D:16:E8:CA:18:66:48:CB:F5:69:21:F0:57:F4:A1:20:36:99
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/uJUNFujKGGZIy_VpIfBX9KEgNpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.76.66.0/24
                  217.76.70.0/24
                IPv6:
                  2a03:32c0::/45
                  2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:4000::/45
                  2a03:32c0:5000::/45
                  2a03:32c0:6000::/45
                  2a03:32c0:7000::/47
                  2a03:32c0:8000::/45
                  2a03:32c0:9000::/45
                  2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:c008::/48
                  2a03:32c0:d008::/48
                  2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:f008::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:c1:51:19:5d:33:cc:15:13:de:f4:c3:f1:3f:1d:73:b2:
         97:4b:af:39:b0:76:6b:ab:d8:57:3f:1c:6f:0e:49:7b:50:0c:
         e3:64:e7:aa:9c:da:1c:d6:37:9b:6c:61:5d:ce:13:d1:a0:07:
         2d:9e:3d:0a:7f:2b:ca:84:4e:e7:2a:6c:6a:45:c0:1a:ec:ab:
         03:ac:01:a1:eb:b8:ba:b1:b7:67:90:90:6b:6f:e5:33:41:91:
         e2:8f:23:03:83:73:60:ac:ce:9c:f4:e3:93:17:f2:95:ae:3b:
         67:3d:56:d6:bb:5b:f2:17:17:4c:5c:be:6b:ef:fe:cd:12:31:
         6d:f8:5c:98:3b:aa:57:9a:e6:49:d8:db:9f:6c:f4:4d:38:8a:
         db:49:25:4e:6b:e3:3a:bf:56:7a:1b:30:88:70:ea:0d:dc:e1:
         16:53:1a:3a:f6:25:88:60:97:f5:5b:a9:3c:3a:5c:9f:53:83:
         51:bf:3c:26:3b:a4:26:01:73:d8:18:80:fa:43:08:a4:2d:88:
         60:90:1e:cb:12:3d:30:aa:9c:8f:03:57:37:94:cf:fb:98:a3:
         81:b7:7f:b0:f7:74:d7:2c:ca:93:f5:75:ca:45:6e:6f:36:6a:
         35:64:dd:a6:b3:ec:db:bc:98:6a:8c:c7:87:ef:d7:f7:cf:18:
         c7:ef:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org