Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/vrDJbOd6zUweKRkO_84JejW84qU.roa
File:                     vrDJbOd6zUweKRkO_84JejW84qU.roa (raw, json)
Hash identifier:          bwN5ncwzHVJbOeAXFp/y0rNJWQFbtHNr6RVK3vY+KUM=
Subject key identifier:   BE:B0:C9:6C:E7:7A:CD:4C:1E:29:19:0E:FF:CE:09:7A:35:BC:E2:A5
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       018D5D459CCC830C60F2124B1A977CDF699B
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/vrDJbOd6zUweKRkO_84JejW84qU.roa
Signing time:             Wed 31 Jan 2024 02:07:39 +0000
ROA not before:           Wed 31 Jan 2024 02:07:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48503
IP address blocks:        217.76.66.0/24 maxlen: 24
                          217.76.70.0/24 maxlen: 24
                          2a03:32c0::/48 maxlen: 48
                          2a03:32c0:1::/48 maxlen: 48
                          2a03:32c0:2::/48 maxlen: 48
                          2a03:32c0:3::/48 maxlen: 48
                          2a03:32c0:4::/48 maxlen: 48
                          2a03:32c0:5::/48 maxlen: 48
                          2a03:32c0:6::/48 maxlen: 48
                          2a03:32c0:7::/48 maxlen: 48
                          2a03:32c0:1000::/48 maxlen: 48
                          2a03:32c0:1001::/48 maxlen: 48
                          2a03:32c0:1002::/48 maxlen: 48
                          2a03:32c0:1003::/48 maxlen: 48
                          2a03:32c0:1004::/48 maxlen: 48
                          2a03:32c0:1005::/48 maxlen: 48
                          2a03:32c0:1006::/48 maxlen: 48
                          2a03:32c0:1007::/48 maxlen: 48
                          2a03:32c0:1008::/48 maxlen: 48
                          2a03:32c0:1009::/48 maxlen: 48
                          2a03:32c0:2000::/48 maxlen: 48
                          2a03:32c0:2001::/48 maxlen: 48
                          2a03:32c0:2002::/48 maxlen: 48
                          2a03:32c0:2003::/48 maxlen: 48
                          2a03:32c0:2004::/48 maxlen: 48
                          2a03:32c0:2005::/48 maxlen: 48
                          2a03:32c0:2006::/48 maxlen: 48
                          2a03:32c0:2007::/48 maxlen: 48
                          2a03:32c0:2008::/48 maxlen: 48
                          2a03:32c0:2009::/48 maxlen: 48
                          2a03:32c0:3000::/48 maxlen: 48
                          2a03:32c0:3001::/48 maxlen: 48
                          2a03:32c0:3002::/48 maxlen: 48
                          2a03:32c0:3003::/48 maxlen: 48
                          2a03:32c0:3004::/48 maxlen: 48
                          2a03:32c0:3005::/48 maxlen: 48
                          2a03:32c0:3006::/48 maxlen: 48
                          2a03:32c0:3007::/48 maxlen: 48
                          2a03:32c0:3008::/48 maxlen: 48
                          2a03:32c0:3009::/48 maxlen: 48
                          2a03:32c0:4000::/48 maxlen: 48
                          2a03:32c0:4001::/48 maxlen: 48
                          2a03:32c0:4002::/48 maxlen: 48
                          2a03:32c0:4003::/48 maxlen: 48
                          2a03:32c0:4004::/48 maxlen: 48
                          2a03:32c0:4005::/48 maxlen: 48
                          2a03:32c0:4006::/48 maxlen: 48
                          2a03:32c0:4007::/48 maxlen: 48
                          2a03:32c0:4008::/48 maxlen: 48
                          2a03:32c0:4009::/48 maxlen: 48
                          2a03:32c0:5000::/48 maxlen: 48
                          2a03:32c0:5001::/48 maxlen: 48
                          2a03:32c0:5002::/48 maxlen: 48
                          2a03:32c0:5003::/48 maxlen: 48
                          2a03:32c0:5004::/48 maxlen: 48
                          2a03:32c0:5005::/48 maxlen: 48
                          2a03:32c0:5006::/48 maxlen: 48
                          2a03:32c0:5007::/48 maxlen: 48
                          2a03:32c0:5008::/48 maxlen: 48
                          2a03:32c0:5009::/48 maxlen: 48
                          2a03:32c0:6000::/48 maxlen: 48
                          2a03:32c0:6001::/48 maxlen: 48
                          2a03:32c0:6002::/48 maxlen: 48
                          2a03:32c0:6003::/48 maxlen: 48
                          2a03:32c0:6004::/48 maxlen: 48
                          2a03:32c0:6005::/48 maxlen: 48
                          2a03:32c0:6006::/48 maxlen: 48
                          2a03:32c0:6007::/48 maxlen: 48
                          2a03:32c0:7000::/48 maxlen: 48
                          2a03:32c0:7001::/48 maxlen: 48
                          2a03:32c0:8000::/48 maxlen: 48
                          2a03:32c0:8001::/48 maxlen: 48
                          2a03:32c0:8002::/48 maxlen: 48
                          2a03:32c0:8003::/48 maxlen: 48
                          2a03:32c0:8004::/48 maxlen: 48
                          2a03:32c0:8005::/48 maxlen: 48
                          2a03:32c0:8006::/48 maxlen: 48
                          2a03:32c0:8007::/48 maxlen: 48
                          2a03:32c0:9000::/48 maxlen: 48
                          2a03:32c0:9001::/48 maxlen: 48
                          2a03:32c0:9002::/48 maxlen: 48
                          2a03:32c0:9003::/48 maxlen: 48
                          2a03:32c0:9004::/48 maxlen: 48
                          2a03:32c0:9005::/48 maxlen: 48
                          2a03:32c0:9006::/48 maxlen: 48
                          2a03:32c0:9007::/48 maxlen: 48
                          2a03:32c0:a000::/48 maxlen: 48
                          2a03:32c0:a001::/48 maxlen: 48
                          2a03:32c0:a002::/48 maxlen: 48
                          2a03:32c0:a003::/48 maxlen: 48
                          2a03:32c0:a004::/48 maxlen: 48
                          2a03:32c0:a005::/48 maxlen: 48
                          2a03:32c0:a006::/48 maxlen: 48
                          2a03:32c0:a007::/48 maxlen: 48
                          2a03:32c0:a008::/48 maxlen: 48
                          2a03:32c0:a009::/48 maxlen: 48
                          2a03:32c0:b000::/48 maxlen: 48
                          2a03:32c0:b001::/48 maxlen: 48
                          2a03:32c0:b002::/48 maxlen: 48
                          2a03:32c0:b003::/48 maxlen: 48
                          2a03:32c0:b004::/48 maxlen: 48
                          2a03:32c0:b005::/48 maxlen: 48
                          2a03:32c0:b006::/48 maxlen: 48
                          2a03:32c0:b007::/48 maxlen: 48
                          2a03:32c0:b008::/48 maxlen: 48
                          2a03:32c0:b009::/48 maxlen: 48
                          2a03:32c0:c008::/48 maxlen: 48
                          2a03:32c0:d008::/48 maxlen: 48
                          2a03:32c0:e000::/48 maxlen: 48
                          2a03:32c0:e001::/48 maxlen: 48
                          2a03:32c0:e002::/48 maxlen: 48
                          2a03:32c0:e003::/48 maxlen: 48
                          2a03:32c0:e004::/48 maxlen: 48
                          2a03:32c0:e005::/48 maxlen: 48
                          2a03:32c0:e006::/48 maxlen: 48
                          2a03:32c0:e007::/48 maxlen: 48
                          2a03:32c0:e008::/48 maxlen: 48
                          2a03:32c0:e009::/48 maxlen: 48
                          2a03:32c0:f008::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 03:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5d:45:9c:cc:83:0c:60:f2:12:4b:1a:97:7c:df:69:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: Jan 31 02:07:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=beb0c96ce77acd4c1e29190effce097a35bce2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:30:27:cb:ec:a3:2b:c7:c9:22:ca:ed:dc:
                    ac:db:6e:aa:db:c1:f5:d3:16:3e:eb:02:a9:c3:06:
                    fe:55:1b:93:b3:a0:b4:ab:09:7e:4a:7e:fc:37:f2:
                    48:4b:c7:8b:31:88:c5:d2:09:e1:6b:71:55:65:15:
                    bf:ec:0c:97:6b:93:7f:85:b8:9e:31:55:8d:db:37:
                    45:9a:1e:db:43:60:d3:8c:f4:0b:7c:e2:a5:1e:33:
                    bc:a8:e3:2c:fb:72:20:a5:fb:53:42:e6:34:80:81:
                    c9:ac:91:f8:bb:0c:47:26:48:d4:be:98:69:2c:98:
                    8e:30:7d:08:29:7a:99:e5:f3:e9:aa:d9:de:a5:e3:
                    84:fb:20:1f:49:56:65:55:c9:64:6e:41:a8:1e:af:
                    78:52:f5:70:43:14:53:f5:05:cd:dd:a4:41:fb:b8:
                    b7:1d:5a:20:0b:f0:0f:a7:7e:60:48:04:53:03:8c:
                    37:a8:6d:48:a5:64:22:da:66:8f:d4:e9:30:3b:78:
                    31:fc:cc:ae:7e:96:c8:0b:82:59:1e:66:11:cf:f6:
                    5f:fe:d0:e7:72:82:1a:26:c7:36:99:c1:f5:40:d7:
                    b0:d4:fe:35:e5:69:58:80:ae:7f:d7:2a:27:7d:e7:
                    2a:c8:09:35:fc:e0:58:14:e2:f2:43:94:a0:ae:ae:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B0:C9:6C:E7:7A:CD:4C:1E:29:19:0E:FF:CE:09:7A:35:BC:E2:A5
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/vrDJbOd6zUweKRkO_84JejW84qU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.76.66.0/24
                  217.76.70.0/24
                IPv6:
                  2a03:32c0::/45
                  2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:4000::-2a03:32c0:4009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:5000::-2a03:32c0:5009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:6000::/45
                  2a03:32c0:7000::/47
                  2a03:32c0:8000::/45
                  2a03:32c0:9000::/45
                  2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:c008::/48
                  2a03:32c0:d008::/48
                  2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:f008::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:ff:e9:87:0a:3f:48:15:ab:de:77:0b:33:a7:90:71:29:4c:
         f9:73:30:9d:85:d9:00:cb:58:dc:92:fb:ea:52:5a:72:99:5d:
         bf:39:14:32:90:31:2a:0a:35:26:fe:9a:5a:2b:37:a7:10:2c:
         4d:d8:79:32:a7:fd:62:de:c2:38:39:56:6c:a3:62:27:e1:90:
         ee:1f:b2:a5:34:56:9d:b2:37:79:2f:c6:f1:15:7d:84:cb:06:
         bb:3c:d5:7b:48:a7:14:45:be:61:e0:15:02:ae:4c:3c:1b:91:
         90:66:2c:2b:4c:56:2c:d4:2d:58:31:44:9d:9f:9b:5d:e3:dd:
         b4:53:20:ba:98:ef:9b:48:7f:75:99:a7:c2:ff:dd:3e:5d:c9:
         9b:06:7e:5c:13:13:16:90:56:59:ef:f4:2d:ff:8c:b8:e8:2e:
         18:25:7a:02:ec:85:44:0b:83:a1:bf:ea:45:94:15:7e:10:18:
         9c:c5:11:1b:d0:2b:ae:33:10:71:a7:7c:72:c9:52:ec:3b:75:
         4d:d4:67:6f:35:f1:00:8c:b8:2b:1e:b9:e0:3a:b9:8c:46:73:
         7a:9d:86:70:6f:a1:05:05:c5:19:94:89:56:bd:a3:02:9c:b8:
         eb:c2:7e:b7:d4:b2:de:8b:e6:0f:40:7a:76:e2:8d:76:93:02:
         a1:fa:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 05:26:00 2024 by rpki-client on console-ams.rpki-client.org