Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/0tKkFNnX3ESIXS6J2W9BIY0Pqyk.roa
File:                     0tKkFNnX3ESIXS6J2W9BIY0Pqyk.roa (raw, json)
Hash identifier:          Fr4nqu+Sigun+q8s2A5wIrROQlmHcxf4HzZJ1jzhW7g=
Subject key identifier:   D2:D2:A4:14:D9:D7:DC:44:88:5D:2E:89:D9:6F:41:21:8D:0F:AB:29
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       01889077D4DB263C56B43BB17B310863B8F4
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/0tKkFNnX3ESIXS6J2W9BIY0Pqyk.roa
Signing time:             Tue 06 Jun 2023 11:29:12 +0000
ROA not before:           Tue 06 Jun 2023 11:29:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202
IP address blocks:        2a03:5000:122::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:77:d4:db:26:3c:56:b4:3b:b1:7b:31:08:63:b8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jun  6 11:29:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d2d2a414d9d7dc44885d2e89d96f41218d0fab29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:93:4a:66:9a:9a:06:69:a4:17:99:a5:3b:
                    57:85:05:d0:51:d9:d8:37:c5:f2:4a:13:9a:fb:9e:
                    08:4b:7b:f7:cd:60:51:b2:27:17:21:90:b5:cb:7f:
                    81:7c:5e:0f:15:94:33:50:72:a0:ba:23:44:93:1c:
                    76:f6:50:a3:7e:ce:88:f5:55:2d:4f:0a:48:9c:ed:
                    74:44:1e:5f:f0:8f:27:c6:7f:21:f4:d8:4c:51:8e:
                    58:50:39:d8:82:26:0e:81:b1:8b:92:d0:0f:57:15:
                    ed:7e:3b:24:1e:74:fe:3a:8d:4e:5d:70:94:d9:53:
                    5b:66:a7:ee:5e:20:28:27:86:71:2a:2b:71:92:aa:
                    0e:2b:e4:4c:e4:2d:71:48:3b:48:e6:15:41:a6:e0:
                    44:ce:e4:9a:0e:37:e3:df:18:2e:61:67:f9:c3:80:
                    c1:9b:37:8e:f1:6e:c5:8b:32:51:3a:cd:9f:6d:94:
                    93:6e:dd:3c:fe:ad:85:d5:92:b8:04:73:33:f4:dd:
                    1a:da:e7:4b:98:b4:a5:53:19:f8:5f:6b:e3:00:47:
                    bb:ed:29:f4:7d:4c:8d:19:61:eb:fe:2b:fe:13:0f:
                    3d:37:75:d3:73:68:99:2c:21:5a:34:f6:78:4b:61:
                    9a:20:6e:43:d7:46:64:ea:54:31:21:56:a1:aa:69:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:A4:14:D9:D7:DC:44:88:5D:2E:89:D9:6F:41:21:8D:0F:AB:29
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/0tKkFNnX3ESIXS6J2W9BIY0Pqyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         bb:f1:05:11:e9:4b:eb:a7:3f:1f:83:e7:67:54:dc:98:09:2f:
         15:4d:38:d6:67:2b:7f:7a:23:76:ac:89:04:30:03:19:ea:8b:
         b6:bb:02:5d:43:2e:ea:e7:4b:f3:c9:01:82:d8:03:1c:48:1b:
         ac:d2:fe:6f:a7:f8:d4:f4:68:71:36:64:1d:12:f0:04:f2:87:
         21:af:cb:70:6f:11:81:0e:44:18:39:00:88:8b:15:19:d6:77:
         9d:d9:61:b0:43:87:a0:56:4c:e6:1e:71:20:33:c9:d1:b8:ca:
         c6:32:7f:8b:90:df:60:79:72:14:d2:65:2a:d4:26:3b:ff:c3:
         89:21:fb:84:87:8d:04:41:4f:dc:4a:3e:43:34:06:9b:10:cc:
         b1:51:6a:61:01:e0:0c:db:41:6d:1e:6e:16:0a:50:f1:b9:51:
         25:48:5e:f0:bd:a8:03:67:27:83:f6:f4:88:62:db:db:f9:3c:
         ae:ed:fe:01:a3:17:d0:2b:d6:34:bb:f1:d1:8e:2d:d4:d8:30:
         49:a8:39:cd:98:ce:a3:2f:d9:1b:e5:1b:f2:4f:ad:a2:e1:6e:
         7b:46:9d:d8:0b:f7:de:da:02:1d:99:3a:8a:5e:21:f5:5c:3d:
         49:f8:8a:6a:49:74:41:1b:11:df:1f:be:a8:c6:8b:d5:ef:54:
         47:7a:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org