Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/f2h8CD1776vlSKt1NuotmxDwqoY.roa
File:                     f2h8CD1776vlSKt1NuotmxDwqoY.roa (raw, json)
Hash identifier:          UQ+Y9ggKCLoU9mBJJXMXxML6j0JcGjqNgwgfEqaio/s=
Subject key identifier:   7F:68:7C:08:3D:7B:EF:AB:E5:48:AB:75:36:EA:2D:9B:10:F0:AA:86
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       0191DC6A72BFC6F586D7DB5C0BE6BC5EE457
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/f2h8CD1776vlSKt1NuotmxDwqoY.roa
Signing time:             Tue 10 Sep 2024 14:50:49 +0000
ROA not before:           Tue 10 Sep 2024 14:50:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3360
IP address blocks:        195.203.156.0/22 maxlen: 22
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:20::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:30::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:dc:6a:72:bf:c6:f5:86:d7:db:5c:0b:e6:bc:5e:e4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Sep 10 14:50:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7f687c083d7befabe548ab7536ea2d9b10f0aa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:c5:77:59:66:bf:4e:14:97:c2:c9:57:e6:
                    cc:bc:b6:fe:c2:83:1d:be:8c:99:b4:92:22:92:6c:
                    15:62:68:bb:e0:ab:e1:04:a2:f4:a3:a1:91:59:80:
                    ae:c9:75:fd:61:3e:6c:f2:91:ff:61:57:f7:e1:cb:
                    1b:ca:89:af:48:c4:1f:d7:93:18:bf:b3:df:a5:3e:
                    5a:e4:40:d3:14:d3:39:ea:31:4e:e6:76:27:be:0a:
                    5e:4e:64:fb:39:b9:56:bc:06:36:9d:35:7e:64:d4:
                    37:4e:d6:dd:01:c6:02:bc:8b:da:ce:2f:f8:6d:1f:
                    0a:9c:ea:b9:0b:d2:ea:40:52:8f:a8:4d:51:71:62:
                    03:fa:22:b0:25:e1:69:fa:f3:9f:88:52:41:30:eb:
                    a1:86:66:5d:7e:66:bc:34:4d:0a:0f:8c:79:e1:8a:
                    90:34:5a:da:e4:d1:d4:85:5e:05:33:ef:61:bf:96:
                    ae:5c:c8:37:c7:23:51:54:c4:6c:67:95:45:e8:5c:
                    d9:6e:d4:41:f8:13:a2:12:9b:32:29:56:ce:57:08:
                    60:57:21:f4:f0:74:1c:64:a5:c1:aa:80:f1:ce:30:
                    d5:bf:25:bd:1d:7e:e2:61:58:ef:6c:55:a9:ba:72:
                    30:1d:55:1a:9b:16:fb:ee:63:8f:c5:61:6b:3e:cf:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:7C:08:3D:7B:EF:AB:E5:48:AB:75:36:EA:2D:9B:10:F0:AA:86
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/f2h8CD1776vlSKt1NuotmxDwqoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.203.156.0/22
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:ac:1f:a4:dc:d3:74:e6:1c:d5:f1:5c:26:a7:33:38:70:
         a6:1c:72:56:eb:ba:c0:16:f8:d9:4a:20:22:49:1e:c5:b2:ed:
         b3:c1:d0:1c:34:4f:b4:6c:c3:0b:fd:1e:52:45:16:51:65:e0:
         c0:ea:07:07:6a:d2:c7:d3:ab:1d:1d:70:04:78:fe:38:bc:7f:
         4f:8c:d9:3a:c5:51:a8:5f:74:18:67:55:01:41:aa:6f:cc:5e:
         4b:a4:ce:40:45:f0:22:9c:f3:eb:b9:23:5e:44:49:12:3a:e7:
         d1:30:2e:29:66:98:66:8b:99:4b:9d:c9:c4:2b:3b:38:60:c1:
         ab:a4:6f:c2:1c:95:c1:fa:cd:2d:bf:3f:0f:a2:51:0e:ff:6b:
         b6:b6:40:e2:29:3e:d2:54:41:8f:81:09:8a:c4:45:31:d9:83:
         8b:20:81:dd:76:aa:ee:3b:8e:f9:9a:16:33:46:a9:bb:03:e0:
         dd:5a:1d:b2:f4:15:ea:fb:84:e3:5d:ef:8b:18:86:83:18:75:
         df:10:b1:35:02:b0:03:15:b7:c8:9c:9f:9e:4d:cb:a8:9e:99:
         19:ad:20:30:01:22:48:ea:e2:7e:fe:1e:87:6e:98:7f:f9:0d:
         de:43:33:20:a5:cf:d1:2b:5e:54:ec:a7:9e:c6:eb:fc:dd:96:
         35:e9:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 19:38:25 2024 by rpki-client on console-fra.rpki-client.org