Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/ldtuv-Gjd5r_4xjxL08vvUrvVR8.roa
File:                     ldtuv-Gjd5r_4xjxL08vvUrvVR8.roa (raw, json)
Hash identifier:          4k+slfmc3Kmw9f3D6upmfOW05OOBySAwEC+4iIw48vk=
Subject key identifier:   95:DB:6E:BF:E1:A3:77:9A:FF:E3:18:F1:2F:4F:2F:BD:4A:EF:55:1F
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       01887D2C943086AA2AADECAC0767D86491F2
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/ldtuv-Gjd5r_4xjxL08vvUrvVR8.roa
Signing time:             Fri 02 Jun 2023 17:34:13 +0000
ROA not before:           Fri 02 Jun 2023 17:34:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        2a03:5000:122::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 06 Jun 2023 11:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:2c:94:30:86:aa:2a:ad:ec:ac:07:67:d8:64:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jun  2 17:34:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=95db6ebfe1a3779affe318f12f4f2fbd4aef551f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:3d:b7:b7:86:4f:f4:9b:f7:cc:04:77:9a:
                    c3:f3:99:2b:5c:75:2b:de:c8:a3:ac:30:e5:ad:27:
                    e9:dc:0c:23:00:5a:65:30:4a:fc:31:1b:b3:f7:fe:
                    59:3e:85:7f:5a:43:61:13:1b:4b:3e:9c:5e:16:61:
                    ee:45:92:98:1b:8b:f2:59:73:b6:31:4b:13:e0:76:
                    d9:44:06:f6:0d:40:64:79:6c:24:4f:23:16:02:45:
                    f4:5d:47:6c:09:f1:f4:ee:a3:db:93:b2:02:93:8c:
                    35:a4:a2:f0:da:a1:65:a2:69:ff:41:02:c5:96:98:
                    cd:a6:cb:17:04:a1:ea:c5:fe:4a:fd:c6:42:88:e2:
                    f9:3c:16:0c:f7:16:61:43:11:b6:c1:58:89:09:18:
                    90:ee:35:e5:be:b3:20:12:f0:6a:cb:20:01:56:69:
                    9c:ad:22:3b:cd:76:a9:e7:af:59:e7:1f:39:1d:8a:
                    05:0f:f4:d5:2d:16:98:f4:e8:6d:78:8f:7f:2c:ce:
                    c0:bc:86:a0:2a:f4:d0:72:20:5a:e8:8a:e0:2e:ef:
                    5a:98:12:37:95:05:b5:28:c0:17:5a:f3:56:4d:79:
                    8c:75:c0:16:27:1b:6b:44:c8:13:5a:c9:c8:83:50:
                    27:67:b6:9f:22:cd:94:b7:2a:36:53:4f:f8:4e:e9:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DB:6E:BF:E1:A3:77:9A:FF:E3:18:F1:2F:4F:2F:BD:4A:EF:55:1F
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/ldtuv-Gjd5r_4xjxL08vvUrvVR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::/48
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         72:28:da:65:d1:2a:39:6e:45:49:37:a1:bd:81:cc:4c:4d:1c:
         7a:8e:b9:35:ae:76:0b:95:22:10:ad:46:a6:f5:bb:c0:29:d8:
         da:bf:6b:96:94:b4:b2:24:e3:c5:8e:78:90:b6:cb:34:ed:e1:
         38:84:19:15:eb:aa:9d:b2:22:f2:4e:9a:ee:5e:1c:c9:be:ae:
         f6:3f:46:37:aa:d5:dd:eb:71:9e:ac:14:15:86:9b:02:38:8f:
         30:29:fa:77:76:1e:fd:08:c4:1d:03:af:b1:38:82:64:36:c3:
         6f:7c:0f:90:fb:3c:f2:0f:21:72:94:d6:ac:70:38:4a:f9:d2:
         9d:5b:06:12:8f:15:d6:69:5c:54:fa:aa:fa:78:a1:30:b8:56:
         dc:75:cf:f0:b5:bc:ec:a7:1f:b6:b7:6f:50:8b:0a:cf:15:d7:
         7f:e4:97:57:44:19:4e:17:33:10:91:46:dc:bf:44:11:35:92:
         b5:b2:d6:74:ff:d4:05:be:de:33:ec:d1:97:40:e6:90:1e:21:
         c2:2f:68:dd:db:48:02:2c:9d:c6:9b:50:62:d7:47:55:a6:9d:
         7f:31:29:e7:0d:76:35:dc:ca:5d:ec:8d:97:b8:30:88:14:92:
         fe:15:43:6a:b8:6e:de:6b:43:49:68:c9:fa:2e:56:1e:da:f4:
         eb:08:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:18 2024 by rpki-client on console-ams.rpki-client.org