Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/wLqF2CeM9tyfz068etkwKVr9lHA.roa
File:                     wLqF2CeM9tyfz068etkwKVr9lHA.roa (raw, json)
Hash identifier:          ezwIZ1zInLOVkW8QYeUhJq0HzSXbY+nAoLfrrV5BUF4=
Subject key identifier:   C0:BA:85:D8:27:8C:F6:DC:9F:CF:4E:BC:7A:D9:30:29:5A:FD:94:70
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01856F670E03FBF352AC82DCABA8F873B7C0
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/wLqF2CeM9tyfz068etkwKVr9lHA.roa
Signing time:             Sun 01 Jan 2023 22:15:02 +0000
ROA not before:           Sun 01 Jan 2023 22:15:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15457
IP address blocks:        62.169.72.0/22 maxlen: 22
                          62.169.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:67:0e:03:fb:f3:52:ac:82:dc:ab:a8:f8:73:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  1 22:15:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0ba85d8278cf6dc9fcf4ebc7ad930295afd9470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:24:05:5d:e9:a9:f4:be:00:2e:69:5e:f8:
                    ed:b4:7d:1c:60:05:fe:04:92:bf:68:05:65:ec:d7:
                    e6:6e:bf:86:c9:99:a0:d2:cd:04:94:98:b6:bf:b1:
                    01:97:76:4f:d3:78:7a:ca:2e:03:98:f8:66:17:cb:
                    3b:60:b9:70:3f:27:11:ef:37:65:2f:1d:03:f7:d3:
                    60:1b:ee:56:ca:a7:fb:57:31:d7:ef:a0:33:39:40:
                    2f:c8:90:3e:de:8e:7e:3d:eb:c3:1e:1f:5e:fd:70:
                    86:d9:cb:a9:ee:82:3c:e4:1d:41:3d:8a:bd:d9:af:
                    62:41:af:90:88:aa:7a:77:5e:3f:b2:ea:48:35:93:
                    79:37:d9:de:db:a8:64:15:a8:f9:a2:cd:f2:8f:4b:
                    98:45:ec:83:4f:3a:51:7b:65:1d:f3:b1:7d:11:50:
                    bc:1e:aa:a3:50:7f:9a:cc:76:fc:89:b6:e1:3f:ec:
                    52:c6:00:07:04:8b:40:7c:b2:de:f1:7e:ea:b2:79:
                    5a:65:71:d3:32:c6:9f:7a:03:cd:5d:1b:cc:6e:c1:
                    ed:27:b4:11:da:74:b3:93:37:31:6a:af:7b:d7:05:
                    e3:65:e1:03:8f:cf:9c:06:75:44:07:37:86:e0:12:
                    45:96:9c:e7:40:01:07:74:a6:50:97:80:9a:91:32:
                    fd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BA:85:D8:27:8C:F6:DC:9F:CF:4E:BC:7A:D9:30:29:5A:FD:94:70
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/wLqF2CeM9tyfz068etkwKVr9lHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.72.0/22
                  62.169.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:bf:43:70:d8:7d:fa:56:66:80:02:3b:d8:bf:67:18:c8:
         32:70:d6:35:a8:4d:41:b5:d7:ce:b0:c1:85:b0:5c:ff:55:38:
         93:27:77:a5:58:fd:35:42:2a:18:02:3a:11:c8:7f:1b:19:4e:
         c2:66:d0:c4:ae:06:ee:f7:e1:b1:64:5b:8f:08:5c:94:25:ba:
         0f:f6:65:59:4c:3d:9f:a0:00:40:0f:1e:52:74:e3:53:3b:b8:
         ae:06:19:5f:bc:a3:09:40:09:84:e4:f7:6b:5e:fd:8f:4d:e4:
         35:d6:4b:51:99:81:91:1e:8b:90:50:48:6e:d8:47:0d:14:1b:
         57:eb:da:99:6c:4b:a6:1c:82:d5:98:ad:be:02:4d:8b:e9:f8:
         aa:ed:70:4a:c0:65:23:1f:4f:32:2d:94:89:a1:55:f8:1f:70:
         c9:ef:f7:63:4a:b2:fa:49:fb:f0:1c:f0:86:0a:26:04:8a:87:
         e3:9d:0c:7c:0d:51:2f:7d:1b:ed:51:2d:fe:97:14:d4:a6:ab:
         db:47:b6:f6:7f:ec:c6:ef:fd:7a:ab:82:02:e5:46:55:43:92:
         f0:89:03:44:49:fe:a5:79:70:89:67:ea:6b:2e:4c:e5:a9:26:
         ed:77:58:0a:26:74:1a:f6:4a:5e:8a:8e:0d:9b:a5:1c:7c:d9:
         82:ca:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:51 2024 by rpki-client on console-fra.rpki-client.org