Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/11imhoetQAkoHjUHEPG18m7fHYI.roa
File:                     11imhoetQAkoHjUHEPG18m7fHYI.roa (raw, json)
Hash identifier:          5Elf8Jp7D+aa/cuZUJ+8NvwXrLXd8SY5mJRVidSS+lw=
Subject key identifier:   D7:58:A6:86:87:AD:40:09:28:1E:35:07:10:F1:B5:F2:6E:DF:1D:82
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018B51177F3C5184DBBE31C3DA1E6753CEA9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/11imhoetQAkoHjUHEPG18m7fHYI.roa
Signing time:             Sat 21 Oct 2023 07:16:16 +0000
ROA not before:           Sat 21 Oct 2023 07:16:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205220
IP address blocks:        62.72.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:51:17:7f:3c:51:84:db:be:31:c3:da:1e:67:53:ce:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct 21 07:16:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d758a68687ad4009281e350710f1b5f26edf1d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b7:93:3c:b1:2c:a0:e9:ce:9c:d0:e4:6f:04:
                    88:a5:23:a2:43:fe:7f:cb:52:69:eb:e2:04:0b:58:
                    1c:cd:66:c8:20:54:0c:d9:3e:74:28:7a:a3:e2:9a:
                    e6:cd:aa:a3:58:73:36:75:c0:62:16:4e:d1:16:44:
                    cd:0f:87:6e:cd:b4:9b:4f:61:40:b3:e0:0a:db:2d:
                    aa:28:6c:63:89:f9:4b:be:0c:cb:75:b1:67:b1:8a:
                    7d:7a:fb:83:cc:61:9f:92:8d:bf:a3:88:fa:8e:11:
                    4d:6f:2b:63:fb:ef:c8:68:aa:3b:47:73:e6:f4:ad:
                    4f:17:50:4f:7f:de:c5:07:f5:dc:41:df:7d:0b:60:
                    02:ee:cd:cd:64:58:e4:46:b7:44:b6:9e:62:ba:15:
                    e1:39:e5:30:bb:31:f2:d4:84:0d:24:de:e2:01:dd:
                    0c:c5:d1:f0:5a:b8:87:ff:bf:73:2f:7d:43:7f:6d:
                    2f:0e:e8:c1:bb:8c:f9:e8:8e:21:5e:93:13:4c:91:
                    24:c3:8b:2e:88:ab:a2:0d:24:9b:6e:5f:a7:a2:74:
                    7c:3e:8d:9c:5d:62:ad:70:d7:b6:22:99:ab:0e:9b:
                    70:dc:9d:98:5b:54:37:df:35:08:84:f0:10:19:25:
                    d0:51:ab:ee:2f:b6:71:17:a9:14:a1:33:04:10:82:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:58:A6:86:87:AD:40:09:28:1E:35:07:10:F1:B5:F2:6E:DF:1D:82
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/11imhoetQAkoHjUHEPG18m7fHYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:f4:73:fc:22:c8:2e:29:6b:51:88:6b:32:88:37:82:43:
         91:d5:d4:17:c4:44:49:67:a4:31:49:36:7e:26:af:ae:92:94:
         26:a2:09:c4:e8:9a:a1:8d:5d:96:b1:f8:2e:68:be:1c:3e:e0:
         cc:20:9d:63:9c:f4:3d:9f:05:44:eb:7f:79:39:75:b5:6b:69:
         04:d9:60:8c:09:f7:ef:c0:95:b4:b2:26:1b:59:dd:22:b5:d2:
         12:e6:57:a0:c3:21:34:30:8b:83:02:29:c1:1b:4e:fc:05:e3:
         3e:dd:18:e1:54:b2:71:1c:d3:6b:65:af:b2:83:c1:29:b6:19:
         48:78:8a:f5:76:d6:21:4d:5c:8b:fa:0d:44:5f:97:5d:d5:8a:
         6a:57:a2:8e:23:95:cc:b3:00:4c:5e:41:a7:0b:ea:1f:ef:1f:
         cc:76:23:ee:92:44:f5:f0:6e:e1:b3:d1:b6:21:58:44:9e:2f:
         b8:d9:60:73:1d:fa:5a:d4:58:c3:5b:51:57:4c:7b:09:be:71:
         bf:9c:da:97:20:7c:36:c4:e0:ca:18:1d:5d:4c:ce:a0:76:46:
         b3:07:13:2f:0f:ee:e4:85:70:b0:08:8e:1d:3e:bd:c7:eb:e8:
         ac:e5:00:8e:c8:c2:e0:06:57:b0:ee:0d:ae:b5:3b:58:b7:69:
         0d:7a:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org