Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/26XV7zl-cfFxDChyon3-WyjbUa4.roa
File:                     26XV7zl-cfFxDChyon3-WyjbUa4.roa (raw, json)
Hash identifier:          g0dNEU4tE9/oKAMRlDyRaQBvCYrNp/fK6cJUO3qHxII=
Subject key identifier:   DB:A5:D5:EF:39:7E:71:F1:71:0C:28:72:A2:7D:FE:5B:28:DB:51:AE
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018BB46BFAAA2A0F3D4CEC57E96120B67451
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/26XV7zl-cfFxDChyon3-WyjbUa4.roa
Signing time:             Thu 09 Nov 2023 14:10:57 +0000
ROA not before:           Thu 09 Nov 2023 14:10:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.166.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.168.0/22 maxlen: 22
                          62.72.167.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.174.0/23 maxlen: 23
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.180.0/23 maxlen: 23
                          62.72.184.0/22 maxlen: 22
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          81.21.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 12:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b4:6b:fa:aa:2a:0f:3d:4c:ec:57:e9:61:20:b6:74:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov  9 14:10:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dba5d5ef397e71f1710c2872a27dfe5b28db51ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:14:97:0e:a4:aa:b4:ac:6d:07:98:02:ab:
                    01:76:6a:ac:1c:60:d5:04:79:c1:28:2f:f4:fa:6d:
                    ff:03:c8:44:c1:46:35:8e:4f:84:8e:e7:59:f4:74:
                    4a:41:71:18:93:1e:38:03:dc:e9:2d:bf:fd:2c:d6:
                    72:45:bb:29:34:ab:b0:d3:ce:4d:a0:d1:41:6e:74:
                    b6:45:cc:1c:11:52:06:c5:0f:70:e2:d2:9c:e9:1a:
                    a3:1e:c9:33:db:ec:ce:73:97:06:48:59:5b:54:25:
                    76:be:6c:f1:b2:ea:2d:2f:49:ca:b7:67:9e:9b:5a:
                    0c:2e:ea:c1:e8:2e:23:11:34:84:b9:d1:ee:b8:a2:
                    76:5e:41:55:4a:a9:93:18:c2:a1:7b:24:6e:a3:62:
                    c0:6c:a8:10:3a:f8:55:ff:bd:be:82:08:05:c5:60:
                    3a:df:4b:1c:f6:bc:69:19:2a:85:de:4c:0d:5b:5b:
                    d4:0d:ca:dd:80:87:b1:f8:76:2b:3b:81:d1:35:5e:
                    e6:30:fd:57:63:53:d9:e5:9e:84:1a:42:4d:b4:53:
                    38:db:25:0a:5c:46:63:77:26:2c:a2:a4:4c:3e:5e:
                    fc:be:e6:21:47:2a:61:9d:33:ee:0f:8e:77:99:86:
                    bf:dc:66:97:03:bf:e9:25:31:0d:6f:c0:cc:6a:e5:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:D5:EF:39:7E:71:F1:71:0C:28:72:A2:7D:FE:5B:28:DB:51:AE
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/26XV7zl-cfFxDChyon3-WyjbUa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.171.255
                  62.72.174.0/23
                  62.72.179.0-62.72.182.255
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:34:0f:03:81:eb:1a:55:67:42:da:30:6c:ae:c3:41:76:
         6f:ac:ae:c8:7c:43:9e:c2:14:ca:48:a8:0d:6d:69:41:b9:a8:
         57:2f:28:a7:c6:d9:82:5d:5d:aa:92:57:76:f6:73:24:2c:3c:
         dc:99:34:1a:73:2e:6a:88:9c:1d:96:f3:5f:21:17:4e:11:f8:
         a8:17:93:9f:1d:4c:d3:39:c5:a9:29:8e:18:21:03:55:6f:3f:
         29:be:e2:fe:3d:9d:9c:f4:89:3a:21:27:ae:e6:51:54:9f:4b:
         c4:a7:86:ca:de:0b:ec:08:67:46:6b:42:f3:a0:f0:4a:9f:3c:
         c2:4b:34:84:4f:21:c9:9a:3c:a1:b0:ea:9b:26:2b:1c:fd:f6:
         0d:8a:b1:90:15:ca:e2:ad:3b:08:65:6c:cf:6d:03:6b:b8:ef:
         71:0e:25:13:1d:17:1c:92:8a:86:d5:19:ea:33:35:99:9f:0c:
         c3:cd:86:44:9b:8b:31:e8:69:21:57:6c:36:ee:d2:71:9d:04:
         e5:76:d8:5a:31:4f:3a:f6:96:14:77:f8:45:44:e9:e9:85:83:
         b6:a4:68:68:17:2f:d6:f0:2c:ac:64:9e:37:67:8a:44:99:54:
         8c:83:d3:1d:ac:30:d4:1a:34:7e:ee:c0:07:5d:39:1c:a6:c9:
         cf:72:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org