Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5a12JRhMZzDH10VLp-Cztvl7bNQ.roa
File:                     5a12JRhMZzDH10VLp-Cztvl7bNQ.roa (raw, json)
Hash identifier:          nNlx7VbEmrII5SX7h6DiUTM7W3eCbIJxB5RCCs2nbRY=
Subject key identifier:   E5:AD:76:25:18:4C:67:30:C7:D7:45:4B:A7:E0:B3:B6:F9:7B:6C:D4
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018B4951238A9D2BA756283AC7A6B20F7AF0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5a12JRhMZzDH10VLp-Cztvl7bNQ.roa
Signing time:             Thu 19 Oct 2023 19:02:16 +0000
ROA not before:           Thu 19 Oct 2023 19:02:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/24 maxlen: 24
                          62.72.165.0/24 maxlen: 24
                          62.72.166.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.168.0/22 maxlen: 22
                          62.72.170.0/24 maxlen: 24
                          62.72.167.0/24 maxlen: 24
                          62.72.168.0/24 maxlen: 24
                          62.72.177.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.173.0/24 maxlen: 24
                          62.72.174.0/23 maxlen: 23
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.184.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.180.0/23 maxlen: 23
                          62.72.180.0/24 maxlen: 24
                          62.72.184.0/22 maxlen: 22
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          81.21.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 21 Oct 2023 07:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:49:51:23:8a:9d:2b:a7:56:28:3a:c7:a6:b2:0f:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct 19 19:02:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5ad7625184c6730c7d7454ba7e0b3b6f97b6cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:8d:e2:18:74:54:9c:44:fc:05:23:5c:0d:
                    6d:ba:67:b7:ad:81:15:a5:48:2e:06:55:c1:bd:09:
                    5e:0c:a9:30:09:41:4e:29:62:72:27:65:6c:3e:ae:
                    9f:27:dc:5f:74:31:91:a7:95:6b:12:ee:47:8d:02:
                    45:e7:a7:69:7d:43:fd:24:2f:a9:9e:db:ee:07:9d:
                    8e:bf:79:79:18:00:55:c6:a0:00:cc:c0:61:ed:5e:
                    a7:ac:4b:49:f6:68:e2:63:9a:e1:4c:91:eb:d6:a1:
                    35:5c:ca:3d:40:8f:77:34:aa:7e:c6:40:87:5a:ce:
                    e7:d5:2e:88:07:db:3f:67:79:98:da:19:49:75:75:
                    39:b9:c2:8a:8f:57:bd:7d:a5:66:77:64:85:27:d6:
                    1b:27:18:46:a0:f7:0c:a1:69:35:62:89:05:cf:1b:
                    18:37:35:7c:f4:57:75:ce:bf:ce:0e:03:94:55:94:
                    60:e3:d4:77:d4:b8:11:61:24:8d:bc:be:00:11:36:
                    67:7a:d0:d5:89:ff:c9:c5:53:c6:af:44:36:8e:ab:
                    c3:f5:49:9a:79:da:c4:fe:2a:38:d7:5a:ac:88:85:
                    3c:78:67:01:59:16:7a:c8:df:2a:f8:aa:ea:44:12:
                    90:62:0d:76:62:7c:ed:68:0f:db:91:ff:9c:84:93:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AD:76:25:18:4C:67:30:C7:D7:45:4B:A7:E0:B3:B6:F9:7B:6C:D4
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5a12JRhMZzDH10VLp-Cztvl7bNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.171.255
                  62.72.173.0-62.72.175.255
                  62.72.177.0/24
                  62.72.179.0-62.72.182.255
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:36:6b:1d:93:75:7c:d6:95:2e:d1:e3:c9:91:f0:90:be:9e:
         35:0d:07:51:39:e0:5e:d9:b0:8c:1b:d5:7c:ae:b4:52:b8:aa:
         db:c2:5d:01:2f:2d:ad:75:cf:8c:ff:26:0c:8d:d2:ae:ed:a5:
         a1:e5:c6:5f:57:c5:63:49:1f:e1:a0:bd:a2:f7:c8:6c:c4:47:
         72:50:d2:05:58:5f:93:37:a7:ad:72:9e:d9:95:3f:09:75:b3:
         b1:96:fb:ae:14:81:51:d6:f1:1f:85:95:22:c6:13:dd:e6:c2:
         3b:b2:2e:6c:d0:25:30:86:98:24:ae:33:bd:46:c9:c0:a2:5b:
         5b:e8:19:b1:dc:f8:49:be:91:2c:89:5f:c1:66:2e:78:17:6c:
         87:cd:6b:4e:ef:bc:ef:66:9c:6d:bc:87:5b:3f:30:f1:15:12:
         72:35:f9:31:85:a4:f5:36:79:ad:83:85:3c:a4:11:af:90:b5:
         74:5f:c5:84:64:0e:6c:9b:35:0b:5e:dd:1d:6a:76:3c:59:70:
         a9:5a:f0:fa:27:f9:b7:61:a1:02:6d:66:82:b5:81:d8:82:dc:
         20:1c:44:98:46:1a:ad:74:9a:c1:2f:5a:4c:b4:60:33:25:c7:
         b9:95:56:33:b0:fa:51:fa:64:c4:01:f6:47:e6:43:80:40:6b:
         6f:f6:b6:b7
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYtJUSOKnSunVig6x6ayD3rwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMxMDE5MTkwMjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWFkNzYyNTE4NGM2NzMwYzdkNzQ1NGJhN2UwYjNiNmY5N2I2Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoiN4hh0VJxE/AUjXA1tume3rYEV
pUguBlXBvQleDKkwCUFOKWJyJ2VsPq6fJ9xfdDGRp5VrEu5HjQJF56dpfUP9JC+p
ntvuB52Ov3l5GABVxqAAzMBh7V6nrEtJ9mjiY5rhTJHr1qE1XMo9QI93NKp+xkCH
Ws7n1S6IB9s/Z3mY2hlJdXU5ucKKj1e9faVmd2SFJ9YbJxhGoPcMoWk1YokFzxsY
NzV89Fd1zr/ODgOUVZRg49R31LgRYSSNvL4AETZnetDVif/JxVPGr0Q2jqvD9Uma
edrE/io411qsiIU8eGcBWRZ6yN8q+KrqRBKQYg12YnztaA/bkf+chJNGmwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFOWtdiUYTGcwx9dFS6fgs7b5e2zUMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvNWExMkpSaE1aekRIMTBWTHAtQ3p0dmw3Yk5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4MAwDBAE+
SKIDBAI+SKgwDAMEAD5IrQMEBD5IoAMEAD5IsTAMAwQAPkizAwQAPki2MAwDBAM+
SLgDBAE+SLwDBAA+SL8wDAMEAVEVAgMEA1EVADAMAwQBURUKAwQEURUAAwQAsDkz
AwQAsDk1AwQBsDk6AwQAsDk/MA0GCSqGSIb3DQEBCwUAA4IBAQBeNmsdk3V81pUu
0ePJkfCQvp41DQdROeBe2bCMG9V8rrRSuKrbwl0BLy2tdc+M/yYMjdKu7aWh5cZf
V8VjSR/hoL2i98hsxEdyUNIFWF+TN6etcp7ZlT8JdbOxlvuuFIFR1vEfhZUixhPd
5sI7si5s0CUwhpgkrjO9RsnAoltb6Bmx3PhJvpEsiV/BZi54F2yHzWtO77zvZpxt
vIdbPzDxFRJyNfkxhaT1Nnmtg4U8pBGvkLV0X8WEZA5smzULXt0danY8WXCpWvD6
J/m3YaECbWaCtYHYgtwgHESYRhqtdJrBL1pMtGAzJce5lVYzsPpR+mTEAfZH5kOA
QGtv9ra3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org