Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5sydUTmuHZkPOySlaz47WwkRGUs.roa
File:                     5sydUTmuHZkPOySlaz47WwkRGUs.roa (raw, json)
Hash identifier:          9llNDsG6YZpM2ZfWmyCZSC2pDM49naXgkvrqAOdODSU=
Subject key identifier:   E6:CC:9D:51:39:AE:1D:99:0F:3B:24:A5:6B:3E:3B:5B:09:11:19:4B
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0186B6EBEE8872B262275E822A5E01FC07E2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5sydUTmuHZkPOySlaz47WwkRGUs.roa
Signing time:             Mon 06 Mar 2023 12:36:00 +0000
ROA not before:           Mon 06 Mar 2023 12:36:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        62.72.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Apr 2023 13:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:eb:ee:88:72:b2:62:27:5e:82:2a:5e:01:fc:07:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Mar  6 12:36:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6cc9d5139ae1d990f3b24a56b3e3b5b0911194b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:29:48:a5:41:11:8a:23:f3:07:71:23:ce:
                    de:dd:45:a3:4f:b3:0e:9b:26:55:50:dc:a5:e8:df:
                    ea:a8:6c:5a:67:6b:73:15:96:45:1d:35:52:94:98:
                    de:7b:e1:c0:de:22:92:33:73:74:90:3b:26:f8:cb:
                    37:6d:64:93:82:61:35:c0:fe:60:42:48:59:cc:3a:
                    42:ca:64:2c:10:70:88:c1:44:f6:55:a6:18:03:8e:
                    98:0e:c7:74:ae:72:54:f5:91:16:8a:28:f4:79:09:
                    29:1f:84:74:a7:e9:52:11:5b:57:43:07:5a:d3:d4:
                    8e:11:22:dc:5b:2a:f5:7a:4c:a2:ee:1c:6f:22:ef:
                    33:5b:4d:5f:01:fe:7f:2e:b2:09:d2:0c:c9:85:11:
                    7a:a0:f3:1f:0e:7e:3a:3c:55:fb:fe:7e:43:94:bc:
                    84:d0:60:fb:05:ce:e3:86:e3:d3:98:64:39:06:84:
                    2a:6e:35:d9:93:43:ed:a9:7c:68:67:29:b4:cc:e3:
                    d5:39:cc:5c:01:d2:81:80:9f:7f:79:e2:09:26:7f:
                    fc:e5:89:e8:cd:c0:a2:73:4a:5a:9a:06:61:c4:08:
                    ae:b4:1c:1b:66:7e:66:b0:f6:3a:fe:9b:f7:f1:17:
                    27:62:00:12:0b:a3:d8:4d:c1:a0:fa:ce:8b:f9:6b:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CC:9D:51:39:AE:1D:99:0F:3B:24:A5:6B:3E:3B:5B:09:11:19:4B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5sydUTmuHZkPOySlaz47WwkRGUs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:85:60:6f:94:f1:d2:86:89:b0:30:aa:9c:3f:d2:62:31:
         51:9a:f2:5a:8a:ac:80:0d:af:c1:2b:24:7b:7b:5f:f4:fc:ec:
         2d:a9:89:0d:7d:8b:03:e3:af:d9:e9:f1:f7:f4:c0:3f:54:db:
         1f:0a:fd:fa:5b:70:16:0f:1e:cd:51:d8:7c:3d:7a:07:a2:47:
         f0:41:41:ed:a7:c2:5e:eb:9b:d1:a6:1b:6a:74:b8:1a:27:4f:
         8a:86:0e:0b:00:28:dc:f0:49:c2:00:8e:6c:93:76:37:85:2c:
         93:d0:f0:e6:43:f9:65:a7:e3:fe:99:bb:c5:17:05:de:48:2a:
         98:84:30:d3:ea:6a:00:88:93:ba:54:0b:96:bb:55:48:d2:4f:
         04:61:02:e7:50:21:26:b7:ff:ca:77:15:28:a9:49:80:a1:b5:
         d8:4f:99:a3:b4:33:2b:45:23:44:b4:f8:e8:ca:a8:46:c0:7a:
         a9:8a:26:9f:9a:2c:41:d2:fd:ac:14:b3:a5:e1:cc:dd:e6:ad:
         eb:79:6f:3f:8f:74:fe:fe:8c:32:8a:8f:74:34:9f:c6:8b:83:
         c5:dc:1f:57:5c:ff:6e:91:56:05:ed:28:0f:fa:26:9d:66:60:
         8a:90:e1:96:ba:3a:1e:78:08:63:32:1d:3d:10:32:3e:1a:39:
         1a:8b:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org