Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7mENsuDnUCXl6ts1eTI55AD72hI.roa
File:                     7mENsuDnUCXl6ts1eTI55AD72hI.roa (raw, json)
Hash identifier:          tIqEW5cz8bdj4MEDRgYpCI5r+mJCoPRGpEEDo/qcrCY=
Subject key identifier:   EE:61:0D:B2:E0:E7:50:25:E5:EA:DB:35:79:32:39:E4:00:FB:DA:12
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018C3398814757FD2AF36B43A2BF91817283
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7mENsuDnUCXl6ts1eTI55AD72hI.roa
Signing time:             Mon 04 Dec 2023 06:51:21 +0000
ROA not before:           Mon 04 Dec 2023 06:51:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/23 maxlen: 23
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.168.0/22 maxlen: 22
                          62.72.174.0/23 maxlen: 23
                          62.72.180.0/23 maxlen: 23
                          62.72.184.0/22 maxlen: 22
                          62.72.191.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.12.0/22 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.4.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          81.21.10.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          176.57.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Dec 2023 06:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:33:98:81:47:57:fd:2a:f3:6b:43:a2:bf:91:81:72:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec  4 06:51:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee610db2e0e75025e5eadb35793239e400fbda12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:e8:a0:ef:62:94:ce:d9:00:81:c5:86:39:
                    70:61:04:9d:35:45:3b:97:5f:ac:48:c9:c8:ba:7f:
                    74:91:f9:8f:19:d3:81:52:26:1d:6b:8b:e8:c3:ea:
                    e9:06:f8:8a:56:99:2d:63:37:a3:c3:38:73:0e:55:
                    92:6c:1b:d7:c0:e1:77:65:0c:4d:bc:31:4c:1c:4e:
                    ac:af:79:97:fe:5c:2c:f7:6a:08:7c:1a:47:75:0b:
                    72:7b:44:99:d3:08:da:e6:5b:6f:20:e6:ec:01:a7:
                    3d:02:71:94:3e:29:40:37:fe:65:28:41:da:43:e9:
                    4a:e5:58:f6:13:23:26:89:36:90:65:dc:53:1f:22:
                    e4:cf:2a:98:24:42:e3:de:db:04:ba:5c:4c:9a:09:
                    e3:ae:15:74:fe:e9:f1:97:2b:ec:68:cf:57:7a:84:
                    5d:5a:6e:b7:60:fd:ce:c9:76:8b:78:38:c5:c4:3c:
                    36:39:79:7b:93:9e:e6:4f:a6:87:ce:da:21:a0:68:
                    5e:69:07:65:41:f4:97:a8:f3:60:8d:24:df:4c:fe:
                    01:68:12:ab:d2:93:0c:ac:4a:aa:10:ae:44:39:7f:
                    de:43:c9:f8:f5:a7:1d:ce:1d:24:d8:40:74:fc:1a:
                    69:02:06:25:ba:5e:04:89:80:14:1d:23:d6:8e:52:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:0D:B2:E0:E7:50:25:E5:EA:DB:35:79:32:39:E4:00:FB:DA:12
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7mENsuDnUCXl6ts1eTI55AD72hI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.171.255
                  62.72.174.0/23
                  62.72.180.0/23
                  62.72.184.0/22
                  62.72.189.0/24
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:14:d3:86:b4:1e:11:d8:fd:4b:25:06:95:b0:5f:63:4f:da:
         ff:7e:d8:50:33:ce:68:8a:55:cc:a5:58:b4:29:80:65:39:6f:
         a6:a1:5c:90:d2:ad:4f:3c:fb:81:c6:8d:bd:4f:c3:59:5f:1a:
         f8:9c:6b:49:b6:f0:f6:c4:c0:dc:ef:28:58:b6:4b:c6:81:aa:
         c4:30:bf:e1:e0:aa:28:86:78:66:3a:02:8f:4a:8a:c4:3e:c4:
         a2:eb:33:dd:dc:4a:7c:dc:c3:85:27:c3:1b:18:25:57:b2:76:
         31:b8:79:17:6b:01:9c:1f:8e:7c:5e:42:cb:58:eb:30:a1:f3:
         45:0d:79:a2:11:5f:91:3d:5c:78:64:0f:56:4a:39:00:69:b3:
         6b:25:a5:e0:42:24:41:c0:5e:46:3b:e0:1c:ba:14:d4:dc:d6:
         2c:0e:db:a0:7e:c9:16:67:dc:31:51:dd:5d:4b:88:96:88:8a:
         f7:65:ef:70:bb:a1:5a:c4:35:7f:b8:c8:f6:31:b6:7d:81:ad:
         65:b4:44:f2:b2:5e:da:4c:0a:d2:ff:c6:46:4b:f9:51:95:41:
         d0:80:0f:8c:66:79:7e:c9:65:d0:2d:71:ad:c0:28:42:f6:ec:
         13:16:4c:87:7a:2a:78:45:63:35:38:1c:87:d4:d9:19:c6:e0:
         cd:91:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org