Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BIlYG8aiUB_U2xA85C8QbC7iUBE.roa
File:                     BIlYG8aiUB_U2xA85C8QbC7iUBE.roa (raw, json)
Hash identifier:          sixvvG7DWBT90erBPE6OyoCMktOdjDuk8Tw7IAlcl6I=
Subject key identifier:   04:89:58:1B:C6:A2:50:1F:D4:DB:10:3C:E4:2F:10:6C:2E:E2:50:11
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018C2E788D0D9FC5265AEFB8D3A87657390F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BIlYG8aiUB_U2xA85C8QbC7iUBE.roa
Signing time:             Sun 03 Dec 2023 06:58:21 +0000
ROA not before:           Sun 03 Dec 2023 06:58:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/23 maxlen: 23
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.168.0/22 maxlen: 22
                          62.72.174.0/23 maxlen: 23
                          62.72.180.0/23 maxlen: 23
                          62.72.184.0/22 maxlen: 22
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.12.0/22 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          81.21.10.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          176.57.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Dec 2023 06:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:2e:78:8d:0d:9f:c5:26:5a:ef:b8:d3:a8:76:57:39:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec  3 06:58:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0489581bc6a2501fd4db103ce42f106c2ee25011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:d3:1f:a0:af:36:c2:65:1c:2a:cb:08:30:
                    05:64:97:60:88:00:29:e9:1a:b7:18:7e:0e:f7:b3:
                    bd:d1:ff:cb:92:ab:12:57:76:d9:a6:8f:3f:11:83:
                    cd:41:fe:e4:f1:e0:59:24:3e:ab:3b:61:b9:e7:b5:
                    28:00:58:e3:54:0b:16:62:a5:96:fd:18:47:42:04:
                    a2:f1:82:30:db:83:94:b8:e2:c4:91:37:60:5a:d3:
                    bc:96:27:cf:15:ad:c9:5a:be:0a:1d:fb:e4:aa:83:
                    0d:ad:0c:0f:9b:49:a3:85:a6:75:84:b2:e0:e4:0e:
                    52:1c:1a:fe:d3:33:ca:56:05:9e:f6:b6:c3:d5:71:
                    24:52:c2:d8:3b:de:1f:ec:86:76:b7:bd:55:35:9c:
                    11:69:bd:3b:25:d3:a2:54:63:12:7f:cc:7c:67:86:
                    3f:6d:eb:83:29:4d:ee:f8:95:d2:b3:a7:c2:18:c6:
                    c3:45:bb:8d:b7:52:ab:25:42:fa:c0:dc:b0:8f:43:
                    9b:17:c5:07:e6:a8:cc:30:99:5e:bc:f9:6f:f2:5f:
                    49:4b:24:1a:1a:1d:1b:34:3f:93:b8:a9:bd:e7:a6:
                    b8:42:97:fc:dc:b8:a0:cc:ee:a9:cb:69:64:f0:a2:
                    2c:38:79:17:5d:a0:90:c4:ef:48:57:58:08:cb:d9:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:89:58:1B:C6:A2:50:1F:D4:DB:10:3C:E4:2F:10:6C:2E:E2:50:11
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BIlYG8aiUB_U2xA85C8QbC7iUBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.171.255
                  62.72.174.0/23
                  62.72.180.0-62.72.182.255
                  62.72.184.0/22
                  62.72.189.0/24
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:3b:9d:26:e6:a5:95:ee:48:62:98:04:50:b2:1d:91:49:
         67:5a:75:6d:a1:45:f8:ba:10:49:c8:41:48:c2:23:bc:04:49:
         b8:bf:bb:b8:b0:aa:1b:b9:39:a4:ca:7f:89:2e:9f:b4:96:de:
         e7:16:e9:35:94:a7:f5:fe:7e:11:1e:40:2b:e5:12:dc:57:e2:
         e8:b0:21:d0:37:3b:29:c5:db:f3:99:bb:7e:85:3e:9c:a9:6a:
         01:0f:ac:45:08:ff:4c:fa:51:2f:84:ff:8a:fa:d2:8e:50:09:
         b6:d9:e3:08:16:01:4e:d0:99:47:81:6d:21:72:dc:14:49:77:
         17:ee:e6:23:d2:77:54:a2:68:5d:ac:b2:84:7e:4a:85:2a:d4:
         e8:bb:10:2e:6d:7e:4a:5a:6d:6f:b7:38:d3:d1:b2:7c:29:f3:
         5f:d7:19:13:5f:3a:e4:10:de:7d:5a:86:f2:2b:26:47:9a:b4:
         9b:88:69:cd:c3:4e:2b:54:77:b7:ee:74:a9:c2:b7:80:c4:4a:
         93:6b:2c:c5:d3:ff:62:e6:26:76:3b:25:66:e0:82:63:a8:43:
         15:4b:fe:c9:60:99:f2:bc:52:12:9e:74:a8:c7:48:91:36:db:
         4b:77:08:33:78:d2:00:7f:dc:5f:e6:05:41:8b:75:4d:c5:86:
         99:99:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org