Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa
File:                     BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa (raw, json)
Hash identifier:          ouPlV6nGbDCr3IJO0w2HhDLIh8Qxpl+4+ABp6FFnVrg=
Subject key identifier:   04:BD:25:42:69:FB:1F:90:DC:ED:1B:C6:90:AB:51:7B:A7:EF:1D:92
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0188615BC9190FB09B8E334B324EE5094C96
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa
Signing time:             Sun 28 May 2023 07:56:25 +0000
ROA not before:           Sun 28 May 2023 07:56:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3257
IP address blocks:        62.72.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Jun 2023 06:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:61:5b:c9:19:0f:b0:9b:8e:33:4b:32:4e:e5:09:4c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 28 07:56:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04bd254269fb1f90dced1bc690ab517ba7ef1d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:88:40:e4:a8:42:a3:e2:97:c9:a4:74:3e:
                    95:2e:e9:ee:15:13:a7:a0:66:4e:48:6e:66:c8:d8:
                    fd:9b:48:c2:79:25:d3:36:0d:d9:bc:ae:a6:7e:9d:
                    54:19:8a:3f:83:84:66:b4:1a:fd:1c:73:13:7a:12:
                    a8:23:b8:e3:29:49:0c:c8:ee:97:e0:92:5f:b3:97:
                    22:85:b3:24:e1:15:07:b1:d1:09:95:5a:7a:e9:81:
                    8f:73:e5:b2:14:bc:63:82:63:dc:bb:59:30:4d:18:
                    47:ef:e8:57:f3:dd:9b:86:02:0e:53:9f:fd:f9:23:
                    91:a6:0d:7b:d5:d2:60:fc:62:98:ea:aa:62:72:03:
                    4a:67:21:5b:b5:88:61:19:98:f8:32:93:3d:f3:9d:
                    3c:b2:d9:6a:6c:8e:08:20:c0:47:dc:dc:e0:1b:ca:
                    07:92:73:45:b1:81:94:1d:72:f1:74:f7:bf:72:2f:
                    cf:0b:1e:82:4f:d2:af:10:18:19:a4:6a:74:19:82:
                    9b:8d:87:ff:b4:b7:65:fc:63:7f:7e:cd:09:38:92:
                    91:da:82:11:00:64:b8:b9:c4:e0:2a:4e:76:2e:61:
                    eb:98:bb:d5:54:2b:0e:68:18:a1:1c:79:50:c5:a8:
                    bd:14:11:cf:0b:e6:5a:8a:95:16:34:2b:05:aa:9b:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BD:25:42:69:FB:1F:90:DC:ED:1B:C6:90:AB:51:7B:A7:EF:1D:92
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:50:d5:db:40:ae:6a:85:01:bb:15:a5:e8:44:29:61:a4:
         f8:9b:ce:cb:6d:03:7f:26:a0:ca:d6:37:b0:c5:b7:8a:38:38:
         b8:86:60:30:bb:13:c9:f8:e2:ae:8b:8f:84:76:fc:bd:55:c7:
         eb:e0:0e:ac:72:43:43:a2:c1:8d:9d:f2:cd:3e:81:07:c9:04:
         9d:2e:19:23:a9:de:00:3c:96:a9:aa:a8:55:52:3a:45:75:7e:
         26:0b:f5:e3:21:df:0b:14:dd:cb:67:74:70:e6:c2:58:dc:84:
         ea:20:30:65:39:1b:de:16:1e:88:1c:4a:b6:c5:0a:d5:0b:08:
         36:12:f9:03:b4:89:62:17:c0:69:f5:a8:37:7f:92:67:a9:6e:
         3a:60:af:13:8a:d6:67:af:96:e3:91:eb:46:14:c5:20:16:9f:
         7b:b1:7f:8b:07:6b:a4:84:d5:24:87:b3:a1:fc:27:d6:72:58:
         95:27:48:9b:16:5e:a9:ce:5e:78:e5:2e:0c:93:b7:8d:7f:64:
         8b:10:cc:5a:c0:63:69:42:eb:5d:59:be:04:56:bd:1f:e6:f4:
         37:20:29:ac:d8:0a:02:73:d1:45:55:44:4f:e4:5e:e2:d2:a9:
         37:7a:be:00:e3:f4:fd:56:22:26:35:c8:92:8d:24:4e:31:95:
         b5:a4:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org