Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/E8LPIVCr4fAOJ5GB2UDkaehRP00.roa
File:                     E8LPIVCr4fAOJ5GB2UDkaehRP00.roa (raw, json)
Hash identifier:          7v4IhOWdgIvCEzqOWIoJvnzRwenwuxJJdBSH3i+ETFE=
Subject key identifier:   13:C2:CF:21:50:AB:E1:F0:0E:27:91:81:D9:40:E4:69:E8:51:3F:4D
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0188AF9607A43286A418422ED2A2C090F89D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/E8LPIVCr4fAOJ5GB2UDkaehRP00.roa
Signing time:             Mon 12 Jun 2023 12:30:25 +0000
ROA not before:           Mon 12 Jun 2023 12:30:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        62.72.163.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Jun 2023 06:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:af:96:07:a4:32:86:a4:18:42:2e:d2:a2:c0:90:f8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 12 12:30:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13c2cf2150abe1f00e279181d940e469e8513f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:f6:49:3b:d7:ca:a1:aa:96:fd:f9:e6:42:
                    a2:a3:9a:b6:74:5d:5e:c1:7b:07:0b:53:90:ff:b0:
                    f1:82:57:e9:c2:0f:a3:53:fc:99:2a:a9:b9:12:91:
                    7e:a8:2b:ec:57:cd:e8:75:75:30:2c:6d:4f:77:6f:
                    03:d6:17:75:eb:36:c8:90:a0:d0:86:b5:c5:2d:69:
                    24:92:03:fd:eb:eb:df:61:34:c1:41:24:75:68:13:
                    d9:45:26:76:83:c1:40:8e:f2:37:63:2d:4d:15:f5:
                    ab:88:3a:81:7f:f4:66:5d:20:74:08:55:5a:00:f5:
                    c5:a0:9b:91:5e:20:28:a3:6d:e2:dd:93:c2:78:f9:
                    3e:0e:ab:c5:70:e3:a5:70:aa:59:37:c8:9e:ee:3f:
                    8a:21:e1:47:13:e5:ee:75:46:71:23:80:ef:20:f9:
                    d8:f7:71:71:2d:88:8a:97:93:c8:8a:6e:10:cc:2c:
                    f9:2d:86:73:35:07:2f:21:5f:5e:dc:1a:1d:05:80:
                    62:e6:2e:89:36:a2:36:3c:09:6a:d7:22:29:71:d5:
                    d0:59:eb:7e:30:e5:e1:22:5d:91:f3:cc:91:95:e7:
                    bf:b4:48:c3:b8:06:62:8a:90:7e:4e:75:ae:3c:14:
                    e2:77:c4:58:e6:75:4a:93:f4:89:10:ae:58:19:ae:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:CF:21:50:AB:E1:F0:0E:27:91:81:D9:40:E4:69:E8:51:3F:4D
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/E8LPIVCr4fAOJ5GB2UDkaehRP00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.163.0/24
                  62.72.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:7b:ad:dc:9b:de:9a:d8:7e:af:1e:ee:c9:f5:51:15:32:
         88:b2:cc:48:6e:1b:2d:9f:ea:40:5d:27:0b:7d:cf:f1:fe:58:
         49:ea:09:60:65:33:d9:c5:2d:04:ad:34:c6:bc:99:b6:4d:df:
         d5:5d:9b:aa:5e:61:54:94:20:53:a6:9f:77:65:61:af:9e:54:
         0b:15:2b:eb:18:07:7f:79:45:1b:0c:7a:0a:50:67:d8:09:2f:
         7a:26:39:fe:7c:1b:0e:03:23:8a:48:e3:90:7d:16:37:b8:51:
         26:9c:6e:9b:75:d1:15:58:62:cf:9c:56:1f:e1:c7:ed:01:dc:
         d3:ce:4d:82:47:e0:08:2e:4b:7f:37:e7:14:f0:54:b8:7c:79:
         93:a8:72:3e:74:6b:63:b6:aa:a8:e3:e6:b5:8c:b6:12:43:cc:
         5d:34:55:36:82:d3:6b:91:ee:9b:2c:72:80:f7:5a:98:77:c9:
         ae:5e:ad:08:63:9a:64:75:15:b6:2a:cf:10:8c:53:1d:1c:7d:
         79:fa:03:2d:db:f3:29:f9:a9:42:c2:62:a8:bd:64:72:e3:e5:
         6e:70:f3:c9:ea:32:cc:93:4c:71:cf:e7:47:66:9b:ab:d7:a7:
         61:f4:65:ed:14:63:0c:ff:9f:61:95:72:24:19:ee:09:36:bc:
         36:b0:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org