Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EYF80WFPhF6HBKd3mvep0CJOo5Q.roa
File:                     EYF80WFPhF6HBKd3mvep0CJOo5Q.roa (raw, json)
Hash identifier:          aAi0CFQF4FNNudgVwIayu1JsH/TOoLKN9d12ktO4kUk=
Subject key identifier:   11:81:7C:D1:61:4F:84:5E:87:04:A7:77:9A:F7:A9:D0:22:4E:A3:94
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018AFE6F8D4A9643A3FBE80E8673C2FAB7A7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EYF80WFPhF6HBKd3mvep0CJOo5Q.roa
Signing time:             Thu 05 Oct 2023 06:03:58 +0000
ROA not before:           Thu 05 Oct 2023 06:03:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/24 maxlen: 24
                          62.72.165.0/24 maxlen: 24
                          62.72.161.0/24 maxlen: 24
                          62.72.166.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.168.0/22 maxlen: 22
                          62.72.170.0/24 maxlen: 24
                          62.72.167.0/24 maxlen: 24
                          62.72.168.0/24 maxlen: 24
                          62.72.177.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.173.0/24 maxlen: 24
                          62.72.174.0/23 maxlen: 23
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.184.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.180.0/23 maxlen: 23
                          62.72.180.0/24 maxlen: 24
                          62.72.184.0/22 maxlen: 22
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 06 Oct 2023 17:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:6f:8d:4a:96:43:a3:fb:e8:0e:86:73:c2:fa:b7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct  5 06:03:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11817cd1614f845e8704a7779af7a9d0224ea394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:0c:bd:15:dc:ce:00:59:15:77:0f:21:13:
                    8c:0e:df:3a:ff:b1:b6:ee:e1:01:62:53:18:14:90:
                    1c:ba:00:54:95:ce:5d:fb:06:70:98:ac:69:6f:b8:
                    fc:fc:42:ef:e3:b9:90:24:15:8f:ee:67:0b:2e:76:
                    65:d7:e5:47:3a:37:24:87:4e:80:28:ef:ee:a2:f3:
                    ef:5f:e5:4c:8c:5d:a3:0f:6e:eb:e2:ac:8b:4a:b2:
                    6a:38:e5:ad:cf:71:55:63:7e:de:48:69:6a:00:92:
                    6f:db:dc:57:b3:dc:5b:7b:40:9a:f2:10:13:83:67:
                    46:44:51:95:6a:b0:d6:54:fa:58:30:a1:54:1e:7d:
                    9e:b1:e8:df:25:06:bc:b1:bd:5e:6f:5c:5c:1a:97:
                    1f:15:93:bd:93:88:68:54:50:54:40:d9:40:e8:4e:
                    3c:8e:54:51:9d:bc:f8:cc:64:69:5b:73:ac:8b:20:
                    6e:d9:e6:f7:70:3c:d5:44:8a:23:7e:f0:22:8e:10:
                    2d:8e:32:d4:3f:b9:88:40:09:03:56:50:18:0a:68:
                    6b:d2:41:45:16:a6:40:8d:ba:e5:49:9a:61:01:25:
                    56:4b:e7:01:53:f1:29:01:0f:c6:52:34:77:a9:1d:
                    69:0a:78:b0:1e:8b:a6:9b:7e:2f:98:03:04:cd:4a:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:7C:D1:61:4F:84:5E:87:04:A7:77:9A:F7:A9:D0:22:4E:A3:94
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EYF80WFPhF6HBKd3mvep0CJOo5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.171.255
                  62.72.173.0-62.72.175.255
                  62.72.177.0/24
                  62.72.179.0-62.72.182.255
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e4:39:31:59:f3:4c:9f:c2:84:a7:48:2d:77:56:c8:01:ca:
         b5:24:16:c6:06:5e:d8:6b:05:aa:22:01:23:dd:10:23:cf:d0:
         52:45:43:a7:7e:04:11:a9:0b:10:90:51:15:b7:48:93:14:e2:
         9c:41:db:9d:d0:a1:fd:94:d7:ca:41:a6:24:45:74:0e:49:95:
         0f:9d:2b:3e:ee:c6:26:b0:d0:1f:ae:48:8d:fa:74:3f:06:7e:
         eb:46:b3:1a:49:61:6c:b9:c0:34:e4:e1:bf:a3:db:77:7c:59:
         d6:35:4b:94:9b:05:c2:fd:f8:17:66:f2:d5:6c:10:9d:3d:53:
         01:51:cd:6d:f9:2a:22:3e:33:7a:7d:b3:a3:b9:1d:03:29:90:
         e1:f1:9c:3d:34:1b:1a:0e:cf:2c:da:83:fa:c3:ba:1b:99:75:
         2a:b4:a5:cb:64:f2:74:1a:f2:9c:c2:9f:3c:e4:4c:7f:ca:a6:
         30:5f:27:93:e0:5e:ee:82:22:2a:55:c4:6d:cf:32:c5:02:85:
         c6:3c:8e:8f:6d:7a:3e:d4:65:89:ec:6e:96:9e:58:05:aa:af:
         4d:02:73:85:b7:06:b3:39:f2:81:d4:51:26:bc:c3:ed:5b:a3:
         8e:3d:be:ee:42:7b:e7:11:26:26:0d:13:b0:ba:09:35:8c:e1:
         a2:d9:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org