Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/El7KbfPuK3Ee4GJ26gjWGqZCnD8.roa
File:                     El7KbfPuK3Ee4GJ26gjWGqZCnD8.roa (raw, json)
Hash identifier:          uQwWiEIzIgSky/ZLRKRBIMAVH0FFatGx/AmgUfbYVo0=
Subject key identifier:   12:5E:CA:6D:F3:EE:2B:71:1E:E0:62:76:EA:08:D6:1A:A6:42:9C:3F
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018BB2D2BE3DDED52FAE990EB2A052136416
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/El7KbfPuK3Ee4GJ26gjWGqZCnD8.roa
Signing time:             Thu 09 Nov 2023 06:43:57 +0000
ROA not before:           Thu 09 Nov 2023 06:43:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400866
IP address blocks:        62.72.162.0/24 maxlen: 24
                          62.72.163.0/24 maxlen: 24
                          62.72.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Nov 2023 06:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b2:d2:be:3d:de:d5:2f:ae:99:0e:b2:a0:52:13:64:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov  9 06:43:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=125eca6df3ee2b711ee06276ea08d61aa6429c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:a8:75:07:bd:d5:76:e2:c3:c1:0b:b4:09:
                    1c:f2:99:3f:a3:eb:65:8b:b8:33:78:b0:58:a2:df:
                    87:27:64:b5:4e:1e:dc:16:66:6e:c1:7f:ac:97:94:
                    3a:dc:ea:20:e2:4c:3d:7e:e5:0b:26:6c:d2:38:70:
                    3b:38:d5:d1:a1:a1:d3:b6:f5:b3:60:7f:8f:a1:7f:
                    c6:f9:c5:df:b4:9f:08:ff:7e:d2:88:df:1c:96:08:
                    d6:33:d3:43:a9:1c:e2:19:fa:76:ea:1d:de:02:3c:
                    da:76:eb:2c:8a:72:dd:a2:35:8f:78:1f:d1:01:42:
                    15:c1:4e:9e:fb:c7:a7:73:da:67:b9:cb:61:50:18:
                    8c:a7:9a:ca:5b:ec:59:1d:36:7a:83:72:4c:91:25:
                    36:b5:a8:6c:e0:e1:61:2e:9b:42:cd:d8:07:4f:d7:
                    3e:10:ce:65:24:1d:39:a7:16:c3:00:c8:92:69:d1:
                    3a:b2:dd:76:d8:14:5c:40:c5:89:6e:8f:24:a0:77:
                    de:25:c5:42:da:60:f0:e6:83:af:17:4d:a5:3b:52:
                    5b:34:72:6a:03:40:14:6a:89:a4:54:50:ef:91:43:
                    1f:f5:56:5e:4f:ca:f6:ec:7d:8d:ce:7a:7e:a6:31:
                    9b:43:7e:ab:ef:67:c8:fd:6b:a2:8b:38:05:5d:f8:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5E:CA:6D:F3:EE:2B:71:1E:E0:62:76:EA:08:D6:1A:A6:42:9C:3F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/El7KbfPuK3Ee4GJ26gjWGqZCnD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0/23
                  62.72.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:5b:58:4f:02:32:9f:ea:1f:ef:24:42:f7:5d:9b:f1:1a:99:
         72:94:4b:90:1f:f8:f3:86:3c:b0:70:d4:95:20:8c:43:e8:ae:
         a4:d7:1b:c9:0a:a9:20:3f:82:8e:71:01:5f:2b:da:46:a1:ba:
         a2:5f:cf:ec:4a:c7:b5:b8:83:dc:56:e8:72:7c:57:94:8d:7a:
         c8:33:72:53:2e:19:33:d1:e2:3a:eb:6b:f2:52:5f:c5:0e:b8:
         6f:aa:5d:46:33:82:a0:5b:70:e8:27:35:fe:3c:63:54:ad:1a:
         9b:5d:1c:c9:3e:1c:7a:de:eb:81:43:9e:02:ad:94:a0:12:2a:
         cc:eb:fb:18:2a:0b:c3:7f:a6:e3:3f:c2:69:55:d7:ff:10:9c:
         a8:cd:26:bd:20:5b:5f:e9:70:66:8b:90:0b:df:3c:68:ef:34:
         ae:40:67:a1:fa:83:e7:29:c9:81:a0:f2:8d:1d:ec:35:da:15:
         4c:d9:e2:c8:d2:43:d6:01:36:ff:15:88:ef:bd:52:09:69:f1:
         b3:b4:50:35:77:11:cc:ed:72:9a:d7:33:26:af:2a:e0:24:f6:
         da:b8:14:03:d1:7f:dd:ce:70:2a:84:0a:02:d4:f7:89:75:cc:
         60:96:46:52:04:35:39:95:d2:49:0b:c9:4b:bf:bb:15:96:31:
         07:3a:b5:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuy0r493tUvrpkOsqBSE2QWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMxMTA5MDY0MzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjVlY2E2ZGYzZWUyYjcxMWVlMDYyNzZlYTA4ZDYxYWE2NDI5YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCqodQe91Xbiw8ELtAkc8pk/o+tl
i7gzeLBYot+HJ2S1Th7cFmZuwX+sl5Q63Oog4kw9fuULJmzSOHA7ONXRoaHTtvWz
YH+PoX/G+cXftJ8I/37SiN8clgjWM9NDqRziGfp26h3eAjzadussinLdojWPeB/R
AUIVwU6e+8enc9pnucthUBiMp5rKW+xZHTZ6g3JMkSU2tahs4OFhLptCzdgHT9c+
EM5lJB05pxbDAMiSadE6st122BRcQMWJbo8koHfeJcVC2mDw5oOvF02lO1JbNHJq
A0AUaomkVFDvkUMf9VZeT8r27H2Nznp+pjGbQ36r72fI/WuiizgFXfgdPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBJeym3z7itxHuBiduoI1hqmQpw/MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRWw3S2JmUHVLM0VlNEdKMjZnaldHcVpDbkQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPkiiAwQA
PkirMA0GCSqGSIb3DQEBCwUAA4IBAQCyW1hPAjKf6h/vJEL3XZvxGplylEuQH/jz
hjywcNSVIIxD6K6k1xvJCqkgP4KOcQFfK9pGobqiX8/sSse1uIPcVuhyfFeUjXrI
M3JTLhkz0eI662vyUl/FDrhvql1GM4KgW3DoJzX+PGNUrRqbXRzJPhx63uuBQ54C
rZSgEirM6/sYKgvDf6bjP8JpVdf/EJyozSa9IFtf6XBmi5AL3zxo7zSuQGeh+oPn
KcmBoPKNHew12hVM2eLI0kPWATb/FYjvvVIJafGztFA1dxHM7XKa1zMmryrgJPba
uBQD0X/dznAqhAoC1PeJdcxglkZSBDU5ldJJC8lLv7sVljEHOrXU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org