Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Eldn2j3A9PeikCha_c5kozKaTZs.roa
File:                     Eldn2j3A9PeikCha_c5kozKaTZs.roa (raw, json)
Hash identifier:          lgKoIHFmy1yY1BkwFwjKN93iZg0n2xUgjpemWZiV8eE=
Subject key identifier:   12:57:67:DA:3D:C0:F4:F7:A2:90:28:5A:FD:CE:64:A3:32:9A:4D:9B
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01903717F1B740A747EFD0A3DEA5B642F5C3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Eldn2j3A9PeikCha_c5kozKaTZs.roa
Signing time:             Thu 20 Jun 2024 19:20:34 +0000
ROA not before:           Thu 20 Jun 2024 19:20:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.164.0/23 maxlen: 23
                          62.72.184.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          81.21.8.0/24 maxlen: 24
                          81.21.9.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          81.21.11.0/24 maxlen: 24
                          81.21.12.0/22 maxlen: 24
                          81.21.12.0/24 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          81.21.14.0/24 maxlen: 24
                          81.21.15.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 17:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:17:f1:b7:40:a7:47:ef:d0:a3:de:a5:b6:42:f5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 20 19:20:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=125767da3dc0f4f7a290285afdce64a3329a4d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:4a:78:85:21:c5:3c:15:86:8e:8a:da:55:
                    c4:82:f5:d2:13:ac:52:97:1a:35:59:85:29:28:4a:
                    67:0e:d5:9f:89:03:e2:48:f8:87:33:d9:6d:19:7c:
                    30:56:5a:69:7b:15:7a:97:b3:07:9f:7f:28:bb:db:
                    1c:14:2b:f1:93:7b:7a:84:39:6a:e2:2d:48:e8:f0:
                    70:fc:95:0b:8f:f6:cd:6f:e5:93:60:7e:bc:b6:d8:
                    74:03:0a:bd:64:d1:49:af:87:0b:d9:49:19:48:36:
                    63:d8:2b:66:83:ee:54:0f:86:f0:2b:23:dd:8c:c6:
                    b1:e8:c4:f7:9f:bc:fe:bd:52:94:5e:21:0e:c7:e1:
                    cb:3b:7d:31:65:d8:1b:d4:74:41:ee:d5:33:5f:ce:
                    5a:ad:fd:0a:f2:08:a7:a4:11:1d:be:3e:ec:4c:94:
                    c2:3b:37:ef:bf:84:1d:4a:0c:19:af:e7:ed:78:79:
                    19:c0:3f:ed:a0:15:d9:f7:da:2c:9c:1c:d6:69:48:
                    cb:eb:cd:b5:5b:35:25:c5:ab:d5:ca:fd:fe:64:55:
                    fd:25:c8:01:09:eb:41:35:10:b5:bb:c7:5f:5d:5f:
                    8c:bb:66:c7:55:90:c8:8e:9e:94:8d:d0:e6:a9:59:
                    fc:7f:57:3f:53:07:d5:66:a9:0e:1f:29:65:84:f1:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:57:67:DA:3D:C0:F4:F7:A2:90:28:5A:FD:CE:64:A3:32:9A:4D:9B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Eldn2j3A9PeikCha_c5kozKaTZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.167.255
                  62.72.184.0/24
                  62.72.189.0/24
                  81.21.2.0-81.21.15.255
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:6b:db:90:0b:7a:96:90:55:54:65:6d:50:1c:86:58:ee:
         17:48:91:7c:7b:bf:d1:df:91:8b:36:59:5c:66:88:18:3d:97:
         2c:b9:ee:70:84:f1:1a:9e:d1:43:62:1e:75:2f:d6:e5:80:74:
         b7:92:7a:ef:fe:35:10:c8:ae:54:ce:52:6b:ed:8f:cd:73:19:
         89:bb:65:86:bc:43:a1:fd:53:72:45:97:fd:24:56:35:48:6c:
         69:42:9e:c2:12:f5:13:34:fe:af:3d:86:48:e5:de:55:18:80:
         d1:a2:7a:b8:15:e5:86:07:04:00:3f:a4:73:90:73:21:c0:56:
         06:3a:2a:d3:09:38:32:1d:80:74:2a:54:87:81:ed:3b:f2:ad:
         2d:80:f2:16:f0:73:35:1f:26:b2:2d:64:37:46:a1:86:5e:7c:
         9c:9d:ea:be:8d:ab:bd:52:b4:ac:6a:42:ef:41:85:f1:31:71:
         9a:fb:36:c2:b9:7e:7c:98:63:56:c9:75:db:29:df:b9:c7:fa:
         ff:08:77:cc:ec:14:99:08:52:70:3d:ac:fd:a0:65:47:50:73:
         e3:a4:84:41:a0:51:aa:8a:8e:7a:cf:8f:79:9c:20:00:f4:7a:
         4c:31:15:1f:78:58:ff:35:4d:20:95:8d:a0:ea:cc:8a:ff:85:
         fe:5d:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:54:42 2024 by rpki-client on console-fra.rpki-client.org