Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7rkq1-udJTL46SEtt9fPMA_INQ.roa
File:                     F7rkq1-udJTL46SEtt9fPMA_INQ.roa (raw, json)
Hash identifier:          CMe44eFVMf6F1CmzGq49jzRHC/tUseaj0JWS5zilELk=
Subject key identifier:   17:BA:E4:AB:5F:AE:74:94:CB:E3:A4:84:B6:DF:5F:3C:C0:3F:20:D4
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018A11CD58C95EF760311AF78497638B0D78
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7rkq1-udJTL46SEtt9fPMA_INQ.roa
Signing time:             Sun 20 Aug 2023 07:16:24 +0000
ROA not before:           Sun 20 Aug 2023 07:16:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/24 maxlen: 24
                          81.21.12.0/22 maxlen: 24
                          81.21.13.0/24 maxlen: 24
                          81.21.14.0/24 maxlen: 24
                          81.21.15.0/24 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.62.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.165.0/24 maxlen: 24
                          62.72.161.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.170.0/24 maxlen: 24
                          62.72.177.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.173.0/24 maxlen: 24
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.1.0/24 maxlen: 24
                          81.21.8.0/24 maxlen: 24
                          81.21.9.0/24 maxlen: 24
                          81.21.10.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          81.21.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Aug 2023 06:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:11:cd:58:c9:5e:f7:60:31:1a:f7:84:97:63:8b:0d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Aug 20 07:16:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17bae4ab5fae7494cbe3a484b6df5f3cc03f20d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:95:b4:ef:25:35:47:04:1c:b3:21:c1:62:
                    b0:40:13:47:8d:3e:48:4e:3c:3c:9a:90:24:d4:b4:
                    f2:41:ef:51:c1:64:51:5f:70:2d:81:f2:2a:15:18:
                    bf:52:a3:06:d5:51:2d:65:de:69:c0:f0:98:88:70:
                    f5:e6:9a:c8:da:50:c1:64:02:3e:14:00:c1:c7:ee:
                    9d:80:88:ee:26:f8:39:e9:76:3d:75:cc:34:d0:32:
                    92:dd:e0:e7:2a:70:9b:ac:df:8d:30:64:d5:3e:0e:
                    23:c8:5a:17:47:23:74:52:aa:66:7d:81:c1:64:47:
                    ca:06:80:34:4f:4e:4b:68:1a:af:50:9f:22:0a:11:
                    44:6b:2d:2f:b5:3f:e3:a0:f3:27:8f:fa:4e:3a:9c:
                    eb:6e:f6:b8:f1:c3:cd:67:d7:2b:40:f4:9d:b4:3a:
                    be:df:2f:3f:c2:3b:55:72:bd:9b:9b:26:18:a3:45:
                    ee:d8:b8:06:0d:05:dd:7d:64:f8:a9:f2:db:28:1a:
                    88:b7:35:0e:f9:6d:e9:e4:41:f5:ec:d8:f5:05:47:
                    2f:ef:0d:4a:e9:49:f4:c5:14:c0:36:1b:a1:67:0e:
                    48:9d:44:62:c0:f8:24:35:df:2d:71:7c:ff:bf:ee:
                    79:73:eb:4c:7e:ea:ac:e4:9d:46:72:09:82:ee:ae:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BA:E4:AB:5F:AE:74:94:CB:E3:A4:84:B6:DF:5F:3C:C0:3F:20:D4
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7rkq1-udJTL46SEtt9fPMA_INQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.163.255
                  62.72.165.0/24
                  62.72.169.0-62.72.170.255
                  62.72.173.0-62.72.175.255
                  62.72.177.0/24
                  62.72.179.0/24
                  62.72.181.0-62.72.182.255
                  62.72.185.0-62.72.189.255
                  62.72.191.0/24
                  81.21.1.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:2e:37:20:95:a2:fe:5f:1c:67:99:1a:d9:f5:af:c3:62:
         9f:85:d5:35:cb:16:8e:c9:ed:d1:87:6e:06:23:04:32:6e:97:
         9c:3f:b6:a8:6c:ed:26:04:e8:9a:a0:d1:d9:73:d5:c2:6e:a4:
         da:73:a5:f5:91:23:3a:a7:13:b6:26:60:8a:0e:cd:5c:c8:db:
         db:fd:7f:2b:ee:ec:19:1a:75:48:cc:e2:45:e8:0d:a8:cf:8b:
         ab:28:05:7e:2f:25:34:22:75:7d:14:39:4f:b6:55:9b:80:a6:
         f1:85:86:97:f6:39:ba:be:67:7b:d8:92:02:1a:fe:c1:2b:e8:
         17:38:44:cf:ab:99:4d:58:a0:61:61:5e:09:97:df:5e:de:22:
         12:e7:21:12:3b:76:75:7c:03:8a:56:ab:af:b7:04:00:2e:2c:
         f4:cf:75:c9:a5:d5:2e:f0:fb:ed:34:24:5d:65:90:78:a1:e6:
         25:9f:90:67:a6:ac:0b:20:3e:7a:52:1b:8b:43:41:bc:82:1e:
         65:69:59:1e:59:8a:28:70:fa:8c:ec:a9:3a:c9:23:8a:bd:8c:
         a0:9b:28:27:66:13:01:a5:5c:b5:5d:96:3f:f8:69:f5:bd:1c:
         1c:aa:e3:7e:8f:48:08:76:31:1c:df:e3:2e:ef:13:c9:61:77:
         d1:27:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org