Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Fe0v9Wshfq7Q3K_J0hCGMNyAD48.roa
File:                     Fe0v9Wshfq7Q3K_J0hCGMNyAD48.roa (raw, json)
Hash identifier:          e7/QI4/moAYF6wkct8ra4l5qMu1b1A1FcQlhk2fEpHo=
Subject key identifier:   15:ED:2F:F5:6B:21:7E:AE:D0:DC:AF:C9:D2:10:86:30:DC:80:0F:8F
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018780DAE3FF70E2BC299C1B296BD551E9D0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Fe0v9Wshfq7Q3K_J0hCGMNyAD48.roa
Signing time:             Fri 14 Apr 2023 17:40:41 +0000
ROA not before:           Fri 14 Apr 2023 17:40:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19437
IP address blocks:        176.57.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:80:da:e3:ff:70:e2:bc:29:9c:1b:29:6b:d5:51:e9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Apr 14 17:40:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15ed2ff56b217eaed0dcafc9d2108630dc800f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:15:9d:05:ef:8e:f1:92:e9:8c:be:bb:2a:
                    0c:18:3c:1e:34:40:7d:3f:f2:a5:f8:3e:31:f1:1f:
                    4f:a7:f7:29:b2:9e:56:1c:b6:1b:a5:06:06:fc:73:
                    e2:d8:c4:a2:eb:96:10:78:57:03:99:fc:c3:26:3d:
                    fb:35:a9:c1:11:c5:43:3c:19:06:16:32:4e:20:c9:
                    cf:48:be:58:bd:76:ee:01:13:5d:7b:50:2d:e2:b5:
                    8f:aa:1f:30:82:f8:ed:26:ee:03:63:10:e8:ca:da:
                    f0:37:44:1f:df:29:64:ee:1f:3c:86:0d:09:4d:0c:
                    3f:b1:6a:70:60:9f:1d:ae:4f:29:99:b6:c7:52:44:
                    ac:0b:09:56:32:a8:07:27:80:71:31:61:0a:11:1e:
                    45:03:dd:7a:86:89:8d:da:23:d7:d1:e4:bc:97:e5:
                    d0:6c:95:88:fd:b3:15:62:a1:41:c6:30:28:12:f8:
                    66:f2:47:7b:fe:00:85:52:2c:8b:d7:1b:ec:f7:15:
                    c3:a8:a7:e0:39:50:7e:97:55:7e:dd:a6:aa:b6:fa:
                    ef:a3:f0:74:8b:8b:ad:68:8e:92:66:bf:f3:d3:2e:
                    b9:a7:50:a8:93:7d:be:76:6c:c8:0d:a5:ff:c0:08:
                    4e:e9:c0:3c:73:b7:49:66:ed:ff:fa:91:4a:d0:6b:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:ED:2F:F5:6B:21:7E:AE:D0:DC:AF:C9:D2:10:86:30:DC:80:0F:8F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Fe0v9Wshfq7Q3K_J0hCGMNyAD48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:2d:49:d4:79:d1:22:c5:15:dc:6b:f9:26:66:2b:0a:1c:43:
         7f:9c:19:30:c3:48:15:9b:ef:95:f5:6b:91:8c:2d:bd:55:08:
         c9:01:64:65:c5:ad:df:af:30:47:a5:88:a5:82:cf:96:d3:66:
         68:b0:b3:7b:5e:14:1d:13:f6:7b:73:aa:a7:96:94:58:75:34:
         eb:f4:4b:36:b4:74:fa:c1:59:f1:d8:db:b1:2b:88:ab:ce:5c:
         05:9c:86:56:99:e5:61:8e:46:0c:d8:47:b8:3d:ac:1f:c4:85:
         38:86:13:40:81:e2:7a:58:c2:69:5f:d0:6f:35:0e:b3:4f:10:
         b9:48:a9:c9:c9:8d:9e:2b:cb:bf:c6:26:8b:94:41:38:36:55:
         f3:00:6c:da:f5:21:0c:9a:d3:c7:33:f9:57:46:6a:74:d0:09:
         f3:72:07:d4:4a:fb:f0:1b:10:9b:b7:ca:f1:db:ed:b0:6c:66:
         cd:28:33:76:95:33:26:36:04:1a:68:c4:36:98:e6:2d:e8:b7:
         b9:4a:64:4c:97:25:78:5e:dc:47:23:f1:57:2b:e1:d9:4f:d1:
         3c:be:13:ce:0f:8a:87:17:0a:9f:17:49:39:f7:26:d9:7c:95:
         41:9d:e0:6d:e0:c3:b6:ff:c4:3c:bd:81:c0:01:06:1e:78:68:
         cd:ef:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org