Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GvClsn57XeHzGrLISl0sfrol1u4.roa
File:                     GvClsn57XeHzGrLISl0sfrol1u4.roa (raw, json)
Hash identifier:          JdbJiUsOUeZW1vfEDzxrhVxf1gEMJ3HjCMM3XH5GuiQ=
Subject key identifier:   1A:F0:A5:B2:7E:7B:5D:E1:F3:1A:B2:C8:4A:5D:2C:7E:BA:25:D6:EE
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018AF990FF2551AEA14B813686FAC3936761
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GvClsn57XeHzGrLISl0sfrol1u4.roa
Signing time:             Wed 04 Oct 2023 07:22:23 +0000
ROA not before:           Wed 04 Oct 2023 07:22:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        62.72.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Oct 2023 07:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f9:90:ff:25:51:ae:a1:4b:81:36:86:fa:c3:93:67:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct  4 07:22:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1af0a5b27e7b5de1f31ab2c84a5d2c7eba25d6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:0f:3b:33:c8:ab:03:76:06:fb:a2:5f:da:
                    18:65:6d:0c:8d:21:c9:24:a1:40:6b:ad:a1:4f:2f:
                    a1:47:61:66:0e:41:1b:86:22:65:0c:7d:bc:65:d6:
                    8c:2b:8f:4e:c1:ba:bd:32:03:76:51:66:15:46:1a:
                    a8:3b:5e:1d:1a:54:5b:ba:37:6f:37:f9:2a:65:f9:
                    bc:1c:7b:41:67:1a:9e:68:8c:b1:fb:19:59:77:5a:
                    c6:e9:be:34:c0:a9:f1:38:01:7f:07:e0:55:22:16:
                    c8:25:52:fa:1c:96:26:2b:9a:ba:1e:9a:1f:d8:bd:
                    89:17:35:61:fa:e9:df:76:f5:c2:eb:b4:69:be:dd:
                    c6:3a:0f:f7:c8:19:37:c0:19:31:b9:5a:0d:36:a0:
                    c6:a7:03:2c:82:51:80:4d:98:3e:98:32:9e:f1:1a:
                    a4:63:c1:a7:69:73:c8:6c:e7:4b:fe:3e:ce:91:f8:
                    ca:f5:76:ce:ad:b5:43:0d:7d:33:08:38:22:61:9b:
                    93:6a:41:2e:d1:76:2b:f9:de:1b:f8:73:61:65:d9:
                    42:80:18:eb:76:42:24:7b:05:6f:89:64:4d:57:0c:
                    d9:09:86:8b:c7:4c:3f:ad:39:fe:be:13:ea:ac:72:
                    5d:7c:df:54:f5:ed:2c:86:bd:48:8f:c1:1c:95:02:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F0:A5:B2:7E:7B:5D:E1:F3:1A:B2:C8:4A:5D:2C:7E:BA:25:D6:EE
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GvClsn57XeHzGrLISl0sfrol1u4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:9f:33:b2:8f:85:f2:a2:1b:d0:0d:e9:af:88:02:9f:76:
         5c:09:81:44:49:e8:26:e0:b5:96:79:6b:15:65:ce:97:69:3e:
         e2:ee:6b:78:ba:14:4e:97:1c:23:da:ad:a0:26:c3:42:5b:f2:
         43:05:10:22:3c:f8:ad:b3:21:a8:72:8e:2e:9a:d3:39:73:8a:
         df:52:d3:90:e6:0e:4a:80:d8:ee:64:e5:76:b9:cd:ae:62:99:
         a7:be:ba:dd:84:97:6c:3f:d6:4a:2d:a9:13:a5:91:0e:db:37:
         d5:b5:4e:9e:44:67:a4:3f:6a:70:99:c3:55:4e:8f:6a:9b:56:
         6e:c7:b0:d9:bc:09:e4:eb:a7:02:8a:52:31:c2:4b:72:04:c8:
         df:16:99:29:bd:7f:d9:32:9f:bf:3b:ed:03:cb:3c:5c:3e:ed:
         61:50:b2:a2:a9:a3:8e:5b:79:aa:85:bc:d2:a7:9b:dd:18:92:
         01:b5:f6:6a:6c:6c:8a:bb:0a:de:b5:3b:5a:21:28:50:13:54:
         2f:44:dc:a1:e5:ad:7a:6e:33:71:6d:b5:dd:15:29:70:6d:c7:
         30:c7:a3:ea:07:9b:4f:06:bc:b9:d6:ef:cd:06:8f:71:aa:83:
         45:e8:1f:df:40:7f:f0:cf:c3:15:1f:0f:77:20:dc:4d:19:35:
         b9:04:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org