Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HIhVEmTmUq4GqhCY9rwQlx3pp5A.roa
File:                     HIhVEmTmUq4GqhCY9rwQlx3pp5A.roa (raw, json)
Hash identifier:          7aL8bfl9AyUs2S3+vNzIagNxgcbPugmA1LgdWRm8muk=
Subject key identifier:   1C:88:55:12:64:E6:52:AE:06:AA:10:98:F6:BC:10:97:1D:E9:A7:90
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01979C501532377330D829F2F36B0F55276C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HIhVEmTmUq4GqhCY9rwQlx3pp5A.roa
Signing time:             Mon 23 Jun 2025 10:23:03 +0000
ROA not before:           Mon 23 Jun 2025 10:23:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.164.0/23 maxlen: 23
                          62.72.170.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          176.57.63.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 29 Jun 2025 13:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9c:50:15:32:37:73:30:d8:29:f2:f3:6b:0f:55:27:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 23 10:23:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1c88551264e652ae06aa1098f6bc10971de9a790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:94:d4:aa:9f:4d:f1:9c:64:cf:88:69:5c:
                    e8:b1:2e:c6:be:7a:b4:49:0b:6c:f4:45:d7:fa:ea:
                    a6:87:54:c3:0f:ef:89:00:aa:32:cb:2a:fe:52:fe:
                    88:d4:9d:97:31:95:75:3e:52:f8:3e:b4:51:30:15:
                    74:bc:da:f0:cc:91:73:dd:27:76:ea:d7:d0:0b:cc:
                    ac:96:bf:47:29:ed:a2:73:60:ca:f1:46:bb:12:aa:
                    0a:95:5e:2c:fe:7b:4a:a4:4e:96:3d:78:35:5b:aa:
                    0d:25:e7:83:4d:19:2d:47:bb:29:18:cb:88:01:1e:
                    6a:c8:5e:75:e6:7e:cc:a1:28:09:0a:12:f2:d6:05:
                    fa:1c:ac:3b:84:d6:5d:e8:7c:cb:c5:86:42:09:a8:
                    86:11:20:fe:55:83:e1:90:80:4a:49:f7:7e:44:4b:
                    91:a7:c1:ab:6a:6f:22:49:dd:a4:4f:3b:19:18:ef:
                    31:37:d0:cc:3d:15:8a:a5:86:4d:14:ad:ca:48:c4:
                    c4:d9:1f:91:55:78:f5:55:81:a5:01:05:9b:88:5a:
                    33:c9:7e:64:c4:cf:99:2b:65:4e:4c:8a:d6:62:8c:
                    17:4d:ab:8c:5d:de:66:20:49:06:26:6d:ec:1b:37:
                    d6:72:be:81:3d:7d:c5:d5:5b:98:03:58:db:68:36:
                    72:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:55:12:64:E6:52:AE:06:AA:10:98:F6:BC:10:97:1D:E9:A7:90
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HIhVEmTmUq4GqhCY9rwQlx3pp5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.167.255
                  62.72.170.0/24
                  81.21.2.0-81.21.7.255
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:bd:4b:d5:8d:df:1f:00:28:e1:88:86:38:d6:71:95:4e:35:
         d4:ce:fe:bb:42:ae:dd:77:f0:69:50:2d:2a:90:11:22:33:3b:
         f8:dc:6d:a9:d8:a6:22:00:03:90:cb:fc:39:1a:bc:0f:10:0d:
         0b:2c:fb:7b:57:9f:32:e0:79:e1:04:6e:26:c7:2d:d5:5a:1c:
         da:08:1e:8a:aa:c8:d9:9d:22:7c:26:bf:05:ff:92:cc:87:53:
         1a:54:02:cd:13:e6:d6:85:76:ba:10:40:c7:6e:2e:76:35:fd:
         f8:03:10:76:b5:74:5f:6f:54:16:f5:86:4d:0b:91:51:39:ff:
         b5:8d:eb:7d:bb:d6:c1:f2:15:a0:ab:69:c4:23:59:2d:93:2e:
         03:40:b8:9c:d8:25:ee:06:e1:ac:d1:8c:b0:15:be:85:33:e4:
         53:3e:50:7e:55:40:c2:b4:ca:ad:29:57:e9:dd:58:77:ac:99:
         de:91:31:fe:ea:79:71:b5:b2:0e:90:2e:c8:76:2b:cf:93:58:
         4c:28:4e:8b:61:ed:41:7a:94:23:cb:49:19:8f:05:f5:6b:b6:
         92:bf:ba:25:43:49:ce:1d:22:d1:81:ea:30:6a:67:d1:65:6a:
         89:1c:12:40:96:0d:27:1c:b5:66:2f:2e:27:c9:02:fb:e2:5d:
         a5:e6:69:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:43:34 2025 by rpki-client