Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MH7YAZRAXjCSceeyJ4Znp7uBsjE.roa
File:                     MH7YAZRAXjCSceeyJ4Znp7uBsjE.roa (raw, json)
Hash identifier:          szRCIQroNtjn+sEPOQUPCu7qEY7wpZt6kXWoI9zawA8=
Subject key identifier:   30:7E:D8:01:94:40:5E:30:92:71:E7:B2:27:86:67:A7:BB:81:B2:31
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018A9A48168187C3C47F49F06DA72878F663
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MH7YAZRAXjCSceeyJ4Znp7uBsjE.roa
Signing time:             Fri 15 Sep 2023 19:18:50 +0000
ROA not before:           Fri 15 Sep 2023 19:18:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.62.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.164.0/24 maxlen: 24
                          62.72.165.0/24 maxlen: 24
                          62.72.161.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.170.0/24 maxlen: 24
                          62.72.171.0/24 maxlen: 24
                          62.72.168.0/24 maxlen: 24
                          62.72.177.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.173.0/24 maxlen: 24
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.184.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.1.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 16 Sep 2023 15:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9a:48:16:81:87:c3:c4:7f:49:f0:6d:a7:28:78:f6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Sep 15 19:18:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=307ed80194405e309271e7b2278667a7bb81b231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:90:eb:a1:c5:2a:41:86:78:2a:98:51:eb:
                    60:06:00:72:ab:c7:f4:37:31:31:35:14:aa:7d:2b:
                    9b:98:94:07:a7:6f:8e:28:18:5a:d7:3c:af:80:68:
                    fe:c0:f0:bf:90:f5:75:24:9f:76:91:da:94:05:ff:
                    da:0a:f1:0a:d5:f3:07:97:5b:2d:48:91:dd:f0:0a:
                    d2:12:e3:fc:7d:76:6b:29:d2:5c:b0:70:45:cc:80:
                    2b:9e:a7:55:7a:11:c3:f6:ac:29:ce:1c:d6:d6:7c:
                    1a:4f:29:51:d4:57:b9:99:1e:0c:5a:c6:2a:2b:21:
                    dd:3b:a8:40:52:c0:4e:04:f7:6c:13:6a:3a:77:a2:
                    0d:b9:38:87:bb:9f:b7:b7:b3:ba:e8:72:8d:ce:f1:
                    54:5a:88:dd:f7:7c:2b:f8:3e:47:3b:48:21:83:3c:
                    98:79:19:40:d2:fa:ef:bc:0f:b6:63:2c:ac:0b:86:
                    06:cf:f0:bc:89:d3:4a:85:92:26:7e:fc:28:ac:91:
                    94:6c:a1:86:1c:fc:41:66:e2:da:8c:05:22:56:e9:
                    58:99:9a:0c:45:17:dc:ba:0d:3a:6d:98:fa:37:e0:
                    b8:51:f1:6e:29:8e:8c:ae:17:a7:91:94:fd:15:0c:
                    03:ad:28:28:42:3c:f8:dc:63:bd:7a:1c:dc:a8:fb:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7E:D8:01:94:40:5E:30:92:71:E7:B2:27:86:67:A7:BB:81:B2:31
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MH7YAZRAXjCSceeyJ4Znp7uBsjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.165.255
                  62.72.168.0/22
                  62.72.173.0-62.72.175.255
                  62.72.177.0/24
                  62.72.179.0/24
                  62.72.181.0-62.72.182.255
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.1.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:00:e1:8a:44:10:db:46:22:e4:07:0e:77:46:b4:e4:d0:
         bf:d5:36:c2:ef:c0:99:99:56:a2:d5:61:7f:d4:e7:1d:16:46:
         9c:5c:bb:28:c0:6c:24:0f:41:1b:f7:05:78:30:48:a2:ea:d0:
         2f:26:18:f0:1e:25:db:98:66:e5:25:4c:aa:49:7c:93:36:e5:
         2e:07:ca:d4:d6:7e:73:49:cf:34:b5:fe:7c:38:75:21:17:64:
         df:8c:4b:2b:ca:f2:56:93:8a:e3:ec:4a:5e:0e:2c:df:e4:6d:
         40:cc:e3:4a:1a:cf:e5:ac:30:c1:42:d0:f4:e6:d9:02:88:c5:
         bb:81:55:ad:1f:96:7c:c6:e2:b5:f2:81:ff:61:b5:7c:05:f9:
         05:3d:31:43:3e:ff:e1:ba:d8:05:03:e3:d1:cf:a7:50:f9:e7:
         41:51:e5:1d:44:bb:a4:41:cb:69:db:4f:5c:31:47:07:0b:c8:
         27:56:5c:fb:7a:32:f1:ad:c3:ad:fc:d7:79:ef:b9:fd:32:ab:
         ad:e1:64:0e:eb:56:09:18:da:df:6a:a3:54:e5:c7:83:e7:68:
         a2:d5:a1:0a:53:7f:01:d0:7d:9e:a7:dd:c6:28:7a:85:d3:68:
         2e:a8:90:8e:4f:73:6a:28:06:a5:9d:30:f6:79:2b:53:35:13:
         de:07:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org