Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OGB0vlmYBrGPRynzmijOyl6YWUA.roa
File:                     OGB0vlmYBrGPRynzmijOyl6YWUA.roa (raw, json)
Hash identifier:          A7tdcgW+xYwr22m+KRw1QvV/hvaX+qi9+j8zuhKWHxs=
Subject key identifier:   38:60:74:BE:59:98:06:B1:8F:47:29:F3:9A:28:CE:CA:5E:98:59:40
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0189FEAEF21944DFBA37AFF3066FE4F94834
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OGB0vlmYBrGPRynzmijOyl6YWUA.roa
Signing time:             Wed 16 Aug 2023 14:10:25 +0000
ROA not before:           Wed 16 Aug 2023 14:10:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          81.21.12.0/24 maxlen: 24
                          81.21.13.0/24 maxlen: 24
                          81.21.14.0/24 maxlen: 24
                          81.21.15.0/24 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.62.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.165.0/24 maxlen: 24
                          62.72.161.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.170.0/24 maxlen: 24
                          62.72.177.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.173.0/24 maxlen: 24
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.1.0/24 maxlen: 24
                          81.21.8.0/24 maxlen: 24
                          81.21.9.0/24 maxlen: 24
                          81.21.10.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          81.21.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 20 Aug 2023 07:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fe:ae:f2:19:44:df:ba:37:af:f3:06:6f:e4:f9:48:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Aug 16 14:10:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=386074be599806b18f4729f39a28ceca5e985940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:29:af:24:2c:06:4b:74:5e:96:af:24:bd:c7:
                    ae:7d:9a:f1:99:a1:9b:19:00:93:0d:a4:f4:75:5c:
                    64:94:29:9f:4c:d2:f1:27:3c:69:21:65:fa:8f:c2:
                    bb:00:98:e2:9c:a3:ec:af:0d:2d:a2:f1:3d:c6:90:
                    18:cf:51:49:1c:8f:0e:89:d8:53:4d:4d:16:67:ef:
                    c1:cd:de:88:5a:a9:32:c4:2e:7b:23:51:2a:d9:59:
                    92:53:1f:bd:e5:24:34:6f:f1:12:a0:90:f7:81:10:
                    61:79:9a:cf:a3:09:77:74:46:0f:ea:44:d6:29:c1:
                    6f:52:df:24:c5:88:ce:2e:47:86:6b:88:eb:16:82:
                    0b:86:33:8b:80:61:f9:46:fc:a8:d4:8e:f7:6b:d2:
                    a9:2d:cd:b6:d0:b4:03:e8:78:9c:10:85:15:40:8c:
                    aa:51:7b:75:2d:40:23:d1:75:3b:d8:f0:2e:c4:c3:
                    91:3a:38:29:9a:ee:96:21:ab:73:69:76:d9:47:9b:
                    86:49:0b:22:26:ca:df:69:49:4a:8a:93:98:2d:35:
                    bb:ed:d3:15:59:06:ec:9c:c3:77:37:f9:b1:92:e5:
                    a3:92:2a:8b:f4:67:75:ff:ac:9f:82:28:e4:a6:25:
                    31:43:5c:b2:13:53:22:19:22:6e:ea:5b:77:93:c4:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:74:BE:59:98:06:B1:8F:47:29:F3:9A:28:CE:CA:5E:98:59:40
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OGB0vlmYBrGPRynzmijOyl6YWUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.163.255
                  62.72.165.0/24
                  62.72.169.0-62.72.170.255
                  62.72.173.0-62.72.175.255
                  62.72.177.0/24
                  62.72.179.0/24
                  62.72.181.0-62.72.182.255
                  62.72.185.0/24
                  62.72.187.0-62.72.189.255
                  62.72.191.0/24
                  81.21.1.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:03:fd:7b:7b:df:b0:2d:39:da:af:ee:10:29:b3:14:9b:d6:
         84:21:98:b6:f8:a9:a0:c7:e5:2c:2d:4f:f8:4e:4e:be:1f:32:
         5a:4c:fd:1b:04:09:6c:07:86:42:5e:ce:7d:0c:fd:e0:11:4b:
         5e:29:76:19:fe:17:b8:3d:e8:1f:34:6b:d7:1f:39:af:e2:80:
         80:69:2e:41:5e:b6:b9:85:2d:7a:06:f5:62:11:b7:64:be:5e:
         22:17:e3:0d:98:0b:17:5d:50:cc:ab:da:32:32:7f:ff:3f:58:
         48:7d:e5:9c:8b:4b:3d:a5:12:60:4c:19:9c:43:8e:a6:3e:99:
         90:f8:f1:ba:01:34:48:ac:ce:f2:37:4f:a6:0c:4c:2e:9c:73:
         f6:3e:6e:ab:99:58:44:b9:2c:e0:e9:43:a2:6f:33:4e:f2:25:
         56:8b:a3:e4:41:cc:58:a0:77:64:b0:33:bb:46:7f:30:fb:fc:
         2f:89:78:ad:17:55:50:f1:2e:1c:1f:df:d7:68:7d:a7:e8:12:
         20:94:0e:8b:d9:8c:46:2b:30:98:4d:bd:54:74:78:00:8c:ac:
         fd:d0:14:6e:f0:39:0b:c7:52:c3:27:8e:05:e9:a0:37:58:1b:
         22:df:81:81:4e:b4:36:c0:2d:07:80:94:48:a5:74:e1:b3:dd:
         b8:4a:0c:a0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAYn+rvIZRN+6N6/zBm/k+Ug0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwODE2MTQxMDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYwNzRiZTU5OTgwNmIxOGY0NzI5ZjM5YTI4Y2VjYTVlOTg1OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ymvJCwGS3Relq8kvceufZrxmaGb
GQCTDaT0dVxklCmfTNLxJzxpIWX6j8K7AJjinKPsrw0tovE9xpAYz1FJHI8OidhT
TU0WZ+/Bzd6IWqkyxC57I1Eq2VmSUx+95SQ0b/ESoJD3gRBheZrPowl3dEYP6kTW
KcFvUt8kxYjOLkeGa4jrFoILhjOLgGH5Rvyo1I73a9KpLc220LQD6HicEIUVQIyq
UXt1LUAj0XU72PAuxMOROjgpmu6WIatzaXbZR5uGSQsiJsrfaUlKipOYLTW77dMV
WQbsnMN3N/mxkuWjkiqL9Gd1/6yfgijkpiUxQ1yyE1MiGSJu6lt3k8SIywIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFDhgdL5ZmAaxj0cp85oozspemFlAMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvT0dCMHZsbVlCckdQUnluem1pak95bDZZV1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQwDAME
AD5IoQMEAj5IoAMEAD5IpTAMAwQAPkipAwQAPkiqMAwDBAA+SK0DBAQ+SKADBAA+
SLEDBAA+SLMwDAMEAD5ItQMEAD5ItgMEAD5IuTAMAwQAPki7AwQBPki8AwQAPki/
MAwDBABRFQEDBARRFQADBACwOTMDBACwOTUDBAGwOT4wDQYJKoZIhvcNAQELBQAD
ggEBADMD/Xt737AtOdqv7hApsxSb1oQhmLb4qaDH5SwtT/hOTr4fMlpM/RsECWwH
hkJezn0M/eARS14pdhn+F7g96B80a9cfOa/igIBpLkFetrmFLXoG9WIRt2S+XiIX
4w2YCxddUMyr2jIyf/8/WEh95ZyLSz2lEmBMGZxDjqY+mZD48boBNEiszvI3T6YM
TC6cc/Y+bquZWES5LODpQ6JvM07yJVaLo+RBzFigd2SwM7tGfzD7/C+JeK0XVVDx
Lhwf39dofafoEiCUDovZjEYrMJhNvVR0eACMrP3QFG7wOQvHUsMnjgXpoDdYGyLf
gYFOtDbALQeAlEildOGz3bhKDKA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org