Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/RlOC1DwsR6Y5VnYC8ulDDP2_PyE.roa
File:                     RlOC1DwsR6Y5VnYC8ulDDP2_PyE.roa (raw, json)
Hash identifier:          UANDTLvEglEL6d0NrSJmf7Zg9e1YYIRJ9QcGVG0kQic=
Subject key identifier:   46:53:82:D4:3C:2C:47:A6:39:56:76:02:F2:E9:43:0C:FD:BF:3F:21
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0186C572FEB4FF7E75160D693B8CD876F4B6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/RlOC1DwsR6Y5VnYC8ulDDP2_PyE.roa
Signing time:             Thu 09 Mar 2023 08:18:13 +0000
ROA not before:           Thu 09 Mar 2023 08:18:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        176.57.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Apr 2023 06:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c5:72:fe:b4:ff:7e:75:16:0d:69:3b:8c:d8:76:f4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Mar  9 08:18:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=465382d43c2c47a639567602f2e9430cfdbf3f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:5b:1d:ba:1a:d5:42:f8:6f:3b:1f:b1:c7:
                    63:fc:ea:1c:cc:a3:d6:8b:74:da:63:ca:52:68:5f:
                    5e:1f:7c:01:11:fb:d5:bd:0a:13:0d:2c:40:02:04:
                    52:d8:3c:79:7e:9b:ee:84:88:d7:6e:d5:5c:bd:99:
                    d8:e5:e6:09:ba:de:41:3d:d6:c5:c5:6f:42:f7:a0:
                    f8:27:1d:2f:a2:90:0d:34:2a:2f:d1:88:cb:30:33:
                    aa:6c:52:fc:19:ed:b3:ce:66:6a:28:15:d8:93:f2:
                    48:9a:d8:b9:ae:bf:e7:62:ef:09:f7:b3:8c:2e:3e:
                    28:ca:6e:8a:a3:77:d5:99:59:cf:c8:f8:27:de:e1:
                    0d:24:e2:e0:a5:b3:03:5a:bd:7a:1e:06:40:f1:3f:
                    ec:87:1f:8c:50:ba:da:d9:e1:07:2e:45:14:94:5b:
                    5d:20:ff:ec:d6:d2:93:dc:9c:30:b9:5d:0f:bc:b2:
                    55:08:1e:e9:98:ee:7d:fa:81:65:fe:b5:1f:00:fb:
                    bf:6f:1c:a9:66:75:2e:c3:77:e7:1b:f1:ff:ca:c9:
                    f2:58:80:8d:3d:aa:76:63:dc:ad:07:7a:91:61:63:
                    27:9c:0d:d1:85:c9:0f:30:a3:87:2b:60:64:69:40:
                    22:18:50:fa:71:6a:67:be:23:d0:6a:c9:1b:e9:33:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:53:82:D4:3C:2C:47:A6:39:56:76:02:F2:E9:43:0C:FD:BF:3F:21
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/RlOC1DwsR6Y5VnYC8ulDDP2_PyE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:67:96:bd:ba:3c:2a:91:4b:be:73:ea:31:1f:ba:ac:c7:bb:
         2f:93:0d:d9:21:8b:98:1c:5f:e0:62:a3:35:71:e3:f0:bc:0a:
         c4:85:fd:27:3f:b1:68:9d:3e:e2:0f:66:94:5b:a0:81:67:49:
         8e:3f:4c:5d:5b:30:dd:e2:8d:d3:50:dc:5a:60:26:2a:11:ef:
         ca:54:8b:74:1f:83:c1:59:93:a6:f6:32:1e:fd:90:b1:59:a9:
         44:d0:0e:64:06:4a:bc:5c:19:87:84:05:1a:e9:02:6b:15:2d:
         e0:32:e7:53:f3:d7:02:f9:a8:5d:db:a2:a5:d0:87:a6:bd:f6:
         ea:e2:27:ce:11:98:c8:31:e8:8a:35:db:11:32:4f:b5:f3:70:
         e1:7d:b5:11:a5:eb:be:dd:76:0f:09:b6:d7:a0:0c:b3:8d:b2:
         90:84:91:77:40:25:d9:fe:85:12:9d:9a:d2:17:b7:23:59:4d:
         64:e7:31:6e:08:ac:e0:32:7a:ee:61:9a:90:38:dc:d7:b6:b6:
         98:b6:21:98:82:25:7b:d7:bf:5c:59:69:49:f6:c2:a4:95:26:
         da:49:9e:45:b7:d3:58:df:50:5f:df:80:84:94:31:4d:1b:af:
         75:40:a2:76:3a:44:56:47:07:d9:de:0e:9f:74:e2:63:e7:75:
         7c:03:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org