Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SkgflTUzmOI4DZbYxoUUDN5dYvI.roa
File:                     SkgflTUzmOI4DZbYxoUUDN5dYvI.roa (raw, json)
Hash identifier:          JXj0iSs667b6irXCMU8sJI+BFx/W3WhDhJG+/1OJFlk=
Subject key identifier:   4A:48:1F:95:35:33:98:E2:38:0D:96:D8:C6:85:14:0C:DE:5D:62:F2
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01856F4B8462E7256FEF45C0C547B8CDF1B2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SkgflTUzmOI4DZbYxoUUDN5dYvI.roa
Signing time:             Sun 01 Jan 2023 21:44:58 +0000
ROA not before:           Sun 01 Jan 2023 21:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209260
IP address blocks:        62.72.176.0/24 maxlen: 24
                          62.72.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Jan 2023 20:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:84:62:e7:25:6f:ef:45:c0:c5:47:b8:cd:f1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 21:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a481f95353398e2380d96d8c685140cde5d62f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:91:67:83:e2:7f:10:cb:24:21:a9:4d:7b:
                    42:70:38:f1:24:1d:55:70:e1:ac:e0:c1:f3:e7:e0:
                    58:53:bc:2c:c1:b6:05:b0:63:f0:e7:fd:3d:27:54:
                    f1:8b:3e:ad:d7:29:38:dd:6f:95:a9:f1:c6:89:30:
                    4b:6c:8d:7b:87:fb:ee:95:23:e5:ef:c0:96:54:e1:
                    d0:70:59:49:a3:f1:7e:2e:9f:59:ad:8d:3c:11:0f:
                    c2:dd:ad:26:2b:4e:e3:6b:66:1b:15:21:cf:1c:c1:
                    2d:49:c1:03:52:4d:f6:dd:06:7b:fe:d4:1c:65:78:
                    68:b3:89:38:af:d5:91:e8:bd:48:5d:38:1b:21:87:
                    4f:31:21:47:14:6c:3a:c2:50:e4:67:6d:7d:8f:6b:
                    a2:85:e8:98:58:7f:32:a1:6a:9f:9d:52:b0:91:bb:
                    e8:45:d3:41:4f:19:21:2f:ea:71:52:05:2c:48:db:
                    f4:f5:81:f6:94:de:62:d9:11:d9:b8:e3:14:e3:42:
                    24:43:de:cc:12:19:70:76:53:85:b0:b5:a3:53:10:
                    04:07:3e:5b:96:de:b7:90:9c:65:cd:ea:35:fd:f3:
                    63:bb:95:54:00:ef:3c:8f:78:7f:3f:ef:95:a1:e1:
                    5c:e4:c3:cf:c2:57:f6:13:08:56:a5:3c:0f:f2:86:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:48:1F:95:35:33:98:E2:38:0D:96:D8:C6:85:14:0C:DE:5D:62:F2
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SkgflTUzmOI4DZbYxoUUDN5dYvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.176.0/24
                  62.72.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:97:67:6a:b1:eb:63:ec:ae:95:06:a7:e0:fc:74:0c:30:
         ce:74:a4:5b:ea:c7:b6:59:ff:62:19:fb:98:6f:e7:6f:04:37:
         ab:68:6d:bf:8c:82:4b:ed:12:4b:e9:c0:1a:0b:a0:0b:83:f1:
         2e:8a:29:4b:ef:98:d3:d3:2a:2b:38:0c:f9:06:ee:db:cd:6a:
         6a:b7:22:1e:bc:c1:65:8e:d7:d9:2f:2f:67:84:1c:47:83:24:
         89:af:69:fb:ad:89:23:d9:ce:b2:b2:b7:2c:36:4e:27:43:30:
         8f:cb:90:53:2d:7d:d4:8e:1e:56:3c:dd:71:a5:c0:6c:73:dd:
         3a:21:5b:b7:5f:28:14:53:55:7f:7d:2b:e8:4a:12:13:1d:eb:
         8e:0d:ee:c3:c2:f7:28:53:dd:ff:27:40:f3:e5:87:c4:19:73:
         4d:e6:2e:40:97:d7:d4:1d:d6:2e:05:0b:f3:8e:87:3d:f8:3f:
         5e:26:25:9f:c4:3b:14:bb:5b:1e:5a:17:cc:23:c8:c7:74:b2:
         d4:52:d3:89:10:1c:05:6f:d5:bc:a4:b3:d8:39:1c:f3:d7:a5:
         8f:0c:56:11:a1:07:ac:f4:f2:19:fc:63:a5:45:b8:e7:7a:e3:
         53:45:5e:3d:6e:d3:02:ce:21:c2:74:5c:39:13:10:e8:c6:49:
         16:96:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org