Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T3m5vmUnS9WC0286HKXPBpUWDzM.roa
File:                     T3m5vmUnS9WC0286HKXPBpUWDzM.roa (raw, json)
Hash identifier:          vv+vU5BBDHxGk3374R+4TmsbH5WAI/CrCkkMOZUTnt8=
Subject key identifier:   4F:79:B9:BE:65:27:4B:D5:82:D3:6F:3A:1C:A5:CF:06:95:16:0F:33
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0188782468B503A7008936067AD6FACB456E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T3m5vmUnS9WC0286HKXPBpUWDzM.roa
Signing time:             Thu 01 Jun 2023 18:07:11 +0000
ROA not before:           Thu 01 Jun 2023 18:07:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209260
IP address blocks:        62.72.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Jun 2023 06:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:78:24:68:b5:03:a7:00:89:36:06:7a:d6:fa:cb:45:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun  1 18:07:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f79b9be65274bd582d36f3a1ca5cf0695160f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:3b:00:59:ac:0d:db:f9:fe:3a:83:8a:73:
                    ad:5a:79:37:19:1e:c3:f2:fb:93:b5:7a:a2:ec:8f:
                    0d:cb:70:0c:c4:16:2e:5d:a9:02:76:15:f3:26:9e:
                    ae:ee:8b:07:08:97:2d:c0:5c:cc:fd:6a:3e:38:69:
                    bf:6d:03:80:45:9f:b9:d3:28:64:2e:cf:dd:25:c4:
                    b6:74:68:fa:a2:72:d7:ee:01:11:b0:de:e0:d9:70:
                    aa:c8:fe:c5:b5:c1:c0:f8:35:40:4e:f8:a6:0a:b9:
                    64:22:a4:7c:32:9b:6f:48:a7:bc:8a:bd:45:65:d3:
                    5b:b3:88:4a:22:7e:fb:ae:51:61:b4:bf:4e:49:f7:
                    ea:8b:66:67:8c:f4:59:49:0f:0a:0f:d3:a6:4d:b4:
                    69:90:28:cf:f1:9a:b7:74:f1:10:df:88:5d:2e:a8:
                    d2:1e:5d:bf:44:a3:20:09:cf:62:21:f7:aa:64:c5:
                    6f:10:5a:55:88:d8:f0:18:2d:15:72:ff:46:e2:4e:
                    43:7c:30:cf:61:6a:9d:10:2c:b3:74:0d:c7:f4:6b:
                    98:e5:83:3a:7a:6d:65:f6:42:24:bc:79:fe:32:e8:
                    59:f4:2b:66:c1:47:7d:42:ac:e0:62:94:18:70:09:
                    f3:16:f8:07:0b:f9:67:3b:10:84:ff:04:24:11:25:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:79:B9:BE:65:27:4B:D5:82:D3:6F:3A:1C:A5:CF:06:95:16:0F:33
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T3m5vmUnS9WC0286HKXPBpUWDzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:6b:99:08:ee:ab:f4:02:a8:a3:70:fe:89:08:8f:2f:42:
         8c:fa:23:8a:a2:dc:1c:20:96:2b:af:f1:c4:72:37:ad:26:b8:
         bf:9a:45:e3:a1:05:a7:b7:4d:c9:eb:46:09:45:3f:70:e7:8f:
         f7:ea:47:86:06:90:29:94:7f:4a:b7:0c:86:ab:79:04:e6:20:
         78:c7:b9:8f:0e:7d:bc:ac:4f:d0:66:2f:89:55:5e:a0:97:a9:
         e9:98:9f:43:c8:50:f0:71:56:70:b8:ae:84:2d:6d:e7:74:c2:
         c2:5f:e1:67:79:03:42:c9:62:21:4a:17:71:9b:8e:17:44:50:
         58:f7:05:1a:96:6d:1b:04:f8:3f:de:81:a9:08:90:36:98:49:
         5e:35:ce:87:1c:d9:d0:04:d0:f3:7a:d5:66:f6:eb:68:04:70:
         9f:0d:c1:f3:5b:f0:6f:42:d3:76:84:fa:a2:c6:ef:d7:94:36:
         44:67:28:1b:8e:0e:ad:a8:39:1e:b2:9e:5c:2e:c7:86:39:77:
         bf:a4:aa:48:42:4c:1b:68:81:a5:c8:98:60:e1:56:4d:4c:ab:
         eb:39:57:b4:15:c2:95:3b:6e:c6:c6:ab:b7:a1:c1:5d:f5:2a:
         e2:cc:54:7e:62:2e:48:9b:ea:8e:d1:80:9b:79:74:64:4a:94:
         bc:f4:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org