Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa
File:                     TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa (raw, json)
Hash identifier:          6eJ5G7O7dPH64tF7OIts4OF0a7N3fH1KAPmlbsE11Mo=
Subject key identifier:   4D:B1:D9:45:53:65:B0:81:82:DA:39:49:1F:9C:82:37:90:69:04:BD
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01856F4B7E95960AE452E86D9EAE944EE2C7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa
Signing time:             Sun 01 Jan 2023 21:44:56 +0000
ROA not before:           Sun 01 Jan 2023 21:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        62.72.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 27 Jan 2023 18:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:7e:95:96:0a:e4:52:e8:6d:9e:ae:94:4e:e2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 21:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4db1d9455365b08182da39491f9c8237906904bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:66:5d:ec:88:7d:64:ef:b4:55:45:90:1f:
                    71:63:b9:3a:e0:8e:cb:b8:de:5e:86:f3:9f:23:2e:
                    e2:0f:4d:85:bc:c5:ce:8c:65:56:32:4f:06:5a:d5:
                    97:b1:2e:fc:e6:5e:6e:d0:19:2d:5c:93:be:7e:c0:
                    ec:49:c3:8b:60:cc:11:1b:ec:d7:5d:42:44:61:aa:
                    ff:ac:cc:9f:07:f6:99:31:79:3d:77:22:65:fd:82:
                    36:9b:25:91:94:b0:7f:cb:bf:6e:4e:83:e4:43:3d:
                    b1:52:fb:8f:6f:2c:6a:29:8d:06:79:6d:a3:b8:62:
                    b5:f9:2a:3e:f8:00:63:2c:c1:26:d9:8b:d7:8a:64:
                    de:be:93:3f:da:8e:bb:68:66:64:08:4d:a6:5b:ff:
                    02:8f:80:f1:00:fc:9a:39:40:2c:e7:aa:43:7c:1f:
                    97:e2:e7:95:ab:91:36:ed:43:3f:03:ec:59:ee:33:
                    b2:90:48:d8:20:64:13:01:85:0e:60:11:d0:50:d8:
                    6b:04:8a:ce:b2:97:e9:d5:a3:18:83:3a:33:41:83:
                    b0:af:2b:72:b5:37:cf:d4:84:ca:18:54:ea:8d:0e:
                    cf:9d:83:2e:0a:7a:7f:17:ec:69:e7:17:b2:4f:26:
                    a4:37:46:81:70:1c:2d:84:8e:ad:d4:2c:4a:e6:3e:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:D9:45:53:65:B0:81:82:DA:39:49:1F:9C:82:37:90:69:04:BD
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e1:5e:7c:df:c8:0d:df:bc:ab:f9:e7:53:cc:10:b3:5a:e4:
         63:59:9d:8e:c6:d6:59:b0:35:cf:dd:bd:f0:c1:0e:d8:23:b4:
         c8:8a:43:d1:fe:78:64:a5:30:dc:a3:7f:ab:5a:94:0a:b1:6b:
         8c:45:56:09:a2:e8:d3:41:b1:73:76:52:51:bc:3b:3d:85:dd:
         14:4e:a3:33:1e:94:d7:7e:f8:f2:23:3d:ad:67:1f:9d:a1:49:
         d4:2b:0b:ba:39:11:46:04:29:b8:7b:e7:6c:77:c3:7f:04:b6:
         b2:d3:db:14:dc:7c:68:be:02:1e:3d:44:8a:8f:00:f7:0d:d0:
         f2:d0:06:89:22:ba:ea:75:6c:fc:8a:77:66:0a:41:3f:3a:11:
         8a:30:e1:9c:91:96:23:c5:77:8c:a7:57:91:3e:ef:63:cb:bf:
         e0:16:64:f9:d4:4c:bd:67:63:28:d5:95:69:7c:86:3e:37:c6:
         16:62:bd:ba:f7:6a:f1:55:31:44:9e:8b:3b:ad:a1:8c:13:97:
         cb:f3:c6:d3:6c:f1:99:21:c1:0c:cc:2f:60:a3:bb:fb:f6:a5:
         50:59:ce:20:09:a6:64:6b:68:59:0d:c9:37:5f:40:ed:12:bc:
         bf:0e:27:ef:9c:15:fc:7d:b4:0d:ce:ae:f1:f0:12:f2:14:11:
         3a:8f:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org