Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa
File:                     Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa (raw, json)
Hash identifier:          QypxhGCEKh4XW6Bx3ooni2pbVItKXT96A7oYNUY4Bwc=
Subject key identifier:   4F:0F:F3:79:A5:1A:86:92:25:5F:37:3A:19:3C:4E:09:81:93:52:72
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018CF743209F44F9077EA274ECB4D1066950
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa
Signing time:             Thu 11 Jan 2024 06:43:40 +0000
ROA not before:           Thu 11 Jan 2024 06:43:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/23 maxlen: 23
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/24 maxlen: 24
                          62.72.164.0/22 maxlen: 22
                          81.21.12.0/22 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          176.57.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 17:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f7:43:20:9f:44:f9:07:7e:a2:74:ec:b4:d1:06:69:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan 11 06:43:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4f0ff379a51a8692255f373a193c4e0981935272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:56:7f:70:c0:dd:06:26:9c:3d:d7:5c:0a:5e:
                    43:c3:c4:4e:a1:0d:cd:cb:f5:53:8e:3a:67:68:17:
                    91:53:fd:5a:fe:9a:22:e1:e8:0f:ab:0d:b0:1d:bd:
                    e9:3f:06:39:23:ab:0b:15:5e:55:27:7f:18:ea:9d:
                    f2:d0:42:c4:f5:0e:3f:c9:19:8c:8a:d4:1e:1a:2b:
                    1a:81:8b:cf:28:2e:22:3b:a4:b7:a7:de:5a:27:f4:
                    e4:8e:1c:9b:7e:59:10:05:69:bf:91:9f:f0:d8:fe:
                    b0:83:ce:bc:36:49:ad:82:c5:c3:8e:05:16:53:f2:
                    30:08:0f:8d:aa:55:26:ee:9a:9a:50:79:05:af:a6:
                    91:6e:07:87:17:ca:1f:93:ee:00:ab:5c:32:6a:d2:
                    4d:4d:b0:48:14:21:30:13:35:bd:a9:4d:fb:b8:fb:
                    aa:56:18:a4:29:03:cd:53:16:e4:f2:40:81:ca:c8:
                    54:e8:d6:5c:98:67:5d:17:b3:9a:3d:c3:c9:2b:d6:
                    45:9f:8f:26:cc:04:87:07:74:a2:2c:13:f5:50:33:
                    7c:59:26:d0:1b:57:71:11:e9:f8:85:32:77:f3:3b:
                    bb:e9:20:dc:49:d8:38:a7:0b:23:65:4f:38:9c:25:
                    c9:7f:a1:97:09:04:e6:02:38:78:40:52:54:96:b5:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0F:F3:79:A5:1A:86:92:25:5F:37:3A:19:3C:4E:09:81:93:52:72
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.167.255
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:b3:da:44:78:06:34:cd:2d:cf:cd:b0:e3:77:82:04:2e:
         d5:42:05:b6:ef:22:e6:d3:6e:19:86:40:5a:8d:33:8c:42:17:
         54:f7:2a:f3:32:f8:da:0c:6e:29:da:de:45:95:3f:c4:20:2f:
         a3:c7:f9:8a:96:6f:57:f5:e0:0d:54:e2:a2:c6:34:bb:ea:f0:
         ba:2d:df:e3:19:18:eb:22:34:95:77:6b:c1:c5:f0:6d:d5:2e:
         0b:32:7d:c1:86:6d:2a:4c:9d:5a:ca:90:27:01:2f:18:ef:59:
         84:82:6b:32:7d:9a:63:f8:74:28:6f:f7:dd:a6:85:c3:76:b7:
         af:32:25:2c:2f:2c:c1:a5:94:85:c4:e7:c4:96:a4:b7:e2:12:
         72:6e:5a:4c:ac:e9:41:09:74:6d:b2:43:84:a6:d1:1a:4e:cc:
         b0:e9:73:68:da:a9:4a:38:19:f8:56:8b:e3:8c:87:1b:2b:46:
         35:aa:d0:b8:8e:0d:7c:79:7d:2f:76:4c:dc:e3:48:7d:fb:c8:
         8c:9a:a5:9b:b6:fa:f7:86:07:ed:d3:63:5b:aa:8d:10:37:5a:
         6d:32:69:08:72:ef:fe:66:6d:7d:64:df:0d:ac:8c:1b:dd:d3:
         c1:1a:63:f1:5a:af:f9:b3:a9:97:65:f8:94:bd:10:24:3a:62:
         1e:cf:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org