Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V9nA7CVqgA0InmYU_5f0NaZ1cIw.roa
File:                     V9nA7CVqgA0InmYU_5f0NaZ1cIw.roa (raw, json)
Hash identifier:          ljmh6Bxg1yzYWFBbNXe0Fxjcfnwz70tiSNZbpB+NagM=
Subject key identifier:   57:D9:C0:EC:25:6A:80:0D:08:9E:66:14:FF:97:F4:35:A6:75:70:8C
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018ACBB9F90B932A253D04D4CE474A9E8B34
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V9nA7CVqgA0InmYU_5f0NaZ1cIw.roa
Signing time:             Mon 25 Sep 2023 09:44:37 +0000
ROA not before:           Mon 25 Sep 2023 09:44:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.62.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/24 maxlen: 24
                          62.72.165.0/24 maxlen: 24
                          62.72.161.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.168.0/22 maxlen: 22
                          62.72.170.0/24 maxlen: 24
                          62.72.168.0/24 maxlen: 24
                          62.72.177.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.173.0/24 maxlen: 24
                          62.72.174.0/23 maxlen: 23
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.184.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.180.0/24 maxlen: 24
                          62.72.184.0/22 maxlen: 22
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.1.0/24 maxlen: 24
                          81.21.10.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 29 Sep 2023 19:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cb:b9:f9:0b:93:2a:25:3d:04:d4:ce:47:4a:9e:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Sep 25 09:44:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57d9c0ec256a800d089e6614ff97f435a675708c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1a:6a:7b:d4:b6:69:82:57:ac:ca:29:f5:92:
                    fc:c1:d3:f1:42:51:22:66:9d:ef:ab:10:2c:48:20:
                    74:04:e4:23:4e:c2:10:a8:42:28:c1:6d:e6:1d:18:
                    23:42:80:59:6c:7e:c9:0b:5b:1c:46:af:c2:c1:b0:
                    ef:51:01:0e:e5:94:14:af:6a:53:dd:14:d2:55:d9:
                    33:f2:22:43:08:ed:b6:98:80:12:34:43:7e:58:82:
                    b6:64:82:70:1f:34:78:84:80:b9:3c:ba:00:39:ce:
                    5b:6c:f6:2d:4d:10:97:14:4d:b4:3e:84:67:bd:c2:
                    e1:91:93:d5:85:7d:3b:7b:9f:4b:70:3b:c1:42:c6:
                    56:d7:23:ca:2f:3e:60:d2:31:f4:42:61:e0:c4:32:
                    36:a7:c7:25:9d:47:d4:5d:f5:96:b0:2e:53:b8:78:
                    e0:39:3c:07:33:f1:fe:ca:84:5b:a4:e1:c7:69:2e:
                    f8:bc:5d:59:5f:af:f8:01:8c:df:33:59:fb:92:de:
                    9d:aa:a5:0a:10:4d:29:10:30:fb:e1:f6:31:fd:0f:
                    8c:b6:42:03:32:1b:39:f1:e9:7f:c6:41:0f:46:6e:
                    57:b5:7a:81:ed:1a:8a:b6:bc:a1:42:ec:9b:50:fe:
                    23:0d:d7:f2:8b:69:be:4a:f2:30:ff:a4:c3:ee:d7:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:C0:EC:25:6A:80:0D:08:9E:66:14:FF:97:F4:35:A6:75:70:8C
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V9nA7CVqgA0InmYU_5f0NaZ1cIw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.165.255
                  62.72.168.0/22
                  62.72.173.0-62.72.175.255
                  62.72.177.0/24
                  62.72.179.0-62.72.182.255
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.1.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:bc:72:54:86:6c:d1:64:01:cf:6c:a7:7c:ea:eb:e4:33:
         06:c7:f1:ce:bc:ef:3c:dc:93:bd:2c:82:b6:a8:1f:44:5c:85:
         e4:98:aa:66:21:64:38:f6:3e:c4:62:d5:4e:69:c2:b4:5a:d2:
         83:e6:f1:6c:d6:63:66:b1:13:12:96:d1:c9:b2:88:6f:5a:ed:
         e4:f5:3d:72:0a:65:66:4a:95:c8:5b:c4:5a:ca:2d:75:e3:96:
         10:87:86:bf:5f:5a:1c:88:02:48:d8:04:a0:0a:ba:8c:f8:b6:
         01:42:4e:23:d5:d0:fa:39:ae:e8:05:07:5b:86:95:7b:91:df:
         a2:92:c2:0a:70:59:62:86:76:2c:2c:81:11:6e:29:97:52:65:
         29:17:bc:ab:fc:8a:fd:29:a1:51:ae:f5:e7:22:04:6b:6f:c0:
         9a:9d:42:41:c2:b8:8f:af:26:43:a0:7d:2a:41:ce:35:13:c4:
         94:4c:37:f6:aa:ae:93:7c:a2:f3:5d:e2:e4:36:a8:b9:21:e1:
         9d:c9:42:33:a6:22:bf:c0:e1:4c:04:a0:3a:06:37:a1:c1:84:
         69:68:73:e5:1c:30:b1:e0:12:ec:e2:63:07:dc:10:d7:f5:c5:
         73:c3:1c:1e:e7:80:22:ec:b6:82:90:b0:d3:05:5c:48:b2:fa:
         85:bf:9a:49
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYrLufkLkyolPQTUzkdKnos0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwOTI1MDk0NDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Q5YzBlYzI1NmE4MDBkMDg5ZTY2MTRmZjk3ZjQzNWE2NzU3MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixpqe9S2aYJXrMop9ZL8wdPxQlEi
Zp3vqxAsSCB0BOQjTsIQqEIowW3mHRgjQoBZbH7JC1scRq/CwbDvUQEO5ZQUr2pT
3RTSVdkz8iJDCO22mIASNEN+WIK2ZIJwHzR4hIC5PLoAOc5bbPYtTRCXFE20PoRn
vcLhkZPVhX07e59LcDvBQsZW1yPKLz5g0jH0QmHgxDI2p8clnUfUXfWWsC5TuHjg
OTwHM/H+yoRbpOHHaS74vF1ZX6/4AYzfM1n7kt6dqqUKEE0pEDD74fYx/Q+MtkID
Mhs58el/xkEPRm5XtXqB7RqKtryhQuybUP4jDdfyi2m+SvIw/6TD7techQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFFfZwOwlaoANCJ5mFP+X9DWmdXCMMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvVjluQTdDVnFnQTBJbm1ZVV81ZjBOYVoxY0l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfjAMAwQA
PkihAwQBPkikAwQCPkioMAwDBAA+SK0DBAQ+SKADBAA+SLEwDAMEAD5IswMEAD5I
tjAMAwQDPki4AwQBPki8AwQAPki/MAwDBABRFQEDBANRFQAwDAMEAVEVCgMEBFEV
AAMEALA5MwMEALA5NQMEAbA5OgMEAbA5PjANBgkqhkiG9w0BAQsFAAOCAQEAm0O8
clSGbNFkAc9sp3zq6+QzBsfxzrzvPNyTvSyCtqgfRFyF5JiqZiFkOPY+xGLVTmnC
tFrSg+bxbNZjZrETEpbRybKIb1rt5PU9cgplZkqVyFvEWsotdeOWEIeGv19aHIgC
SNgEoAq6jPi2AUJOI9XQ+jmu6AUHW4aVe5HfopLCCnBZYoZ2LCyBEW4pl1JlKRe8
q/yK/SmhUa715yIEa2/Amp1CQcK4j68mQ6B9KkHONRPElEw39qquk3yi813i5Dao
uSHhnclCM6Yiv8DhTASgOgY3ocGEaWhz5RwwseAS7OJjB9wQ1/XFc8McHueAIuy2
gpCw0wVcSLL6hb+aSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org