Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZPU_hm6JStu76FwoL9iU2wALOK0.roa
File:                     ZPU_hm6JStu76FwoL9iU2wALOK0.roa (raw, json)
Hash identifier:          WCyDqFq2uv7NSGNWU8PoxVKcUGwLn1ewJMI1JE2SRZQ=
Subject key identifier:   64:F5:3F:86:6E:89:4A:DB:BB:E8:5C:28:2F:D8:94:DB:00:0B:38:AD
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018CC9888BED01435B25130B2C280EECD052
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZPU_hm6JStu76FwoL9iU2wALOK0.roa
Signing time:             Tue 02 Jan 2024 09:36:58 +0000
ROA not before:           Tue 02 Jan 2024 09:36:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     823
IP address blocks:        62.72.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Jan 2024 09:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:88:8b:ed:01:43:5b:25:13:0b:2c:28:0e:ec:d0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 09:36:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=64f53f866e894adbbbe85c282fd894db000b38ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:53:5a:37:fe:9e:45:c3:82:ed:bd:08:40:
                    3e:f3:fa:56:e7:23:93:81:ca:4a:76:03:a5:c6:8c:
                    9b:4b:1f:76:88:b5:04:6f:46:84:4d:e5:97:18:fe:
                    65:4e:1c:b9:fc:9e:26:95:bb:93:fd:49:c2:15:7d:
                    43:7a:31:2a:89:d5:76:b0:64:60:73:05:51:fb:eb:
                    49:5c:4d:f3:7b:fe:34:3c:1a:55:6d:b3:85:dd:1f:
                    de:4a:fd:5f:d4:84:e3:b0:56:bc:95:3a:f0:3f:78:
                    d9:64:96:25:26:59:b3:f6:19:b8:b6:86:90:3a:f1:
                    39:d8:f0:a3:86:fb:95:52:ee:c9:b9:26:c4:1a:e5:
                    7d:33:15:9b:d6:c1:e1:58:19:f7:ff:c9:2e:e2:48:
                    a8:42:ab:fc:a3:e4:3c:46:c2:3f:e7:0e:3e:51:ed:
                    47:55:c2:9e:2e:43:cb:c4:b8:81:a4:8c:45:55:1f:
                    f8:19:1e:0d:d4:b1:70:13:fb:0a:9a:c4:84:25:70:
                    e1:71:5c:c8:06:2f:d6:b2:53:b8:cb:e1:dc:9b:45:
                    13:03:c3:70:c6:54:1d:57:57:46:02:ec:46:a3:af:
                    a9:eb:b9:61:29:0c:c1:b0:3d:2b:f9:ad:20:b2:b7:
                    bd:98:d1:e0:58:a8:70:2c:e6:84:cf:9a:04:e4:33:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F5:3F:86:6E:89:4A:DB:BB:E8:5C:28:2F:D8:94:DB:00:0B:38:AD
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZPU_hm6JStu76FwoL9iU2wALOK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:42:b2:01:e4:bc:d4:8c:4c:e7:39:d4:0a:50:4e:1d:0a:1b:
         8f:a8:56:f5:92:a0:25:15:f0:92:19:ad:8d:d5:cf:26:ef:90:
         2c:46:bd:d2:b7:02:9a:23:37:f8:64:fd:23:d9:7e:45:78:63:
         04:a9:a9:b9:91:71:a4:57:6c:f4:ed:2f:55:e1:75:fd:35:0a:
         bf:ee:20:fb:32:7c:58:60:b6:45:a6:1d:02:41:7b:15:bd:0b:
         52:b2:dd:4a:37:70:28:0c:15:d5:00:b2:60:22:82:d9:b3:05:
         c3:2a:b7:06:6b:89:b6:76:b9:e4:f2:fe:0a:f2:8a:33:7a:8e:
         89:a0:1a:2c:e8:da:79:a9:ab:1d:e8:e3:fa:b9:77:81:bf:ab:
         e8:3b:cb:2c:ac:a7:d7:04:4a:ba:85:b9:5c:8b:00:7a:c7:18:
         50:a0:a0:f5:0d:bd:4e:ad:82:10:a9:5c:89:65:86:07:6c:4a:
         4a:f2:d2:ee:a5:f5:30:81:9e:b7:f0:88:d3:78:c6:5d:36:8e:
         06:ac:56:73:41:76:b8:10:b4:71:6d:c6:fa:f1:cf:0b:5f:ff:
         84:0d:b3:c6:28:0e:01:fd:b3:3e:7f:5b:9c:cc:92:37:ba:f6:
         ca:5d:9c:25:e3:91:1d:c1:74:0e:bd:4c:b0:60:e7:6b:0a:da:
         a6:ca:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org