Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/adVCFxX0AlZhYhOf-FkOiX6svh8.roa
File:                     adVCFxX0AlZhYhOf-FkOiX6svh8.roa (raw, json)
Hash identifier:          7Wi18ri7n4tAKg0sugl/9b2Yl1GdwZXPlVTNXlTnonU=
Subject key identifier:   69:D5:42:17:15:F4:02:56:61:62:13:9F:F8:59:0E:89:7E:AC:BE:1F
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018AEF03151E883261D310CFF891E0CDA5A9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/adVCFxX0AlZhYhOf-FkOiX6svh8.roa
Signing time:             Mon 02 Oct 2023 06:11:10 +0000
ROA not before:           Mon 02 Oct 2023 06:11:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.62.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/24 maxlen: 24
                          62.72.165.0/24 maxlen: 24
                          62.72.161.0/24 maxlen: 24
                          62.72.169.0/24 maxlen: 24
                          62.72.168.0/22 maxlen: 22
                          62.72.170.0/24 maxlen: 24
                          62.72.168.0/24 maxlen: 24
                          62.72.177.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24
                          62.72.173.0/24 maxlen: 24
                          62.72.174.0/23 maxlen: 23
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.184.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.180.0/23 maxlen: 23
                          62.72.180.0/24 maxlen: 24
                          62.72.184.0/22 maxlen: 22
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 03 Oct 2023 06:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ef:03:15:1e:88:32:61:d3:10:cf:f8:91:e0:cd:a5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct  2 06:11:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=69d5421715f402566162139ff8590e897eacbe1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6a:a6:10:55:c2:bb:e0:e4:37:bc:01:75:9e:
                    40:20:1d:d2:41:76:24:4b:23:dc:37:a0:ec:d4:10:
                    a2:34:3d:8c:bc:f4:af:fd:f0:63:95:6a:d6:dd:66:
                    ac:2d:d9:83:a8:ab:fd:85:25:40:c5:e4:30:d7:c8:
                    d9:6d:73:f5:7b:51:f5:0a:c4:24:e2:9b:46:e9:f5:
                    39:d0:6f:40:e8:81:10:fd:0a:a7:76:25:f4:fb:20:
                    0c:ec:ff:46:b3:6a:6a:97:11:48:57:54:08:1c:51:
                    22:ed:9c:38:53:41:e0:c6:a5:0f:6f:fe:89:41:27:
                    1d:45:af:a1:dd:6e:8b:c8:e0:29:1d:bd:a0:43:0c:
                    0e:03:e5:0c:81:c4:d7:35:b3:f9:15:fc:e8:a8:91:
                    a6:fd:f7:7f:e7:d0:d7:c5:e4:f7:8d:eb:b6:60:72:
                    50:dd:25:8d:0c:56:a0:04:1c:f3:f8:3f:58:3e:ce:
                    c0:86:c3:1b:49:d8:90:86:21:40:08:65:af:82:14:
                    55:49:98:54:27:60:76:d7:a2:63:3c:e0:02:bd:a6:
                    35:66:bc:96:53:8c:bb:bf:9d:fc:5f:3b:99:d9:13:
                    d6:49:70:9c:75:f4:d0:ba:1b:98:69:67:09:83:17:
                    b9:5d:00:f9:9b:3b:97:87:53:fa:ad:dd:fd:a0:c2:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D5:42:17:15:F4:02:56:61:62:13:9F:F8:59:0E:89:7E:AC:BE:1F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/adVCFxX0AlZhYhOf-FkOiX6svh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.165.255
                  62.72.168.0/22
                  62.72.173.0-62.72.175.255
                  62.72.177.0/24
                  62.72.179.0-62.72.182.255
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:2f:78:49:2a:a2:70:5f:ed:73:54:7b:a6:8c:fc:e8:4e:
         18:19:f1:c0:07:ce:98:a5:a0:b4:31:d6:50:62:b7:20:72:13:
         ca:d5:04:0f:24:c6:f0:0b:4a:17:e8:28:70:b9:a7:71:24:1d:
         df:50:58:40:a8:89:52:68:f4:d5:39:de:72:8e:3b:0c:5d:bb:
         ef:ad:1e:80:ab:88:7a:cf:21:93:f8:95:c3:4e:36:30:9b:2a:
         7a:a4:83:9b:4f:09:d4:56:d5:b1:c9:da:b1:5c:e7:99:a7:e6:
         78:7a:ae:ce:b0:a6:15:55:7b:99:7a:29:c7:72:81:00:c7:de:
         9b:e4:94:1f:83:91:ac:f2:8d:7b:a9:67:e8:07:11:2b:16:48:
         db:b2:32:61:aa:24:71:da:71:87:aa:3c:58:91:2e:1e:05:ba:
         e6:fc:a0:1a:92:23:ec:18:80:6e:17:7e:d8:e9:9d:c3:15:49:
         f7:11:4a:b9:6c:96:c3:35:41:d5:fc:b8:88:8b:1a:e5:13:a8:
         76:2d:19:ea:0f:d4:c6:b4:e7:75:a8:1b:8f:69:f8:2f:68:36:
         f7:59:5c:0a:ed:d1:fd:89:79:d8:54:d5:fb:ef:56:b2:ee:f7:
         4d:d9:68:cb:97:2b:2e:9c:9a:94:ac:6f:2c:a5:a1:cf:82:da:
         bc:ff:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org