Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/bChyeSJbKAKQKXUvZlzREg5Mg_E.roa
File:                     bChyeSJbKAKQKXUvZlzREg5Mg_E.roa (raw, json)
Hash identifier:          tx53AAOemtBAvdpg2mbvnpSVMMdgka4g2WVpdb7wvy0=
Subject key identifier:   6C:28:72:79:22:5B:28:02:90:29:75:2F:66:5C:D1:12:0E:4C:83:F1
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0188D256CDDD86CF6C719129233195A2EA65
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/bChyeSJbKAKQKXUvZlzREg5Mg_E.roa
Signing time:             Mon 19 Jun 2023 06:28:04 +0000
ROA not before:           Mon 19 Jun 2023 06:28:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/24 maxlen: 24
                          62.72.161.0/24 maxlen: 24
                          62.72.176.0/24 maxlen: 24
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.190.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          81.21.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Jun 2023 10:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d2:56:cd:dd:86:cf:6c:71:91:29:23:31:95:a2:ea:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 19 06:28:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c287279225b28029029752f665cd1120e4c83f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:b5:3c:4f:ec:e1:82:3c:d5:f1:22:dd:45:
                    a3:20:a9:c6:5c:3f:64:ea:57:87:b7:cd:fc:f9:9b:
                    88:fa:75:01:b4:98:57:ef:ce:ba:b9:f3:39:d6:6a:
                    31:8d:6f:71:f0:96:00:1c:42:bd:e7:46:75:a5:78:
                    38:b5:a7:a6:19:d0:74:a0:96:58:3a:cc:5d:12:71:
                    d8:ee:26:16:a2:99:0d:22:28:91:ed:8b:10:99:50:
                    2e:70:2b:a8:55:91:76:c2:97:24:ab:d1:87:92:8c:
                    3e:6b:93:8a:e2:80:61:cc:6c:2c:25:db:78:ea:6c:
                    81:33:b0:7a:80:c4:56:4e:e4:8f:27:02:70:f2:a5:
                    2c:46:7a:55:6f:ee:39:1d:e6:31:ec:b0:45:32:38:
                    44:f0:66:9e:27:47:a9:00:d7:8c:9e:a8:be:4d:03:
                    c0:32:90:72:fe:ae:47:58:02:fa:52:1a:fe:a2:36:
                    35:d6:33:5e:2f:0c:a1:e9:cd:b4:8a:19:2f:14:6b:
                    ed:80:63:bb:d3:9e:98:15:68:66:36:97:20:9c:45:
                    b1:95:8b:52:ae:54:4e:93:20:cd:a7:00:06:46:d4:
                    64:08:4b:89:92:b9:4c:b6:0b:bf:37:2a:a2:26:f3:
                    dc:e4:2e:ea:89:19:4a:3b:c7:24:5e:c6:b4:ce:00:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:28:72:79:22:5B:28:02:90:29:75:2F:66:5C:D1:12:0E:4C:83:F1
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/bChyeSJbKAKQKXUvZlzREg5Mg_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.162.255
                  62.72.176.0/24
                  62.72.185.0-62.72.187.255
                  62.72.190.0/23
                  81.21.12.0/22
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:85:fd:ef:ef:66:58:86:fb:80:e6:b1:ef:5f:b1:f0:ec:88:
         4a:19:4f:89:85:94:62:42:e0:ac:8f:f4:49:64:02:71:cf:d3:
         50:4b:67:23:73:3d:0f:3e:2a:ce:ed:4f:22:5a:8f:78:ea:dc:
         39:8a:dc:8d:26:7a:b5:c0:f5:6c:34:81:fc:63:28:b5:8a:a7:
         56:c5:f1:34:b3:2e:7c:66:a9:fe:d2:03:95:1e:25:17:df:cd:
         66:76:b1:69:13:92:06:a7:4a:ce:2d:93:c9:00:f0:61:19:5e:
         c8:dc:b9:c8:a8:55:9a:dd:fe:be:a9:11:e3:ce:27:a6:87:36:
         68:96:ff:31:8a:c2:5e:6a:80:74:7f:d1:24:e2:70:b8:f1:09:
         eb:b5:a6:8b:da:99:0c:5d:e1:cc:47:16:70:3e:8e:07:ab:48:
         e0:5e:f2:31:f0:2f:19:d9:be:ec:93:9e:e8:61:8e:fc:78:f9:
         03:cd:b5:b7:76:b1:f1:4c:1a:17:0b:9b:69:5e:3e:76:e8:ef:
         e6:db:98:52:28:e0:c5:0c:a2:bf:fe:df:9d:a4:13:f8:7d:9a:
         89:f5:31:4c:a5:f7:a3:df:6a:e1:d6:ca:8b:6d:db:e2:aa:af:
         e5:58:a6:70:e7:5f:08:17:34:55:fe:58:2d:c0:39:70:fe:ff:
         63:64:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org