Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dHka-_h3XqLJDIfGnYhRyQa4eBw.roa
File:                     dHka-_h3XqLJDIfGnYhRyQa4eBw.roa (raw, json)
Hash identifier:          ytKHo2y8m1UtWDczVVdM12q7YB+AnVBBU07d1Whqwoo=
Subject key identifier:   74:79:1A:FB:F8:77:5E:A2:C9:0C:87:C6:9D:88:51:C9:06:B8:78:1C
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01892B4B059626342802B7537815D83879F4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dHka-_h3XqLJDIfGnYhRyQa4eBw.roa
Signing time:             Thu 06 Jul 2023 13:01:24 +0000
ROA not before:           Thu 06 Jul 2023 13:01:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        62.72.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 10 Sep 2023 06:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2b:4b:05:96:26:34:28:02:b7:53:78:15:d8:38:79:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jul  6 13:01:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=74791afbf8775ea2c90c87c69d8851c906b8781c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:b9:3c:15:80:e7:42:46:4e:a1:f5:56:22:
                    04:08:d5:50:3b:de:17:31:93:e9:81:06:35:95:77:
                    a5:51:8c:bd:a0:8d:8a:1f:8a:7b:92:8c:8c:ed:84:
                    11:94:23:cd:3f:11:a8:4b:0c:68:a6:fa:a1:57:93:
                    58:5e:fb:02:c2:17:c4:1c:b1:02:41:6e:f8:9a:9c:
                    73:d8:f9:37:01:10:31:21:02:e4:e1:90:25:03:53:
                    22:2f:bf:a3:0c:ce:ab:44:4b:31:9b:2d:90:4a:85:
                    10:94:fe:8e:8b:c0:02:35:f8:a8:84:90:c5:93:b4:
                    8f:87:cb:51:57:fc:aa:f4:8f:f1:9a:a3:ce:4a:3e:
                    55:1b:c7:a7:88:f9:24:16:78:3e:e8:61:c9:74:59:
                    68:e3:f0:3e:82:86:d0:4f:f8:5c:16:27:e4:97:80:
                    c3:72:cf:8f:c6:d6:58:10:9d:26:ce:82:34:59:fb:
                    de:3a:96:4b:33:c5:90:f1:8e:b8:7a:db:b7:52:31:
                    db:36:75:9d:c6:85:8b:f3:b2:6a:e6:38:9d:f4:b0:
                    48:4f:62:4f:51:cf:a1:2f:f2:32:fd:62:39:bf:b5:
                    8e:a0:2c:e0:40:83:cf:30:04:8f:fd:52:31:e6:2f:
                    2b:87:8b:3d:af:e9:81:9c:30:c9:b4:30:0d:5f:06:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:1A:FB:F8:77:5E:A2:C9:0C:87:C6:9D:88:51:C9:06:B8:78:1C
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dHka-_h3XqLJDIfGnYhRyQa4eBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:69:9b:a0:48:c6:f1:6a:12:35:d0:ea:59:de:99:e5:65:81:
         39:3c:dd:47:f0:df:4c:20:c2:f8:b3:19:04:4d:5b:3f:6f:35:
         37:8d:fe:58:48:89:da:6c:d1:00:37:40:7d:32:2b:6b:f3:87:
         da:7b:63:37:cb:37:eb:74:03:27:87:e8:8d:2c:df:ec:45:1a:
         c0:45:31:07:4f:69:48:ff:8f:9e:5a:94:e1:95:a5:f4:de:98:
         6b:05:80:be:61:5c:59:bf:2e:15:35:07:d3:f3:89:25:a8:a3:
         f0:00:e0:3e:ef:e1:7a:84:94:d8:d4:c5:95:d9:a1:5f:36:61:
         0b:3e:b3:84:fa:68:ea:50:99:f1:10:be:17:c6:55:2c:6b:38:
         a3:e3:de:49:2f:87:45:f6:1a:3c:2f:0d:cd:13:bf:bb:dc:5c:
         31:f7:18:35:0e:b5:2f:44:cd:60:03:c9:33:e1:56:c4:66:12:
         a2:31:56:f7:f8:c1:b7:22:a4:58:14:57:ac:27:ef:63:ac:24:
         4a:44:88:02:51:8d:17:72:09:47:a6:f4:73:52:d1:c1:90:ed:
         a9:46:9d:c9:f0:aa:16:fa:54:d2:f4:fb:24:3a:b4:7d:cd:1f:
         d6:64:3a:57:b0:91:27:08:df:57:f3:47:c9:19:8e:9f:b3:a2:
         cf:b1:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org