Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/e6ppZjgUqwSOszEb1qZGpWYQf7s.roa
File:                     e6ppZjgUqwSOszEb1qZGpWYQf7s.roa (raw, json)
Hash identifier:          DM83aTjIT+7vZfDdxpiJr0VJX9iGWa8NrqgoEJurQec=
Subject key identifier:   7B:AA:69:66:38:14:AB:04:8E:B3:31:1B:D6:A6:46:A5:66:10:7F:BB
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018BD6F0A863EEAB45139E50FA1FBF9FDE20
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/e6ppZjgUqwSOszEb1qZGpWYQf7s.roa
Signing time:             Thu 16 Nov 2023 07:02:57 +0000
ROA not before:           Thu 16 Nov 2023 07:02:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          81.21.12.0/24 maxlen: 24
                          81.21.13.0/24 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.168.0/22 maxlen: 22
                          62.72.174.0/23 maxlen: 23
                          62.72.185.0/24 maxlen: 24
                          62.72.180.0/23 maxlen: 23
                          62.72.184.0/22 maxlen: 22
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.3.0/24 maxlen: 24
                          81.21.4.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          81.21.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 Nov 2023 08:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:f0:a8:63:ee:ab:45:13:9e:50:fa:1f:bf:9f:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov 16 07:02:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7baa69663814ab048eb3311bd6a646a566107fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:42:8c:c2:69:e0:4e:50:ff:df:1d:fd:71:
                    b9:18:49:1f:4d:90:5f:ea:81:07:7c:5c:39:d4:c4:
                    f0:9c:da:7f:14:08:27:c2:a4:ea:7c:49:5a:f3:64:
                    b3:c0:82:85:04:ee:9c:8b:0b:55:43:44:09:e9:8e:
                    eb:a5:22:be:a6:7f:2e:fa:da:72:a6:aa:25:b7:81:
                    3a:60:8e:c9:72:f2:cc:43:0c:01:11:d2:86:4d:60:
                    80:bf:84:68:96:dd:d9:05:9b:33:ee:cb:0e:5d:e5:
                    e7:5b:af:6f:3b:4d:8c:ef:46:6a:58:2b:68:2b:89:
                    6e:43:4b:9d:3c:eb:d4:a6:8a:d4:67:17:dc:a0:4d:
                    29:42:24:50:3d:f1:84:c5:a3:14:c2:2a:d4:be:b3:
                    98:bb:9b:3b:a1:bd:69:29:a8:f1:3f:7c:74:b6:0d:
                    1a:bb:e0:4e:30:53:df:d9:d5:56:56:c5:16:1a:18:
                    f7:b6:c6:bf:f3:4b:0c:7b:74:a0:1e:b0:1e:e0:b3:
                    a1:ab:11:93:67:c0:e2:b5:c3:ae:01:36:22:7e:98:
                    06:ca:f9:9a:21:99:53:2b:a4:2e:63:66:52:f7:f0:
                    2b:97:67:6f:0e:69:3d:b7:ed:77:e3:fe:e5:70:4c:
                    6f:7f:90:80:16:3c:4a:d1:eb:e7:56:cf:6a:e2:8f:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AA:69:66:38:14:AB:04:8E:B3:31:1B:D6:A6:46:A5:66:10:7F:BB
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/e6ppZjgUqwSOszEb1qZGpWYQf7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.171.255
                  62.72.174.0/23
                  62.72.180.0/23
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:49:3d:b7:79:e6:9b:9a:52:ce:ab:b6:e6:a8:be:0f:0c:
         1e:07:62:99:f1:82:15:16:f5:c1:1a:22:70:ee:ff:c3:05:4b:
         3a:fd:31:6a:fd:0a:d7:6d:af:41:2d:db:29:63:1b:44:80:df:
         e5:9c:eb:35:24:40:40:1f:97:c4:15:48:9d:87:fb:ee:00:f1:
         bf:22:93:9e:fa:ed:24:eb:e1:cf:f6:19:e6:45:9e:bd:79:58:
         f9:5b:fe:dc:da:57:3e:73:80:31:8b:44:c6:3f:03:c4:4d:f9:
         c5:49:5d:cd:8e:ba:8d:df:d1:14:65:bc:05:89:09:51:cd:f6:
         cb:f1:92:18:99:a7:04:34:4a:55:a4:1e:88:9a:9a:f5:f9:35:
         50:0d:e9:4e:25:fd:7e:ac:d1:56:3f:7f:07:2e:49:29:1e:fd:
         91:c8:f2:56:75:83:a2:2a:37:86:91:d5:92:f6:a9:12:0a:5b:
         2f:d8:1b:5f:c2:76:79:b8:a2:95:ae:29:47:a7:ea:fd:b8:bb:
         f5:63:47:b2:2b:ad:c8:c4:01:d1:da:2f:2e:c8:a2:68:99:89:
         08:45:1c:32:6e:f6:87:45:0a:7b:dd:56:69:52:e4:83:d4:ef:
         8d:13:9c:26:f5:77:90:2c:b3:c5:15:51:cd:66:46:e0:62:06:
         4a:b6:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org