Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eEzRZlf5L130tKCvlR-1BVKWzQ0.roa
File:                     eEzRZlf5L130tKCvlR-1BVKWzQ0.roa (raw, json)
Hash identifier:          rpyJSs1t1Bms/W0NVnZnPYZaneYqQFa9ZZwSCMElN2E=
Subject key identifier:   78:4C:D1:66:57:F9:2F:5D:F4:B4:A0:AF:95:1F:B5:05:52:96:CD:0D
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0187E18465D5A2AF3E448EB49C4FA5268B61
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eEzRZlf5L130tKCvlR-1BVKWzQ0.roa
Signing time:             Wed 03 May 2023 12:09:23 +0000
ROA not before:           Wed 03 May 2023 12:09:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        62.72.175.0/24 maxlen: 24
                          81.21.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 May 2023 06:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e1:84:65:d5:a2:af:3e:44:8e:b4:9c:4f:a5:26:8b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May  3 12:09:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=784cd16657f92f5df4b4a0af951fb5055296cd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:26:90:df:eb:2e:8d:4b:ac:52:70:1a:db:
                    9e:e0:18:89:9a:a9:ee:c8:af:bd:68:75:b0:2e:0d:
                    3d:61:7e:2c:9f:04:92:7d:77:84:fc:da:c5:87:d7:
                    bd:91:e0:0d:1e:c0:73:4a:6a:f8:31:dc:48:3f:49:
                    a1:c1:ea:a0:68:14:c8:79:36:43:76:96:77:4c:c8:
                    1d:85:e9:e6:92:63:ca:33:e2:36:28:63:1e:bb:b8:
                    1b:19:c9:a1:5b:a6:52:5e:5c:26:08:6f:6b:28:e8:
                    98:07:bd:3a:3d:3a:6e:2a:2b:b6:ea:2e:4d:f1:a5:
                    28:41:7f:76:89:48:92:e8:b2:5b:65:d8:2b:3e:65:
                    8b:d7:78:e9:7e:b1:9c:92:67:98:14:8a:7c:af:c3:
                    14:71:0c:d2:bc:f1:60:e3:98:5e:b1:22:3f:11:70:
                    ad:ce:eb:c3:13:65:46:76:70:1d:15:9c:c1:57:03:
                    48:cf:67:96:93:05:e4:ad:82:32:85:b0:6c:27:fc:
                    70:92:3d:0f:2d:38:15:7e:33:65:a7:24:04:d4:78:
                    52:1c:f9:77:03:d6:e4:84:a2:ac:59:9e:b7:61:30:
                    49:e7:6f:66:c1:6c:cb:4e:9c:f5:a0:f5:ca:1b:66:
                    72:c7:9c:c5:08:7e:26:b7:12:cc:99:4e:f6:38:3e:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4C:D1:66:57:F9:2F:5D:F4:B4:A0:AF:95:1F:B5:05:52:96:CD:0D
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eEzRZlf5L130tKCvlR-1BVKWzQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.175.0/24
                  81.21.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:b8:be:24:b1:6d:27:4d:84:a5:e7:12:45:73:0f:3b:ee:
         d2:3f:d3:93:99:99:72:50:70:2c:7d:27:fc:a6:35:fa:1f:b9:
         2a:fa:2a:6c:8f:63:b0:de:e9:75:bb:f1:62:69:78:00:f7:ed:
         ee:33:70:17:dd:0c:c1:7c:de:ba:e1:e1:95:44:5f:0d:a6:50:
         0a:a5:5a:b4:76:c3:9c:69:1b:96:c7:f9:7f:d5:9e:56:d0:5a:
         61:df:54:22:26:5e:5b:b9:57:2b:3d:3f:78:4f:36:15:a2:b8:
         13:72:e4:9a:ea:99:2a:cf:58:36:5d:f9:10:c5:6b:78:5c:57:
         33:42:db:dd:a0:6c:00:7b:a2:88:db:e8:21:74:15:34:b8:44:
         84:81:a6:01:97:be:c9:e6:06:1c:2e:86:0e:ef:0f:24:d1:a6:
         b9:4f:94:e6:6d:d0:66:67:8a:f4:8b:fd:28:52:cb:1d:45:a9:
         5c:38:a5:c4:93:eb:7f:8b:f4:89:7e:f1:d7:84:0a:43:bf:df:
         a6:6a:aa:03:69:fa:a0:82:9c:d1:3b:b8:e3:d1:c4:96:4d:ed:
         fd:bf:d9:27:1a:8e:0e:af:94:5e:4c:b1:41:b7:5e:04:cd:76:
         43:98:12:58:40:d6:4e:52:cb:91:b1:1c:65:32:b0:95:86:38:
         ab:28:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org