Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ebl3UPvtnxbHbNQwA1XJaZFLy_E.roa
File:                     ebl3UPvtnxbHbNQwA1XJaZFLy_E.roa (raw, json)
Hash identifier:          +FN7XyPL49VD/eaRUWpZHnhO2mxkbVpME2syeqZuLKE=
Subject key identifier:   79:B9:77:50:FB:ED:9F:16:C7:6C:D4:30:03:55:C9:69:91:4B:CB:F1
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0185F47D440E664FF6D87CB667560038155E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ebl3UPvtnxbHbNQwA1XJaZFLy_E.roa
Signing time:             Fri 27 Jan 2023 18:28:48 +0000
ROA not before:           Fri 27 Jan 2023 18:28:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        62.72.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 Feb 2023 06:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f4:7d:44:0e:66:4f:f6:d8:7c:b6:67:56:00:38:15:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan 27 18:28:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79b97750fbed9f16c76cd4300355c969914bcbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:b2:bb:fb:7a:9c:c5:d4:30:4e:92:f5:f4:
                    3f:7f:eb:b1:29:21:f4:7d:43:c2:b6:6d:41:ae:e0:
                    cd:26:05:93:52:44:58:fc:9a:fd:f2:34:0c:ee:46:
                    6d:6a:fd:9c:f8:12:22:6b:f2:2b:de:9b:55:29:b7:
                    0f:63:4b:00:2c:fe:ea:c8:c8:07:ca:0b:8c:80:ac:
                    0c:b8:47:81:30:f5:ce:ad:95:fc:97:2a:22:ed:be:
                    89:4b:20:3e:42:1e:0c:ac:d5:8d:94:7d:04:06:31:
                    75:ee:70:cc:81:2b:3b:c7:67:03:21:22:64:68:1d:
                    ca:24:e2:7b:3b:8b:ca:39:10:3b:e7:99:5f:9b:44:
                    fd:2b:50:4d:79:e8:00:80:94:fa:a4:35:5e:6e:be:
                    c9:85:5d:e6:56:70:34:7d:d9:67:b2:6f:65:1f:c9:
                    7e:42:84:55:e0:5d:b5:9d:ef:73:a7:cd:b0:ad:00:
                    d1:2f:29:ff:0f:08:b8:2f:f6:d5:db:2a:83:f4:a0:
                    5a:7b:7a:70:ed:a0:0f:93:92:d5:cc:c7:a5:f3:48:
                    51:a3:62:7a:d0:fc:23:e5:7a:67:4e:e7:c2:87:0f:
                    cf:5e:b4:34:36:d8:61:82:a6:ae:4e:e9:aa:22:7c:
                    f3:f0:d8:3a:d9:31:de:44:f7:a5:5d:d2:9b:79:5a:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:77:50:FB:ED:9F:16:C7:6C:D4:30:03:55:C9:69:91:4B:CB:F1
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ebl3UPvtnxbHbNQwA1XJaZFLy_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:b0:c9:9f:07:1a:ff:ae:82:44:80:4b:98:ea:ff:0e:5f:
         04:22:a2:58:0d:6a:b1:04:3d:6c:4f:32:43:56:93:df:52:04:
         11:dd:22:bc:67:79:41:96:fc:47:27:ea:fb:a3:87:bc:8a:d5:
         c4:ee:3b:6b:a2:63:85:df:c2:e7:b6:8e:f8:f7:b8:3e:8f:87:
         04:8a:e0:48:15:74:79:10:aa:b7:fd:60:c9:22:b5:81:e4:34:
         fc:b0:df:e6:e1:de:b1:12:f5:a0:3d:41:28:0a:c2:55:1c:6e:
         e6:66:ce:86:7a:88:10:b2:d7:a9:e9:27:90:ff:62:a7:25:0a:
         ee:de:0b:3f:38:ed:9a:6a:62:ed:b4:f7:e4:ce:9c:6f:54:70:
         f8:53:24:80:b3:f6:5e:ff:a8:b4:c3:44:b0:ad:25:4e:be:9f:
         42:49:67:63:63:35:96:6f:00:22:cf:38:d3:13:87:02:9b:88:
         5a:03:c5:87:bb:64:bf:54:43:d5:1a:83:78:18:fc:75:76:78:
         d6:a7:c3:3b:e4:b3:85:14:13:15:49:4c:a1:f4:6b:df:68:30:
         1f:e3:cf:94:65:6e:ed:9e:87:f2:c3:4b:49:c0:4d:fb:83:7e:
         9c:25:b5:ec:fd:b5:56:52:9f:96:8c:87:b4:60:44:bb:f5:68:
         1a:e6:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org