Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/edwXSHqQI6dmgSRyLeMYU-od_ak.roa
File:                     edwXSHqQI6dmgSRyLeMYU-od_ak.roa (raw, json)
Hash identifier:          yAxcDppuziq2Xd8sn/5rlMXswrX5ATxUVsKdKlkGWqU=
Subject key identifier:   79:DC:17:48:7A:90:23:A7:66:81:24:72:2D:E3:18:53:EA:1D:FD:A9
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018CFED28DF0C84B0F4C50F6A444D4AED252
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/edwXSHqQI6dmgSRyLeMYU-od_ak.roa
Signing time:             Fri 12 Jan 2024 17:57:40 +0000
ROA not before:           Fri 12 Jan 2024 17:57:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     397630
IP address blocks:        62.72.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 09:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fe:d2:8d:f0:c8:4b:0f:4c:50:f6:a4:44:d4:ae:d2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan 12 17:57:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79dc17487a9023a7668124722de31853ea1dfda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:60:00:aa:7a:db:a6:5e:ea:99:d4:49:3d:
                    77:7d:e1:55:de:4c:c7:9e:5e:17:9d:49:55:1e:0a:
                    b3:f9:31:da:44:52:9d:44:21:ca:33:89:7d:e6:9a:
                    b7:43:c4:30:4e:2c:f3:43:fa:5b:97:7c:72:d7:b4:
                    5f:75:7f:98:a5:86:59:48:3a:37:ad:bc:32:d5:6e:
                    d4:2d:4a:bd:a6:8a:3c:ff:b5:2d:bf:6f:ce:c4:26:
                    f9:1d:c4:2f:fa:df:2e:5d:4c:7f:e8:97:2f:97:59:
                    2e:44:5c:dc:da:41:54:be:c4:30:dd:08:f3:a7:d1:
                    1b:aa:82:dc:8b:52:28:98:41:cd:55:a5:a0:2d:63:
                    b8:94:bb:e8:5b:31:bb:c9:6e:5e:57:27:22:a4:25:
                    19:e9:b3:8a:70:ff:84:fa:19:f0:51:d3:dd:91:62:
                    34:92:89:37:44:85:82:af:34:b4:97:f0:a4:86:ef:
                    2c:8e:6d:0a:be:16:43:dc:47:32:d0:bd:73:97:d8:
                    e9:54:26:73:46:6f:1d:32:1e:c7:e5:0c:dd:65:63:
                    73:47:ad:fd:27:df:90:b3:54:d0:be:c4:f4:9a:bb:
                    25:7b:42:dc:40:36:0a:eb:da:80:2d:d5:c2:28:3d:
                    50:50:54:a5:e5:11:bb:00:e7:7a:7f:91:d9:d8:0e:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:17:48:7A:90:23:A7:66:81:24:72:2D:E3:18:53:EA:1D:FD:A9
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/edwXSHqQI6dmgSRyLeMYU-od_ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:8d:46:cf:a3:d5:07:a4:34:3b:40:d4:75:32:6f:e8:92:eb:
         40:ba:c3:db:f4:94:3b:c0:8b:19:2f:12:73:d6:99:2b:3e:9a:
         80:01:35:c8:f5:ac:47:7e:81:95:58:2d:47:35:6a:cf:0d:1b:
         96:1c:5b:ae:c3:6b:b2:f8:23:97:c2:67:8c:56:3d:b5:de:b9:
         48:9d:df:a7:b6:36:4c:45:2a:20:96:2b:97:5c:11:7b:94:ec:
         c3:21:8b:ab:a1:f2:91:37:dd:2a:58:2d:15:5c:64:f6:0b:9d:
         ec:b1:79:61:59:02:f7:93:1b:34:0e:9f:2c:65:8b:37:54:d2:
         71:5f:1f:62:08:e2:48:4c:ff:56:18:71:63:a4:7c:3b:65:e4:
         fe:e8:40:b0:f3:c8:5b:c6:d8:0f:7d:d7:0e:eb:0c:79:44:d1:
         96:44:d8:5b:74:1c:51:50:d4:cd:f6:c3:25:9d:7b:45:ad:d2:
         b5:c3:a7:3f:74:8f:d5:07:3b:32:fd:66:96:1b:d8:c5:31:6e:
         89:95:cc:0c:05:1f:a7:20:a3:fb:7b:ae:c3:ba:07:6f:44:c7:
         16:c7:fd:8d:fa:9d:75:b2:63:51:98:e7:a9:be:64:2c:31:3f:
         8a:b7:61:63:b5:93:21:08:c4:27:33:18:47:f3:11:31:e3:26:
         c8:5e:a6:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz+0o3wyEsPTFD2pETUrtJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTEyMTc1NzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRjMTc0ODdhOTAyM2E3NjY4MTI0NzIyZGUzMTg1M2VhMWRmZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD5gAKp626Ze6pnUST13feFV3kzH
nl4XnUlVHgqz+THaRFKdRCHKM4l95pq3Q8QwTizzQ/pbl3xy17RfdX+YpYZZSDo3
rbwy1W7ULUq9poo8/7Utv2/OxCb5HcQv+t8uXUx/6Jcvl1kuRFzc2kFUvsQw3Qjz
p9EbqoLci1IomEHNVaWgLWO4lLvoWzG7yW5eVycipCUZ6bOKcP+E+hnwUdPdkWI0
kok3RIWCrzS0l/Ckhu8sjm0KvhZD3Ecy0L1zl9jpVCZzRm8dMh7H5QzdZWNzR639
J9+Qs1TQvsT0mrsle0LcQDYK69qALdXCKD1QUFSl5RG7AOd6f5HZ2A4ePwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHncF0h6kCOnZoEkci3jGFPqHf2pMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZWR3WFNIcVFJNmRtZ1NSeUxlTVlVLW9kX2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkivMA0G
CSqGSIb3DQEBCwUAA4IBAQA2jUbPo9UHpDQ7QNR1Mm/okutAusPb9JQ7wIsZLxJz
1pkrPpqAATXI9axHfoGVWC1HNWrPDRuWHFuuw2uy+COXwmeMVj213rlInd+ntjZM
RSogliuXXBF7lOzDIYurofKRN90qWC0VXGT2C53ssXlhWQL3kxs0Dp8sZYs3VNJx
Xx9iCOJITP9WGHFjpHw7ZeT+6ECw88hbxtgPfdcO6wx5RNGWRNhbdBxRUNTN9sMl
nXtFrdK1w6c/dI/VBzsy/WaWG9jFMW6JlcwMBR+nIKP7e67DugdvRMcWx/2N+p11
smNRmOepvmQsMT+Kt2FjtZMhCMQnMxhH8xEx4ybIXqaA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org