Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fO7ySncLvNE6EdcUALxf6HyTsZE.roa
File:                     fO7ySncLvNE6EdcUALxf6HyTsZE.roa (raw, json)
Hash identifier:          aBWjuxj4KK1U4+fNk1kGjbcJGzufr/gOJNK9aW1WNFQ=
Subject key identifier:   7C:EE:F2:4A:77:0B:BC:D1:3A:11:D7:14:00:BC:5F:E8:7C:93:B1:91
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018C5DE9B3E9285BCCD767BA2EE9F9520298
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fO7ySncLvNE6EdcUALxf6HyTsZE.roa
Signing time:             Tue 12 Dec 2023 12:04:06 +0000
ROA not before:           Tue 12 Dec 2023 12:04:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/23 maxlen: 23
                          62.72.163.0/24 maxlen: 24
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.168.0/22 maxlen: 22
                          62.72.170.0/24 maxlen: 24
                          62.72.167.0/24 maxlen: 24
                          62.72.168.0/24 maxlen: 24
                          62.72.174.0/23 maxlen: 23
                          62.72.174.0/24 maxlen: 24
                          62.72.175.0/24 maxlen: 24
                          62.72.180.0/23 maxlen: 23
                          62.72.184.0/22 maxlen: 22
                          81.21.12.0/22 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          81.21.10.0/23 maxlen: 23
                          176.57.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Dec 2023 12:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5d:e9:b3:e9:28:5b:cc:d7:67:ba:2e:e9:f9:52:02:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec 12 12:04:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ceef24a770bbcd13a11d71400bc5fe87c93b191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:32:22:44:f9:c7:e9:c2:20:63:ef:6e:9b:
                    8e:f9:79:99:7f:ea:72:ef:3e:ce:f8:ef:47:9e:31:
                    42:04:29:85:f4:69:23:9e:43:06:78:eb:8f:e7:46:
                    e0:14:f0:08:87:43:26:a1:50:79:9a:28:26:0f:c0:
                    b7:22:12:48:03:fb:6d:0a:e9:69:1c:5f:40:80:86:
                    d9:14:96:be:9d:3a:82:32:df:3f:f1:3a:96:94:9e:
                    7e:95:2f:35:6e:2d:f9:ad:c3:fa:8c:85:55:56:de:
                    5c:2d:c5:c6:91:44:86:3f:c2:a0:b4:82:31:74:19:
                    6c:af:ab:98:b2:8b:2e:94:0f:55:46:e2:45:0c:b6:
                    ac:38:26:3c:70:60:30:22:17:1a:97:e7:eb:b7:67:
                    de:bd:60:80:4b:97:14:15:f8:8b:83:b9:39:48:50:
                    61:ee:1e:fd:08:e2:89:ae:db:c9:51:1d:f6:44:49:
                    71:f4:ea:c7:ad:61:cd:ce:6b:ea:46:b0:44:dd:af:
                    ee:fc:82:5b:50:47:69:3e:c0:c7:f6:4c:b3:c7:97:
                    d5:58:9f:db:dd:fa:10:fb:7e:a7:0a:8a:4b:69:7f:
                    8f:71:9b:9d:70:2c:53:2b:5e:7f:c8:68:96:52:2f:
                    3c:9d:be:60:da:28:ad:4f:fe:3c:aa:59:a6:1f:bb:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EE:F2:4A:77:0B:BC:D1:3A:11:D7:14:00:BC:5F:E8:7C:93:B1:91
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fO7ySncLvNE6EdcUALxf6HyTsZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.171.255
                  62.72.174.0/23
                  62.72.180.0/23
                  62.72.184.0/22
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:9d:d1:fe:cb:0d:4a:3c:7f:01:81:b0:f2:c2:37:93:6b:
         51:e7:06:32:14:5f:37:c8:78:ce:78:98:9f:cd:23:4e:6a:cd:
         c1:46:93:c4:ba:cc:5b:f4:c3:66:96:60:86:50:2d:cb:bb:08:
         8c:35:ed:7b:63:46:74:9e:45:43:cd:3c:11:d0:78:9d:f5:fe:
         81:ee:c3:43:28:aa:eb:ef:d4:6e:6b:d0:32:fe:4b:46:85:42:
         52:35:46:c6:e7:70:9e:23:d1:51:64:fe:4e:fd:44:0f:6e:59:
         83:e6:83:1a:5e:b3:67:61:0e:74:45:7e:c9:8c:f0:6e:1a:57:
         ca:c8:e1:45:9a:c7:83:0f:15:9a:3a:d4:69:99:7b:d0:cf:df:
         50:c1:b4:c0:c9:12:34:f2:3e:a1:b1:4c:bd:39:2c:e3:ef:cc:
         37:22:3d:3e:8e:b6:c2:78:74:db:0a:bf:bc:14:2b:7e:a6:6a:
         89:ae:bd:c5:34:17:96:fd:1a:1e:2d:7c:c9:90:33:c1:6c:f3:
         f8:41:2d:fe:54:3e:d3:fb:e3:2a:36:a8:3d:d3:c6:3d:88:2a:
         b1:34:30:35:1e:bc:62:0c:00:91:46:2b:2a:4f:4d:91:57:35:
         2c:cd:b9:91:c7:f3:43:e2:16:8b:61:41:51:af:50:83:09:94:
         c4:08:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org