Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gabdok6UDybTHQZYX5Ps9jBbaxw.roa
File:                     gabdok6UDybTHQZYX5Ps9jBbaxw.roa (raw, json)
Hash identifier:          uR+Vt72d8D58MnTCfA3WcX1XnYKWQMX9WNZGQVqZwrw=
Subject key identifier:   81:A6:DD:A2:4E:94:0F:26:D3:1D:06:58:5F:93:EC:F6:30:5B:6B:1C
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01875BF2A9EADEA398A57278F35CC34C7D10
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gabdok6UDybTHQZYX5Ps9jBbaxw.roa
Signing time:             Fri 07 Apr 2023 13:40:42 +0000
ROA not before:           Fri 07 Apr 2023 13:40:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213305
IP address blocks:        62.72.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Apr 2023 12:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5b:f2:a9:ea:de:a3:98:a5:72:78:f3:5c:c3:4c:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Apr  7 13:40:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81a6dda24e940f26d31d06585f93ecf6305b6b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:36:8b:d2:13:a1:8e:9e:03:f1:00:b2:ff:
                    dc:35:c1:8c:a0:a5:21:a3:a3:1e:38:4f:24:0e:9b:
                    3f:59:66:2b:a5:6d:45:1c:fd:2d:b9:e8:72:ef:0c:
                    2e:1a:30:43:4d:f1:0c:90:4d:33:1b:92:f4:c6:7e:
                    06:1b:b1:d7:0c:a5:d9:b1:59:9f:e0:2b:de:1c:69:
                    32:ab:5d:a0:1b:1b:06:53:15:a7:f7:42:7c:3d:d9:
                    95:44:4b:0c:32:84:6d:bc:24:6f:0f:24:c2:73:ec:
                    31:74:f3:f5:8e:71:8e:cc:ac:94:57:3d:c5:35:d1:
                    90:77:06:4d:a7:4e:d5:cb:83:e5:26:65:f3:75:7c:
                    13:e1:a2:34:50:0d:e2:82:3e:fd:67:02:fa:07:5c:
                    9d:ac:df:7c:a8:93:0e:97:6a:a0:03:95:46:c2:e1:
                    72:3a:3a:61:07:9b:b5:da:01:07:0d:22:70:84:b2:
                    72:79:1e:58:77:b3:fe:99:05:bc:b4:21:f1:68:90:
                    6e:18:09:40:55:35:70:02:96:b7:c0:db:29:06:f7:
                    d1:77:35:d0:ff:ea:6a:c6:21:4a:d0:6b:83:26:01:
                    e0:dc:eb:f3:04:bb:36:04:ac:68:a4:b5:ee:52:3f:
                    53:e8:d8:bd:4a:1f:9f:89:36:27:71:2a:80:fc:d3:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A6:DD:A2:4E:94:0F:26:D3:1D:06:58:5F:93:EC:F6:30:5B:6B:1C
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gabdok6UDybTHQZYX5Ps9jBbaxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:5b:fd:b5:cd:81:73:de:ff:18:66:11:31:db:3f:1c:1e:
         d7:e6:42:96:f0:e0:99:45:7a:8f:99:ad:a3:9a:fa:b6:3d:4e:
         18:1d:d6:c0:b4:40:df:c8:86:a5:65:b3:27:0a:36:da:26:44:
         84:9a:87:15:32:1b:5b:4b:28:5c:bb:61:76:d1:55:d4:57:85:
         a8:1b:de:af:61:35:ff:a5:49:14:3b:b7:40:d1:12:59:8a:13:
         bb:72:f7:13:7c:81:65:40:c8:00:cf:ad:12:cc:ea:aa:4d:b1:
         ee:00:0c:88:a5:bc:63:50:6f:aa:5c:2a:1f:4f:81:57:f3:7a:
         47:72:04:c7:ac:59:9a:69:9d:a0:6e:75:ab:99:26:99:83:ae:
         d7:5c:38:77:05:ae:1b:5b:00:ac:b5:fe:01:16:a8:a6:6d:b9:
         e5:a1:a7:02:2a:a9:87:10:2b:5b:41:1e:78:4e:f6:a8:53:f4:
         82:89:d5:00:96:06:f4:d6:81:16:95:4b:c3:43:94:c0:8d:bb:
         e3:d7:ba:18:aa:22:ea:1b:95:d6:e1:41:48:14:24:1d:b9:0f:
         2e:f9:3a:e3:3d:f6:2a:dc:dc:32:ca:93:c5:db:9d:bf:0f:de:
         40:e3:29:8a:06:32:ce:8a:3a:1c:db:be:b9:13:9f:68:7b:c8:
         3a:08:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org