Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/j-pWRZGmplm6fEZEI6X_G2J2vpo.roa
File:                     j-pWRZGmplm6fEZEI6X_G2J2vpo.roa (raw, json)
Hash identifier:          cc7BzEaPfF24SswFmN5zuonNALPOovTnjmNaf6F6D0Y=
Subject key identifier:   8F:EA:56:45:91:A6:A6:59:BA:7C:46:44:23:A5:FF:1B:62:76:BE:9A
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01856F4B80D5A0B990F46F41FA49522D81DC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/j-pWRZGmplm6fEZEI6X_G2J2vpo.roa
Signing time:             Sun 01 Jan 2023 21:44:57 +0000
ROA not before:           Sun 01 Jan 2023 21:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58061
IP address blocks:        62.72.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Jan 2023 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:80:d5:a0:b9:90:f4:6f:41:fa:49:52:2d:81:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 21:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8fea564591a6a659ba7c464423a5ff1b6276be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e4:1a:33:a2:e5:49:03:83:52:69:06:a6:8f:
                    1b:a6:e3:86:7a:ee:69:b4:0d:c8:66:78:8b:9f:65:
                    74:11:6c:79:51:19:e8:77:43:8d:8b:05:14:9c:5e:
                    13:c1:96:83:d7:52:f4:47:9a:29:87:be:f8:b6:44:
                    9a:d8:96:7a:be:c9:a7:71:2f:1e:58:50:ef:17:c8:
                    45:dc:7c:74:18:ae:d5:28:06:fc:c7:b0:b7:73:00:
                    24:b3:b2:29:33:18:7e:ca:5b:ba:f1:28:91:e4:97:
                    0f:10:ef:e2:0c:df:ae:64:33:37:3d:4a:09:94:ec:
                    df:8d:5a:94:79:5d:4d:78:ab:a2:61:91:4c:d5:82:
                    d7:50:94:1b:c0:b4:a3:e0:df:2e:4e:34:65:2b:35:
                    60:47:86:10:9e:29:56:39:0d:6a:da:5b:e8:85:84:
                    e8:e1:af:8c:25:57:36:2c:5b:0f:57:72:9b:91:82:
                    fe:ae:de:96:98:a5:dd:8f:97:b2:37:6f:ce:0f:dd:
                    33:38:de:6e:2a:97:47:19:5f:e8:50:42:d0:79:e6:
                    f4:2b:db:c8:e1:ca:99:d0:b4:28:33:78:4b:ad:fa:
                    c0:62:34:56:2c:13:43:52:dc:9d:de:32:25:f4:6e:
                    5c:92:2b:92:e3:9e:42:21:89:ca:ba:0e:fc:ef:fc:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EA:56:45:91:A6:A6:59:BA:7C:46:44:23:A5:FF:1B:62:76:BE:9A
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/j-pWRZGmplm6fEZEI6X_G2J2vpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:28:bc:1d:6b:06:c1:46:ac:63:b5:b2:93:aa:b5:47:ae:a6:
         0b:c6:d0:f2:48:b5:f1:1a:c3:b1:d4:cc:77:e3:ba:7d:35:68:
         b5:43:e0:e4:de:58:cf:53:4e:6b:49:74:2c:cd:8a:92:0c:87:
         88:a4:e4:14:0f:57:b4:7a:f8:68:87:51:4a:29:44:10:38:e6:
         6b:58:ca:8a:9d:d6:37:b4:35:f1:16:70:db:41:2d:2e:59:45:
         00:18:9f:02:67:5e:67:97:c6:04:0a:cc:90:e3:b7:70:18:63:
         b4:9d:fc:70:54:b7:be:0b:4c:13:43:b0:65:6f:7f:dc:f0:92:
         25:8c:f2:b0:0f:7b:5d:b8:b3:59:4b:b2:8f:d6:22:84:4a:c7:
         b0:89:f3:8b:0b:1a:75:48:05:d9:a7:83:7a:b1:c5:d6:63:8e:
         ed:22:13:ae:40:aa:8f:8a:72:cf:7c:87:b1:10:50:e2:be:6d:
         22:a8:d9:6a:7c:bc:dc:d2:cd:54:75:52:8c:01:df:ff:c0:f0:
         87:4e:49:c8:42:c4:54:2d:fb:ef:7d:76:fa:d0:a6:96:69:e4:
         ab:43:85:a9:0f:32:fb:89:61:e6:59:26:85:08:5e:82:ea:6e:
         6a:c3:14:85:6f:9d:06:07:58:38:ea:53:00:d5:53:7a:fc:3d:
         f7:89:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org