Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lhE8NiR2aDXEiM40ARYSKMEEGf8.roa
File:                     lhE8NiR2aDXEiM40ARYSKMEEGf8.roa (raw, json)
Hash identifier:          QzuNnFckWYog6JRkD3BUevf97SIkO+8BFr7m6rh14G8=
Subject key identifier:   96:11:3C:36:24:76:68:35:C4:88:CE:34:01:16:12:28:C1:04:19:FF
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01890608F4418499C65760E6BC4FD5AD4B7E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lhE8NiR2aDXEiM40ARYSKMEEGf8.roa
Signing time:             Thu 29 Jun 2023 07:23:17 +0000
ROA not before:           Thu 29 Jun 2023 07:23:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140155
IP address blocks:        62.72.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Jul 2023 09:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:06:08:f4:41:84:99:c6:57:60:e6:bc:4f:d5:ad:4b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 29 07:23:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96113c3624766835c488ce3401161228c10419ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:90:bb:24:09:20:a0:b7:e9:2e:f5:6a:95:
                    b1:12:92:31:40:68:82:9b:f7:3d:e8:55:c3:e2:67:
                    ed:92:7a:e1:c9:48:7f:4f:4a:20:ab:19:04:ae:5c:
                    bc:02:12:3f:c8:53:f3:cc:f9:21:2a:95:66:ec:2e:
                    19:ba:b5:f0:4e:ef:ae:08:f8:57:36:8f:57:33:70:
                    f3:81:aa:92:57:37:32:a9:d0:16:fd:c2:c5:6b:63:
                    90:13:0c:3e:b7:71:1d:34:4f:50:29:37:33:e3:94:
                    73:24:e9:1d:e7:98:d2:12:29:24:06:2a:86:28:16:
                    6c:19:5d:6a:2e:f9:39:4f:b7:ff:d3:00:f2:aa:30:
                    d4:01:6c:b8:41:33:49:c8:53:20:cf:7a:f4:27:6f:
                    64:65:98:78:6f:b9:c2:ba:0e:1e:f7:7b:af:32:9b:
                    23:2a:7a:bb:6c:ed:e0:10:75:a7:19:40:92:13:3d:
                    3f:6d:83:5e:88:f5:24:ed:c3:b6:82:ad:20:f0:61:
                    b9:82:98:56:96:43:18:a8:c3:60:da:f4:01:02:02:
                    75:01:bf:7d:c4:ba:e8:fc:40:72:a0:9d:fc:db:7b:
                    6d:57:9f:9d:6c:b0:64:4a:b8:bf:f2:3e:fe:ac:45:
                    a6:ee:7f:e9:fb:40:6f:4b:24:22:ce:dd:b1:59:4a:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:11:3C:36:24:76:68:35:C4:88:CE:34:01:16:12:28:C1:04:19:FF
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lhE8NiR2aDXEiM40ARYSKMEEGf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:19:e6:6c:1d:0b:2d:cf:7d:92:db:64:d9:9a:1e:b5:94:aa:
         33:e1:19:24:f7:bc:07:cb:40:bb:75:f3:2b:08:33:0d:ad:62:
         fe:a1:c5:d9:59:8b:c8:3f:2c:4d:e3:9e:66:5c:2a:29:bb:0b:
         a7:5a:bf:34:7a:07:19:c1:c7:cc:ef:90:eb:0a:fe:2d:5c:99:
         d7:6b:8f:95:fe:0a:04:05:09:61:4a:64:b1:94:e6:d1:78:ed:
         6d:15:83:da:f8:dd:2c:02:e6:85:12:83:ba:ab:76:24:ee:58:
         6a:cc:84:df:65:3b:35:d3:14:31:85:94:37:a3:15:5f:fe:b9:
         9b:34:be:c5:91:40:5e:fa:65:1c:c1:8b:c7:f2:c3:fa:dc:b9:
         19:b3:c9:3f:76:1d:25:60:e7:ff:b6:ba:42:52:7e:da:4d:c9:
         2c:9e:88:de:df:80:14:97:cf:77:d4:ad:8f:49:e8:a1:b6:ea:
         61:96:a4:60:78:ed:9e:c1:70:99:9b:8a:bb:8b:37:95:4e:0d:
         5c:71:92:e5:2d:67:ae:36:03:55:3d:b7:88:bd:05:15:43:6c:
         05:0d:8e:ae:c7:7c:93:06:2c:e3:b2:e1:7d:15:e0:62:7c:34:
         9c:e4:ad:e0:93:61:2a:49:32:02:02:44:4f:5c:e2:5b:37:f4:
         d9:01:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org