Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m1NoRszjloR9rPus381YtdTvbDk.roa
File:                     m1NoRszjloR9rPus381YtdTvbDk.roa (raw, json)
Hash identifier:          KLrGuSW8STNBcECbDd7XyIc7dBgAibGNDyMuhvajV20=
Subject key identifier:   9B:53:68:46:CC:E3:96:84:7D:AC:FB:AC:DF:CD:58:B5:D4:EF:6C:39
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0189019E474EC59742947BE4C83A99B1C2D9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m1NoRszjloR9rPus381YtdTvbDk.roa
Signing time:             Wed 28 Jun 2023 10:48:17 +0000
ROA not before:           Wed 28 Jun 2023 10:48:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206505
IP address blocks:        62.72.176.0/24 maxlen: 24
                          62.72.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:01:9e:47:4e:c5:97:42:94:7b:e4:c8:3a:99:b1:c2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 28 10:48:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b536846cce396847dacfbacdfcd58b5d4ef6c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:b6:f2:ca:3e:30:c2:1b:ba:9e:a4:24:8f:
                    5f:d7:24:e0:1e:04:05:77:57:91:a4:35:45:b6:6b:
                    9d:bb:3e:d0:2f:63:8b:5d:3c:87:2c:ca:60:c9:d3:
                    9f:b9:2a:b4:10:c5:9e:ad:b7:3b:2c:f8:f9:1f:e1:
                    9c:ca:94:16:2e:68:51:40:f6:a6:e9:c7:92:5c:cc:
                    b3:c7:61:d9:88:ab:95:2a:86:48:73:b3:5c:34:fe:
                    38:f7:53:cf:d8:28:e0:a6:83:01:92:61:6d:75:e7:
                    08:89:ad:c0:57:d7:cd:58:bc:1f:41:b9:80:42:fe:
                    76:d1:ce:ba:f7:83:c8:76:1d:f6:6c:1b:8e:6b:39:
                    a8:4e:7d:fd:be:1d:d4:c0:79:81:6c:ec:7c:bc:10:
                    8e:7e:c2:a5:40:c8:54:a6:66:73:4b:e4:ce:bf:02:
                    c9:11:2f:a7:74:5d:16:e4:0c:ad:61:83:75:98:3b:
                    54:ea:3d:cc:55:a0:95:31:8a:43:10:35:b0:c7:3e:
                    a4:82:39:7c:fc:df:1a:07:6d:5c:5f:5a:e8:ef:ef:
                    5e:bf:a1:17:9f:e2:60:8c:9d:af:92:c4:8b:7f:d4:
                    27:91:b2:7e:69:62:8a:6d:2b:ef:4e:cd:8e:62:ca:
                    28:08:e3:f2:b6:eb:6b:25:15:6f:96:6c:b2:8e:50:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:68:46:CC:E3:96:84:7D:AC:FB:AC:DF:CD:58:B5:D4:EF:6C:39
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m1NoRszjloR9rPus381YtdTvbDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.176.0/24
                  62.72.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:03:5e:ef:8f:22:7a:ed:5c:63:fc:cd:a7:53:50:4b:c4:
         e1:69:b2:e7:ff:42:f7:88:f7:1d:08:93:fa:7b:df:77:4e:63:
         ff:90:a9:59:18:10:f3:ec:40:b9:9a:9a:58:a2:6a:13:37:aa:
         f5:c4:80:9c:e5:ac:01:3d:91:c2:67:d5:9d:98:d8:66:7c:f2:
         54:c1:8a:03:ee:6f:47:68:a1:f4:9f:65:b4:da:85:b5:f3:91:
         fb:25:46:2f:a1:28:a5:0a:9f:98:9a:28:07:dd:b6:aa:50:4f:
         b8:98:77:2d:2a:2e:12:00:f8:2f:80:85:e7:b4:a1:6f:21:d7:
         dd:68:8d:ba:62:7f:7a:92:46:f1:fc:a4:87:35:4b:79:92:47:
         d9:18:e2:81:89:57:d1:a5:19:ed:2a:f2:5a:6f:ec:e1:67:3b:
         dd:68:50:aa:76:45:46:80:93:2a:04:a5:8e:14:b6:a4:5b:5f:
         7f:1e:65:83:fe:55:ef:0e:ed:3d:c6:49:3e:c9:50:b0:2e:06:
         f9:3f:3c:1c:86:ac:b8:a2:37:9b:40:f0:0c:bc:c5:95:1f:8e:
         46:81:7b:28:77:7d:8a:5a:28:1b:c0:6d:ea:f3:c8:2b:fd:1e:
         08:07:cb:cc:c1:6e:76:50:5c:83:05:f5:8b:ac:88:4d:cd:f2:
         29:72:03:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org