Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m2_5VUtgqkFwt2qFRPVCLp0CAVs.roa
File:                     m2_5VUtgqkFwt2qFRPVCLp0CAVs.roa (raw, json)
Hash identifier:          yda+3TxL0jWnmRIDX4LGEy7dc+IyCWouPAxBnS3bv1c=
Subject key identifier:   9B:6F:F9:55:4B:60:AA:41:70:B7:6A:85:44:F5:42:2E:9D:02:01:5B
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018816EE8228610448F50C2B7B040133B516
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m2_5VUtgqkFwt2qFRPVCLp0CAVs.roa
Signing time:             Sat 13 May 2023 21:05:09 +0000
ROA not before:           Sat 13 May 2023 21:05:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62068
IP address blocks:        62.72.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Jun 2023 16:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:16:ee:82:28:61:04:48:f5:0c:2b:7b:04:01:33:b5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 13 21:05:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b6ff9554b60aa4170b76a8544f5422e9d02015b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:de:96:b9:01:87:fa:f0:d1:70:45:4f:26:
                    f9:fb:62:67:9b:db:a5:73:a1:ac:db:ec:32:f7:6e:
                    30:41:49:07:f0:44:c7:c9:d4:8a:b8:23:78:cf:8e:
                    60:ec:ef:2c:ee:8d:0e:93:71:c0:04:63:2d:c9:84:
                    fd:30:88:8e:ea:11:c4:49:5b:f1:4e:fc:93:98:05:
                    ff:75:80:ba:a1:9d:cc:5d:8d:62:fa:c1:dd:83:4d:
                    59:be:4a:f5:1d:f7:cf:76:27:6d:fe:e9:f9:4f:e1:
                    8c:dd:29:d0:b7:bb:b7:e6:43:77:ed:95:83:1d:43:
                    9b:47:bd:77:a1:8e:45:98:93:06:4d:45:f0:fa:14:
                    61:10:82:41:39:3e:ad:2c:7c:9a:61:02:36:86:9e:
                    f3:47:7c:eb:db:1a:69:03:2f:5c:75:ad:01:68:41:
                    4f:39:e3:73:91:c7:d4:07:be:fc:d0:a2:db:88:b6:
                    07:f6:8e:9d:b1:93:5c:ca:64:e4:88:a0:3d:1e:a1:
                    f6:9e:e4:62:c1:27:59:d6:67:d3:df:c6:1e:6d:55:
                    f7:04:00:f4:e1:e4:24:85:1e:31:07:26:fe:b3:46:
                    56:c2:50:07:ef:4e:67:d6:89:58:88:d4:49:ee:2c:
                    3d:a6:4f:18:d3:af:a9:c4:3d:ca:bc:71:00:a7:0a:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6F:F9:55:4B:60:AA:41:70:B7:6A:85:44:F5:42:2E:9D:02:01:5B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/m2_5VUtgqkFwt2qFRPVCLp0CAVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:39:83:20:23:16:dc:e7:12:66:f8:dc:86:4d:d0:ca:37:
         ec:8c:57:a1:01:ca:1b:b5:d3:40:88:b1:dc:f5:30:7a:0a:92:
         60:1b:07:6c:d7:02:b8:f6:35:6f:58:0b:95:56:55:4d:22:34:
         6d:28:7f:a3:66:b2:71:4d:00:f3:ff:78:a4:ca:45:8e:c4:f6:
         26:09:dd:7e:97:d3:cb:01:f4:fd:a1:64:6b:36:82:ce:1f:8f:
         bb:ed:a3:e3:8d:03:7d:f2:b1:a4:4e:df:58:a8:fd:b0:56:bf:
         fb:df:4e:5d:c3:90:15:40:1e:a0:1b:df:30:5b:80:25:42:64:
         52:b4:ca:ab:a1:3a:9b:78:d1:6b:f3:09:18:88:14:90:d6:93:
         73:69:d0:a7:a2:a2:50:18:60:b6:f8:04:3b:d8:1b:db:f5:b9:
         27:63:87:26:3e:c5:07:96:57:af:93:c4:3e:ca:ee:57:ab:3c:
         f4:17:7c:38:6b:6f:c6:0a:c7:d0:13:56:41:ff:00:30:32:76:
         66:ae:5d:0b:82:6a:18:a5:1e:34:27:f3:97:ce:ce:e5:71:bf:
         27:7a:92:f3:de:bf:f7:cf:39:cd:de:6e:09:ea:53:a7:95:e5:
         99:fe:a2:e2:6f:a4:8e:99:77:a0:a7:56:6f:37:10:30:f3:bd:
         6f:b3:32:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgW7oIoYQRI9QwrewQBM7UWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNTEzMjEwNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjZmZjk1NTRiNjBhYTQxNzBiNzZhODU0NGY1NDIyZTlkMDIwMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd/elrkBh/rw0XBFTyb5+2Jnm9ul
c6Gs2+wy924wQUkH8ETHydSKuCN4z45g7O8s7o0Ok3HABGMtyYT9MIiO6hHESVvx
TvyTmAX/dYC6oZ3MXY1i+sHdg01Zvkr1HffPdidt/un5T+GM3SnQt7u35kN37ZWD
HUObR713oY5FmJMGTUXw+hRhEIJBOT6tLHyaYQI2hp7zR3zr2xppAy9cda0BaEFP
OeNzkcfUB7780KLbiLYH9o6dsZNcymTkiKA9HqH2nuRiwSdZ1mfT38YebVX3BAD0
4eQkhR4xByb+s0ZWwlAH705n1olYiNRJ7iw9pk8Y06+pxD3KvHEApwpGeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtv+VVLYKpBcLdqhUT1Qi6dAgFbMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvbTJfNVZVdGdxa0Z3dDJxRlJQVkNMcDBDQVZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkiqMA0G
CSqGSIb3DQEBCwUAA4IBAQAHHTmDICMW3OcSZvjchk3QyjfsjFehAcobtdNAiLHc
9TB6CpJgGwds1wK49jVvWAuVVlVNIjRtKH+jZrJxTQDz/3ikykWOxPYmCd1+l9PL
AfT9oWRrNoLOH4+77aPjjQN98rGkTt9YqP2wVr/7305dw5AVQB6gG98wW4AlQmRS
tMqroTqbeNFr8wkYiBSQ1pNzadCnoqJQGGC2+AQ72Bvb9bknY4cmPsUHllevk8Q+
yu5Xqzz0F3w4a2/GCsfQE1ZB/wAwMnZmrl0LgmoYpR40J/OXzs7lcb8nepLz3r/3
zznN3m4J6lOnleWZ/qLib6SOmXegp1ZvNxAw871vszKl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org