Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mtiBfcfsvv-4oT7MesdNDW4hyLA.roa
File:                     mtiBfcfsvv-4oT7MesdNDW4hyLA.roa (raw, json)
Hash identifier:          N+ormKFd3nCtcxl2AY6sFhQFPYd5FET5NDIBroPw1Wc=
Subject key identifier:   9A:D8:81:7D:C7:EC:BE:FF:B8:A1:3E:CC:7A:C7:4D:0D:6E:21:C8:B0
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018BB46BFB39FB1E3483664A7020C6266EEF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mtiBfcfsvv-4oT7MesdNDW4hyLA.roa
Signing time:             Thu 09 Nov 2023 14:10:57 +0000
ROA not before:           Thu 09 Nov 2023 14:10:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207515
IP address blocks:        62.72.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b4:6b:fb:39:fb:1e:34:83:66:4a:70:20:c6:26:6e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov  9 14:10:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ad8817dc7ecbeffb8a13ecc7ac74d0d6e21c8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:80:61:9d:52:b2:1c:da:0c:8d:23:4a:9d:
                    19:01:ae:a3:a5:f0:26:15:85:10:41:db:d7:37:3e:
                    06:14:78:6d:de:7c:6c:9c:51:fa:54:6e:ea:09:7b:
                    10:1f:16:de:04:62:af:cd:f3:8e:2e:92:20:36:96:
                    3f:19:24:10:e9:f2:86:22:44:e4:0b:83:ee:51:5c:
                    96:b9:8a:11:ce:20:dc:c3:14:e9:88:a4:be:01:62:
                    92:c1:9f:9b:bd:6a:c8:c6:50:3c:a5:1b:c6:ee:38:
                    a1:a4:51:50:cc:da:54:e8:34:54:31:ba:3b:f6:16:
                    77:aa:2a:46:05:46:82:47:4c:af:74:6a:eb:5a:c7:
                    12:33:a9:eb:2c:e7:97:f4:ff:fd:91:7f:5c:7e:12:
                    c5:db:e7:72:38:98:b9:00:14:00:de:a8:52:cc:2f:
                    53:b5:cf:cd:2b:4a:aa:33:c5:96:78:1d:41:e8:8f:
                    2e:75:b2:7c:b8:51:4b:cd:d0:da:be:06:ae:f0:cf:
                    06:2c:3e:72:50:97:f1:e3:f3:5b:7f:79:fe:22:0f:
                    dc:b0:19:6b:90:b4:be:df:ab:42:43:c7:07:4c:5b:
                    3a:82:d2:97:58:8c:e4:c3:41:48:3a:96:47:76:f1:
                    93:c5:10:3f:8c:e4:d0:85:c9:c1:7b:bd:03:57:52:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D8:81:7D:C7:EC:BE:FF:B8:A1:3E:CC:7A:C7:4D:0D:6E:21:C8:B0
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mtiBfcfsvv-4oT7MesdNDW4hyLA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:58:3a:7e:c0:36:b2:23:41:62:df:36:c2:a5:2f:a8:36:d0:
         da:96:27:59:53:d4:d4:2c:47:a3:d8:75:38:5a:fb:a9:09:39:
         c1:58:3a:b4:51:18:a1:ed:06:05:6c:f2:08:9b:9d:71:3d:2e:
         17:81:cc:5c:83:b9:04:8b:67:03:a4:bd:ad:25:63:99:41:4f:
         a5:ee:1e:ae:54:c3:61:27:8f:8b:7c:ab:77:59:3b:63:ed:7f:
         6b:63:01:d4:e5:ed:4d:e1:7f:c9:cb:c8:d6:e5:e2:c9:f4:ed:
         ce:d2:13:48:69:37:48:45:85:37:ec:8a:e2:8f:14:04:ff:a7:
         40:cf:de:89:6a:1b:9c:0f:58:19:01:d9:39:08:9c:79:29:74:
         15:c0:da:41:98:b7:02:c5:9f:4a:aa:cd:1a:1a:aa:43:07:bf:
         49:3d:09:bb:8a:68:93:2f:f9:70:bb:d9:f5:79:67:65:bf:fa:
         ef:de:df:30:35:2b:45:3a:9a:f3:37:92:61:a2:b8:dd:00:00:
         68:0e:42:73:c7:b0:4c:e2:64:d4:ab:f6:6c:30:3b:a6:59:55:
         8f:1e:71:bc:23:e3:de:d7:f2:a9:22:6c:8f:41:1a:26:12:b2:
         c8:7f:df:46:3a:64:8c:ee:2d:30:98:80:8c:61:11:70:3c:89:
         6e:14:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org