Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rukEaGyuPiH6yLMyIEykb_S-770.roa
File:                     rukEaGyuPiH6yLMyIEykb_S-770.roa (raw, json)
Hash identifier:          tMtf1fI8cYmf7joyKzDxgU9b3yftERsdKGrbwwHGpIA=
Subject key identifier:   AE:E9:04:68:6C:AE:3E:21:FA:C8:B3:32:20:4C:A4:6F:F4:BE:EF:BD
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018CC6B7A063922C2C48FE553E400640F6B7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rukEaGyuPiH6yLMyIEykb_S-770.roa
Signing time:             Mon 01 Jan 2024 20:29:32 +0000
ROA not before:           Mon 01 Jan 2024 20:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     54252
IP address blocks:        62.72.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jan 2024 06:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:a0:63:92:2c:2c:48:fe:55:3e:40:06:40:f6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 20:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aee904686cae3e21fac8b332204ca46ff4beefbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:2d:c5:e6:59:12:a5:ee:f7:ae:d9:94:df:
                    74:fd:82:32:eb:c7:34:48:f1:a6:2d:b0:65:88:ec:
                    84:ca:fe:bf:a1:48:6b:37:c2:ad:99:3c:9c:77:50:
                    b5:d0:4b:d3:a5:23:9c:59:54:b3:91:00:54:4c:3a:
                    00:fa:df:93:b4:60:43:a9:0c:8a:59:da:2e:2b:64:
                    c9:5b:57:80:1e:7f:2a:38:92:96:32:72:2e:b8:33:
                    1e:f5:74:76:4a:9d:d6:1d:ff:46:67:cb:d2:4d:7a:
                    d2:f7:7a:96:88:a3:63:bc:3c:a1:fc:99:30:1a:12:
                    10:5b:bc:71:7c:ba:e2:63:ef:10:65:98:43:be:e4:
                    8a:63:43:db:ee:74:f5:bc:14:72:3b:e3:72:2f:a4:
                    4d:61:d4:d0:2d:33:77:ae:e0:20:f3:cb:96:3d:19:
                    74:24:50:80:3b:73:40:39:01:49:9c:13:93:24:8e:
                    a9:06:2c:bb:d4:fe:d0:a0:a2:db:e4:87:0b:cd:3f:
                    15:fb:64:0f:b4:6e:60:42:1f:bd:52:bb:ff:49:4f:
                    cb:4b:9e:d9:34:16:5f:14:53:ec:20:4e:52:6f:80:
                    35:91:c9:ea:04:df:79:53:a9:52:b4:82:41:36:a6:
                    62:46:92:bb:45:1b:85:2f:e5:f3:ac:53:5a:b7:24:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:04:68:6C:AE:3E:21:FA:C8:B3:32:20:4C:A4:6F:F4:BE:EF:BD
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rukEaGyuPiH6yLMyIEykb_S-770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:12:c9:1d:f4:53:77:ef:ce:30:94:60:ec:bd:97:9b:75:20:
         cc:a8:73:61:1f:b4:2b:62:03:f8:26:f4:6e:64:16:a3:13:a7:
         93:9b:e2:0d:f7:c0:3d:cb:b3:68:3a:ad:f2:b3:e2:cd:11:12:
         d4:53:cd:b4:68:23:89:f2:a2:00:42:42:70:8e:bc:17:20:76:
         7f:7d:ec:4d:c3:b4:5a:c5:eb:32:8e:91:b1:4f:ea:65:66:d6:
         9c:b6:dc:92:16:a7:2f:63:7e:aa:f0:06:c5:a5:25:83:3e:c3:
         08:f5:b0:cc:b8:57:cd:8d:97:15:06:ae:8c:f6:ce:cd:e7:0b:
         a3:39:6c:47:d1:9c:3e:03:8f:e8:e2:63:07:6c:39:ee:8a:84:
         1d:0c:87:ed:b5:1d:91:fc:62:a8:2e:c0:3b:01:50:4a:cd:2b:
         a1:1e:dc:8a:e9:77:7e:66:f8:d9:65:26:52:81:75:d3:c5:6d:
         02:e9:d5:cf:7b:78:6a:22:46:83:2b:21:e6:4f:7b:fa:d5:60:
         ba:55:00:fa:9f:63:85:72:87:b2:08:ef:7b:e6:6c:ee:7c:98:
         cb:6e:60:da:ad:43:9f:de:49:88:c7:6f:06:f1:a9:ef:ef:b8:
         f1:e1:6b:5b:df:ec:af:d1:97:7e:4d:5a:0a:6c:f0:4c:cf:8c:
         3a:7d:02:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt6BjkiwsSP5VPkAGQPa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTAxMjAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWU5MDQ2ODZjYWUzZTIxZmFjOGIzMzIyMDRjYTQ2ZmY0YmVlZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTAtxeZZEqXu967ZlN90/YIy68c0
SPGmLbBliOyEyv6/oUhrN8KtmTycd1C10EvTpSOcWVSzkQBUTDoA+t+TtGBDqQyK
WdouK2TJW1eAHn8qOJKWMnIuuDMe9XR2Sp3WHf9GZ8vSTXrS93qWiKNjvDyh/Jkw
GhIQW7xxfLriY+8QZZhDvuSKY0Pb7nT1vBRyO+NyL6RNYdTQLTN3ruAg88uWPRl0
JFCAO3NAOQFJnBOTJI6pBiy71P7QoKLb5IcLzT8V+2QPtG5gQh+9Urv/SU/LS57Z
NBZfFFPsIE5Sb4A1kcnqBN95U6lStIJBNqZiRpK7RRuFL+XzrFNatyRAgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7pBGhsrj4h+sizMiBMpG/0vu+9MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvcnVrRWFHeXVQaUg2eUxNeUlFeWtiX1MtNzcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkihMA0G
CSqGSIb3DQEBCwUAA4IBAQCVEskd9FN3784wlGDsvZebdSDMqHNhH7QrYgP4JvRu
ZBajE6eTm+IN98A9y7NoOq3ys+LNERLUU820aCOJ8qIAQkJwjrwXIHZ/fexNw7Ra
xesyjpGxT+plZtacttySFqcvY36q8AbFpSWDPsMI9bDMuFfNjZcVBq6M9s7N5wuj
OWxH0Zw+A4/o4mMHbDnuioQdDIfttR2R/GKoLsA7AVBKzSuhHtyK6Xd+ZvjZZSZS
gXXTxW0C6dXPe3hqIkaDKyHmT3v61WC6VQD6n2OFcoeyCO975mzufJjLbmDarUOf
3kmIx28G8anv77jx4Wtb3+yv0Zd+TVoKbPBMz4w6fQKB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org