Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/sx6BL5TZURx1oXBnKHsJt4aTeV4.roa
File:                     sx6BL5TZURx1oXBnKHsJt4aTeV4.roa (raw, json)
Hash identifier:          6myzX9aw6CkyonGEbFdNMyEs9Co9q0kd4Fs1NSnlcfY=
Subject key identifier:   B3:1E:81:2F:94:D9:51:1C:75:A1:70:67:28:7B:09:B7:86:93:79:5E
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018BC7B0D779341E09FA0764AF341BEF0D12
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/sx6BL5TZURx1oXBnKHsJt4aTeV4.roa
Signing time:             Mon 13 Nov 2023 07:58:57 +0000
ROA not before:           Mon 13 Nov 2023 07:58:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60849
IP address blocks:        62.72.169.0/24 maxlen: 24
                          62.72.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 Nov 2023 10:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c7:b0:d7:79:34:1e:09:fa:07:64:af:34:1b:ef:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov 13 07:58:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b31e812f94d9511c75a17067287b09b78693795e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e8:a5:9b:99:f1:3a:be:8f:59:5a:c1:d8:33:
                    ae:cb:18:ba:32:15:f6:0e:4c:96:f5:f8:0b:73:91:
                    2b:1a:a7:28:8d:4a:5e:44:50:8b:b4:65:53:23:3e:
                    3e:b6:da:04:a6:c9:81:67:ba:c9:7e:fa:e4:a1:a9:
                    30:8d:1b:28:cd:c9:2c:e1:3d:90:2f:fc:78:c6:ab:
                    fe:15:01:73:9e:71:7f:ef:33:a2:5b:13:5c:88:bf:
                    91:b3:00:5f:f0:e9:89:0f:15:e2:1c:a1:3b:80:72:
                    fb:89:00:29:41:83:f8:c7:32:8b:7e:bb:9e:dc:36:
                    e5:17:e1:b7:68:37:5b:5d:94:f2:7e:60:0a:1a:05:
                    80:3d:83:95:78:7d:e7:81:c6:82:c2:14:ad:7d:de:
                    0c:c8:ac:a3:c7:b6:47:65:2d:e8:87:7a:8e:1f:9c:
                    b7:ff:88:db:6a:5e:3d:6b:f7:c3:ff:9f:b8:87:80:
                    17:2b:b0:d5:f7:36:f8:ea:30:88:a7:67:7e:8d:2e:
                    44:f3:b9:1c:42:9b:5e:c9:82:98:d6:fd:eb:27:30:
                    1d:f3:e7:e0:f0:15:2f:4b:be:9d:bb:a8:d6:b6:09:
                    55:9a:8b:f6:f2:9c:84:a8:58:f4:0a:50:74:47:b5:
                    00:7e:a7:9d:ee:18:12:3d:d6:a7:5d:f0:ac:9c:61:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1E:81:2F:94:D9:51:1C:75:A1:70:67:28:7B:09:B7:86:93:79:5E
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/sx6BL5TZURx1oXBnKHsJt4aTeV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.169.0/24
                  62.72.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:46:11:76:04:10:1f:76:0f:6c:1c:c9:03:3a:9e:a2:53:
         c6:34:78:ed:8e:ef:e7:a4:6a:a3:1d:ff:10:81:d7:00:d6:e9:
         07:dd:36:40:6f:d2:4e:0a:3d:1e:c2:8f:ef:ff:87:d2:73:3d:
         f6:54:20:93:3d:7a:5a:3c:2b:b1:4e:76:5d:7b:65:bf:bb:60:
         bc:e7:ad:79:7f:73:77:1f:59:e4:9d:66:38:66:c4:e9:89:40:
         a2:d4:a1:3b:ae:8d:6c:c9:0c:ba:8a:9b:91:4e:9e:d8:cb:4b:
         03:60:ff:f9:5d:a5:d9:de:ab:a5:9c:17:a6:13:f1:70:d8:fe:
         cd:5a:37:94:15:a9:aa:4c:0c:e7:fe:75:f7:2f:27:5b:93:71:
         d4:b5:e7:52:53:a8:0a:07:23:92:40:99:d5:9f:69:d9:c3:9b:
         f0:4d:a0:e5:22:2f:58:71:f6:ca:04:5e:dd:ff:c6:01:d7:28:
         1c:ff:fe:1b:14:72:49:f6:31:93:c9:fb:f3:15:f2:5a:5a:84:
         ed:1e:60:6e:88:a3:61:f7:42:94:8a:63:1e:ca:08:17:80:79:
         10:22:be:35:76:c6:fb:31:f6:90:f8:4b:75:56:62:1d:fe:48:
         73:88:f1:45:9a:18:3b:5c:b7:91:21:41:64:cf:42:14:f3:7b:
         e1:af:2a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org