Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vLx0n1_3uULJnmE4e8zlvJOx-X8.roa
File:                     vLx0n1_3uULJnmE4e8zlvJOx-X8.roa (raw, json)
Hash identifier:          lhUZq9TlDg9EEPuJd3zHjuC8k1XhvrSinpXrUyRhugg=
Subject key identifier:   BC:BC:74:9F:5F:F7:B9:42:C9:9E:61:38:7B:CC:E5:BC:93:B1:F9:7F
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018861581F2158EE7C9E8DE734B330DF6C0A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vLx0n1_3uULJnmE4e8zlvJOx-X8.roa
Signing time:             Sun 28 May 2023 07:52:25 +0000
ROA not before:           Sun 28 May 2023 07:52:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        62.72.180.0/24 maxlen: 24
                          176.57.48.0/24 maxlen: 24
                          176.57.54.0/24 maxlen: 24
                          176.57.57.0/24 maxlen: 24
                          176.57.56.0/24 maxlen: 24
                          81.21.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Jun 2023 18:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:61:58:1f:21:58:ee:7c:9e:8d:e7:34:b3:30:df:6c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 28 07:52:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bcbc749f5ff7b942c99e61387bcce5bc93b1f97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:d2:0b:b1:46:6d:9b:7a:35:c5:ca:a2:bc:
                    31:57:ce:a0:62:08:99:4f:e9:b6:35:7c:fb:95:aa:
                    f4:13:92:6f:d9:b8:2b:e6:81:a3:60:17:04:4f:2e:
                    23:db:14:08:54:6d:0a:dc:3f:31:17:60:03:38:c3:
                    b4:7b:0f:27:9b:e6:6e:40:72:cd:89:36:56:bd:15:
                    d8:6a:68:5d:bc:16:64:6f:91:5f:4b:ff:8f:a7:71:
                    87:22:20:9d:92:36:32:52:08:4a:39:ab:69:11:a2:
                    cb:2c:93:54:55:b4:3a:3d:ec:82:50:cd:56:43:8f:
                    90:63:46:12:4d:a7:ad:fd:6d:05:e7:e2:bc:24:47:
                    a7:bd:45:25:61:70:cc:f4:4d:1a:56:81:e0:42:49:
                    c7:de:16:be:61:5e:86:71:a8:85:25:5a:11:0b:4d:
                    22:f7:23:f5:56:84:45:cb:ff:11:36:6c:d7:bf:c9:
                    05:84:62:2a:7a:b9:ee:d7:54:38:bf:37:88:0a:a3:
                    82:ea:e2:74:f0:12:f0:ae:ad:2d:8a:b3:25:54:64:
                    c0:bc:97:1c:7a:66:47:dc:36:06:5a:01:e1:ad:93:
                    2e:01:17:da:72:f9:0a:7c:e2:01:69:b5:7d:0a:c2:
                    82:78:eb:21:ec:7b:20:f8:63:ea:a0:0f:bf:48:17:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BC:74:9F:5F:F7:B9:42:C9:9E:61:38:7B:CC:E5:BC:93:B1:F9:7F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vLx0n1_3uULJnmE4e8zlvJOx-X8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.180.0/24
                  81.21.0.0/24
                  176.57.48.0/24
                  176.57.54.0/24
                  176.57.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:a0:88:b2:07:db:51:50:ef:12:c6:b9:dc:fd:19:18:8f:20:
         25:2f:8e:6a:a5:46:da:f1:36:bf:26:fc:92:b6:a0:41:16:63:
         c8:b3:09:29:0c:a8:4b:a4:06:16:83:16:50:a7:bc:e1:25:fb:
         43:ce:63:9e:7d:39:2f:78:e0:c4:f6:07:f0:80:d7:91:45:55:
         9d:b1:70:52:2a:63:75:cb:88:9f:09:af:7b:cd:18:48:ad:05:
         f5:6b:25:7a:27:cf:7a:b8:c8:0b:5e:58:dd:0f:65:2b:08:72:
         df:52:1e:8b:99:9e:16:8f:6a:50:90:49:13:3e:66:ba:d1:b7:
         94:83:5c:1f:6a:e3:93:53:27:ef:69:e7:6a:9f:e7:92:f6:d6:
         fa:5e:8c:c3:80:99:ad:8e:6b:ad:95:03:3a:86:fd:1e:d9:4e:
         71:e6:a5:fb:22:7a:40:cb:90:e4:91:34:59:80:1b:79:33:b9:
         c0:7c:10:e1:b1:c2:e7:72:bf:61:74:5c:16:22:d0:4c:45:b4:
         48:c3:0c:b2:81:83:c5:8a:f9:d2:4c:56:ab:c5:3f:c8:ef:ad:
         d4:18:d7:37:6f:15:0f:15:62:63:00:45:6c:db:3f:03:38:0b:
         9a:18:58:25:99:3c:79:cb:10:30:96:ed:95:c0:73:d2:30:30:
         64:ed:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org