Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w0xCJO6WZDNnWCSuR1pSTY-_6Ko.roa
File:                     w0xCJO6WZDNnWCSuR1pSTY-_6Ko.roa (raw, json)
Hash identifier:          j/l8cxypD3XDDzPjaG0hW1y9lcc10kkwckbUQ/mAibQ=
Subject key identifier:   C3:4C:42:24:EE:96:64:33:67:58:24:AE:47:5A:52:4D:8F:BF:E8:AA
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01893A21F1479B199ECC5EFE12DE1584032D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w0xCJO6WZDNnWCSuR1pSTY-_6Ko.roa
Signing time:             Sun 09 Jul 2023 10:10:50 +0000
ROA not before:           Sun 09 Jul 2023 10:10:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        62.72.160.0/24 maxlen: 24
                          62.72.188.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Sep 2023 11:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3a:21:f1:47:9b:19:9e:cc:5e:fe:12:de:15:84:03:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jul  9 10:10:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c34c4224ee966433675824ae475a524d8fbfe8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:c7:4b:a0:e0:cf:0c:9d:41:5d:ae:ee:97:
                    00:dd:92:4a:04:23:c5:11:83:d2:54:69:1e:1a:71:
                    d8:8b:ee:84:0a:b5:4d:1f:44:e5:6b:7e:ef:8d:82:
                    86:fc:8f:16:52:5c:74:96:2a:dc:86:7b:a6:93:c5:
                    59:97:a9:b9:95:6e:2b:74:b3:8d:68:9f:79:07:e6:
                    e1:b8:f1:93:0b:fa:cd:c0:79:80:87:c0:eb:c5:02:
                    16:08:38:d1:49:ca:dc:7a:f2:f5:da:39:28:67:25:
                    50:81:3b:48:27:3a:80:94:b1:9e:6d:74:21:be:7d:
                    83:7b:fe:70:a3:f0:65:89:aa:22:16:5b:a6:ec:43:
                    f8:8b:64:7d:52:ed:a0:a7:d3:ed:58:81:49:ab:14:
                    e6:9c:1f:fd:15:b3:1f:17:59:ea:6a:34:cb:78:3f:
                    fc:73:1e:70:dc:ec:25:3f:3e:34:5b:29:c4:92:b3:
                    89:05:20:81:1b:44:38:ee:d8:00:0b:03:13:93:24:
                    b4:79:2b:f3:0b:e7:b0:36:bc:88:51:4c:2f:d0:f0:
                    e1:29:f5:1c:d1:c2:35:88:24:db:48:23:9a:bc:9d:
                    c5:79:cd:74:39:a4:bd:e5:04:83:97:61:5e:d0:dd:
                    0d:ff:f8:03:83:26:0e:01:e7:40:bb:db:84:ac:91:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4C:42:24:EE:96:64:33:67:58:24:AE:47:5A:52:4D:8F:BF:E8:AA
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w0xCJO6WZDNnWCSuR1pSTY-_6Ko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.160.0/24
                  62.72.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:55:39:12:19:8e:f2:e8:b1:aa:d4:da:4d:27:5b:3d:23:
         0d:9e:e1:1a:04:8a:10:94:ca:d6:ed:2c:79:d2:62:08:2f:a7:
         5c:ea:f1:25:58:a6:a2:f5:b7:fc:c7:eb:d1:2e:c1:57:07:6c:
         41:12:2a:5b:01:20:20:33:b9:32:e2:50:05:ab:23:8e:fd:75:
         12:fd:a0:02:b9:a4:b8:e9:6e:51:8a:13:e4:b7:83:5c:5c:d4:
         9f:3c:c5:4a:d5:d3:7b:48:79:44:06:1f:4e:9d:5c:f0:cc:79:
         80:7a:60:d7:4e:8e:26:46:51:e3:a6:66:fa:3b:16:8a:e1:7f:
         89:ea:2e:47:a5:3c:be:26:c8:4f:ff:d8:76:5b:a3:2e:d8:e1:
         b8:eb:22:8e:b7:27:00:08:8b:51:07:d1:d0:f1:97:03:ac:c5:
         93:01:29:bd:ca:e7:89:06:47:91:af:d6:a4:ab:fa:3b:8b:87:
         de:9b:44:da:a1:23:bd:43:87:15:13:6e:62:54:6a:43:5e:62:
         0a:de:51:45:cd:7b:be:80:b1:af:eb:eb:bb:91:eb:45:7e:09:
         9d:d4:93:9c:40:87:1f:c5:1f:ef:5e:20:0e:01:f4:ee:93:d5:
         a5:e6:41:b0:68:4e:a0:54:8c:a2:6b:19:4d:5d:a7:0a:df:9b:
         0c:1e:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org