Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wBqWVTRqfv1rtrgRI9fk-tR4enw.roa
File:                     wBqWVTRqfv1rtrgRI9fk-tR4enw.roa (raw, json)
Hash identifier:          9td7Lf9AjdxYPgeor/RwCl4/KPEerJC6AbUaOincLyk=
Subject key identifier:   C0:1A:96:55:34:6A:7E:FD:6B:B6:B8:11:23:D7:E4:FA:D4:78:7A:7C
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018BB92563E7BEE3CCBAB723E2DEBFB66F68
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wBqWVTRqfv1rtrgRI9fk-tR4enw.roa
Signing time:             Fri 10 Nov 2023 12:11:57 +0000
ROA not before:           Fri 10 Nov 2023 12:11:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        81.21.12.0/22 maxlen: 24
                          81.21.14.0/23 maxlen: 24
                          176.57.51.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24
                          176.57.58.0/24 maxlen: 24
                          176.57.59.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.164.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.169.0/24 maxlen: 24
                          62.72.168.0/22 maxlen: 22
                          62.72.179.0/24 maxlen: 24
                          62.72.174.0/23 maxlen: 23
                          62.72.185.0/24 maxlen: 24
                          62.72.186.0/24 maxlen: 24
                          62.72.180.0/23 maxlen: 23
                          62.72.184.0/22 maxlen: 22
                          62.72.181.0/24 maxlen: 24
                          62.72.182.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.188.0/24 maxlen: 24
                          62.72.189.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          81.21.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 12 Nov 2023 07:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:25:63:e7:be:e3:cc:ba:b7:23:e2:de:bf:b6:6f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov 10 12:11:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c01a9655346a7efd6bb6b81123d7e4fad4787a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:61:57:de:fc:6e:f0:bf:52:c0:e5:ac:78:
                    cc:45:7f:0a:54:6d:02:3b:a9:49:ce:a2:73:eb:d3:
                    63:c3:12:e9:1d:e0:f9:0b:3b:21:02:77:9e:e9:ce:
                    e9:a9:b0:41:0b:f4:d1:fb:e4:89:fb:48:88:94:a3:
                    4c:19:c1:45:9d:65:d4:16:29:e0:d9:e7:5d:e9:e7:
                    63:e8:ee:7d:ee:77:3a:ec:36:27:9a:0e:52:e1:c7:
                    ad:53:56:c1:91:e3:b6:d2:84:29:6a:bb:51:d9:b4:
                    93:5a:cf:0d:1a:98:fc:2c:f1:c5:0a:cd:cf:7e:0a:
                    96:c0:d5:14:a2:ad:27:88:32:87:3a:4b:bb:dd:5e:
                    0d:58:ef:73:2b:ea:3a:fe:cc:82:50:5b:fb:ee:aa:
                    6b:82:19:0e:07:96:75:c8:92:ab:89:d4:7a:1a:43:
                    16:c2:8a:bf:d6:12:ee:64:d5:ce:7d:7d:61:f2:cd:
                    24:79:db:57:2d:cf:65:9b:01:ce:9b:9b:a6:0e:23:
                    fb:7c:ce:52:79:d6:cc:37:19:67:45:c4:0d:c3:46:
                    b6:ae:c1:1b:e8:07:40:7b:89:87:a2:1e:fb:99:1e:
                    dd:dd:85:2c:26:f7:26:9d:9e:32:0d:08:36:59:06:
                    ae:8c:57:85:b3:01:f8:6a:27:e3:f8:79:20:23:2f:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1A:96:55:34:6A:7E:FD:6B:B6:B8:11:23:D7:E4:FA:D4:78:7A:7C
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wBqWVTRqfv1rtrgRI9fk-tR4enw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.171.255
                  62.72.174.0/23
                  62.72.179.0-62.72.182.255
                  62.72.184.0-62.72.189.255
                  62.72.191.0/24
                  81.21.2.0-81.21.7.255
                  81.21.10.0-81.21.15.255
                  176.57.51.0/24
                  176.57.53.0/24
                  176.57.58.0/23
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:68:8a:ce:e5:9a:2b:12:b9:24:ab:2b:d3:d6:c0:15:9e:
         6b:74:3c:67:74:93:28:d5:b2:fc:13:df:0b:79:71:21:66:47:
         76:ee:8c:a3:98:d7:2a:b5:b9:e0:62:46:da:6e:fb:ae:28:19:
         03:ef:3e:fd:2c:c6:3b:0b:08:f7:8b:89:e5:5f:ff:55:28:05:
         d5:dd:1a:96:2f:e1:6c:29:25:40:85:2c:39:03:eb:f2:a9:1e:
         aa:f9:e2:17:74:ba:c9:c9:5a:d4:36:43:fd:2f:12:74:ad:60:
         e9:67:43:8f:d1:29:ee:b8:ac:df:25:10:72:f9:72:78:80:c5:
         92:9d:fc:c3:6d:ce:e6:6f:a3:35:a6:96:db:9f:50:d1:df:cb:
         c1:a4:b4:8d:2b:97:86:d7:21:28:c6:b3:d7:30:07:08:11:38:
         d5:4b:b5:15:74:17:d5:ea:58:87:1b:b8:56:e2:68:71:32:51:
         c7:f0:18:c3:96:0f:e5:61:3a:f8:01:93:ee:26:a3:b4:02:c3:
         3b:8e:b3:b2:83:71:1c:a4:a5:02:92:33:c4:3f:0e:65:33:58:
         75:87:67:fd:3f:5b:f3:78:79:c7:c6:3a:5b:9e:c4:80:50:59:
         c3:5f:a0:50:5e:4d:2d:8e:74:bf:a8:35:14:d0:30:ef:e8:04:
         e6:49:87:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org