Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wDVVNuxPdqRKFU3yUgaSo7oVfx8.roa
File:                     wDVVNuxPdqRKFU3yUgaSo7oVfx8.roa (raw, json)
Hash identifier:          9JAAgbIIpjQ05yloJ8tpK0bWLvJfigE3uyUdMgf4xcc=
Subject key identifier:   C0:35:55:36:EC:4F:76:A4:4A:15:4D:F2:52:06:92:A3:BA:15:7F:1F
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01868785C080A3C7ADFD6C2E0200E82AFD28
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wDVVNuxPdqRKFU3yUgaSo7oVfx8.roa
Signing time:             Sat 25 Feb 2023 07:42:15 +0000
ROA not before:           Sat 25 Feb 2023 07:42:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        62.72.184.0/24 maxlen: 24
                          62.72.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 22 Apr 2023 10:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:87:85:c0:80:a3:c7:ad:fd:6c:2e:02:00:e8:2a:fd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Feb 25 07:42:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0355536ec4f76a44a154df2520692a3ba157f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:ff:e6:4b:04:e9:02:e0:8c:c1:2c:30:5d:
                    31:4f:70:cf:6c:e2:cf:64:5e:58:aa:45:56:1f:36:
                    f5:d1:f5:43:0e:0b:bf:4f:d8:18:a7:cc:a1:a0:17:
                    c0:7f:0f:5d:f3:85:a3:55:21:26:3c:57:ec:c5:9f:
                    aa:89:96:88:7c:99:ca:f5:43:c7:c7:76:dd:49:82:
                    f5:27:b3:66:da:ff:2c:1c:d8:4f:a3:3f:d3:ef:bf:
                    f7:71:d3:5b:0f:c7:04:cf:e9:f3:e1:67:0d:f9:e3:
                    be:13:24:8c:b6:b5:db:c4:5f:c5:3c:45:68:22:18:
                    3a:0f:7b:ad:26:2e:48:a1:f2:fe:c1:95:23:58:00:
                    e7:92:0a:03:74:cd:b4:dc:a5:56:a9:13:5f:25:3f:
                    6c:34:b7:91:72:3d:8f:5a:d4:a1:4e:0c:f3:ae:5f:
                    df:ae:82:af:1a:2c:26:86:41:de:0e:40:dc:9f:46:
                    11:e6:08:56:8e:75:01:b3:b5:a9:3c:4b:f6:fe:72:
                    f0:ab:44:22:7e:6b:9f:7f:9b:2f:62:7a:90:be:b9:
                    15:ce:2d:6d:03:7d:94:e1:72:72:f5:9b:34:ae:dd:
                    db:39:77:83:1c:94:44:c2:fd:d6:1a:72:59:15:2a:
                    3a:45:f5:b7:c4:4b:d3:f4:b8:55:18:03:05:93:76:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:55:36:EC:4F:76:A4:4A:15:4D:F2:52:06:92:A3:BA:15:7F:1F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wDVVNuxPdqRKFU3yUgaSo7oVfx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.183.0-62.72.184.255

    Signature Algorithm: sha256WithRSAEncryption
         62:71:d9:84:02:7a:44:88:cc:82:0b:2a:20:75:9f:db:d1:4d:
         eb:54:37:8d:37:42:f0:b2:c1:38:2e:f3:9c:49:28:d3:b3:dc:
         59:08:6d:36:bd:0c:07:ea:2d:7c:37:f1:04:ba:ab:4d:d0:1f:
         99:aa:7c:3d:ef:19:c5:6b:c3:94:5c:b5:17:bf:5f:19:ba:84:
         d2:c3:c1:25:77:d3:f1:ae:99:9b:50:b6:b8:43:b7:90:40:7c:
         25:3f:dc:21:9b:e8:41:0b:0b:55:9e:a3:ae:67:a5:74:ce:ae:
         b8:06:21:5f:27:4e:84:94:2f:8e:67:ba:7b:1a:b1:54:17:e2:
         48:d2:17:e6:fd:1c:a3:ba:0c:3c:13:d9:da:50:08:18:c6:ea:
         c9:86:16:31:26:98:5e:4c:a2:ab:c4:f6:09:7c:30:7b:cd:f6:
         cd:db:32:c8:82:8c:86:52:19:06:dc:4c:2e:17:ee:80:af:86:
         d3:3c:c5:75:2b:3e:65:a2:10:7a:40:0d:0e:7b:52:47:e2:b3:
         a4:31:98:03:98:f6:04:1c:60:e3:34:d5:0e:c7:6c:b1:b4:8b:
         3e:17:75:e2:14:d3:b1:47:fa:e6:c0:c3:9e:50:10:10:ce:a2:
         8f:24:6c:29:e0:c9:cf:8e:bd:e7:e3:3d:72:3f:35:99:42:ba:
         0c:9c:d3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org