Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wPl7sm_xncBA8NriOzhqrLGI4q0.roa
File:                     wPl7sm_xncBA8NriOzhqrLGI4q0.roa (raw, json)
Hash identifier:          V2jv7T3hdqVdCrPx7Nz5B8h/pOiCrsuMGnp61ABlhj0=
Subject key identifier:   C0:F9:7B:B2:6F:F1:9D:C0:40:F0:DA:E2:3B:38:6A:AC:B1:88:E2:AD
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018BB2DB866B54DD6A41237D048519C28EAD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wPl7sm_xncBA8NriOzhqrLGI4q0.roa
Signing time:             Thu 09 Nov 2023 06:53:33 +0000
ROA not before:           Thu 09 Nov 2023 06:53:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400328
IP address blocks:        62.72.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b2:db:86:6b:54:dd:6a:41:23:7d:04:85:19:c2:8e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov  9 06:53:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0f97bb26ff19dc040f0dae23b386aacb188e2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cc:0e:1b:ff:fb:ca:5e:aa:0b:24:cb:d5:c6:
                    ab:bb:42:90:0a:f8:c1:7a:68:99:a2:67:ce:5e:41:
                    c5:4f:fc:31:0f:d8:ce:20:27:c6:21:4c:b1:0b:bb:
                    d8:1c:c3:57:be:d3:ae:16:05:06:ca:78:31:b6:e6:
                    9e:fc:64:30:24:42:b9:b1:86:d4:65:fb:a2:91:15:
                    06:6a:3e:51:1c:8b:48:c9:dd:7f:92:10:85:7f:b9:
                    d1:84:25:65:42:02:25:a8:37:30:26:31:2b:34:0b:
                    2e:6f:57:4c:82:cf:0c:57:26:06:86:2f:1c:3e:76:
                    bf:b6:2e:5e:ae:90:44:0d:22:76:2c:fb:4d:bd:b3:
                    ae:82:7f:6e:a3:0b:73:16:74:f7:ca:bb:df:9f:55:
                    bc:36:d6:33:0b:ee:3b:22:fc:3b:b2:2d:be:1b:52:
                    64:c9:dd:51:c6:ab:3d:84:05:11:fb:9c:2b:58:da:
                    be:a7:46:83:02:20:80:d8:d7:56:72:b3:a6:0e:bf:
                    fd:0e:43:bc:df:93:72:4a:9d:c4:d2:9f:47:6d:f3:
                    ca:03:34:ef:fe:9a:34:55:9b:d2:97:76:54:e6:6e:
                    21:8f:2a:68:70:a1:8e:0b:42:64:c3:5e:86:93:17:
                    d4:4e:be:c9:8d:05:d2:e5:9f:ec:18:4d:76:13:e0:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F9:7B:B2:6F:F1:9D:C0:40:F0:DA:E2:3B:38:6A:AC:B1:88:E2:AD
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wPl7sm_xncBA8NriOzhqrLGI4q0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:e9:42:a6:9e:16:f3:7c:d7:b0:4b:fc:20:bc:48:f1:35:
         8e:6b:40:c0:25:9a:f6:03:c8:07:8f:34:dc:23:f6:34:e8:7c:
         c7:80:79:17:f3:30:43:6d:1f:27:01:28:c9:e6:0f:24:26:c5:
         7b:d9:e8:27:fe:65:c1:45:27:55:20:57:3f:ac:72:dc:06:eb:
         fd:50:2d:e5:b0:50:3e:97:63:b4:65:28:70:d9:ac:98:60:ae:
         8d:f5:11:4b:87:92:eb:c9:1b:26:c7:b9:f4:bd:d4:e1:d4:39:
         5d:da:68:7d:58:d8:80:89:9a:42:9b:0c:9e:f3:89:fb:72:4a:
         97:f7:c8:c7:ee:d5:2d:c8:ba:97:34:30:f6:9e:2f:9e:5c:0d:
         b5:e4:14:bd:32:40:6b:3e:60:8a:a5:8c:b8:5d:c2:33:0f:88:
         19:28:38:f1:3d:6c:ac:e5:e3:8a:a2:63:5f:1a:85:97:f7:1e:
         88:e4:23:56:85:d6:d7:55:e6:15:01:00:69:b7:a9:93:8e:3c:
         36:df:c3:10:8e:0c:c0:07:f5:87:3e:70:db:7c:5e:8a:eb:d9:
         9d:7c:3d:42:9f:4d:7b:e9:7f:1f:fd:ba:1a:0b:1a:b3:b7:37:
         b0:df:1f:cd:de:c3:1a:db:99:67:62:f5:a0:94:c2:08:25:27:
         eb:bf:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org