Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zcMVEPRIgw09t_rJ9-p1ug6CrZk.roa
File:                     zcMVEPRIgw09t_rJ9-p1ug6CrZk.roa (raw, json)
Hash identifier:          /UH7a3g6iilCu01jekrTKkZ11FL37/ciOWz5MVmC2lU=
Subject key identifier:   CD:C3:15:10:F4:48:83:0D:3D:B7:FA:C9:F7:EA:75:BA:0E:82:AD:99
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018C670A21FCDE37A3926EFB5BCBC1CC3E4C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zcMVEPRIgw09t_rJ9-p1ug6CrZk.roa
Signing time:             Thu 14 Dec 2023 06:36:06 +0000
ROA not before:           Thu 14 Dec 2023 06:36:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     36113
IP address blocks:        62.72.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:67:0a:21:fc:de:37:a3:92:6e:fb:5b:cb:c1:cc:3e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec 14 06:36:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cdc31510f448830d3db7fac9f7ea75ba0e82ad99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:8a:3c:cc:01:ac:54:7f:8f:be:bf:97:d6:
                    88:b6:76:c7:3a:fd:e2:b1:4a:9d:72:0c:8e:45:50:
                    d9:e5:d0:e7:23:29:c5:60:95:7a:05:49:de:ec:bb:
                    c2:a5:23:37:92:c6:cb:20:b7:76:c4:b3:ae:93:ec:
                    e8:b7:b9:aa:e2:e1:78:cb:63:1b:32:cc:36:97:f7:
                    d2:0a:eb:8a:8e:ea:fe:5f:22:ff:31:bf:75:f4:64:
                    b4:0f:7c:e7:71:92:98:a2:3e:c9:0b:69:4f:9b:0f:
                    6e:8c:de:30:aa:f9:ae:fa:48:da:be:26:7f:7c:26:
                    4a:67:d6:64:1f:53:da:f7:67:ca:bb:19:55:ac:88:
                    f8:c0:14:1c:4d:c8:64:0f:e9:09:c8:a6:3d:39:7a:
                    be:7f:22:2a:e9:2a:aa:b0:55:96:68:00:22:b4:1f:
                    33:7f:31:08:bf:bd:5f:35:08:42:bb:fa:9f:f1:d3:
                    67:8b:60:f3:ba:2d:79:14:06:d5:51:ae:36:92:78:
                    e5:20:ea:cc:9c:8b:33:67:87:68:2c:89:f7:26:35:
                    0c:b3:ae:01:d4:c8:75:77:e9:a0:54:d2:8c:58:a1:
                    8f:73:0d:35:66:e2:ca:3a:ce:b9:b5:d7:5c:ff:bc:
                    49:b0:d3:a6:7e:54:1d:d5:c0:85:b3:c3:f6:26:be:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:15:10:F4:48:83:0D:3D:B7:FA:C9:F7:EA:75:BA:0E:82:AD:99
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zcMVEPRIgw09t_rJ9-p1ug6CrZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:59:de:02:64:25:f6:31:06:ff:84:a3:d2:67:63:71:6a:71:
         b1:64:34:61:33:5c:9b:c8:bd:c5:ce:c1:21:bb:a3:5d:76:4b:
         9a:25:ee:a3:d2:13:01:2f:68:16:1c:42:95:13:52:68:b4:34:
         80:16:48:71:5a:56:93:8a:92:f3:c0:51:63:52:5b:3d:9f:55:
         a9:93:0f:91:47:41:4f:26:30:b7:c3:f5:12:38:4d:d6:b8:de:
         37:ae:e6:30:38:26:b5:1d:42:6a:1f:35:35:23:90:27:b9:df:
         9a:7f:a9:cf:32:f7:39:cb:df:fd:cf:b7:3c:57:69:79:f9:cf:
         c8:91:cd:40:a8:67:c2:a4:8a:7b:72:a6:4f:1a:56:47:0d:86:
         b6:5f:f1:9f:ec:83:80:ec:3e:14:65:18:c6:87:d9:0f:cb:16:
         31:0c:59:3c:58:03:78:ff:fe:05:a4:de:2a:2a:6a:87:e1:16:
         f3:a2:52:c3:73:a3:d9:01:98:d2:33:04:c5:87:6a:f1:64:94:
         3c:1c:78:43:e2:2f:61:03:88:37:75:1a:e1:81:58:11:a1:f6:
         40:68:e4:68:86:e1:ea:8f:59:83:42:48:62:79:fb:ec:9b:49:
         ff:3d:1a:c2:4c:ae:cd:a3:6e:49:61:33:03:76:19:4b:14:3d:
         a9:9d:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org