Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/ANW2O40vd7UY4rS8zIkyhRxkzo0.roa
File:                     ANW2O40vd7UY4rS8zIkyhRxkzo0.roa (raw, json)
Hash identifier:          swkuaLWOa2cNQsKxAGTBUk25VnNH3Yk5Pl/dAJ/9gSU=
Subject key identifier:   00:D5:B6:3B:8D:2F:77:B5:18:E2:B4:BC:CC:89:32:85:1C:64:CE:8D
Certificate issuer:       /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial:       01856D0AD5EEACBEFA8122DFBD3C95F277D7
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/ANW2O40vd7UY4rS8zIkyhRxkzo0.roa
Signing time:             Sun 01 Jan 2023 11:15:04 +0000
ROA not before:           Sun 01 Jan 2023 11:15:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198605
IP address blocks:        5.62.30.0/24 maxlen: 24
                          5.62.25.0/24 maxlen: 24
                          5.62.36.0/23 maxlen: 23
                          5.62.32.0/24 maxlen: 24
                          5.62.38.0/24 maxlen: 24
                          5.62.44.0/23 maxlen: 23
                          5.62.42.0/23 maxlen: 23
                          5.62.40.0/23 maxlen: 23
                          5.62.38.0/23 maxlen: 24
                          5.62.50.0/24 maxlen: 24
                          5.62.47.0/24 maxlen: 24
                          5.62.48.0/23 maxlen: 23
                          5.62.46.0/23 maxlen: 23
                          5.62.46.0/24 maxlen: 24
                          5.62.58.0/23 maxlen: 23
                          5.62.56.0/23 maxlen: 23
                          5.62.57.0/24 maxlen: 24
                          5.62.56.0/24 maxlen: 24
                          5.62.55.0/24 maxlen: 24
                          5.62.54.0/24 maxlen: 24
                          5.62.53.0/24 maxlen: 24
                          5.62.52.0/24 maxlen: 24
                          5.62.62.0/23 maxlen: 23
                          5.62.60.0/23 maxlen: 23
                          5.62.17.0/24 maxlen: 24
                          5.62.16.0/24 maxlen: 24
                          5.62.20.0/24 maxlen: 24
                          5.62.19.0/24 maxlen: 24
                          5.62.18.0/24 maxlen: 24
                          5.62.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:d5:ee:ac:be:fa:81:22:df:bd:3c:95:f2:77:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
        Validity
            Not Before: Jan  1 11:15:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00d5b63b8d2f77b518e2b4bccc8932851c64ce8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:f5:17:66:34:5b:c6:51:88:ef:04:a9:8d:
                    9a:22:ed:72:10:8c:27:eb:10:dc:c4:81:7b:33:0d:
                    d8:ef:13:3c:56:7c:59:ae:8e:0d:74:07:0f:b4:74:
                    75:c8:a6:09:92:44:aa:a8:23:e8:dd:ed:e8:fe:0f:
                    8e:cf:62:d9:02:3f:88:36:a2:be:91:82:25:02:14:
                    d6:fb:75:8d:39:90:91:63:e4:05:f7:c4:ab:6b:7b:
                    2a:55:50:3f:2c:23:3d:9e:6e:82:cb:17:0a:e6:74:
                    9e:3e:6d:d2:1c:fd:4a:63:ab:23:be:08:9c:a9:f4:
                    61:7e:d1:7b:95:ce:f9:b7:25:5b:7e:9e:12:cf:86:
                    82:64:73:39:ca:c0:a2:19:1d:bd:ea:fc:d2:6e:f6:
                    46:77:b5:d0:8e:a6:5f:f7:17:88:5a:4a:f6:e3:a6:
                    b6:0f:1a:fd:98:e0:d8:09:84:cf:57:41:9e:38:43:
                    48:fb:b8:e9:51:c4:ff:88:ce:1b:70:c6:70:6f:1d:
                    bb:b2:ef:10:0e:85:e4:59:2f:be:53:92:69:98:e0:
                    32:ee:dc:6a:03:42:e7:4d:d1:c2:28:73:67:c6:9f:
                    d0:f3:b4:f4:a8:16:71:38:a2:d6:55:54:09:7e:3f:
                    c6:07:a3:e5:3b:a3:1b:b2:36:03:59:af:69:1b:61:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D5:B6:3B:8D:2F:77:B5:18:E2:B4:BC:CC:89:32:85:1C:64:CE:8D
            X509v3 Authority Key Identifier:
                keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/ANW2O40vd7UY4rS8zIkyhRxkzo0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.62.16.0-5.62.20.255
                  5.62.24.0/23
                  5.62.30.0/24
                  5.62.32.0/24
                  5.62.36.0-5.62.50.255
                  5.62.52.0-5.62.63.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:3e:e3:2c:b2:df:0f:cb:6c:41:69:46:5b:6f:8e:e7:c4:
         9d:6d:2e:8d:81:ce:4a:1e:ba:0e:0f:2c:f6:12:42:c3:6f:ab:
         eb:cb:42:7f:f8:28:1e:82:78:12:00:3e:29:41:82:78:26:d2:
         89:81:37:a6:86:14:e2:05:5a:86:08:7a:79:96:f2:56:d3:9b:
         a4:55:53:b8:94:75:d7:72:18:14:9b:d4:c1:64:e1:6c:de:9b:
         d0:3a:82:47:24:b7:cd:78:95:67:4c:87:cc:55:c0:97:bf:7f:
         ca:b8:51:14:05:97:c4:b9:cd:87:57:07:1b:4c:c7:7e:72:d6:
         23:cc:d8:41:5b:c4:9f:63:c2:f3:f1:b6:6f:81:a9:58:13:93:
         22:b5:a5:e6:8d:a4:b9:b8:98:d9:69:c7:20:f3:7f:0b:3c:d6:
         48:2b:24:4c:85:9c:27:6b:56:10:8e:db:1b:21:aa:90:0c:3a:
         d1:61:1c:25:18:4b:68:cb:55:cb:15:a2:9f:c6:94:63:0c:4c:
         7c:92:23:24:65:64:eb:bd:f4:c1:df:d2:65:6b:9c:87:74:46:
         bf:15:96:03:1e:63:34:08:a9:b3:68:a5:88:37:ff:93:31:4f:
         8f:83:9f:d2:02:45:82:70:3d:84:67:3e:e3:56:73:59:6d:e0:
         c9:fd:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:36 2024 by rpki-client on console-ams.rpki-client.org