Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62175.roa
File:                     AS62175.roa (raw, json)
Hash identifier:          F7xeSRKVOYclQw7TvX7V59ybKHh0sc6ZNZXv98K28GU=
Subject key identifier:   C0:24:2B:A1:A3:44:E6:E8:CA:C0:8B:A8:3A:9C:BA:3C:15:FC:BA:8D
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       73B714EF36C8C3279B74CC3029941236F40133D8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62175.roa
Signing time:             Mon 26 Jun 2023 12:43:42 +0000
ROA not before:           Mon 26 Jun 2023 12:38:42 +0000
ROA not after:            Mon 24 Jun 2024 12:43:42 +0000
asID:                     62175
IP address blocks:        181.214.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jul 2023 07:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b7:14:ef:36:c8:c3:27:9b:74:cc:30:29:94:12:36:f4:01:33:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jun 26 12:38:42 2023 GMT
            Not After : Jun 24 12:43:42 2024 GMT
        Subject: CN=C0242BA1A344E6E8CAC08BA83A9CBA3C15FCBA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:8b:8e:e2:6a:91:4e:2e:b4:b2:fc:c4:5d:
                    aa:0e:66:19:6c:63:99:2f:37:c3:21:c2:54:84:f1:
                    b6:00:67:d1:48:da:dc:8b:da:9d:aa:50:ed:4d:ea:
                    f8:13:05:43:e1:1b:a0:19:e0:06:ec:7c:7f:f4:f9:
                    a8:fa:38:33:37:c6:06:70:6a:85:32:4a:85:db:84:
                    18:29:47:02:74:6e:f4:e0:68:d9:16:6b:f5:41:63:
                    5b:4a:44:82:88:70:e4:b3:bf:65:fe:2c:0d:64:19:
                    e6:18:2b:3b:b2:0d:d3:f8:c6:06:bb:fc:3d:e4:6d:
                    b9:70:a8:8e:dd:d4:f2:21:d9:33:f8:01:cc:d7:1b:
                    37:11:06:dc:78:f0:8d:e1:71:9d:5d:e3:dd:f8:db:
                    78:9f:63:e2:fa:6f:58:02:30:d6:62:33:13:21:84:
                    30:ed:b8:0a:06:76:87:59:3d:f6:06:8c:c6:20:07:
                    a5:ed:61:79:77:41:31:b9:24:5a:71:35:6f:a1:c3:
                    0f:ce:9b:f0:45:41:a6:61:cd:5e:ed:d6:51:be:f8:
                    f3:68:48:11:e5:09:da:d0:d4:8e:a3:7a:d8:41:75:
                    d7:88:59:af:4c:3d:c6:27:8e:37:66:8a:6a:68:3a:
                    1b:f5:5d:8b:8c:38:41:f5:d4:5f:a5:44:5b:bc:63:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:24:2B:A1:A3:44:E6:E8:CA:C0:8B:A8:3A:9C:BA:3C:15:FC:BA:8D
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62175.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:07:25:4a:95:d5:1a:f8:43:00:9d:52:11:c9:5b:3b:c5:77:
         12:2b:ec:93:7c:37:89:d7:1e:75:c7:f2:81:93:45:07:73:4b:
         5c:ae:8e:56:e5:17:df:36:9a:91:ec:96:f3:0b:cf:bb:73:1c:
         07:b5:97:f4:5b:46:93:da:0e:6f:d1:22:3a:73:1e:ae:b1:84:
         38:6f:7a:9b:06:fc:09:08:a6:2d:0d:c3:23:ad:30:22:a6:a8:
         00:ce:12:cb:1d:08:52:36:d5:87:58:ec:6e:a7:56:10:d2:bf:
         83:ee:4c:67:21:d0:b1:cb:77:33:e1:54:d6:90:57:8a:b3:4d:
         6a:36:e0:7f:55:16:cf:a4:ed:2a:1e:d4:5f:ad:a9:c6:3c:70:
         5d:0a:d3:8d:eb:2f:99:7e:9e:11:9c:ca:7c:71:fa:7a:9d:e6:
         da:8b:50:f4:48:89:90:f1:4f:32:86:6c:eb:4b:ce:3f:64:d0:
         90:ab:47:9c:3e:c4:35:6d:dd:a1:f2:84:60:b1:4b:63:8a:fb:
         c5:de:7e:fb:53:65:85:1a:92:24:ea:0c:d6:8f:bb:39:c1:2f:
         c4:23:d0:31:ae:db:7e:9a:3f:6c:f7:2a:0e:84:19:ac:7f:d0:
         e1:8f:ce:b7:a2:51:b1:79:43:a0:7d:0c:89:8e:60:96:38:df:
         73:30:e3:97
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUc7cU7zbIwyebdMwwKZQSNvQBM9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA2MjYxMjM4NDJaFw0yNDA2MjQxMjQzNDJaMDMxMTAvBgNV
BAMTKEMwMjQyQkExQTM0NEU2RThDQUMwOEJBODNBOUNCQTNDMTVGQ0JBOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCx4uO4mqRTi60svzEXaoOZhls
Y5kvN8MhwlSE8bYAZ9FI2tyL2p2qUO1N6vgTBUPhG6AZ4AbsfH/0+aj6ODM3xgZw
aoUySoXbhBgpRwJ0bvTgaNkWa/VBY1tKRIKIcOSzv2X+LA1kGeYYKzuyDdP4xga7
/D3kbblwqI7d1PIh2TP4AczXGzcRBtx48I3hcZ1d493423ifY+L6b1gCMNZiMxMh
hDDtuAoGdodZPfYGjMYgB6XtYXl3QTG5JFpxNW+hww/Om/BFQaZhzV7t1lG++PNo
SBHlCdrQ1I6jethBddeIWa9MPcYnjjdmimpoOhv1XYuMOEH11F+lRFu8Y6uRAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUwCQroaNE5ujKwIuoOpy6PBX8uo0wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjIxNzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11row
DQYJKoZIhvcNAQELBQADggEBABUHJUqV1Rr4QwCdUhHJWzvFdxIr7JN8N4nXHnXH
8oGTRQdzS1yujlblF982mpHslvMLz7tzHAe1l/RbRpPaDm/RIjpzHq6xhDhvepsG
/AkIpi0NwyOtMCKmqADOEssdCFI21YdY7G6nVhDSv4PuTGch0LHLdzPhVNaQV4qz
TWo24H9VFs+k7Soe1F+tqcY8cF0K043rL5l+nhGcynxx+nqd5tqLUPRIiZDxTzKG
bOtLzj9k0JCrR5w+xDVt3aHyhGCxS2OK+8XefvtTZYUakiTqDNaPuznBL8Qj0DGu
236aP2z3Kg6EGax/0OGPzreiUbF5Q6B9DImOYJY433Mw45c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org