Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Lm3Q_vHY-1dYpfUQRMLg2E23IEY.roa
File:                     Lm3Q_vHY-1dYpfUQRMLg2E23IEY.roa (raw, json)
Hash identifier:          CREykHnJIAGxrydzf7aqZiiIir9OfB2hXNJBbHe9rHU=
Subject key identifier:   2E:6D:D0:FE:F1:D8:FB:57:58:A5:F5:10:44:C2:E0:D8:4D:B7:20:46
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       0187B7DACBA3ABAE6F5FDE7951ED31179A3B
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Lm3Q_vHY-1dYpfUQRMLg2E23IEY.roa
Signing time:             Tue 25 Apr 2023 09:59:42 +0000
ROA not before:           Tue 25 Apr 2023 09:59:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     18994
IP address blocks:        62.73.169.48/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:da:cb:a3:ab:ae:6f:5f:de:79:51:ed:31:17:9a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Apr 25 09:59:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e6dd0fef1d8fb5758a5f51044c2e0d84db72046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:ef:fc:a5:f9:97:37:27:a3:61:60:54:9b:
                    ea:92:98:b1:4a:7a:93:19:c8:df:64:64:79:2c:03:
                    d7:ef:04:9d:b0:00:bd:16:ee:c2:d6:10:c7:2a:65:
                    83:be:a6:fd:d0:92:36:53:15:52:fb:c2:1a:5d:5f:
                    f8:b3:98:57:6d:8e:2e:e9:e3:29:60:52:04:9f:e8:
                    e2:e1:17:13:41:3b:6c:1b:14:c3:d5:bb:8b:30:b8:
                    7b:8f:49:fb:a6:c2:24:fc:9e:c6:16:aa:66:17:ba:
                    c1:55:c7:df:14:bc:40:c8:50:54:51:7b:f5:d6:93:
                    cb:dc:5b:cd:8d:e8:f5:35:ec:57:29:8a:25:aa:a9:
                    bd:2f:41:b8:d7:63:1a:d4:4b:57:0b:93:ef:ee:b8:
                    8d:3f:05:e9:1c:b9:9c:09:38:27:36:4a:6b:92:85:
                    47:4a:90:04:d3:f4:07:36:5d:a0:b3:6a:d4:04:61:
                    74:e3:e7:f6:22:d3:9f:b3:34:e8:e7:84:d3:a8:af:
                    b7:21:06:9c:88:b0:11:1f:07:bb:ea:5b:69:f1:84:
                    49:de:ef:66:ae:c4:67:f5:90:29:50:9c:51:9f:20:
                    c2:be:05:4d:ec:4c:20:3f:27:34:98:0a:01:d3:4b:
                    84:8a:09:5f:b0:e6:67:a6:c0:73:53:99:1b:6d:fa:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:D0:FE:F1:D8:FB:57:58:A5:F5:10:44:C2:E0:D8:4D:B7:20:46
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Lm3Q_vHY-1dYpfUQRMLg2E23IEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.73.169.48/29

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:76:be:84:90:68:13:ab:72:4f:d0:3b:59:5e:b2:f1:38:
         3c:8c:64:22:aa:87:de:b0:53:01:c6:46:b1:37:ec:15:ba:46:
         6d:02:5e:71:62:81:eb:5d:0d:e2:6a:2d:31:a3:39:3a:75:08:
         86:e6:f1:1c:85:cf:00:69:36:82:3c:2f:2f:9c:cc:f9:90:bc:
         8a:72:7d:95:19:78:06:00:b3:e6:1e:78:2d:ab:c9:16:b8:d3:
         1b:b4:e3:a1:11:aa:db:75:86:57:ac:27:2a:b1:c0:28:6c:eb:
         41:15:cd:31:6c:41:3f:b5:67:2d:7a:a1:c1:af:9c:d7:9c:29:
         6c:15:be:7f:fb:a9:9e:0f:33:1f:b6:d6:31:19:81:07:e1:5d:
         80:4f:5e:15:0a:4d:ee:eb:0c:40:0e:a7:86:38:7c:b0:34:c6:
         96:6e:cf:b2:eb:5b:4f:83:fd:29:ac:df:b8:ec:05:a8:99:28:
         24:ad:3b:fb:ee:27:5d:0c:98:e2:56:fd:39:fd:69:1b:31:56:
         84:b2:50:6d:09:67:8f:b9:31:d3:1a:4e:1e:bf:a0:06:a0:20:
         e8:73:d0:05:72:47:2c:be:54:1f:53:f8:55:e2:e8:ac:09:a5:
         31:c6:db:e1:2f:4d:54:0b:1e:e9:89:56:d1:95:17:1b:1f:10:
         2d:90:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:03 2024 by rpki-client on console-ams.rpki-client.org