Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Jx9RFugIFvt5-5U7Iewm6NERN_o.roa
File:                     Jx9RFugIFvt5-5U7Iewm6NERN_o.roa (raw, json)
Hash identifier:          ktRNTpKEGHQlQaXzhqJmoRRnAPRz4aXf1beTOpjmggg=
Subject key identifier:   27:1F:51:16:E8:08:16:FB:79:FB:95:3B:21:EC:26:E8:D1:11:37:FA
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       0187DD1524A62561B4EF58297CD9B110EB26
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Jx9RFugIFvt5-5U7Iewm6NERN_o.roa
Signing time:             Tue 02 May 2023 15:29:23 +0000
ROA not before:           Tue 02 May 2023 15:29:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60544
IP address blocks:        62.76.205.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:dd:15:24:a6:25:61:b4:ef:58:29:7c:d9:b1:10:eb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: May  2 15:29:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=271f5116e80816fb79fb953b21ec26e8d11137fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:41:8a:32:7c:9a:43:4d:08:77:dc:9d:81:
                    9a:fe:06:3f:87:80:a9:f4:f6:83:df:b7:38:84:72:
                    c6:c9:40:39:fc:c7:2b:97:03:3f:81:96:01:b7:e3:
                    3e:99:db:57:a3:cb:05:e2:8d:66:41:3a:2c:d4:f5:
                    99:28:be:d3:3c:cd:82:c3:2e:37:da:c1:85:85:40:
                    88:80:fa:31:c7:48:0f:1e:05:fa:bc:cf:55:ee:d1:
                    1c:03:c8:2b:18:29:9f:54:3d:be:98:f4:52:97:ae:
                    45:7f:54:3a:5e:e8:f8:35:41:e4:db:8e:0e:fd:8d:
                    bb:db:a5:7b:1d:6f:57:e3:61:27:99:00:db:8b:31:
                    62:dc:06:17:86:d1:e0:89:6c:d6:1d:b1:d2:e2:1e:
                    b4:2e:cd:fd:94:71:7f:d0:d1:72:78:08:b9:c7:e4:
                    88:2c:96:c6:52:f0:aa:0b:f7:09:a6:5e:33:06:90:
                    26:a5:d1:13:b5:d6:e3:96:ba:b4:fd:a3:38:d5:8a:
                    a1:df:1b:33:e1:0a:14:49:db:79:f2:8a:2d:02:f6:
                    a5:87:af:e4:c2:10:ac:29:8a:30:dc:4f:c3:61:83:
                    9f:31:de:31:f3:2a:e0:6c:e6:db:16:c5:6f:ff:72:
                    2f:63:ef:40:25:f9:4f:44:29:47:bb:3f:9d:6b:c5:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:51:16:E8:08:16:FB:79:FB:95:3B:21:EC:26:E8:D1:11:37:FA
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Jx9RFugIFvt5-5U7Iewm6NERN_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:c1:7e:68:8c:68:fe:16:28:f8:42:e3:f6:cd:53:07:dd:
         87:78:e3:3d:83:02:c7:ac:91:3b:b2:ee:a1:4b:12:b4:98:0b:
         72:d6:b3:d7:f9:c2:87:24:89:e8:74:b7:23:fa:6d:49:e6:98:
         e0:7c:b5:f7:12:ad:d1:30:93:78:c0:56:77:d4:86:d9:a5:2a:
         ee:b3:37:d6:ba:c9:df:f5:e9:91:59:bb:b9:82:82:9e:5c:de:
         93:2f:42:d2:31:d5:d1:8c:c5:4a:f4:6d:5e:08:07:90:f7:f1:
         2a:a1:06:da:85:45:86:64:58:c9:90:94:cc:21:9b:24:21:1f:
         89:db:86:3a:09:93:32:3a:69:55:ae:c0:70:d0:22:5a:a2:3e:
         a1:6a:37:c3:41:91:9e:54:1d:a5:02:a4:a8:84:30:a0:72:c3:
         5e:2c:0a:0d:14:ef:8c:dc:ba:32:88:b7:55:98:52:aa:27:5f:
         12:25:6c:b2:63:08:f6:14:f6:61:c8:69:90:12:a2:76:97:33:
         60:36:80:8d:79:d1:50:7c:8d:9c:18:43:fb:d4:0c:a3:8b:50:
         61:ec:b4:b4:b4:20:83:f3:3a:ed:9d:47:24:f7:6b:a5:4c:4d:
         a3:f1:c8:b9:85:46:fd:fd:bf:95:81:39:fa:2d:9b:eb:0b:5f:
         02:d1:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org