Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-CrUkMdp-KJaI2JSPEraCJOowMI.roa
File:                     1-CrUkMdp-KJaI2JSPEraCJOowMI.roa (raw, json)
Hash identifier:          9JcKqkAvslwodEvjjPr2Zf8XUS0wh0uEe8Ok6sm1/3Y=
Subject key identifier:   F8:2A:D4:90:C7:69:F8:A2:5A:23:62:52:3C:4A:DA:08:93:A8:C0:C2
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018AACDB810B00FF79276E5F36B729404097
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-CrUkMdp-KJaI2JSPEraCJOowMI.roa
Signing time:             Tue 19 Sep 2023 09:53:01 +0000
ROA not before:           Tue 19 Sep 2023 09:53:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201691
IP address blocks:        62.60.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ac:db:81:0b:00:ff:79:27:6e:5f:36:b7:29:40:40:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Sep 19 09:53:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f82ad490c769f8a25a2362523c4ada0893a8c0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:2d:94:83:48:24:7c:83:8d:41:c4:52:82:
                    0b:ed:de:1e:56:df:ae:8d:9b:9f:f6:30:db:b7:b2:
                    81:15:ad:6a:df:7c:0d:24:08:7f:bf:ff:f2:e9:e3:
                    30:52:7e:06:f5:4d:58:e9:cf:38:3c:30:a0:56:f3:
                    f5:1e:7b:96:08:2f:b4:4d:55:48:bc:c6:40:4c:bb:
                    37:71:4e:d4:c5:44:33:38:7a:a3:fb:68:02:dd:d5:
                    e6:68:45:b7:a3:ab:54:27:44:b8:67:4f:10:88:e3:
                    04:92:52:8b:30:9a:13:85:d7:f0:e4:f1:e9:56:64:
                    66:4f:9d:48:9a:12:87:de:56:0f:0f:a9:7d:e7:46:
                    5b:0f:19:d3:b9:44:ce:00:e2:83:51:0c:f7:c5:5a:
                    21:c0:98:a2:3f:eb:3e:39:b0:aa:c4:92:2f:75:62:
                    2e:b7:0a:e1:67:7b:04:6a:76:57:39:44:23:a1:75:
                    f4:ac:d0:d9:0f:5e:76:90:b1:bf:2a:de:19:bb:07:
                    c6:23:47:cd:ff:22:7b:0e:8a:aa:8d:a7:1a:59:0d:
                    80:9a:fb:2f:4d:6d:d0:3c:0e:7b:03:9c:f4:8b:88:
                    14:02:60:87:9f:db:69:20:58:51:75:b6:f4:7c:69:
                    f6:dc:98:d2:5d:0f:5d:cb:a4:6e:6e:a0:ea:7a:f0:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2A:D4:90:C7:69:F8:A2:5A:23:62:52:3C:4A:DA:08:93:A8:C0:C2
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-CrUkMdp-KJaI2JSPEraCJOowMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:eb:19:15:d1:6c:96:3f:34:54:98:d0:33:46:e8:ed:64:
         08:ff:0a:ed:2e:60:dd:97:51:2e:28:21:20:25:31:67:14:7e:
         58:5d:a9:31:e7:8f:f4:49:e9:6f:8b:84:55:ff:15:09:af:30:
         58:b2:98:ad:af:28:0f:aa:c2:85:8d:4d:9f:9b:17:80:e4:98:
         e4:62:25:17:6b:42:e5:af:e0:3d:39:a5:21:c0:29:d9:ca:95:
         1f:a2:99:33:0e:e8:23:a6:a2:03:51:d8:d9:ba:a1:44:51:cd:
         44:2f:01:47:8f:95:ae:fc:3b:46:2c:31:07:fb:22:c6:cf:e8:
         0d:7c:9d:a2:d2:9e:f8:0c:e1:af:69:da:33:00:d9:9b:01:69:
         6b:29:47:42:78:d6:14:9f:be:2b:e0:9e:01:1e:43:9c:b7:03:
         ff:f8:a6:9f:33:72:b2:43:2e:83:e0:2d:89:01:9e:5e:b7:73:
         40:84:98:ff:ee:15:86:ee:cc:fe:70:d4:be:cb:60:5f:b7:83:
         c9:90:d2:66:a4:43:07:f0:e2:cc:00:e9:53:a8:24:65:1a:59:
         d8:60:7c:b6:7f:3d:e0:e1:c4:dd:51:00:14:68:9c:39:a0:46:
         92:80:5c:ca:33:81:c6:35:34:f5:b2:cc:3e:1b:f6:0f:6f:c1:
         89:57:a2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:28 2024 by rpki-client on console-ams.rpki-client.org