Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1pyiijqqB99pebMyZFKj9hIb5eI.roa
File:                     1pyiijqqB99pebMyZFKj9hIb5eI.roa (raw, json)
Hash identifier:          zhRlY8x+WlpLLE3Ej51JhARRK5yBDrJzFWdBdPNo+Qc=
Subject key identifier:   D6:9C:A2:8A:3A:AA:07:DF:69:79:B3:32:64:52:A3:F6:12:1B:E5:E2
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018FC3404F1E9449DACF255A07C5DE7F22DC
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1pyiijqqB99pebMyZFKj9hIb5eI.roa
Signing time:             Wed 29 May 2024 07:28:42 +0000
ROA not before:           Wed 29 May 2024 07:28:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44477
IP address blocks:        62.60.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 11:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c3:40:4f:1e:94:49:da:cf:25:5a:07:c5:de:7f:22:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: May 29 07:28:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d69ca28a3aaa07df6979b3326452a3f6121be5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:50:e7:df:6d:a2:d4:ae:77:dc:c2:f2:ab:
                    9e:2e:3d:69:af:61:a7:09:a8:d1:9c:6d:36:e9:0c:
                    90:ab:ec:f7:33:58:3d:46:40:6b:00:b0:3e:9f:4a:
                    20:7a:96:73:fe:62:98:8d:0c:45:19:e2:83:a3:36:
                    e8:ad:be:a6:b5:ac:a8:b6:11:f4:40:82:b6:07:08:
                    f4:67:8b:7b:b6:ca:c8:9b:5d:60:7b:28:78:d9:0b:
                    cb:67:df:fb:f0:ab:cb:a4:9f:29:99:7a:2f:d2:90:
                    6e:60:89:25:c3:cc:a4:9b:bf:70:10:87:b7:c9:d7:
                    9d:ca:c5:19:e0:23:cc:9d:0d:2c:55:ef:fa:87:3c:
                    73:d3:98:fd:bb:5b:09:bd:68:ee:e6:69:47:64:01:
                    c6:1d:3d:f3:07:f5:1b:dd:d4:e8:7b:f1:b0:ed:3a:
                    9b:7d:5a:10:2f:83:e4:b6:54:51:a3:3f:30:79:63:
                    93:5c:e4:6b:15:c0:5b:7d:b3:b2:7d:82:5d:6b:32:
                    56:fe:7c:9f:5b:c6:99:7a:7d:52:72:9d:64:1f:50:
                    bc:69:b3:52:44:53:41:7b:43:4e:c5:8a:e8:a8:27:
                    7d:07:c8:72:85:05:b2:23:22:11:b4:67:08:ba:61:
                    0d:a8:83:72:52:3c:ac:ba:52:c0:8a:39:d8:22:7f:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:A2:8A:3A:AA:07:DF:69:79:B3:32:64:52:A3:F6:12:1B:E5:E2
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1pyiijqqB99pebMyZFKj9hIb5eI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:34:83:6c:4f:1b:4f:0f:49:d6:a6:18:23:62:75:79:ef:80:
         ce:62:42:2c:33:72:6a:80:ab:ff:83:8a:30:3d:7d:33:b2:ad:
         bc:99:6d:1a:d3:c1:8a:cb:7e:2b:ca:27:5d:7c:26:aa:2c:c9:
         0d:4d:3d:8f:ce:b0:11:d8:7d:63:59:58:7e:8f:24:95:0b:76:
         26:3c:27:2b:77:a7:81:55:b3:61:76:f3:10:b0:bb:7b:89:40:
         e2:97:10:3f:f2:5c:f7:e0:f3:62:95:16:31:48:b5:b8:5f:8b:
         91:98:07:f7:b9:27:80:2f:e1:5e:a9:c3:7e:68:4a:3c:d6:33:
         e3:94:29:ab:84:48:60:ad:de:8d:5d:c6:36:71:90:e8:0c:78:
         09:3e:b5:35:ce:2a:5f:be:d9:e5:48:7b:12:2f:86:36:18:00:
         37:04:8f:fd:8d:24:d0:4a:a0:e2:37:ed:d5:58:3a:10:39:d4:
         df:24:4f:db:17:29:9e:be:7a:96:e8:c3:49:9d:e6:dc:0c:38:
         42:82:e4:cb:8f:7a:3c:76:d8:26:13:3f:1e:cc:32:48:d3:e9:
         e0:95:44:a6:e6:fd:ce:fe:28:b4:8c:5b:58:1d:44:fa:13:47:
         ed:6a:ff:75:d4:6d:2c:da:ab:17:40:6d:86:95:6a:db:46:c8:
         34:b3:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:38 2024 by rpki-client on console-fra.rpki-client.org