Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3RUZOCQ5iAqNh1bgEPAQjaWcNAQ.roa
File:                     3RUZOCQ5iAqNh1bgEPAQjaWcNAQ.roa (raw, json)
Hash identifier:          e/bNKYW+4VCjpPLGOx9ATCnuhKoGMjtWvPYD4v87T+Q=
Subject key identifier:   DD:15:19:38:24:39:88:0A:8D:87:56:E0:10:F0:10:8D:A5:9C:34:04
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018B37C47F609F2044BBB5D4BDEEA042EEC0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3RUZOCQ5iAqNh1bgEPAQjaWcNAQ.roa
Signing time:             Mon 16 Oct 2023 09:15:06 +0000
ROA not before:           Mon 16 Oct 2023 09:15:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        62.60.216.0/22 maxlen: 24
                          62.60.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 08:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:37:c4:7f:60:9f:20:44:bb:b5:d4:bd:ee:a0:42:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Oct 16 09:15:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd1519382439880a8d8756e010f0108da59c3404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:e6:93:92:a9:33:85:45:76:33:7a:fe:34:
                    5d:1d:8e:12:fc:46:34:7b:62:41:4f:90:8a:68:70:
                    36:29:85:38:17:ca:cb:61:cf:51:b0:79:94:da:50:
                    3c:3f:6a:d3:d4:d5:76:ea:51:4a:19:15:dd:1f:6b:
                    77:c3:ab:dc:c7:83:94:21:9f:68:9f:ac:29:1e:b8:
                    18:5f:7b:09:9e:20:f5:02:cb:d9:2c:19:2a:bd:b3:
                    60:4b:ba:cb:8c:f2:7a:7a:90:a1:ac:ad:ee:91:dd:
                    78:c5:0a:85:7e:61:88:45:8f:9a:63:e6:5b:33:bd:
                    65:a1:b1:51:09:b3:bb:fd:d9:c5:0d:6d:1c:d0:3c:
                    8c:91:10:68:1d:0f:94:76:19:85:e8:2a:da:b1:af:
                    4b:72:06:39:42:83:a7:ae:47:db:88:aa:97:9f:15:
                    01:25:5a:be:36:5e:b9:7c:ce:49:7e:c3:c3:4b:62:
                    d6:62:ea:88:a8:77:6a:8b:96:18:53:6a:36:ce:a8:
                    5f:fe:48:a9:ba:cd:c5:78:98:9f:d9:25:07:49:78:
                    4d:64:96:61:50:4d:e7:99:0c:3c:11:f5:86:6e:cc:
                    b6:8c:0b:69:ff:f3:65:3d:66:36:3d:08:f3:fb:1c:
                    43:e7:b3:57:cb:dc:e7:d9:33:ce:29:70:37:a6:b6:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:19:38:24:39:88:0A:8D:87:56:E0:10:F0:10:8D:A5:9C:34:04
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3RUZOCQ5iAqNh1bgEPAQjaWcNAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:17:83:02:65:2d:3f:d9:a7:7e:03:e6:ac:65:1e:fd:be:
         2b:30:81:1f:78:b8:c9:c8:46:25:6a:2a:26:a5:56:bc:31:3e:
         35:de:ed:d5:51:31:8b:1d:d8:44:6e:f2:e5:97:18:d9:5a:f0:
         7a:c4:33:f4:bc:06:0a:38:1a:7a:e2:45:1f:41:41:78:2c:ed:
         0a:25:e6:8e:e9:52:86:d7:0f:52:cc:b5:9c:53:c9:49:40:46:
         38:13:d0:24:e2:15:04:88:c5:8d:fb:e1:2c:b2:38:fa:1e:b3:
         99:91:83:9a:12:c7:64:40:f3:6f:a6:11:7d:1b:1e:93:a9:90:
         6b:3e:8b:8b:9c:4e:0f:aa:ee:76:3c:1e:4e:38:79:5a:77:68:
         c7:06:a0:24:77:fd:f4:e3:14:41:a0:76:fc:d1:ae:ba:a5:8e:
         b0:ec:2e:6e:93:f6:c1:4c:8c:ad:52:48:b5:05:31:8d:0f:06:
         5a:a7:79:f7:42:ef:e0:6c:3d:84:d7:31:9d:a6:2f:47:6e:ce:
         12:df:df:d2:bb:0b:46:29:98:8a:ad:85:7f:9d:7b:11:c5:96:
         fb:17:71:86:7d:78:39:85:48:56:dc:80:2b:81:d3:5b:5e:c3:
         be:a7:76:dc:5c:f0:4c:59:5f:54:b0:d0:be:91:8d:de:84:b2:
         b5:40:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org