Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5ZJysAfsFOoz3-juMzp-3ugH70I.roa
File:                     5ZJysAfsFOoz3-juMzp-3ugH70I.roa (raw, json)
Hash identifier:          PRNdVmDYOOLu0RQUZhcyipMy+Low8SsZ1aPTeWfrRuc=
Subject key identifier:   E5:92:72:B0:07:EC:14:EA:33:DF:E8:EE:33:3A:7E:DE:E8:07:EF:42
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       01891BD155EA5C76F1EBC3F9DADC40376399
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5ZJysAfsFOoz3-juMzp-3ugH70I.roa
Signing time:             Mon 03 Jul 2023 12:54:11 +0000
ROA not before:           Mon 03 Jul 2023 12:54:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2
IP address blocks:        62.60.192.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jul 2023 09:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1b:d1:55:ea:5c:76:f1:eb:c3:f9:da:dc:40:37:63:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jul  3 12:54:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e59272b007ec14ea33dfe8ee333a7edee807ef42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:5d:b4:9d:d3:f2:a7:57:e3:68:05:e6:6e:
                    ed:b3:fc:c8:bf:1a:b7:21:65:12:31:b7:8a:38:49:
                    67:d6:f4:fe:2d:89:f8:4a:c5:b4:b7:10:bf:f3:b5:
                    38:9d:31:55:5b:86:f0:66:f9:dd:ea:8c:73:52:5d:
                    0e:61:84:fe:be:db:00:aa:cb:1d:d3:38:42:1f:a7:
                    74:15:70:1d:81:11:ad:3c:87:d4:6c:12:78:4a:29:
                    57:bd:0d:1b:9d:58:3b:a4:e4:4b:fd:94:46:21:1a:
                    d1:0c:6c:21:bd:25:a5:3a:0d:ea:e4:3e:c3:71:aa:
                    15:ff:52:9d:fe:e6:5a:33:9c:37:b3:5c:4a:52:67:
                    ab:52:18:51:97:88:d9:32:d1:a8:fd:62:03:ed:62:
                    72:ae:c0:12:9e:c2:c0:23:57:6d:82:e2:14:0d:03:
                    df:f7:04:3c:84:4b:32:68:ed:f4:c0:77:da:bd:98:
                    da:e8:49:1e:61:0e:59:8a:2f:5d:33:d8:8a:4a:e3:
                    d0:2c:80:a4:5f:bc:f4:47:32:c1:f9:9c:9c:e1:b3:
                    51:95:56:07:a4:72:68:1e:86:2a:5a:ce:77:0d:be:
                    04:6b:be:8c:b3:2e:0a:20:85:e2:95:61:05:1f:e4:
                    78:5a:cf:9f:45:33:f9:1d:b1:90:97:82:bc:ae:a1:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:72:B0:07:EC:14:EA:33:DF:E8:EE:33:3A:7E:DE:E8:07:EF:42
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5ZJysAfsFOoz3-juMzp-3ugH70I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:fe:71:f4:0a:18:14:a7:6f:be:14:25:e4:8a:c9:bd:8c:61:
         b2:c4:4f:52:50:bb:4c:e1:64:f1:09:ca:b8:a9:a0:3c:a0:40:
         df:cc:92:65:e2:22:1b:8a:c9:e2:c8:fb:44:81:45:8d:24:06:
         e6:d2:8d:c7:da:95:6d:2e:49:a0:af:fd:49:82:58:1c:12:b0:
         30:05:7d:da:4f:09:4a:b3:1b:f6:e1:49:3c:3f:a9:a2:13:90:
         70:77:c2:55:81:c3:42:e0:a9:7e:bd:65:7a:43:b7:9e:6f:29:
         94:ba:76:ce:d3:d9:9e:5b:1a:7c:2e:74:ec:df:68:9e:5e:f0:
         3f:2a:cb:5b:78:5f:58:91:b3:1e:aa:ee:eb:ea:3b:27:f3:ff:
         4d:86:8d:8a:b6:95:d3:88:b2:1b:c1:4f:a1:2a:18:f7:ba:a2:
         6e:6f:eb:a5:6b:5e:3d:49:e0:e1:47:23:44:33:6c:79:59:46:
         5b:04:43:8f:b5:23:c3:ac:9b:53:94:42:7d:61:cf:6b:39:9c:
         c2:ae:ed:52:a2:61:67:ae:05:7d:c9:72:62:0a:a8:7b:f9:07:
         ee:b1:36:e2:dc:3e:07:2b:73:e6:9b:9f:d2:3c:5e:81:9e:d2:
         6f:9d:a1:78:14:ac:f2:23:73:44:52:70:5f:01:6d:04:fe:29:
         63:35:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org