Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/615iqYRbseYz2Z37EbGeA0L1JTI.roa
File:                     615iqYRbseYz2Z37EbGeA0L1JTI.roa (raw, json)
Hash identifier:          fWZDu/2snc5ZQ+cBGeG2b2ZHuDFwcXMyxtiKiEnnW4A=
Subject key identifier:   EB:5E:62:A9:84:5B:B1:E6:33:D9:9D:FB:11:B1:9E:03:42:F5:25:32
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0196FB79F1FBB8F6B415F036507087475328
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/615iqYRbseYz2Z37EbGeA0L1JTI.roa
Signing time:             Fri 23 May 2025 04:49:55 +0000
ROA not before:           Fri 23 May 2025 04:49:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210644
IP address blocks:        62.60.148.0/22 maxlen: 24
                          62.60.152.0/23 maxlen: 24
                          62.60.154.0/23 maxlen: 24
                          62.60.156.0/22 maxlen: 24
                          62.60.176.0/22 maxlen: 24
                          62.60.186.0/24 maxlen: 24
                          62.60.216.0/23 maxlen: 24
                          62.60.228.0/22 maxlen: 24
                          62.60.235.0/24 maxlen: 24
                          62.60.236.0/22 maxlen: 24
                          62.60.240.0/22 maxlen: 24
                          62.60.244.0/22 maxlen: 24
                          62.60.248.0/22 maxlen: 24
                          62.60.252.0/22 maxlen: 24
                          213.176.64.0/22 maxlen: 24
                          213.176.74.0/23 maxlen: 24
                          213.176.92.0/22 maxlen: 24
                          213.176.112.0/22 maxlen: 24
                          213.176.116.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 09:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:fb:79:f1:fb:b8:f6:b4:15:f0:36:50:70:87:47:53:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: May 23 04:49:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb5e62a9845bb1e633d99dfb11b19e0342f52532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:cc:64:d9:ef:5c:f4:b1:7e:54:ac:3b:c4:
                    60:a6:19:11:ff:37:1c:b3:ab:93:c1:72:8a:a8:0c:
                    f4:d0:cc:a7:e4:61:f3:67:f6:2c:0a:4a:63:85:62:
                    ee:36:65:9e:03:48:8c:eb:6c:df:c5:89:1f:4a:47:
                    a8:c1:16:19:eb:01:0f:f0:e0:24:bc:61:47:bd:03:
                    89:5a:43:b5:68:d9:4c:f1:87:44:2f:9b:3f:57:8a:
                    17:2c:99:54:81:d8:44:7c:06:ec:cf:b0:f8:68:58:
                    a7:6e:0d:cb:99:da:52:fd:dc:74:37:ef:c9:55:1f:
                    fc:b7:20:b8:e7:44:b7:15:0e:db:4b:51:35:56:fe:
                    5a:8d:02:78:2d:df:64:dd:aa:d6:58:40:9f:a1:ee:
                    e9:96:e5:91:6e:99:c3:15:bb:d3:d2:b6:7d:90:da:
                    b9:4b:46:f7:d2:2b:e8:23:27:47:58:1c:fe:be:e8:
                    23:25:a3:2f:22:5c:56:6b:5c:bc:13:d1:b7:e3:c7:
                    9f:3a:94:51:3e:df:a5:3e:22:b3:63:dc:91:00:fd:
                    77:7f:c8:a6:0e:78:7b:01:2d:16:de:8e:b0:86:5e:
                    c8:ed:3e:24:87:e5:db:e2:d0:f5:7f:3b:d9:bb:db:
                    d1:a3:75:bd:73:57:6d:21:e0:bb:bb:81:f6:6a:b0:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:62:A9:84:5B:B1:E6:33:D9:9D:FB:11:B1:9E:03:42:F5:25:32
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/615iqYRbseYz2Z37EbGeA0L1JTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.148.0-62.60.159.255
                  62.60.176.0/22
                  62.60.186.0/24
                  62.60.216.0/23
                  62.60.228.0/22
                  62.60.235.0-62.60.255.255
                  213.176.64.0/22
                  213.176.74.0/23
                  213.176.92.0/22
                  213.176.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:bc:7a:5d:6a:fd:8a:83:75:c1:ba:72:ce:65:9f:60:21:9f:
         25:82:20:a4:db:7d:87:ef:54:43:35:42:2d:b0:c4:54:b0:73:
         fb:d6:e3:b1:07:45:d1:1f:c5:be:88:b7:46:6e:12:3e:88:b6:
         57:1a:03:b3:2c:eb:16:49:57:b0:71:92:61:30:0e:c9:ae:cf:
         b2:2e:dd:54:53:94:58:35:b9:fb:cb:48:6f:d8:88:39:ff:c1:
         a9:66:34:74:47:2d:ee:3f:d2:e7:73:73:01:df:f5:8d:3a:5d:
         29:b7:aa:bb:11:f1:35:a1:30:fd:d3:14:9a:d1:14:6e:0b:bd:
         dd:01:1f:8b:c5:6d:fe:77:f9:38:5f:75:19:d1:e7:7b:27:6b:
         ab:01:91:f8:29:e7:ce:16:e5:20:b5:24:53:a0:06:c2:8a:d2:
         8f:5a:4b:14:2a:c5:fb:13:5c:af:71:d5:76:f9:15:5b:8c:6b:
         cc:ef:6c:75:f7:b4:f7:d9:0a:66:74:60:5f:d1:fe:5e:9b:61:
         b2:ef:86:ae:bb:1d:72:e5:df:bd:f5:9d:4a:c3:ea:b8:5f:33:
         3d:eb:24:49:69:c0:86:5c:60:89:66:fc:dc:38:42:20:d7:35:
         8c:ca:0d:4f:90:0d:64:2b:91:55:f9:a7:4e:2b:84:c1:d3:fd:
         ee:20:e9:8e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZb7efH7uPa0FfA2UHCHR1MoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwNTIzMDQ0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjVlNjJhOTg0NWJiMWU2MzNkOTlkZmIxMWIxOWUwMzQyZjUyNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CfMZNnvXPSxflSsO8RgphkR/zcc
s6uTwXKKqAz00Myn5GHzZ/YsCkpjhWLuNmWeA0iM62zfxYkfSkeowRYZ6wEP8OAk
vGFHvQOJWkO1aNlM8YdEL5s/V4oXLJlUgdhEfAbsz7D4aFinbg3LmdpS/dx0N+/J
VR/8tyC450S3FQ7bS1E1Vv5ajQJ4Ld9k3arWWECfoe7pluWRbpnDFbvT0rZ9kNq5
S0b30ivoIydHWBz+vugjJaMvIlxWa1y8E9G348efOpRRPt+lPiKzY9yRAP13f8im
Dnh7AS0W3o6whl7I7T4kh+Xb4tD1fzvZu9vRo3W9c1dtIeC7u4H2arBxYwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFOteYqmEW7HmM9md+xGxngNC9SUyMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvNjE1aXFZUmJzZVl6MlozN0ViR2VBMEwxSlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIAATBLMAwDBAI+PJQD
BAU+PIADBAI+PLADBAA+PLoDBAE+PNgDBAI+POQwCwMEAD486wMDAD48AwQC1bBA
AwQB1bBKAwQC1bBcAwQD1bBwMA0GCSqGSIb3DQEBCwUAA4IBAQDDvHpdav2Kg3XB
unLOZZ9gIZ8lgiCk232H71RDNUItsMRUsHP71uOxB0XRH8W+iLdGbhI+iLZXGgOz
LOsWSVewcZJhMA7Jrs+yLt1UU5RYNbn7y0hv2Ig5/8GpZjR0Ry3uP9Lnc3MB3/WN
Ol0pt6q7EfE1oTD90xSa0RRuC73dAR+LxW3+d/k4X3UZ0ed7J2urAZH4KefOFuUg
tSRToAbCitKPWksUKsX7E1yvcdV2+RVbjGvM72x197T32QpmdGBf0f5em2Gy74au
ux1y5d+99Z1Kw+q4XzM96yRJacCGXGCJZvzcOEIg1zWMyg1PkA1kK5FV+adOK4TB
0/3uIOmO
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:18 2025 by rpki-client