Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6ofq-o5ORI2UYhpt7az96u4q37U.roa
File:                     6ofq-o5ORI2UYhpt7az96u4q37U.roa (raw, json)
Hash identifier:          kqzTUMx5ry/qcjRa1RY8YbtIEH4ROCq86ubl3m8myOw=
Subject key identifier:   EA:87:EA:FA:8E:4E:44:8D:94:62:1A:6D:ED:AC:FD:EA:EE:2A:DF:B5
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018875D98F4B80CFBD17CC69006FC74BF74D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6ofq-o5ORI2UYhpt7az96u4q37U.roa
Signing time:             Thu 01 Jun 2023 07:26:12 +0000
ROA not before:           Thu 01 Jun 2023 07:26:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15828
IP address blocks:        62.60.164.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:75:d9:8f:4b:80:cf:bd:17:cc:69:00:6f:c7:4b:f7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jun  1 07:26:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea87eafa8e4e448d94621a6dedacfdeaee2adfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:20:d1:13:66:c9:2d:8d:61:86:b1:7f:31:
                    df:3b:15:55:57:3f:70:1c:8b:7d:d7:71:57:25:db:
                    d2:f5:a0:3d:84:b6:72:d0:17:bf:9e:55:f4:1e:2d:
                    6d:64:de:4b:e4:ab:2b:fb:2d:a3:80:dc:3c:0e:8c:
                    20:28:4d:69:54:3f:db:f0:5e:db:88:4a:7b:91:67:
                    3a:28:b4:97:2b:09:57:c1:4a:db:14:bd:0c:54:e0:
                    8e:61:eb:0c:58:a6:5e:85:d2:22:88:d5:52:64:c2:
                    2a:de:10:12:3d:3b:cf:1f:10:58:5d:9d:32:83:80:
                    11:7d:07:05:3f:44:35:36:f5:12:10:2f:51:04:34:
                    88:fd:f8:56:32:5b:88:3a:bb:ce:3f:9b:fc:13:6b:
                    2d:2a:7c:b5:b6:72:eb:fb:ef:0c:41:b4:ee:df:b6:
                    d4:cd:08:94:16:f5:ab:80:57:d2:7d:cb:c0:70:57:
                    a8:51:cd:01:b7:5e:9c:3d:ca:48:d3:bc:16:ec:52:
                    ef:ef:7a:c9:f1:b1:b6:1d:3b:c9:88:b0:15:4c:3d:
                    2c:0b:0c:fd:0b:fa:18:a8:62:92:e0:b9:ea:9c:f6:
                    7e:17:a0:2e:0b:49:0a:8a:a5:91:f4:08:02:dc:a3:
                    7a:0a:8d:f6:85:ec:86:3a:78:1b:b3:99:ea:97:22:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:87:EA:FA:8E:4E:44:8D:94:62:1A:6D:ED:AC:FD:EA:EE:2A:DF:B5
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6ofq-o5ORI2UYhpt7az96u4q37U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:b6:92:69:77:88:d8:49:7c:90:f9:e3:32:c9:e1:eb:48:b1:
         1a:35:e7:da:51:8b:bc:25:a6:96:00:d5:63:c9:8b:79:6e:1c:
         81:24:dc:f4:f7:7d:5c:2d:23:d5:fd:4b:97:85:1b:9f:fc:32:
         d1:3c:9e:77:bf:e8:a7:12:e3:13:d8:ed:37:4c:74:dd:ef:5c:
         d5:91:a3:7e:94:5f:ae:c9:69:a1:42:4b:f7:b6:ee:6e:53:a7:
         29:c5:7f:ca:02:23:10:6a:e2:fb:bf:c2:da:b9:be:b4:9c:c9:
         3f:7a:29:e4:ac:f1:77:5e:e0:56:e4:bd:5b:c9:54:df:55:41:
         44:85:c1:51:d3:03:be:27:94:8e:ef:09:5f:90:18:a3:42:cc:
         c8:88:ef:62:ac:a0:13:ed:db:0e:74:c5:85:67:ba:5b:96:6c:
         f0:3a:f8:13:52:74:80:cf:01:31:57:ce:a5:b8:63:59:53:bb:
         50:a9:2a:f2:ca:4a:cc:83:66:61:50:cb:31:7b:11:c5:56:60:
         94:31:e3:2c:b2:9a:51:be:1d:17:95:86:6b:fd:1d:15:98:8d:
         8f:7c:b0:0d:34:ed:0c:29:4b:7c:47:e6:0a:e5:60:03:a7:5c:
         62:18:a1:06:4c:22:2f:81:54:b8:d0:26:eb:d8:43:a8:a4:3f:
         0c:d7:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org