Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dq0rHIX_8M-pQKNcU2HKGcx1Pr0.roa
File:                     Dq0rHIX_8M-pQKNcU2HKGcx1Pr0.roa (raw, json)
Hash identifier:          XQJnoEtmSXcJW4vXmPa58Gud2475Y5uL24hnztfdpcY=
Subject key identifier:   0E:AD:2B:1C:85:FF:F0:CF:A9:40:A3:5C:53:61:CA:19:CC:75:3E:BD
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019203CD25DC34F347500F1F5B6B8D90A3E0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dq0rHIX_8M-pQKNcU2HKGcx1Pr0.roa
Signing time:             Wed 18 Sep 2024 06:23:49 +0000
ROA not before:           Wed 18 Sep 2024 06:23:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60223
IP address blocks:        62.60.230.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 21:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:03:cd:25:dc:34:f3:47:50:0f:1f:5b:6b:8d:90:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Sep 18 06:23:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ead2b1c85fff0cfa940a35c5361ca19cc753ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:56:c6:a9:cb:5a:ed:26:1e:d9:b4:57:41:
                    ec:49:a0:b4:1e:7e:49:de:fc:97:73:5b:2c:5b:34:
                    5f:39:6e:27:4e:ba:f0:43:f7:ac:a3:0d:3d:46:fe:
                    1a:b2:9e:41:84:0a:da:a6:ee:11:40:85:db:2f:68:
                    fe:a7:07:ae:44:bc:fa:83:ac:e1:47:13:90:a1:83:
                    14:29:57:34:b3:d7:df:9e:c7:41:b4:8f:f9:9e:66:
                    77:ad:fd:4a:95:03:7d:40:bb:72:18:8f:26:95:d4:
                    19:9f:db:1f:8f:97:49:2f:f1:2b:fa:c6:48:c3:ba:
                    c7:49:55:5c:6d:bb:bf:b1:32:b6:1c:97:27:e1:bf:
                    3a:ee:61:46:e1:71:3f:56:1b:32:fe:3f:46:48:74:
                    c8:8e:21:5d:f4:b8:55:c3:ac:22:31:bc:e9:80:a8:
                    39:b4:24:19:0f:be:5a:c9:06:68:8c:92:48:ca:00:
                    ac:9b:c5:83:9e:f1:88:e4:4b:bb:04:32:6f:9c:f6:
                    60:48:55:3e:1a:2f:6b:4a:9d:57:49:f3:f5:eb:96:
                    1e:1d:1e:6b:d5:f2:ba:ae:35:a2:7a:c9:24:50:00:
                    d0:8f:6b:1e:81:df:d0:1f:4a:3f:ce:bc:7d:11:c6:
                    6f:f7:5e:63:bf:5e:e6:3e:f1:97:bb:f6:30:40:d2:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AD:2B:1C:85:FF:F0:CF:A9:40:A3:5C:53:61:CA:19:CC:75:3E:BD
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dq0rHIX_8M-pQKNcU2HKGcx1Pr0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:5f:e2:7a:fe:79:ec:d1:06:d3:61:ae:2f:33:e2:92:82:
         b6:af:cd:28:0d:e1:72:2f:71:01:dd:56:e5:a6:a7:a4:b2:3e:
         c5:7b:e0:7c:cb:cc:ed:ed:27:5d:ea:28:e0:eb:6c:7c:cf:e1:
         83:8d:ca:95:1c:3b:38:7d:59:a2:6a:b8:3a:d3:9c:69:59:bf:
         4b:bc:e7:75:6e:2b:ca:d9:d8:65:f2:2e:6b:de:85:1b:ba:0f:
         7e:d8:b1:8b:7d:f0:b1:30:bc:91:93:de:17:68:62:f6:b9:9a:
         d2:47:46:ae:36:0d:c5:24:2d:97:02:68:1b:47:da:af:f7:01:
         97:a6:e6:cb:7c:63:84:df:b4:ce:5f:c6:56:08:6d:4d:8a:9a:
         6a:f9:12:10:f9:5b:c6:8a:d9:94:28:59:ce:39:ec:d9:8d:26:
         27:27:2f:c0:d5:9f:d7:18:ce:a9:2f:95:c4:30:a8:93:8f:4c:
         f4:fe:f6:01:64:3a:c5:f8:04:9e:0c:39:c7:cb:e7:46:2a:7d:
         ed:43:3c:3f:d1:25:db:91:bc:83:a9:48:2d:ab:c6:e9:6b:90:
         15:19:d7:f7:85:b7:90:a4:e2:ac:a9:2d:ca:89:14:9f:51:29:
         3d:59:ae:0d:a1:64:9c:47:a4:d5:5a:35:30:dc:0c:e4:69:8c:
         b0:b9:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:28:35 2024 by rpki-client on console-ams.rpki-client.org