Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EqCNw220zk-3plskaHOsHvDqDQk.roa
File:                     EqCNw220zk-3plskaHOsHvDqDQk.roa (raw, json)
Hash identifier:          pLS7UIottrdSE56SeFxh+/9u9z03ad4hCs9TkrN31bg=
Subject key identifier:   12:A0:8D:C3:6D:B4:CE:4F:B7:A6:5B:24:68:73:AC:1E:F0:EA:0D:09
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0189BA38982FA8533CFF13315056FAAAD26F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EqCNw220zk-3plskaHOsHvDqDQk.roa
Signing time:             Thu 03 Aug 2023 07:06:58 +0000
ROA not before:           Thu 03 Aug 2023 07:06:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     45260
IP address blocks:        62.60.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Aug 2023 20:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ba:38:98:2f:a8:53:3c:ff:13:31:50:56:fa:aa:d2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Aug  3 07:06:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12a08dc36db4ce4fb7a65b246873ac1ef0ea0d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:5c:71:c0:af:8e:7f:da:e3:c0:ce:44:64:
                    be:ed:26:a8:da:f5:65:b1:fb:6f:2e:63:7b:2d:45:
                    a7:af:90:73:f3:52:5e:a6:24:6b:5d:dd:e5:3b:57:
                    45:ad:1e:aa:fc:ad:ba:46:bc:71:b1:39:41:04:c2:
                    75:4b:64:f9:e3:ba:82:d5:2f:2e:97:fb:f4:f7:1d:
                    40:15:02:12:63:45:4e:e4:82:3c:b0:7c:3e:20:22:
                    a6:e2:51:0e:14:e5:76:e9:ec:70:ae:72:6c:cf:a6:
                    2e:00:ad:d4:5f:9a:ba:3d:5d:98:de:2c:47:d3:e5:
                    32:c7:ef:a4:8a:04:a8:df:9d:56:07:ec:0b:fa:d1:
                    8c:25:fa:e8:94:59:88:07:f4:f6:92:40:04:2f:db:
                    ad:96:9a:e1:78:dd:92:d5:39:06:f9:89:a2:7b:cb:
                    d3:be:ef:47:51:0b:e9:10:94:9a:a1:da:fc:b2:95:
                    4f:bc:f6:79:9d:58:11:c7:dd:c2:04:59:b9:d8:a5:
                    77:48:29:d5:bd:e2:ba:fd:23:0d:56:a3:c2:27:c0:
                    c8:02:b3:38:f8:88:2b:41:98:70:2a:99:9e:4e:ff:
                    c7:5e:3b:ad:a0:28:5e:24:b9:fa:35:3c:1a:45:ff:
                    71:63:bc:67:9b:bf:0f:e0:dd:6b:f1:e4:ed:f3:8a:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A0:8D:C3:6D:B4:CE:4F:B7:A6:5B:24:68:73:AC:1E:F0:EA:0D:09
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EqCNw220zk-3plskaHOsHvDqDQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:e9:db:a3:c8:7d:d8:f6:da:83:e6:35:85:3b:fb:74:f9:
         17:20:a0:40:93:65:46:66:06:7c:ca:57:cc:f9:95:75:48:02:
         43:a7:9c:38:b1:dc:80:e1:f8:7a:da:a1:f3:19:2e:57:d4:2e:
         8b:8b:5f:8d:7f:84:df:a3:4e:34:24:cf:67:17:56:98:e8:ea:
         c8:f2:c2:0e:79:29:f0:0d:86:2a:d1:e6:61:ce:7e:60:ed:58:
         d4:11:63:57:6d:12:25:99:39:4c:eb:80:83:01:97:93:7d:3d:
         5b:09:91:8a:2a:3d:0f:a7:b4:60:31:71:ae:63:97:3d:8c:e8:
         17:bc:3b:a0:bb:3c:66:1f:ec:4b:0b:da:8c:7b:3a:50:9a:05:
         34:48:c1:c0:24:c1:b1:cd:74:80:47:2f:61:1e:d5:bd:b4:a2:
         11:48:21:52:0b:00:f8:e3:d0:59:86:09:f9:5b:50:1e:42:d0:
         38:79:98:7c:58:c9:dc:66:92:aa:b5:e5:ed:da:8a:99:1a:ea:
         28:47:69:72:bf:66:05:91:45:ea:d2:eb:d0:4c:f5:9e:e6:60:
         37:45:65:de:05:e3:b9:5e:cf:69:87:c9:2f:ee:fe:66:fd:2b:
         cb:58:b0:55:63:cb:20:f2:88:ea:74:16:77:27:27:23:da:c9:
         5e:8b:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org