Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EvMcrwPW386_tA0oGVJXzvIh2WE.roa
File:                     EvMcrwPW386_tA0oGVJXzvIh2WE.roa (raw, json)
Hash identifier:          pb8zqaiJRMImH0P2K4a8PSEm2a0i4ri4x+1oH2Wrqvk=
Subject key identifier:   12:F3:1C:AF:03:D6:DF:CE:BF:B4:0D:28:19:52:57:CE:F2:21:D9:61
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018B1D5C153B5C02E300BB147A1438C03FDB
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EvMcrwPW386_tA0oGVJXzvIh2WE.roa
Signing time:             Wed 11 Oct 2023 06:10:55 +0000
ROA not before:           Wed 11 Oct 2023 06:10:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55154
IP address blocks:        62.60.148.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Oct 2023 11:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1d:5c:15:3b:5c:02:e3:00:bb:14:7a:14:38:c0:3f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Oct 11 06:10:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12f31caf03d6dfcebfb40d28195257cef221d961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:c0:9e:c7:f9:7c:b8:53:37:47:5b:2d:3c:
                    ec:af:82:17:a0:7b:e4:6b:98:f4:da:fe:92:49:d5:
                    b0:1d:e2:e3:09:5f:b0:9a:0b:ef:90:55:4c:ef:6e:
                    c2:d7:f7:52:46:bb:a8:ee:f2:b5:22:ee:20:8d:98:
                    9c:5c:13:8a:47:e7:77:80:02:7b:cb:11:9d:68:e8:
                    f5:68:70:d7:d1:c5:2b:c0:16:46:02:fe:2c:57:fd:
                    d9:6d:cb:c6:9c:4f:48:47:af:59:1c:ed:89:e3:7d:
                    86:62:f9:f6:46:c6:ae:83:27:8f:fe:19:63:ef:4f:
                    8a:1c:0e:34:79:e0:6e:6e:c9:c2:7a:f5:9a:f4:39:
                    a8:09:80:8f:42:c2:46:d1:dd:6e:56:af:f2:47:09:
                    59:aa:8a:fe:98:71:d5:05:7e:31:87:a0:74:af:92:
                    eb:59:4e:d9:11:e6:54:11:0c:c6:b9:fa:54:39:ca:
                    54:97:04:f6:70:6f:88:07:f5:c5:17:02:ca:a1:12:
                    01:95:61:01:f8:9e:76:71:a5:85:e6:42:69:37:93:
                    79:02:43:22:16:8c:47:0d:25:0d:50:b2:49:77:fc:
                    ac:7f:d9:04:a9:93:bb:72:09:f5:b1:9d:be:40:c8:
                    28:fa:70:c1:4a:ac:dd:e0:d7:d2:80:09:17:15:e7:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F3:1C:AF:03:D6:DF:CE:BF:B4:0D:28:19:52:57:CE:F2:21:D9:61
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EvMcrwPW386_tA0oGVJXzvIh2WE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:b7:81:9e:ac:fc:ac:aa:ed:d1:3e:84:02:b6:34:8a:b0:
         b6:36:36:fd:9f:fa:64:22:f0:e2:15:02:5a:58:f5:e8:aa:50:
         d0:fe:ad:65:20:d9:03:2b:11:ef:be:47:dd:75:45:75:f1:9d:
         d7:58:3d:2e:d9:73:da:59:b7:da:8d:29:79:8b:b0:c1:e9:d3:
         2b:fc:04:fa:e3:94:d2:77:07:bc:56:f3:7e:39:13:6e:d2:f8:
         1e:63:0e:88:5e:f6:5d:5a:32:9a:94:12:5c:12:5a:99:e0:e7:
         10:0a:10:36:35:7b:73:1b:ad:21:1f:15:76:c3:67:a9:95:98:
         8a:55:83:f6:51:78:be:bb:82:36:7e:3f:d6:0a:8e:2c:7d:44:
         89:b6:1e:19:5a:4b:e8:fc:7b:5a:5b:68:89:75:86:65:a3:c9:
         21:f4:88:93:f3:4c:bf:48:9b:0d:78:b9:a3:6a:55:83:59:b0:
         b7:cf:39:8a:a0:b3:81:69:bd:cd:b3:d1:46:8d:2d:7d:0b:0c:
         0f:34:f7:c1:4a:47:bb:3a:dc:01:16:89:89:85:56:e4:a6:82:
         bf:f8:ce:b1:a3:db:f2:05:b4:8f:99:75:3b:2d:9c:55:d4:40:
         32:97:be:ef:e4:9c:36:e9:e7:0e:93:a6:82:b6:ef:73:61:90:
         a0:6b:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org