Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J9EyZ6H7d1NMz6rWJAXOnYmhQiU.roa
File:                     J9EyZ6H7d1NMz6rWJAXOnYmhQiU.roa (raw, json)
Hash identifier:          yxurRg0wSiXXYiH4qjQexDyk9gJGy02Xdo9nJXxJFgs=
Subject key identifier:   27:D1:32:67:A1:FB:77:53:4C:CF:AA:D6:24:05:CE:9D:89:A1:42:25
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0186FA1B7F224D04A6962B9AF03C5FB00C27
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J9EyZ6H7d1NMz6rWJAXOnYmhQiU.roa
Signing time:             Sun 19 Mar 2023 13:42:31 +0000
ROA not before:           Sun 19 Mar 2023 13:42:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48147
IP address blocks:        62.60.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fa:1b:7f:22:4d:04:a6:96:2b:9a:f0:3c:5f:b0:0c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Mar 19 13:42:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27d13267a1fb77534ccfaad62405ce9d89a14225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:65:3a:16:c6:70:7c:0b:9f:a5:e9:50:d1:
                    8c:1b:21:56:35:12:8d:c5:55:25:a3:55:03:6e:e9:
                    60:ab:c2:5e:7f:40:e6:80:61:5e:1c:19:72:b3:b9:
                    66:15:2b:d2:74:33:57:3b:d9:73:d7:72:b5:f1:a4:
                    8e:24:31:97:f6:1e:04:f4:80:99:04:0d:14:c8:e6:
                    a8:f0:fb:92:af:0a:97:81:4f:40:90:a5:b9:f9:88:
                    7f:d9:e8:8c:27:0b:05:b1:61:eb:94:50:99:ba:f0:
                    80:94:fe:5d:2b:a7:ec:42:00:4c:89:af:f9:b0:cf:
                    ca:a8:05:eb:84:33:26:40:bd:44:bd:37:30:ad:12:
                    4f:02:7c:46:d1:9e:59:7e:4c:ed:99:3d:f0:28:9f:
                    e2:b9:62:6d:93:91:47:ba:6c:af:3a:be:f9:79:f2:
                    23:56:f2:49:04:01:1e:60:fc:6f:07:56:b3:a4:db:
                    5f:e6:8d:c8:99:b3:fb:e1:ac:80:a6:ff:17:f9:49:
                    c9:52:89:cd:a7:be:39:64:0b:ae:92:bd:d4:83:6f:
                    cb:45:b0:59:52:af:1c:78:86:ea:9b:31:0b:d6:49:
                    3f:4c:dd:af:2f:1a:c7:20:d9:2d:2a:d5:b2:57:23:
                    02:95:86:ae:ff:00:87:ad:47:ff:ed:9a:ab:d3:64:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:32:67:A1:FB:77:53:4C:CF:AA:D6:24:05:CE:9D:89:A1:42:25
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J9EyZ6H7d1NMz6rWJAXOnYmhQiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:40:12:ce:a5:96:5c:cd:31:36:56:15:45:1a:47:d9:d4:
         92:2a:d4:90:6a:1e:0c:95:6f:5a:37:d2:ae:37:c5:9a:af:bb:
         25:3d:a0:68:9a:7d:c8:2e:d1:e1:15:fd:f9:f2:4b:7a:48:7f:
         bf:a4:76:f6:1f:dd:65:0c:87:78:73:d3:d4:10:5b:fd:7d:33:
         a1:08:61:6f:8d:4a:de:eb:f8:2c:e5:4c:a6:ba:45:8c:2a:07:
         f0:31:22:c3:3d:03:a8:77:85:65:ba:a3:83:28:a3:06:ec:a9:
         64:57:f0:18:5b:77:7e:5e:e0:71:6b:d3:6f:b0:5e:48:5c:be:
         f4:db:bd:86:f7:7d:ab:9a:96:0e:b7:37:81:1e:58:d4:77:2a:
         56:d6:92:06:71:0f:e9:f6:6f:39:6e:97:66:f6:04:dd:49:fa:
         58:f3:54:19:74:87:53:b9:f0:b3:2f:84:9d:9a:33:0c:9f:9b:
         a5:f5:85:89:27:26:0d:0d:6e:19:96:d5:cf:bd:e2:ca:d8:2a:
         07:d2:86:4e:d4:65:7c:99:c8:44:44:2b:d7:a9:b6:d2:c0:8a:
         2d:4c:56:e5:54:42:aa:db:aa:c0:63:eb:31:de:58:e8:11:c1:
         b9:5c:7a:ed:d3:cd:76:27:f8:40:3e:e4:35:59:21:dd:f1:d3:
         2c:dc:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org