Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/N8nGfOYFQJ70ev_rvdpZiS61Gl4.roa
File:                     N8nGfOYFQJ70ev_rvdpZiS61Gl4.roa (raw, json)
Hash identifier:          5Hk85yofcKhUtH4MAWCW9UnbS9LUi1YBH6Jo01r001E=
Subject key identifier:   37:C9:C6:7C:E6:05:40:9E:F4:7A:FF:EB:BD:DA:59:89:2E:B5:1A:5E
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       01901ADBDC02A9698BF8A066CFDF1D60149A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/N8nGfOYFQJ70ev_rvdpZiS61Gl4.roa
Signing time:             Sat 15 Jun 2024 07:45:34 +0000
ROA not before:           Sat 15 Jun 2024 07:45:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214799
IP address blocks:        62.60.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 09:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:db:dc:02:a9:69:8b:f8:a0:66:cf:df:1d:60:14:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jun 15 07:45:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=37c9c67ce605409ef47affebbdda59892eb51a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:18:3d:83:36:d1:a3:7b:14:e2:2e:ee:26:
                    74:2e:f9:8c:31:e7:49:9f:40:c4:cc:a4:33:3e:12:
                    5e:bc:f0:4c:c2:76:1d:44:c4:36:f2:93:23:b7:b9:
                    15:cc:ac:4b:60:45:22:11:19:f3:56:e5:40:8d:c7:
                    30:68:cf:0d:e0:bf:58:39:53:35:3f:cc:a4:c9:a5:
                    e8:13:9d:82:dd:69:4d:cd:c2:f7:ae:03:e5:0a:35:
                    43:d0:f9:bb:46:a3:a1:cb:c0:6b:ac:cb:ff:af:d3:
                    41:74:b1:3d:17:11:6f:0e:7e:24:6d:0c:cb:5c:3d:
                    c2:56:cd:be:03:76:55:10:8f:d0:47:69:44:2b:01:
                    3c:c0:6f:f6:5b:a0:b4:e1:7e:69:99:5b:37:40:01:
                    b1:d7:f2:a4:4e:15:7a:92:8e:54:6c:75:98:8b:4e:
                    ad:3b:d0:78:03:ab:8a:5d:48:70:5f:14:61:2d:81:
                    e1:73:06:3a:2f:ba:cb:35:7e:6d:20:4e:9e:26:70:
                    97:20:cb:00:86:d6:e8:ad:d4:50:ab:f2:00:9b:c5:
                    f7:0e:7c:70:09:02:b9:e7:d8:3f:37:44:7d:99:3c:
                    4a:d4:1f:e1:44:84:f5:d7:66:ae:25:f0:8f:08:74:
                    28:43:a9:e6:e5:72:51:be:59:6c:f9:f9:80:27:e5:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:C6:7C:E6:05:40:9E:F4:7A:FF:EB:BD:DA:59:89:2E:B5:1A:5E
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/N8nGfOYFQJ70ev_rvdpZiS61Gl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:d5:d7:db:35:39:9f:df:b4:6a:94:e9:26:a2:f9:e9:c9:
         30:a9:d3:59:3a:12:c0:40:ea:b4:ba:9d:9a:99:c2:56:9c:d2:
         e1:f2:32:78:80:6a:34:ad:db:d2:16:3f:bb:1a:39:a3:40:be:
         8c:5f:ff:8f:a2:41:4c:4c:65:b3:ee:68:c5:d0:91:56:4e:25:
         d3:76:38:66:fe:bf:af:8d:55:68:ef:46:ec:66:ac:35:27:23:
         bb:80:77:f6:2e:55:b2:6d:d8:59:81:65:13:25:d1:4f:0e:e1:
         b3:a4:58:40:70:c7:73:9f:69:83:62:59:8b:8a:53:c3:c9:5d:
         f6:e1:fb:08:78:0d:1e:0d:36:7a:5a:84:1b:86:25:6e:77:cc:
         87:a3:8e:41:ef:3e:95:e8:b4:a5:b5:c2:4f:4b:d6:b5:57:62:
         41:b0:be:c2:a8:49:5e:08:74:a0:8e:c3:d2:71:c9:cf:19:e9:
         df:21:aa:de:ba:d0:cf:49:89:d2:dd:87:ed:a4:1d:03:19:e0:
         01:9f:bf:04:5c:2c:b6:0b:d7:81:f6:36:1c:6a:43:79:04:40:
         c8:f2:14:c6:55:9a:35:6b:eb:d7:6f:cf:2b:ed:42:26:ad:c5:
         1d:1f:f5:ad:d5:a2:49:62:b7:38:d0:af:6b:04:19:ef:da:8f:
         be:89:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:10:00 2024 by rpki-client on console-fra.rpki-client.org