Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OeNujl6Y4JFXRMsdONKd5w8zIhM.roa
File:                     OeNujl6Y4JFXRMsdONKd5w8zIhM.roa (raw, json)
Hash identifier:          MafSwvk5rOyrmz/8CMlYG3Z7NOms6eQCVLwKYSNU5H8=
Subject key identifier:   39:E3:6E:8E:5E:98:E0:91:57:44:CB:1D:38:D2:9D:E7:0F:33:22:13
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0192280A2E54B4BF62F678EBFECA7D91F3B8
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OeNujl6Y4JFXRMsdONKd5w8zIhM.roa
Signing time:             Wed 25 Sep 2024 07:16:48 +0000
ROA not before:           Wed 25 Sep 2024 07:16:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43260
IP address blocks:        62.60.235.0/24 maxlen: 24
                          62.60.236.0/22 maxlen: 24
                          62.60.240.0/22 maxlen: 24
                          213.176.74.0/23 maxlen: 24
                          213.176.92.0/22 maxlen: 24
                          213.176.112.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 06:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:28:0a:2e:54:b4:bf:62:f6:78:eb:fe:ca:7d:91:f3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Sep 25 07:16:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=39e36e8e5e98e0915744cb1d38d29de70f332213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:e1:d7:8a:8f:bb:59:7c:f7:74:ae:ec:c6:
                    1d:97:e1:f9:44:a5:a2:af:5c:95:0b:4c:38:df:73:
                    27:3e:8c:c5:5c:41:13:a8:46:8f:f5:7e:d4:06:a7:
                    c5:a8:d9:17:12:9b:9b:ed:04:41:46:ba:c1:da:64:
                    99:76:a5:ac:76:d8:4b:19:9a:c8:f6:00:3f:c8:39:
                    eb:b7:97:a8:ec:d9:2c:bd:12:66:a6:73:ff:9f:d2:
                    9c:c7:8f:4a:4e:45:6b:76:d7:cb:02:e5:54:f4:2f:
                    39:79:a1:19:18:56:22:d8:c6:c5:52:c0:e2:b4:02:
                    7c:76:bd:60:d6:41:b6:7b:72:0b:f7:b3:cf:51:fc:
                    77:0f:8a:87:fb:f4:b7:65:a6:76:db:bb:4a:24:01:
                    f7:24:fd:c6:5c:c1:af:5f:63:66:56:3e:d7:b9:88:
                    13:63:d8:2d:9d:09:e1:3d:a2:b7:d6:b1:04:73:2a:
                    6b:9a:d1:c7:f3:1a:10:79:89:88:f4:94:05:91:e9:
                    59:10:42:d9:ea:20:1a:d7:85:09:10:47:d2:82:0f:
                    71:10:35:11:34:a0:79:5d:20:c6:58:76:95:96:6a:
                    a3:c8:de:50:d1:79:be:d5:cd:56:13:a6:b1:74:a9:
                    96:21:50:2f:6d:15:09:3f:99:3b:dc:a7:ce:bf:38:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E3:6E:8E:5E:98:E0:91:57:44:CB:1D:38:D2:9D:E7:0F:33:22:13
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/OeNujl6Y4JFXRMsdONKd5w8zIhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.235.0-62.60.243.255
                  213.176.74.0/23
                  213.176.92.0/22
                  213.176.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:df:82:ae:d8:54:db:0c:23:8c:41:15:6d:e8:c6:1e:b3:a6:
         16:62:26:c6:90:cf:44:ea:52:46:04:1a:c3:13:39:ea:da:93:
         9f:7a:89:1c:a2:10:24:b8:e5:24:4e:04:5f:6c:a5:40:3e:85:
         3e:c8:64:12:51:fa:9b:fc:e2:8c:08:cc:f4:ff:7e:54:b6:64:
         51:86:95:37:85:5b:6a:5c:d8:7b:ac:50:3d:4b:06:96:c2:fe:
         7d:da:2c:81:ca:e9:7b:6a:27:42:be:f8:bb:e7:6c:79:ae:a3:
         c7:8b:e8:5d:38:b5:cf:64:c2:8e:ee:20:5b:55:0b:89:63:9f:
         5a:7c:b9:f2:7c:70:b7:5c:13:b7:8a:5c:09:38:40:d7:6f:f9:
         b1:ac:45:40:0b:69:03:88:ca:fa:4e:c6:09:97:c4:82:f4:5d:
         70:a1:36:30:51:86:34:8c:41:39:11:29:4c:57:27:40:51:06:
         61:0d:a5:61:55:f1:cf:28:21:78:55:e8:7c:b4:98:cb:ee:d1:
         8d:91:62:64:27:b7:d2:ed:12:22:93:60:81:9d:fb:ab:85:a5:
         4d:78:63:83:81:f2:a7:77:3c:1d:d0:07:7d:d9:bc:7d:e9:51:
         18:0d:06:d6:75:a0:b0:0f:90:ce:6f:af:f0:15:17:81:8a:bd:
         3c:67:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:59:28 2024 by rpki-client on console-ams.rpki-client.org