Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TIseXItneluSBWUVGquNUFLv_VM.roa
File:                     TIseXItneluSBWUVGquNUFLv_VM.roa (raw, json)
Hash identifier:          2Fz9WlNEOQX4HkV7hZsgydtPtbEBM3h7JbJnl7Abwm0=
Subject key identifier:   4C:8B:1E:5C:8B:67:7A:5B:92:05:65:15:1A:AB:8D:50:52:EF:FD:53
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018B9182E330CE424BA766F78B17BB625E38
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TIseXItneluSBWUVGquNUFLv_VM.roa
Signing time:             Thu 02 Nov 2023 19:29:15 +0000
ROA not before:           Thu 02 Nov 2023 19:29:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        62.60.216.0/22 maxlen: 24
                          62.60.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:91:82:e3:30:ce:42:4b:a7:66:f7:8b:17:bb:62:5e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Nov  2 19:29:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c8b1e5c8b677a5b920565151aab8d5052effd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:1b:36:3a:cf:8c:9d:86:46:07:de:6b:33:
                    0f:69:26:3c:92:c6:d8:6c:92:5d:c8:5f:a3:b7:48:
                    fc:35:87:75:e3:54:81:18:ef:7d:1a:23:8c:45:f1:
                    e5:1e:b8:19:78:33:6d:0f:1b:14:ea:cd:d5:23:26:
                    c7:a7:0d:97:bc:9e:b5:d1:fe:db:2c:9f:40:c7:3f:
                    ca:e7:dc:43:ea:94:36:7d:96:92:9d:dc:83:c2:c4:
                    2a:af:39:6e:ec:ee:13:27:b4:96:6d:cb:62:29:5c:
                    9c:ba:7f:65:f5:b8:b1:c4:85:27:54:49:74:f6:ea:
                    b0:56:d8:8c:41:cf:92:58:13:ed:2e:cf:4c:3e:64:
                    7e:d4:fa:21:a5:1b:0b:13:05:1e:48:01:8a:05:53:
                    39:cb:f7:66:3c:fa:19:84:8a:00:64:8f:53:89:6c:
                    c3:a0:36:5c:80:4b:de:5f:be:50:34:4c:45:c0:a4:
                    e6:cd:99:06:5a:cd:fa:ef:9e:0e:46:db:f5:a6:5f:
                    62:84:5d:75:b3:eb:1c:5d:12:9b:91:42:45:2d:0b:
                    a9:d2:ba:fd:76:29:18:cd:0f:7e:66:87:75:a2:6f:
                    b2:16:0b:ba:5b:56:5a:7a:85:0e:ab:ac:09:1b:6e:
                    c4:f2:1a:22:86:da:22:c4:b5:68:66:b5:8e:3b:68:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:1E:5C:8B:67:7A:5B:92:05:65:15:1A:AB:8D:50:52:EF:FD:53
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TIseXItneluSBWUVGquNUFLv_VM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:39:80:f5:58:73:98:4d:95:5a:dc:0f:be:89:f4:d0:92:
         fb:42:f4:d6:98:05:f5:30:ab:b4:35:e1:f7:f2:a3:22:c6:44:
         7d:8f:59:53:1b:c6:ab:e4:21:a4:c5:27:1b:0e:79:40:6d:7c:
         e3:24:81:73:01:f2:46:fc:76:15:de:6a:cc:08:d7:f0:44:23:
         cb:92:dc:d3:6f:a0:f6:86:41:d5:a3:6c:dc:34:c5:5b:c5:d4:
         43:35:12:bb:da:f5:10:c9:fc:30:22:92:72:e5:e1:d0:59:4e:
         1e:92:ea:de:66:24:63:de:05:35:28:0d:e3:04:bd:c4:5b:94:
         e4:20:73:e6:47:22:e1:10:af:ce:0a:9d:21:e9:9a:c3:4d:f1:
         d2:6c:9a:bd:ae:37:50:cb:72:a1:c9:1e:e7:1f:b6:47:d7:f7:
         89:a7:ca:3f:27:fe:b5:a9:ed:a8:3d:01:37:8b:7e:85:3f:99:
         6c:96:65:13:6f:73:82:49:31:57:32:3a:4f:96:be:84:7b:15:
         c3:29:52:88:86:a7:26:02:48:e1:49:df:40:9f:55:70:91:ec:
         f0:21:b2:de:3f:c4:36:c7:95:40:31:17:c4:0f:91:26:0e:ad:
         a0:c4:12:1f:3d:39:b9:8b:c0:44:8a:e8:8a:07:dd:6d:21:a1:
         83:e0:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org