Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Uvhc7u-90kW_h6s-POt_wvkgi8o.roa
File:                     Uvhc7u-90kW_h6s-POt_wvkgi8o.roa (raw, json)
Hash identifier:          S4yAT4ON3vqlw4E5PfGxMh/ju7TVr/9J/3l1k1szbjo=
Subject key identifier:   52:F8:5C:EE:EF:BD:D2:45:BF:87:AB:3E:3C:EB:7F:C2:F9:20:8B:CA
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018DD9C16C4D7A7B9CA2E4B9FFDA63B16249
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Uvhc7u-90kW_h6s-POt_wvkgi8o.roa
Signing time:             Sat 24 Feb 2024 06:15:48 +0000
ROA not before:           Sat 24 Feb 2024 06:15:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15611
IP address blocks:        62.60.128.0/21 maxlen: 24
                          62.60.132.0/22 maxlen: 24
                          62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          62.60.147.0/24 maxlen: 24
                          62.60.164.0/22 maxlen: 24
                          62.60.168.0/21 maxlen: 24
                          62.60.200.0/22 maxlen: 24
                          62.60.204.0/22 maxlen: 24
                          62.60.208.0/22 maxlen: 24
                          62.60.212.0/22 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          213.176.96.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.127.0/24 maxlen: 24
                          2001:790::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 24 Feb 2024 08:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d9:c1:6c:4d:7a:7b:9c:a2:e4:b9:ff:da:63:b1:62:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Feb 24 06:15:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=52f85ceeefbdd245bf87ab3e3ceb7fc2f9208bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:b9:4c:d8:5d:3a:f9:a8:77:89:64:5c:d0:
                    95:8d:3a:5f:0f:e2:7c:f6:71:6e:e8:82:8a:66:ff:
                    37:93:a8:9c:c7:d6:15:75:fb:2b:a7:5e:c5:20:2f:
                    fc:1a:cf:26:d6:eb:85:79:1d:d7:fb:2c:20:f2:7b:
                    04:aa:e4:93:ba:63:c0:7c:9f:32:b8:ab:6d:36:76:
                    99:b3:39:4a:4e:0d:2b:ed:3b:fa:c3:6a:94:18:4d:
                    23:1b:8b:e9:62:19:8e:e9:31:16:64:bf:4c:32:8e:
                    b0:a9:5f:11:52:76:6c:58:d5:1f:eb:c7:7e:3d:2a:
                    b4:c3:b3:50:60:8b:ac:78:8e:fa:fb:95:ec:dc:b4:
                    4c:c9:4e:0d:4c:3e:4a:33:62:83:68:59:f8:4b:68:
                    5b:11:c2:9a:a8:82:5c:91:a1:d5:46:d9:c6:7a:ae:
                    cf:59:95:01:52:c2:5d:a8:86:9e:4b:b8:79:d4:2e:
                    df:9a:21:1a:69:87:c3:24:72:a5:5a:cb:19:f8:c9:
                    2a:21:f5:c1:e8:a0:f0:60:7f:50:26:4b:e7:f8:1e:
                    a4:b0:b2:9b:5a:ec:26:6b:c8:8a:50:21:e8:fe:c0:
                    65:37:73:71:cb:97:15:ee:bd:cb:02:ab:31:5e:01:
                    87:fc:34:13:7a:c6:da:98:f1:99:38:d0:aa:67:4b:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F8:5C:EE:EF:BD:D2:45:BF:87:AB:3E:3C:EB:7F:C2:F9:20:8B:CA
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Uvhc7u-90kW_h6s-POt_wvkgi8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.128.0-62.60.137.255
                  62.60.139.0-62.60.140.255
                  62.60.142.0/24
                  62.60.145.0/24
                  62.60.147.0/24
                  62.60.164.0-62.60.175.255
                  62.60.200.0-62.60.215.255
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255
                  213.176.127.0/24
                IPv6:
                  2001:790::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:b9:ee:a5:b0:19:9e:f4:64:0f:e8:48:44:fd:ef:96:82:ad:
         76:3c:a5:06:48:26:3b:42:b9:af:44:09:be:6a:50:51:4c:76:
         94:20:1f:3b:15:0f:4c:02:6c:39:7d:d2:cc:e9:a3:7a:ef:cb:
         61:e7:4f:cf:42:c8:ea:17:3e:2f:d7:e7:bc:6e:7d:86:cf:ba:
         04:d2:2c:72:11:da:7f:79:e0:9e:56:57:4a:b8:db:84:63:bf:
         ae:7e:71:d1:90:90:41:fc:17:46:3c:4a:12:75:9b:46:aa:3c:
         1e:1a:b9:0d:a1:4e:5f:2e:db:51:49:f7:88:3c:db:b2:42:34:
         64:89:df:2c:c9:3d:20:fc:bc:1c:ea:4e:cd:ba:6c:5a:27:e8:
         f8:65:fd:f2:93:db:68:e4:18:57:c3:89:a5:8a:10:9a:27:a2:
         c6:32:ad:36:1f:54:36:93:44:ac:57:bc:ef:d2:f4:6f:30:9f:
         6e:5f:63:a6:4f:0d:15:ab:b0:4a:4f:7d:e1:e2:57:8b:43:8b:
         01:1a:08:f8:b9:1d:d3:88:c9:7f:e8:e1:b0:58:a1:f2:f7:1e:
         ca:53:1e:f5:de:a1:61:7b:60:c0:b5:41:33:f2:19:a4:d1:22:
         1b:03:4e:c3:2f:28:60:e4:13:12:61:59:26:db:82:24:96:13:
         fd:c9:62:f7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY3ZwWxNenucouS5/9pjsWJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwMjI0MDYxNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmY4NWNlZWVmYmRkMjQ1YmY4N2FiM2UzY2ViN2ZjMmY5MjA4YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvG5TNhdOvmod4lkXNCVjTpfD+J8
9nFu6IKKZv83k6icx9YVdfsrp17FIC/8Gs8m1uuFeR3X+ywg8nsEquSTumPAfJ8y
uKttNnaZszlKTg0r7Tv6w2qUGE0jG4vpYhmO6TEWZL9MMo6wqV8RUnZsWNUf68d+
PSq0w7NQYIuseI76+5Xs3LRMyU4NTD5KM2KDaFn4S2hbEcKaqIJckaHVRtnGeq7P
WZUBUsJdqIaeS7h51C7fmiEaaYfDJHKlWssZ+MkqIfXB6KDwYH9QJkvn+B6ksLKb
Wuwma8iKUCHo/sBlN3Nxy5cV7r3LAqsxXgGH/DQTesbamPGZONCqZ0vg8wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFL4XO7vvdJFv4erPjzrf8L5IIvKMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvVXZoYzd1LTkwa1dfaDZzLVBPdF93dmtnaThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqMAwDBAc+
PIADBAE+PIgwDAMEAD48iwMEAD48jAMEAD48jgMEAD48kQMEAD48kzAMAwQCPjyk
AwQEPjygMAwDBAM+PMgDBAM+PNADBAHVsAQDBADVsGAwDAMEAdWwegMEAdWwfAME
ANWwfzANBAIAAjAHAwUAIAEHkDANBgkqhkiG9w0BAQsFAAOCAQEAyLnupbAZnvRk
D+hIRP3vloKtdjylBkgmO0K5r0QJvmpQUUx2lCAfOxUPTAJsOX3SzOmjeu/LYedP
z0LI6hc+L9fnvG59hs+6BNIschHaf3ngnlZXSrjbhGO/rn5x0ZCQQfwXRjxKEnWb
Rqo8Hhq5DaFOXy7bUUn3iDzbskI0ZInfLMk9IPy8HOpOzbpsWifo+GX98pPbaOQY
V8OJpYoQmieixjKtNh9UNpNErFe879L0bzCfbl9jpk8NFauwSk994eJXi0OLARoI
+Lkd04jJf+jhsFih8vceylMe9d6hYXtgwLVBM/IZpNEiGwNOwy8oYOQTEmFZJtuC
JJYT/cli9w==
-----END CERTIFICATE-----
Generated at Sat Feb 24 12:15:37 2024 by rpki-client on console-ams.rpki-client.org