Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VRlypvzLDHV5Ms-tgWBOt6qVTrE.roa
File:                     VRlypvzLDHV5Ms-tgWBOt6qVTrE.roa (raw, json)
Hash identifier:          xTcEjA8A+ftM7KtnqMZoagjSr3RS+Ouz0IMpnWz1eAU=
Subject key identifier:   55:19:72:A6:FC:CB:0C:75:79:32:CF:AD:81:60:4E:B7:AA:95:4E:B1
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0188A4DA5577F8D9DF6E664D6A0795454CC9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VRlypvzLDHV5Ms-tgWBOt6qVTrE.roa
Signing time:             Sat 10 Jun 2023 10:29:12 +0000
ROA not before:           Sat 10 Jun 2023 10:29:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15611
IP address blocks:        213.176.96.0/24 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          62.60.184.0/22 maxlen: 24
                          62.60.188.0/22 maxlen: 24
                          62.60.192.0/22 maxlen: 24
                          62.60.196.0/24 maxlen: 24
                          62.60.132.0/22 maxlen: 24
                          62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.143.0/24 maxlen: 24
                          62.60.141.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          62.60.152.0/22 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 07:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a4:da:55:77:f8:d9:df:6e:66:4d:6a:07:95:45:4c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jun 10 10:29:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=551972a6fccb0c757932cfad81604eb7aa954eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:48:27:a2:5f:6d:97:41:ce:21:c8:76:01:
                    7f:7e:1c:2d:ab:b8:12:58:0f:32:8a:2e:77:e5:d2:
                    1e:c7:5e:7b:91:d0:5d:5d:dd:69:21:a1:00:67:9a:
                    cd:c7:81:54:16:14:9d:f3:9f:43:ea:47:98:d3:94:
                    03:24:83:67:d0:e0:ea:9d:2c:58:26:32:5f:be:f5:
                    71:38:93:85:56:80:01:b5:3d:a6:9a:fd:88:e0:2a:
                    8c:5b:79:f4:d5:7b:d3:e0:6f:5f:b5:56:d3:f4:d4:
                    c8:1b:f2:a0:d3:ef:06:a3:66:f2:d1:04:fe:69:bb:
                    26:5a:4e:ee:f5:05:7d:75:b9:a9:4f:ce:61:ed:5c:
                    73:ce:90:c7:90:28:ab:df:3a:0b:ce:fa:5b:e8:86:
                    75:b3:ae:b3:07:13:b3:91:e7:0c:01:d7:69:85:07:
                    50:8f:38:b4:91:01:68:ea:f7:d8:99:84:21:1e:78:
                    2e:80:40:1e:c5:fb:cf:04:28:49:63:c2:b2:15:f9:
                    04:fa:ce:2b:ba:14:52:4c:57:3b:12:ca:b6:4f:f0:
                    84:41:ec:b8:f4:78:3f:27:1c:bf:10:eb:be:19:0d:
                    6f:a8:6c:de:7e:3b:c5:0e:22:65:a0:61:a8:ad:d5:
                    7c:2f:69:69:6e:b7:b1:b1:01:8f:b9:2d:81:04:07:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:19:72:A6:FC:CB:0C:75:79:32:CF:AD:81:60:4E:B7:AA:95:4E:B1
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/VRlypvzLDHV5Ms-tgWBOt6qVTrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.132.0-62.60.137.255
                  62.60.139.0-62.60.143.255
                  62.60.145.0/24
                  62.60.152.0/22
                  62.60.184.0-62.60.196.255
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255

    Signature Algorithm: sha256WithRSAEncryption
         97:47:ec:3e:6f:b7:1c:ed:a0:11:ff:f8:0e:22:74:62:30:f0:
         1d:d7:7f:e0:27:7a:2d:04:01:01:ff:d9:2b:de:9e:7d:8f:8b:
         28:84:24:0f:8d:2d:47:49:ea:85:b9:4b:a0:ce:ae:f7:e4:f5:
         20:d7:10:ca:eb:35:8d:e1:da:80:ff:00:45:65:62:5c:1c:43:
         4e:52:33:ec:a7:45:23:a1:a8:c2:33:74:1c:9d:f5:71:fd:70:
         f8:b6:72:23:3f:e5:71:23:1f:5e:ee:b4:86:21:a9:5a:3c:6c:
         7a:ef:06:66:99:64:28:9f:f4:70:18:d8:1b:1c:47:f8:c0:cd:
         3e:4b:ff:ae:bc:4c:7c:e7:73:8e:e7:48:75:33:d4:85:86:b1:
         9b:38:22:c1:59:e9:6b:52:19:2e:83:a7:21:6a:93:19:bf:d5:
         51:37:c4:9c:81:f1:d9:6f:5f:30:43:57:df:6f:5f:40:d9:9f:
         7b:5d:e3:bb:b6:bd:45:d2:b2:9f:d3:a6:d9:c0:3e:81:13:94:
         80:04:3c:30:34:06:cc:17:48:5c:2d:e8:1e:90:0d:c0:96:b0:
         af:ea:c0:09:1e:05:48:fd:2c:2e:d0:b0:ee:9d:c5:99:1b:0e:
         47:f4:91:85:9b:79:ca:2b:67:d3:33:1f:a2:7f:f9:12:57:48:
         8d:2c:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org