Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vp-FaQDYK0GdPFuv98UdhS3tnJ0.roa
File:                     Vp-FaQDYK0GdPFuv98UdhS3tnJ0.roa (raw, json)
Hash identifier:          uGL+Lk9lsYoiENDv2slDXyv4nJYHnTGgIO8+cUfFuWA=
Subject key identifier:   56:9F:85:69:00:D8:2B:41:9D:3C:5B:AF:F7:C5:1D:85:2D:ED:9C:9D
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018570B07275BC834A89C0EE1867B85A713D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vp-FaQDYK0GdPFuv98UdhS3tnJ0.roa
Signing time:             Mon 02 Jan 2023 04:14:49 +0000
ROA not before:           Mon 02 Jan 2023 04:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48147
IP address blocks:        62.60.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b0:72:75:bc:83:4a:89:c0:ee:18:67:b8:5a:71:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 04:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=569f856900d82b419d3c5baff7c51d852ded9c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:58:53:6d:a4:3c:51:13:d2:41:bc:06:e8:
                    74:8f:87:88:16:de:47:f7:10:dc:b2:39:12:6b:a7:
                    2c:b2:30:86:f3:a0:fa:16:44:b4:e8:87:ff:cb:30:
                    0f:87:34:73:73:f2:46:d1:a0:6a:7e:bf:e0:0f:20:
                    b9:31:b3:84:7b:02:bd:61:07:70:e2:90:45:71:af:
                    b0:a2:9d:98:71:42:67:4d:8e:90:1d:1f:14:82:6b:
                    3d:28:66:78:80:36:04:b2:23:21:3f:7a:db:2f:3d:
                    ae:e5:f5:ee:b8:3e:3f:c4:cb:f5:6c:26:48:d8:ad:
                    60:f3:8f:ab:ef:cf:03:8a:04:23:5c:1c:b6:e5:b9:
                    d2:3d:b7:a5:73:b1:eb:49:69:1f:30:d9:ea:e9:b7:
                    db:d7:33:f0:df:f7:74:6b:9a:d1:f4:64:c6:ab:66:
                    39:50:20:52:ff:b2:3b:bc:77:bf:a9:12:1f:96:ed:
                    b1:5c:dd:ce:7d:24:2f:0d:87:20:cc:b1:87:a2:fa:
                    21:07:8e:88:f9:a4:5c:2c:ac:00:10:4c:8a:4f:0a:
                    b6:a8:46:fc:70:05:25:1e:38:27:6b:e6:2b:2e:89:
                    36:3e:57:bf:d3:3e:6a:54:cc:4a:68:ed:ed:51:f3:
                    01:89:16:c9:33:6c:b0:ed:be:4a:6a:ce:31:33:8f:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:85:69:00:D8:2B:41:9D:3C:5B:AF:F7:C5:1D:85:2D:ED:9C:9D
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Vp-FaQDYK0GdPFuv98UdhS3tnJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:80:7d:1e:38:a2:e5:55:44:6f:c3:bf:c1:c3:6e:8d:c9:76:
         40:c0:0a:8e:eb:bc:c5:6a:68:82:03:56:ac:5a:56:70:98:9f:
         dc:98:1a:01:c5:28:51:f2:e0:42:99:98:13:25:ca:a9:69:6e:
         3b:ac:c2:dd:5d:e5:cc:d3:d3:7a:19:de:59:6f:4b:94:f1:f4:
         2b:6b:cb:17:8e:82:28:fe:ce:60:66:7a:c9:09:c1:fa:c2:0d:
         5e:ce:78:a7:ad:0f:3d:5b:c3:01:9a:79:e3:75:71:5c:be:6b:
         08:b5:62:77:25:97:48:16:d9:2b:33:67:ec:95:00:ad:c0:c1:
         92:3f:41:47:26:f1:4b:80:02:96:97:ba:70:d6:ed:23:fc:93:
         87:86:27:39:c7:54:11:53:1f:42:69:61:bf:a7:88:d7:b3:a8:
         4a:e7:ca:9a:70:ab:0f:d4:68:d9:a6:b8:1d:02:e8:cd:4b:d0:
         45:2b:81:c3:7e:f1:e5:be:5d:1e:47:5b:52:dd:be:37:40:82:
         15:e6:6f:8f:b8:cb:71:14:fa:06:3b:e0:2a:e4:e3:8c:a7:4e:
         72:02:f5:ea:47:a5:da:12:61:db:26:89:63:e2:e4:95:c4:36:
         a0:8c:c5:2f:8f:d2:23:fd:98:a7:7a:67:dd:af:90:6f:bb:72:
         29:4f:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org