Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZZVc-2x2vGiSBiug2IKtjjIO2Yk.roa
File:                     ZZVc-2x2vGiSBiug2IKtjjIO2Yk.roa (raw, json)
Hash identifier:          uan8wOpJFhXL876l2Tzf7n+PM41DCme6U5gvSo/OCSI=
Subject key identifier:   65:95:5C:FB:6C:76:BC:68:92:06:2B:A0:D8:82:AD:8E:32:0E:D9:89
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018CCA29C87F05AD0DC2E7FCC090695EC062
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZZVc-2x2vGiSBiug2IKtjjIO2Yk.roa
Signing time:             Tue 02 Jan 2024 12:33:05 +0000
ROA not before:           Tue 02 Jan 2024 12:33:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210474
IP address blocks:        62.60.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 05:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:c8:7f:05:ad:0d:c2:e7:fc:c0:90:69:5e:c0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 12:33:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=65955cfb6c76bc6892062ba0d882ad8e320ed989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:75:8b:70:af:d5:41:78:5e:87:c5:0b:19:
                    91:4d:97:54:19:18:5c:9b:f8:9a:9a:1d:83:78:f9:
                    0b:2f:81:0a:88:4d:0b:92:99:b3:83:bb:80:14:04:
                    a5:84:65:d7:e7:56:8b:49:91:8b:6f:d4:a3:8e:03:
                    9b:53:e0:bd:d9:0c:c1:2e:d1:db:d8:c4:fd:e8:e8:
                    0b:46:3e:8c:d6:6f:32:db:cd:c5:79:6b:83:de:38:
                    20:b0:df:1c:44:0b:1d:85:96:10:68:a4:97:40:f1:
                    80:fe:3a:b3:08:02:a0:52:fb:d9:7c:da:f1:c3:c5:
                    a1:70:5e:58:a4:64:52:ff:ff:bc:ad:18:8d:96:4e:
                    d5:3f:77:39:f6:03:fc:3d:c0:59:e7:28:0c:37:4a:
                    fc:82:50:1d:da:09:08:b7:d7:a5:97:b4:cc:72:81:
                    8b:c1:c4:d5:15:4b:8c:ca:25:4c:69:50:7d:d0:11:
                    49:7a:57:6c:63:0b:41:86:d7:4e:ef:a5:d5:8f:ae:
                    69:75:f7:07:f2:e3:e0:43:53:04:b0:5f:8a:0f:7a:
                    df:39:2e:2d:12:51:bc:ea:2e:d7:cd:a7:e8:dd:7b:
                    6a:10:1a:24:27:d3:ba:64:0e:3f:91:a6:32:98:ec:
                    3f:b2:d3:cb:d8:fa:a7:51:6e:21:75:49:e6:dd:4b:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:95:5C:FB:6C:76:BC:68:92:06:2B:A0:D8:82:AD:8E:32:0E:D9:89
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZZVc-2x2vGiSBiug2IKtjjIO2Yk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:58:79:53:b2:9e:4c:c2:c4:33:09:17:70:2c:9b:3b:fe:0c:
         d8:68:0d:73:70:1d:fd:26:a3:41:42:77:a4:77:39:67:ea:3d:
         ed:48:f4:64:2b:57:a8:f9:3e:7b:d7:cc:29:a9:4a:4d:87:83:
         62:5f:a5:84:69:39:21:09:f0:d1:05:cd:c9:0a:14:1f:26:d4:
         8e:0e:2c:f5:df:3f:64:ba:9e:72:17:8d:8e:df:c2:a9:2b:fc:
         41:e0:ea:0b:de:bf:0e:43:64:fe:88:70:bd:34:e8:81:95:d7:
         48:67:40:3f:2d:8e:c3:a6:22:ad:8d:1b:e3:3e:57:af:7b:51:
         48:c3:5e:87:15:c6:8a:03:b6:aa:c0:ed:3a:92:61:93:f8:16:
         f0:5f:38:64:90:1a:9f:ca:c2:f8:75:b8:83:49:9d:f9:45:59:
         fc:15:3b:5f:bf:a8:c4:fc:38:36:01:89:16:bd:16:f1:cc:91:
         de:5f:49:13:c3:0a:48:09:9c:54:e9:8c:ce:64:48:60:46:28:
         2c:bd:25:06:1b:05:e3:56:07:22:03:04:6c:b2:77:34:a0:21:
         94:c0:8b:b8:bb:88:82:93:49:90:2e:28:58:58:ed:7f:0f:b1:
         c7:e0:92:d8:fa:26:e7:90:35:23:84:22:c5:e3:4a:ff:b4:d7:
         7e:f7:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org