Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/e6Fr84ixg77qV_2CJEMbqRXXbb8.roa
File:                     e6Fr84ixg77qV_2CJEMbqRXXbb8.roa (raw, json)
Hash identifier:          KFxXqgrF6/6AgcOFgVVT4UkNADzTOAPU+nf+9miCGbA=
Subject key identifier:   7B:A1:6B:F3:88:B1:83:BE:EA:57:FD:82:24:43:1B:A9:15:D7:6D:BF
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0189392D7F98FDBC4A4FCFD682AEB44A262C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/e6Fr84ixg77qV_2CJEMbqRXXbb8.roa
Signing time:             Sun 09 Jul 2023 05:43:50 +0000
ROA not before:           Sun 09 Jul 2023 05:43:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15611
IP address blocks:        213.176.96.0/24 maxlen: 24
                          213.176.4.0/24 maxlen: 24
                          213.176.5.0/24 maxlen: 24
                          62.60.168.0/21 maxlen: 24
                          62.60.184.0/22 maxlen: 24
                          62.60.188.0/22 maxlen: 24
                          62.60.132.0/22 maxlen: 24
                          62.60.136.0/24 maxlen: 24
                          62.60.137.0/24 maxlen: 24
                          62.60.139.0/24 maxlen: 24
                          62.60.140.0/24 maxlen: 24
                          62.60.141.0/24 maxlen: 24
                          62.60.142.0/24 maxlen: 24
                          62.60.145.0/24 maxlen: 24
                          62.60.152.0/22 maxlen: 24
                          62.60.146.0/23 maxlen: 24
                          213.176.124.0/24 maxlen: 24
                          213.176.125.0/24 maxlen: 24
                          213.176.122.0/24 maxlen: 24
                          213.176.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Jul 2023 10:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:39:2d:7f:98:fd:bc:4a:4f:cf:d6:82:ae:b4:4a:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jul  9 05:43:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ba16bf388b183beea57fd8224431ba915d76dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:7a:f5:17:1c:e7:49:85:b9:38:79:fe:cf:
                    0a:e1:7d:e8:32:bf:a2:47:b8:54:da:57:e4:b6:e5:
                    bc:31:c5:09:5e:88:17:6d:f1:0e:65:3e:4e:01:42:
                    98:64:65:0b:6e:85:13:26:ba:b6:eb:c1:9e:fa:b2:
                    86:cf:b7:97:f5:3f:09:4a:ef:6f:29:5d:6a:0e:a0:
                    db:7f:25:07:be:40:db:ba:b3:d3:3c:ca:e7:4b:d6:
                    09:b5:bb:16:5f:98:ed:ed:5e:02:88:63:5c:ad:24:
                    cf:1b:b0:a6:30:12:f8:11:4d:eb:ba:46:31:96:0f:
                    ff:27:6e:1b:26:2c:a4:e6:75:54:76:4f:d8:30:6d:
                    f2:68:be:4e:be:ff:ee:60:3a:f7:e9:7a:82:af:98:
                    4f:12:31:87:cb:a8:bd:5c:87:25:e7:00:39:8d:b4:
                    62:4d:43:6e:be:08:a9:84:1c:9a:1f:72:e4:34:36:
                    4e:46:d4:ea:43:c0:9d:4e:61:fd:d8:95:4b:de:0c:
                    9e:d8:5b:1f:17:7c:ee:31:67:e8:02:8a:c9:08:23:
                    45:df:ef:e8:4f:b9:a5:1d:a6:c5:a5:19:59:56:0e:
                    d5:00:c4:a9:06:90:05:d6:5c:e1:50:13:06:93:05:
                    23:0f:70:4c:a9:5f:d0:5b:3d:a9:0d:12:4a:1a:a9:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A1:6B:F3:88:B1:83:BE:EA:57:FD:82:24:43:1B:A9:15:D7:6D:BF
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/e6Fr84ixg77qV_2CJEMbqRXXbb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.132.0-62.60.137.255
                  62.60.139.0-62.60.142.255
                  62.60.145.0-62.60.147.255
                  62.60.152.0/22
                  62.60.168.0/21
                  62.60.184.0/21
                  213.176.4.0/23
                  213.176.96.0/24
                  213.176.122.0-213.176.125.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:a3:9d:2a:a0:4d:3f:0e:8e:be:2c:47:9d:5a:4d:e2:ec:14:
         45:b4:0f:f3:d9:4b:ee:9d:0f:01:72:20:94:f7:32:91:1a:0b:
         97:72:bf:15:57:64:b6:dd:96:49:fb:76:90:30:57:ab:92:31:
         35:2c:14:de:cf:34:72:c8:d6:01:9e:92:cd:ac:97:82:90:75:
         65:13:b0:46:e0:d2:91:f0:32:6b:e9:48:e3:ce:41:82:c2:bc:
         b9:f3:77:8b:6c:07:37:e2:f0:03:30:06:04:a8:0e:7d:2c:01:
         e4:9b:a9:c0:1e:9a:d0:f3:a1:68:bd:e4:16:c1:80:fd:57:d0:
         63:a5:3f:f4:b3:05:00:c4:56:3b:a8:1a:de:39:7c:8b:ea:c9:
         16:34:02:b4:b5:1a:c5:ec:c7:eb:c2:43:a4:03:97:ec:a8:44:
         b4:66:ee:c1:0c:32:23:24:1f:f7:c8:02:b1:e2:2f:0a:7a:06:
         d8:9e:6d:87:45:bb:fb:8c:7e:60:d4:da:f4:38:2d:31:e4:4d:
         f4:a1:ac:bd:94:41:b1:7b:3d:af:a0:0b:33:c9:d8:f1:6c:a7:
         f4:5a:f4:4a:17:b7:79:c2:e8:48:5b:ba:92:c7:e9:9a:6c:a3:
         4c:13:a5:91:fe:93:44:98:4a:b5:73:bc:be:78:79:eb:c3:72:
         2d:7f:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org