Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/hsVo-BIGxphaRIWxi7j4w_w5BqY.roa
File:                     hsVo-BIGxphaRIWxi7j4w_w5BqY.roa (raw, json)
Hash identifier:          EO8T+mLVvGukm1zYis9m6T/QRU2WHwUafUeHCRAgrqA=
Subject key identifier:   86:C5:68:F8:12:06:C6:98:5A:44:85:B1:8B:B8:F8:C3:FC:39:06:A6
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018F5C66DF3AC60E09FC50D05AE7B0271C49
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/hsVo-BIGxphaRIWxi7j4w_w5BqY.roa
Signing time:             Thu 09 May 2024 08:09:56 +0000
ROA not before:           Thu 09 May 2024 08:09:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206873
IP address blocks:        62.60.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 May 2024 05:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5c:66:df:3a:c6:0e:09:fc:50:d0:5a:e7:b0:27:1c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: May  9 08:09:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=86c568f81206c6985a4485b18bb8f8c3fc3906a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:1a:65:5a:d7:64:d4:25:d6:69:c5:51:91:
                    1b:b9:d9:40:7a:f2:41:3d:80:e2:b0:e0:dc:cc:f8:
                    d0:7e:6c:ed:e0:18:5f:36:39:07:58:2f:6e:31:83:
                    f1:c9:5b:41:b2:96:cb:43:49:40:d4:9a:c4:d3:a2:
                    ce:ba:c2:4d:2b:79:a7:94:20:ee:bc:c1:8f:96:24:
                    f6:98:e8:cd:11:d8:d8:3f:c3:d8:97:cb:95:52:c8:
                    88:22:92:69:55:83:6d:4c:20:c2:f1:5d:af:d0:89:
                    87:e3:e9:35:f1:62:5f:a3:b6:26:98:85:c5:6c:5c:
                    84:aa:ac:10:ba:af:4e:68:a8:7d:34:51:15:55:0b:
                    60:2c:d6:9e:e8:4a:93:ac:50:a7:d3:86:b2:1b:44:
                    d9:0f:2f:6b:95:92:86:85:c3:c0:aa:1e:81:30:7e:
                    fb:5d:9f:2a:bc:bf:c3:db:46:33:1d:9f:2e:91:16:
                    23:63:64:87:61:8f:0a:e7:1f:37:b2:8a:fd:08:76:
                    23:00:e3:e1:0b:df:93:4b:16:60:b7:5c:11:95:a4:
                    a3:b9:7b:65:ff:49:f5:a1:d0:a0:63:92:da:89:34:
                    11:36:b7:78:c8:d4:33:c3:23:6e:9a:d3:37:8f:2c:
                    a6:20:74:12:c0:77:07:0f:db:5d:34:69:b5:8b:62:
                    fa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C5:68:F8:12:06:C6:98:5A:44:85:B1:8B:B8:F8:C3:FC:39:06:A6
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/hsVo-BIGxphaRIWxi7j4w_w5BqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:52:41:94:87:cc:e8:d1:c8:0b:d8:a7:32:b4:b2:0b:95:df:
         11:68:32:b7:e6:dc:e2:c3:ba:0b:6c:3a:16:db:48:0e:1c:49:
         0a:75:b3:ed:6c:2b:70:7a:ed:08:ef:08:2c:ed:1b:e3:10:53:
         e7:fc:a3:fc:2a:5c:8c:46:dc:02:c1:ab:77:0d:d3:5a:c3:3b:
         9b:ef:6e:38:d6:b5:e8:f3:cd:20:3d:4d:fa:b5:98:2b:4c:e0:
         aa:7a:ca:5a:2d:f2:8f:a1:4b:92:f7:8b:90:a4:ef:59:f6:25:
         cc:07:5f:d6:33:03:5e:0b:49:88:30:48:50:c0:88:39:be:04:
         74:ac:4e:dd:8d:39:82:43:53:64:4d:cb:a3:5c:fb:40:44:4c:
         a4:9d:2d:48:88:e6:76:74:9e:17:1b:e7:75:82:0b:99:24:27:
         02:0a:01:43:78:03:77:11:e2:47:31:4f:7d:d1:6b:5f:3a:31:
         a8:9e:b2:ae:39:2a:67:27:6c:53:1a:cf:97:c7:9a:4d:23:d7:
         e9:1e:9c:a4:b9:db:72:6c:5e:ef:28:58:09:6a:61:c4:23:af:
         76:a7:00:d1:b0:d3:22:24:56:8a:f6:76:ea:d2:18:f1:cb:19:
         ad:e1:06:bd:f1:ed:6e:c6:7e:f2:d5:f3:70:8f:90:2c:c3:24:
         9a:52:67:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9cZt86xg4J/FDQWuewJxxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwNTA5MDgwOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmM1NjhmODEyMDZjNjk4NWE0NDg1YjE4YmI4ZjhjM2ZjMzkwNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEgaZVrXZNQl1mnFUZEbudlAevJB
PYDisODczPjQfmzt4BhfNjkHWC9uMYPxyVtBspbLQ0lA1JrE06LOusJNK3mnlCDu
vMGPliT2mOjNEdjYP8PYl8uVUsiIIpJpVYNtTCDC8V2v0ImH4+k18WJfo7YmmIXF
bFyEqqwQuq9OaKh9NFEVVQtgLNae6EqTrFCn04ayG0TZDy9rlZKGhcPAqh6BMH77
XZ8qvL/D20YzHZ8ukRYjY2SHYY8K5x83sor9CHYjAOPhC9+TSxZgt1wRlaSjuXtl
/0n1odCgY5LaiTQRNrd4yNQzwyNumtM3jyymIHQSwHcHD9tdNGm1i2L6yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIbFaPgSBsaYWkSFsYu4+MP8OQamMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvaHNWby1CSUd4cGhhUklXeGk3ajR3X3c1QnFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPjzgMA0G
CSqGSIb3DQEBCwUAA4IBAQBNUkGUh8zo0cgL2KcytLILld8RaDK35tziw7oLbDoW
20gOHEkKdbPtbCtweu0I7wgs7RvjEFPn/KP8KlyMRtwCwat3DdNawzub72441rXo
880gPU36tZgrTOCqespaLfKPoUuS94uQpO9Z9iXMB1/WMwNeC0mIMEhQwIg5vgR0
rE7djTmCQ1NkTcujXPtAREyknS1IiOZ2dJ4XG+d1gguZJCcCCgFDeAN3EeJHMU99
0WtfOjGonrKuOSpnJ2xTGs+Xx5pNI9fpHpykudtybF7vKFgJamHEI692pwDRsNMi
JFaK9nbq0hjxyxmt4Qa98e1uxn7y1fNwj5AswySaUmc6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org