Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jlp1Aeuv6JWAt2pkFvesQ30JY0Y.roa
File:                     jlp1Aeuv6JWAt2pkFvesQ30JY0Y.roa (raw, json)
Hash identifier:          pY76koLw7CyKKWTgCtl+uWzDGIqDhuRpKkwCq2pyK+8=
Subject key identifier:   8E:5A:75:01:EB:AF:E8:95:80:B7:6A:64:16:F7:AC:43:7D:09:63:46
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018B37C48021B9E5446A0AC0D62DE893617E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jlp1Aeuv6JWAt2pkFvesQ30JY0Y.roa
Signing time:             Mon 16 Oct 2023 09:15:06 +0000
ROA not before:           Mon 16 Oct 2023 09:15:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64458
IP address blocks:        62.60.180.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:37:c4:80:21:b9:e5:44:6a:0a:c0:d6:2d:e8:93:61:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Oct 16 09:15:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e5a7501ebafe89580b76a6416f7ac437d096346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:9b:29:09:83:18:28:1c:cb:d9:de:bb:9b:
                    81:91:8f:28:8c:94:81:b1:a3:54:f1:af:7a:ee:89:
                    ee:df:04:65:00:8b:00:05:c6:f0:4c:49:ae:7f:ee:
                    89:ac:02:42:a9:0c:ab:d0:9f:1d:6a:a7:73:c7:bb:
                    30:20:8c:52:6f:be:1f:4a:f5:65:51:08:6c:68:20:
                    e8:9a:0d:c7:7f:1b:ef:6e:80:2a:c8:8e:02:dd:22:
                    5d:d2:7b:65:54:fd:89:8d:81:86:54:14:a7:9f:68:
                    9a:5a:c3:b8:ec:bc:dd:0a:f8:e4:17:e4:8f:66:ea:
                    28:d4:19:7a:d6:d7:b8:b8:10:91:ff:94:b9:75:5c:
                    32:f5:7d:0d:93:96:f5:64:fc:a7:c5:51:35:d1:8d:
                    9e:70:eb:c5:23:f2:85:5e:61:1f:80:11:fc:8f:c5:
                    15:74:48:4f:c3:a9:4c:f7:cf:b3:2f:0e:12:90:4b:
                    d5:47:00:54:16:8b:b5:bb:34:71:dd:dd:a7:69:18:
                    bc:85:8b:a7:cb:5e:0f:0c:0b:3e:29:0e:6b:3f:b1:
                    0b:d1:80:81:d1:83:2c:6b:01:43:73:43:75:0f:1c:
                    e1:73:09:23:d8:0b:93:75:97:9c:dd:45:a9:e0:05:
                    2e:9c:2b:93:e9:d7:4e:1c:c9:3e:a9:63:e9:8e:7e:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5A:75:01:EB:AF:E8:95:80:B7:6A:64:16:F7:AC:43:7D:09:63:46
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jlp1Aeuv6JWAt2pkFvesQ30JY0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:1b:7a:4d:0e:92:de:3a:e8:5d:71:00:62:ca:14:c6:4d:
         00:52:1d:c8:1b:f8:af:c6:03:b1:3c:fb:83:e8:a4:0b:9e:cb:
         26:fd:9e:31:8e:d5:40:b1:3f:d5:0c:4c:2e:e8:d8:ed:ed:d1:
         f5:a9:ba:76:c7:36:59:5b:b5:00:5b:e4:1f:7c:0d:c9:22:01:
         54:08:cf:fd:83:d2:c1:90:31:be:fe:f3:ee:02:9b:1c:16:69:
         1c:73:a7:0d:de:26:d1:16:ea:7d:fc:75:b0:9c:90:e8:41:c6:
         fb:64:59:8d:25:67:cb:38:3a:63:40:29:bc:14:c4:7b:be:5a:
         04:41:f5:3b:dd:f9:3d:a4:3f:21:7f:e7:df:1c:78:b1:67:89:
         ea:21:e5:48:c2:28:f2:52:79:c9:47:df:78:4d:47:ad:4a:14:
         b6:2a:1b:f8:e9:6d:d2:72:dd:09:85:08:24:47:d8:b3:91:a0:
         83:76:1d:09:7a:b7:42:c7:b4:13:16:46:34:11:87:9e:e2:8d:
         2a:09:83:d6:1a:a5:ce:68:93:e9:8f:a4:ef:22:70:de:9c:64:
         4c:15:1c:49:39:fb:6e:91:d7:0d:3f:99:b6:a6:bb:15:5d:fe:
         b3:dd:80:c7:93:00:e9:b8:a9:48:37:c2:be:9b:3c:ec:34:49:
         f2:92:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org