Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jp4sPHxVs43sEzDXZ4dtadzll3Q.roa
File:                     jp4sPHxVs43sEzDXZ4dtadzll3Q.roa (raw, json)
Hash identifier:          QYwrWUtnKYUamv/+wjRCn8wAcbImuovjkQXEuQDjn54=
Subject key identifier:   8E:9E:2C:3C:7C:55:B3:8D:EC:13:30:D7:67:87:6D:69:DC:E5:97:74
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018570B074712953D28B11C848DCAD148CDD
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jp4sPHxVs43sEzDXZ4dtadzll3Q.roa
Signing time:             Mon 02 Jan 2023 04:14:50 +0000
ROA not before:           Mon 02 Jan 2023 04:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58202
IP address blocks:        62.60.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 07 Oct 2023 06:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b0:74:71:29:53:d2:8b:11:c8:48:dc:ad:14:8c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 04:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e9e2c3c7c55b38dec1330d767876d69dce59774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:1f:e1:c9:2c:e0:b9:e7:fb:32:90:f5:38:
                    a8:d2:a6:51:5d:11:75:b5:a8:70:6a:21:85:f4:40:
                    d0:fc:1d:c8:53:74:9f:3c:4c:90:e4:6e:36:fb:5b:
                    f1:40:90:54:97:e0:84:9e:8e:61:44:d2:04:d5:fb:
                    98:c4:a2:80:ca:66:b7:b4:b4:67:66:ae:f6:31:0b:
                    e0:c3:8f:67:6c:34:72:9b:78:d6:bd:af:ed:6b:f8:
                    47:6e:db:c5:72:f3:80:4a:8c:5c:c3:fc:d3:f2:2b:
                    a8:1f:41:c2:76:42:0c:35:b5:3c:8f:69:99:91:e0:
                    44:eb:f5:0b:48:c1:0d:12:a8:39:fe:4a:da:cd:67:
                    ca:91:18:03:58:70:00:ef:f0:3a:e5:14:59:4d:73:
                    83:79:37:5e:83:74:52:39:10:03:87:b6:10:51:b2:
                    ae:e5:65:0a:d8:11:af:2a:d6:28:19:de:02:d8:2c:
                    e4:df:34:65:77:61:03:0b:79:a3:02:d1:df:0b:cd:
                    58:1b:59:5b:9d:fa:b7:80:ec:aa:8f:ad:dd:ac:c2:
                    c4:2a:f0:e6:3c:1e:d5:1c:61:95:2d:cd:04:c2:0b:
                    f8:df:3e:6a:1a:79:9b:e8:98:0c:59:4b:96:e5:4c:
                    1a:d5:58:a0:6e:74:57:ff:75:df:d0:8c:b2:04:af:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:2C:3C:7C:55:B3:8D:EC:13:30:D7:67:87:6D:69:DC:E5:97:74
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jp4sPHxVs43sEzDXZ4dtadzll3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:ca:a9:62:90:43:e1:b7:c4:74:fd:fd:e4:05:95:09:90:
         e3:f6:87:93:c0:4f:de:5d:8d:63:ac:59:85:61:4a:9e:06:08:
         89:9d:be:a5:20:cc:d3:d4:1b:f3:5e:7c:ec:4d:b9:75:c3:38:
         e8:46:ff:1d:92:70:8c:6c:0b:76:42:7b:bd:53:11:3b:f3:c4:
         da:2a:8f:06:22:42:ff:1a:c9:6b:45:1c:38:cd:7a:96:9f:ab:
         11:58:35:7a:b0:1d:94:8c:32:c7:ae:59:7e:79:1e:36:07:eb:
         36:19:32:8e:33:91:45:ad:bb:7c:c3:1f:f2:07:56:4a:79:48:
         a2:1d:76:38:eb:8e:0a:c8:f0:3e:75:a9:37:95:7e:b7:7c:e1:
         3e:14:80:a5:ba:dc:85:f2:36:64:b6:57:c3:42:5d:77:9c:f8:
         b5:0d:f2:64:9d:ff:f6:43:8e:d2:02:62:17:0f:88:2d:f9:a9:
         84:d2:9d:68:2e:f5:d8:08:9e:85:69:ee:32:11:6c:87:96:16:
         bd:f6:22:11:6d:15:4d:4b:fb:60:3b:ec:1a:e8:89:1e:e4:04:
         ef:7f:52:d0:39:5d:68:58:33:8e:d1:c8:bf:04:8f:8e:9b:08:
         21:e0:92:5e:d7:92:e5:1d:88:39:c6:cd:ab:4b:1c:2d:f9:a8:
         62:f9:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org