Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jsbiBpHvmREu7LcQdEfd11AFUXg.roa
File:                     jsbiBpHvmREu7LcQdEfd11AFUXg.roa (raw, json)
Hash identifier:          e4YDP5ZoNgOSy+W6Z/9Q1+O6xPtBCN9pQyMFz209g4Q=
Subject key identifier:   8E:C6:E2:06:91:EF:99:11:2E:EC:B7:10:74:47:DD:D7:50:05:51:78
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0186ACF2DBF261A6A0C9546E5A27820855F9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jsbiBpHvmREu7LcQdEfd11AFUXg.roa
Signing time:             Sat 04 Mar 2023 14:07:22 +0000
ROA not before:           Sat 04 Mar 2023 14:07:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57844
IP address blocks:        213.176.64.0/22 maxlen: 24
                          62.60.128.0/22 maxlen: 24
                          62.60.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 May 2023 07:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ac:f2:db:f2:61:a6:a0:c9:54:6e:5a:27:82:08:55:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Mar  4 14:07:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ec6e20691ef99112eecb7107447ddd750055178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:ee:64:85:1f:8b:74:69:ae:2f:4f:c0:4d:
                    10:a5:9a:68:e3:93:63:4e:07:22:35:97:0e:28:68:
                    d2:2d:5a:9e:10:29:e4:9e:25:bb:63:db:7f:b1:0b:
                    ef:0d:33:ef:f3:a0:e0:c8:ba:1a:98:d1:9d:a8:53:
                    c1:65:3b:86:3e:c0:bb:80:2d:bb:67:fa:77:6e:d7:
                    c3:83:e4:74:48:b7:91:ec:04:14:19:6a:94:ed:7b:
                    6c:a2:dc:aa:1d:64:23:72:a7:00:10:11:bb:53:e1:
                    44:76:28:d6:37:b8:4c:25:f5:be:3e:4b:77:77:ca:
                    f5:ab:b6:0d:bf:80:c4:b8:af:0d:3a:b5:54:b3:23:
                    80:12:e5:3c:e0:1b:e8:2f:0f:d6:c1:ca:c2:0a:2a:
                    33:02:b1:fd:41:43:dd:40:b2:42:5a:9f:e3:f8:e2:
                    71:e3:82:0f:2a:f3:81:af:18:8a:c2:f4:d8:05:2f:
                    e7:cb:72:04:4d:a5:73:87:2e:d0:3e:1f:ae:aa:46:
                    52:b9:32:a0:8d:eb:5e:81:0e:a8:2d:ac:53:cf:4a:
                    10:66:bd:bf:76:35:3f:8b:8a:78:c9:48:33:45:0a:
                    80:16:b5:47:b4:7c:32:a8:6e:82:32:6c:4e:c6:04:
                    b5:c7:d4:d3:d7:2d:82:62:f3:ae:b9:72:ad:b4:02:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:E2:06:91:EF:99:11:2E:EC:B7:10:74:47:DD:D7:50:05:51:78
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jsbiBpHvmREu7LcQdEfd11AFUXg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.128.0/22
                  62.60.152.0/22
                  213.176.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:1e:68:61:34:53:6d:57:ed:b6:b3:f9:82:56:d9:97:fe:
         ce:95:b3:01:9c:03:95:11:00:f8:53:50:c1:81:dc:90:a2:7f:
         36:4b:d4:72:d9:31:58:db:fc:e5:be:81:87:8a:f9:ab:88:48:
         82:74:70:8c:cd:b2:40:7c:29:7f:3f:6e:f7:8d:62:5b:82:91:
         57:f5:1b:0d:ec:37:ff:84:5f:e0:7e:8b:f2:de:63:a0:a9:90:
         73:99:c6:14:32:f1:2c:a6:c3:e4:a8:44:d0:97:86:2a:0b:29:
         85:c6:a9:a5:cb:8c:f7:6a:8c:5c:d0:c3:b4:52:b0:32:c3:72:
         b3:c2:fd:29:45:76:c9:92:27:13:80:ae:b8:b2:fb:7f:53:17:
         e9:31:e0:59:a9:20:96:82:bd:76:19:b7:64:f7:a9:13:d0:5e:
         47:20:86:1e:1c:83:15:31:85:11:dc:ee:d4:bb:fe:2f:b5:7e:
         44:90:02:b9:34:13:af:d9:85:3c:f2:99:c2:9a:c8:e2:d7:a4:
         71:ff:99:a0:ec:ed:da:f0:ce:ba:7c:7b:d6:97:d8:d1:e6:32:
         20:3d:71:c3:25:e8:87:4d:6d:f2:c2:60:79:99:7e:9c:9d:eb:
         2e:fc:c5:80:2b:7c:9f:be:72:f8:d5:49:f6:97:dc:91:9e:fc:
         fb:e3:20:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org