Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q_pQRfBffdSZ-mpM58Pf6sf3Ph4.roa
File:                     q_pQRfBffdSZ-mpM58Pf6sf3Ph4.roa (raw, json)
Hash identifier:          /XEDoKAGPqXH/s0amCaperxvTEDBkCstjg2caKMtUfk=
Subject key identifier:   AB:FA:50:45:F0:5F:7D:D4:99:FA:6A:4C:E7:C3:DF:EA:C7:F7:3E:1E
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018B5B40838E44464E133716F576544C7F15
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q_pQRfBffdSZ-mpM58Pf6sf3Ph4.roa
Signing time:             Mon 23 Oct 2023 06:37:16 +0000
ROA not before:           Mon 23 Oct 2023 06:37:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48597
IP address blocks:        62.60.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5b:40:83:8e:44:46:4e:13:37:16:f5:76:54:4c:7f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Oct 23 06:37:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abfa5045f05f7dd499fa6a4ce7c3dfeac7f73e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:37:5d:44:48:2d:02:8c:3c:39:20:d9:fd:fd:
                    d4:44:d1:c4:98:8d:81:b1:c2:69:e6:3e:bb:26:9e:
                    f4:1f:94:82:22:cf:6e:50:8c:48:fd:a6:d6:3b:17:
                    c8:dd:19:16:b3:78:29:7a:78:31:4e:be:b8:1e:b1:
                    87:e4:7b:78:95:d1:7b:52:39:6b:8e:91:19:8a:9c:
                    4f:1d:74:a2:84:46:da:8c:a9:98:80:a7:f0:f7:66:
                    48:d7:b3:91:85:a9:88:53:cf:74:28:b5:a0:fe:67:
                    10:75:03:0d:7f:d2:86:1b:7b:cb:f2:8a:99:6e:0e:
                    c0:29:01:84:61:30:b2:d3:34:d0:3f:f1:dc:50:24:
                    d2:d2:50:c1:1e:2d:7f:98:12:b9:5f:01:bf:16:38:
                    2f:8b:b5:cf:6d:cf:7c:75:38:6a:a1:4b:60:e9:7c:
                    7c:60:d5:a5:5c:ab:2f:10:54:41:cb:1b:1e:ae:25:
                    d6:13:27:0e:ca:12:41:fc:15:5a:52:20:d7:71:6b:
                    d5:83:2b:e8:7e:ee:29:7d:da:e3:0d:e0:23:2b:e3:
                    ce:3c:90:ea:60:d4:de:4e:2f:d3:64:86:2e:10:78:
                    9a:48:75:c3:8b:d9:c8:1d:0f:e4:7a:c1:d4:35:35:
                    05:d4:b2:13:5f:ec:33:44:13:a5:08:2e:24:34:91:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FA:50:45:F0:5F:7D:D4:99:FA:6A:4C:E7:C3:DF:EA:C7:F7:3E:1E
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q_pQRfBffdSZ-mpM58Pf6sf3Ph4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:70:08:7a:b1:3c:00:d3:73:b3:d5:8e:e0:09:a1:f6:2c:
         6b:ee:76:ec:11:49:b0:ea:7f:37:2b:3a:31:77:81:fb:a5:f0:
         8b:87:26:f2:82:78:95:eb:8b:04:c1:87:eb:ad:f6:9f:f2:07:
         7c:e4:83:ab:d9:7e:31:99:16:f6:c1:6e:07:5a:ad:a9:d6:61:
         5e:c2:a9:8b:25:8b:28:48:a5:51:af:3f:fc:47:0a:89:27:be:
         18:9d:9b:8a:24:64:ab:b3:23:ef:b9:0d:e9:34:12:dc:b7:c5:
         2d:ba:f2:d9:01:99:94:8f:59:f5:17:5e:c8:63:08:70:af:e7:
         5b:fa:8b:b7:83:18:9c:ca:ed:3c:43:73:da:1b:21:9f:e4:b4:
         84:64:2c:bf:d8:7c:80:26:09:19:e6:e8:08:c4:81:bf:80:a5:
         0e:db:f7:ee:89:f1:56:52:58:57:ce:fc:1d:d3:f1:d5:0b:79:
         40:d8:79:39:64:69:b7:75:a9:fc:d8:fe:27:cb:d2:2a:2c:71:
         a8:8d:77:b1:bf:3c:1a:36:07:0e:54:1c:1d:cc:9e:69:01:f7:
         35:a6:7e:0f:f8:41:28:b7:0c:ea:99:06:24:4f:36:06:e9:57:
         b0:ec:3c:bc:ed:c9:2a:91:d3:7a:86:f9:fb:05:6d:86:d0:d3:
         8a:8e:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:44 2024 by rpki-client on console-ams.rpki-client.org