Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wRz_FJDAW9RRCWpqqX7NHixmOTE.roa
File:                     wRz_FJDAW9RRCWpqqX7NHixmOTE.roa (raw, json)
Hash identifier:          tRukejJmbMZZRemy6npLNNwyt0RFYF8VRp1yhaeaYr8=
Subject key identifier:   C1:1C:FF:14:90:C0:5B:D4:51:09:6A:6A:A9:7E:CD:1E:2C:66:39:31
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0190535E1C1FD2D031AF1920F4AF44978070
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wRz_FJDAW9RRCWpqqX7NHixmOTE.roa
Signing time:             Wed 26 Jun 2024 07:06:34 +0000
ROA not before:           Wed 26 Jun 2024 07:06:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44559
IP address blocks:        62.60.156.0/22 maxlen: 24
                          62.60.184.0/22 maxlen: 24
                          62.60.192.0/22 maxlen: 24
                          62.60.220.0/22 maxlen: 24
                          213.176.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 10:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:5e:1c:1f:d2:d0:31:af:19:20:f4:af:44:97:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jun 26 07:06:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c11cff1490c05bd451096a6aa97ecd1e2c663931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:a6:4c:1f:22:6f:8d:f1:f1:4a:fd:fa:c3:
                    62:62:e8:a3:44:46:2e:4a:d9:f8:ea:47:8f:4d:81:
                    96:f4:0b:c2:27:dd:e4:1c:d0:38:3b:b7:44:cb:39:
                    85:fe:18:f5:c6:45:83:2a:44:6e:ce:2a:66:b3:8d:
                    f4:e3:21:cb:28:ea:1a:b7:56:84:af:2a:dd:58:04:
                    15:63:dc:6c:56:11:86:05:e9:d7:38:6a:29:02:a2:
                    c4:6e:28:d4:93:41:0a:eb:76:4c:0f:d8:c7:8c:3f:
                    fd:41:4d:3c:47:3d:7b:44:af:eb:5e:9d:ff:88:93:
                    ba:5b:90:c7:ef:e7:56:2c:cc:ff:61:42:ce:67:e0:
                    c3:0c:3c:60:7f:c4:2b:eb:ac:27:1b:28:9f:ad:4c:
                    eb:0c:86:b8:53:32:63:61:a3:c0:46:ba:69:9a:67:
                    d3:95:72:0a:55:2f:5e:ee:0e:ac:c8:ad:42:88:2f:
                    33:33:00:fa:c5:24:9c:74:41:a2:47:a5:16:c6:ab:
                    06:dc:87:28:3e:a6:c6:0e:64:be:ea:e6:cc:80:f2:
                    93:b2:a9:aa:33:ca:ed:0e:74:00:5e:f3:d5:64:b0:
                    c9:6b:c0:b0:96:31:0c:10:b8:e4:35:8c:84:11:3e:
                    d3:fb:16:73:31:f0:be:a5:be:ff:d4:fa:2e:a0:ff:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:FF:14:90:C0:5B:D4:51:09:6A:6A:A9:7E:CD:1E:2C:66:39:31
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wRz_FJDAW9RRCWpqqX7NHixmOTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.156.0/22
                  62.60.184.0/22
                  62.60.192.0/22
                  62.60.220.0/22
                  213.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:fb:3d:39:a6:6f:81:22:fe:7d:79:23:f0:6c:a1:73:ba:68:
         5b:e2:32:18:6b:63:b3:cf:81:3b:38:56:8a:69:9f:5b:1f:7f:
         77:46:b9:10:51:3d:0b:20:95:ed:d6:23:35:91:0c:ff:61:d9:
         e7:a8:cf:7a:a4:22:6b:c4:fb:d4:a7:d7:35:54:eb:97:9d:00:
         dc:86:a3:8c:46:33:b5:f7:8d:04:cc:b5:19:44:0a:4e:97:c4:
         46:f1:cf:13:8e:bf:a1:c4:45:1a:85:19:05:d9:50:c9:65:cf:
         01:28:77:41:ca:1d:2d:71:bc:39:02:5e:11:2d:ed:01:ff:97:
         8a:54:6d:ac:69:4a:d9:f3:bc:d9:63:48:89:86:9a:8f:60:12:
         20:fe:85:f2:ac:55:7a:68:73:5e:7d:75:fe:d3:1c:50:3e:6c:
         db:66:91:c7:da:ac:7b:57:c4:31:84:c6:17:bf:4c:32:5d:77:
         24:75:8d:38:5f:bd:ad:40:b2:79:09:3a:de:d4:c6:ac:99:85:
         b8:0a:42:72:19:0e:60:63:c3:43:3c:87:6f:b9:5d:19:77:10:
         06:54:d9:06:dc:3c:5f:4f:55:2d:96:84:25:32:a8:84:69:50:
         43:01:9f:ed:a9:14:2f:2a:93:cf:a5:87:e1:ee:d9:e6:a0:5f:
         de:4f:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 15:26:58 2024 by rpki-client on console-fra.rpki-client.org