Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gXYGS3xz8AwN0L8tyu9sNQa60Xk.roa
File:                     gXYGS3xz8AwN0L8tyu9sNQa60Xk.roa (raw, json)
Hash identifier:          SJTpo0QhIsOr7icTqKJgtXL5348qTzueisH6Vy/G7tY=
Subject key identifier:   81:76:06:4B:7C:73:F0:0C:0D:D0:BF:2D:CA:EF:6C:35:06:BA:D1:79
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       018B183210C0573A4BB4574C5E6DBD772813
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gXYGS3xz8AwN0L8tyu9sNQa60Xk.roa
Signing time:             Tue 10 Oct 2023 06:06:56 +0000
ROA not before:           Tue 10 Oct 2023 06:06:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60446
IP address blocks:        62.106.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 02 Dec 2023 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:18:32:10:c0:57:3a:4b:b4:57:4c:5e:6d:bd:77:28:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Oct 10 06:06:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8176064b7c73f00c0dd0bf2dcaef6c3506bad179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:d3:82:97:2f:cc:f3:3f:ee:7e:7f:dc:ce:
                    a7:34:00:5f:d2:60:25:c6:9a:e5:18:f7:ea:03:2f:
                    68:b1:39:e0:ad:32:08:a4:d5:61:48:88:bf:41:c5:
                    66:bf:27:59:32:85:a8:25:b9:c5:c7:4d:32:fd:b7:
                    6e:6a:48:90:b8:5a:c0:00:ac:0c:43:80:13:87:32:
                    05:6c:fb:bb:55:d5:21:e2:f1:37:1d:ac:7a:0a:15:
                    b2:14:f2:0a:cd:a4:d6:d2:3a:24:af:78:16:47:de:
                    f1:78:1d:82:b8:98:9d:83:3f:8b:55:46:e5:58:1d:
                    a4:da:86:d3:05:fb:1b:5c:8f:d5:2d:d3:b3:2e:50:
                    ed:f2:f4:a2:31:92:e3:ef:f8:b7:cc:f6:b4:80:4a:
                    26:cb:ec:a5:4b:a7:fa:04:7d:d2:70:e7:44:da:c3:
                    ee:f7:36:56:b9:44:7e:f1:8c:08:e1:92:1a:69:56:
                    aa:39:55:5d:91:2a:c7:a3:23:68:bb:c9:c6:3b:69:
                    94:e6:19:57:d1:89:e6:84:22:5a:88:72:a3:e4:46:
                    e2:b9:9f:bf:bf:ea:8b:5c:56:96:d0:79:9b:58:aa:
                    fa:2b:8f:17:10:cd:d9:45:bb:2d:08:af:3f:fc:32:
                    dd:87:33:d1:ec:44:ff:c4:30:17:85:6c:8f:7c:1d:
                    46:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:76:06:4B:7C:73:F0:0C:0D:D0:BF:2D:CA:EF:6C:35:06:BA:D1:79
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gXYGS3xz8AwN0L8tyu9sNQa60Xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:8d:a8:2b:f5:f3:11:3d:26:cc:a4:b8:5f:2b:f0:60:ad:
         ba:91:b9:7e:e5:a8:ca:cc:43:43:5a:aa:dd:64:d1:7f:cf:1e:
         08:1f:1e:bc:0b:ed:39:e3:a4:c4:ae:d6:60:59:88:af:17:53:
         6b:a6:db:44:87:00:e2:eb:00:6c:f5:3d:ca:c4:44:5e:c2:eb:
         04:bd:87:1b:41:e0:1f:c1:3c:84:03:3d:bc:99:1c:40:64:40:
         c5:23:4e:c3:9d:b1:70:eb:d9:4a:44:60:b4:5b:ce:4e:aa:b4:
         5f:7d:cd:42:a4:4e:c8:aa:02:de:c8:07:f4:ee:07:16:db:25:
         56:fe:e6:86:4f:d7:58:a1:ac:dd:40:0f:be:66:50:06:e2:2b:
         82:6b:4b:db:4a:6d:03:9f:52:c9:d6:db:8f:52:a1:5a:4b:d8:
         46:7b:33:af:e2:09:3e:04:8e:9d:6e:3d:b2:c2:f6:fd:4e:29:
         cb:fe:ae:6a:f0:08:d0:c9:01:b6:f8:a6:bd:76:10:c8:15:91:
         5e:e7:0a:53:2a:82:ee:c5:b2:50:9b:24:57:f5:72:9e:7f:bc:
         04:37:27:22:fc:11:6e:31:8d:d3:fa:d9:fe:a7:08:c4:4e:d8:
         59:fc:a6:61:72:89:57:b3:d0:59:23:35:7b:17:72:56:87:3f:
         d0:7b:65:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsYMhDAVzpLtFdMXm29dygTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMxMDEwMDYwNjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTc2MDY0YjdjNzNmMDBjMGRkMGJmMmRjYWVmNmMzNTA2YmFkMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDbTgpcvzPM/7n5/3M6nNABf0mAl
xprlGPfqAy9osTngrTIIpNVhSIi/QcVmvydZMoWoJbnFx00y/bduakiQuFrAAKwM
Q4AThzIFbPu7VdUh4vE3Hax6ChWyFPIKzaTW0jokr3gWR97xeB2CuJidgz+LVUbl
WB2k2obTBfsbXI/VLdOzLlDt8vSiMZLj7/i3zPa0gEomy+ylS6f6BH3ScOdE2sPu
9zZWuUR+8YwI4ZIaaVaqOVVdkSrHoyNou8nGO2mU5hlX0YnmhCJaiHKj5EbiuZ+/
v+qLXFaW0HmbWKr6K48XEM3ZRbstCK8//DLdhzPR7ET/xDAXhWyPfB1GwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIF2Bkt8c/AMDdC/LcrvbDUGutF5MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZ1hZR1MzeHo4QXdOMEw4dHl1OXNOUWE2MFhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpUMA0G
CSqGSIb3DQEBCwUAA4IBAQBnjo2oK/XzET0mzKS4XyvwYK26kbl+5ajKzENDWqrd
ZNF/zx4IHx68C+0546TErtZgWYivF1NrpttEhwDi6wBs9T3KxERewusEvYcbQeAf
wTyEAz28mRxAZEDFI07DnbFw69lKRGC0W85OqrRffc1CpE7IqgLeyAf07gcW2yVW
/uaGT9dYoazdQA++ZlAG4iuCa0vbSm0Dn1LJ1tuPUqFaS9hGezOv4gk+BI6dbj2y
wvb9TinL/q5q8AjQyQG2+Ka9dhDIFZFe5wpTKoLuxbJQmyRX9XKef7wENyci/BFu
MY3T+tn+pwjETthZ/KZhcolXs9BZIzV7F3JWhz/Qe2Xo
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org