Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7668dEOGBq_krYNQoHDM9lnsWwY.roa
File:                     7668dEOGBq_krYNQoHDM9lnsWwY.roa (raw, json)
Hash identifier:          rqREYl8NacpTRR6vKRnAm/m9ehAIttNWsZ6MRj/DS+w=
Subject key identifier:   EF:AE:BC:74:43:86:06:AF:E4:AD:83:50:A0:70:CC:F6:59:EC:5B:06
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       018ED5BEAC9F08FA494C29DFC84C991DE356
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7668dEOGBq_krYNQoHDM9lnsWwY.roa
Signing time:             Sat 13 Apr 2024 04:37:06 +0000
ROA not before:           Sat 13 Apr 2024 04:37:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62563
IP address blocks:        62.169.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 12:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:d5:be:ac:9f:08:fa:49:4c:29:df:c8:4c:99:1d:e3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Apr 13 04:37:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=efaebc74438606afe4ad8350a070ccf659ec5b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:b6:c9:ad:93:a2:44:ce:1f:74:f6:4b:e0:
                    2e:0c:2e:ca:fe:7d:f0:98:f4:60:c6:1f:41:e7:da:
                    22:da:e5:84:9f:35:8e:6e:92:29:29:fe:fd:87:ca:
                    ca:55:e1:83:74:33:87:a6:77:a2:f5:64:f4:69:b7:
                    8e:0b:6d:45:8f:a5:6f:36:03:a9:7d:36:f8:f7:26:
                    9c:48:49:68:2c:fa:6d:28:5a:8c:a4:48:a7:f5:93:
                    95:59:96:42:78:d8:3f:58:32:6a:da:1e:d2:b1:7a:
                    b0:cf:2f:d7:a0:5a:b9:61:88:91:4c:b9:1e:75:8b:
                    3a:fd:2a:69:c2:a2:47:fd:2d:ee:76:16:9e:c6:3e:
                    db:25:08:4e:db:ee:7b:ce:01:6e:30:13:ba:24:78:
                    15:06:72:2a:cf:ff:7f:25:19:58:fc:6d:ab:e7:91:
                    0d:c2:7f:0c:b9:69:b7:4b:6c:2b:6c:92:c6:a5:24:
                    e3:33:e1:7c:7f:e2:a7:7b:1e:98:47:cb:de:d3:b4:
                    33:a7:9e:57:29:a3:f7:e2:2e:e1:b1:9e:7f:33:0a:
                    46:06:35:11:58:86:a8:30:74:d7:f3:ed:38:85:2e:
                    53:e8:26:68:ff:a7:b3:9f:8a:87:24:6c:28:78:4d:
                    04:b1:4f:61:a3:5e:52:12:42:2a:2d:29:06:36:39:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:BC:74:43:86:06:AF:E4:AD:83:50:A0:70:CC:F6:59:EC:5B:06
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7668dEOGBq_krYNQoHDM9lnsWwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:59:f6:9e:ee:f7:50:1a:66:9d:a4:a2:f9:98:02:29:0c:e5:
         8d:93:95:f3:df:a9:b7:b2:02:27:41:e1:dc:9b:d8:51:de:81:
         e1:2a:37:91:97:46:7b:19:a0:e2:bf:56:b6:52:62:c2:96:f8:
         5f:a7:10:6c:42:76:9e:d5:58:33:bf:30:b6:2e:fa:1b:ed:5d:
         80:ee:cf:5c:47:6f:f4:49:dd:bc:db:3e:41:f8:a9:30:7e:f6:
         38:9d:06:b6:5c:7a:e1:06:2f:18:6b:1f:cd:29:9f:b6:12:4e:
         f2:d2:73:ff:b2:45:d4:b3:1e:01:e0:27:6d:e3:38:3f:71:85:
         9a:71:36:04:31:cf:99:89:35:cf:b9:f7:f6:b2:d3:50:ed:2b:
         5a:22:fa:e3:7d:eb:f1:e7:a0:b0:25:da:9d:44:fb:29:28:72:
         ca:93:0e:12:1b:43:88:d1:06:e4:ec:3e:fd:50:a6:7b:c1:85:
         b0:95:c6:95:f9:cf:b6:3f:78:7f:81:00:68:4e:6a:53:7b:4b:
         25:98:ee:0d:e5:77:c0:9a:3e:01:18:2c:83:72:63:5e:1a:ba:
         6d:6b:c9:51:1b:d1:b7:ed:6e:3d:2b:3a:ae:3a:43:5d:f1:44:
         45:7f:87:9c:96:bc:68:d8:f6:35:80:18:14:62:e3:58:6b:9e:
         2a:fa:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:57:47 2024 by rpki-client on console-fra.rpki-client.org