Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/Z4LMhRRzugvaFQbeGP0gXAioECw.roa
File:                     Z4LMhRRzugvaFQbeGP0gXAioECw.roa (raw, json)
Hash identifier:          Se2MhF6cv4sM81ith/vN9DolZK83n4VXzjRTtgbQ5pg=
Subject key identifier:   67:82:CC:85:14:73:BA:0B:DA:15:06:DE:18:FD:20:5C:08:A8:10:2C
Certificate issuer:       /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial:       018572C35DBDCC0FACDB98D46262D9F6FDC6
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/Z4LMhRRzugvaFQbeGP0gXAioECw.roa
Signing time:             Mon 02 Jan 2023 13:54:44 +0000
ROA not before:           Mon 02 Jan 2023 13:54:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25229
IP address blocks:        62.122.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c3:5d:bd:cc:0f:ac:db:98:d4:62:62:d9:f6:fd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
        Validity
            Not Before: Jan  2 13:54:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6782cc851473ba0bda1506de18fd205c08a8102c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:b1:9e:9e:88:b4:93:15:d2:df:ba:91:98:
                    6e:e9:93:90:fe:a1:0d:a3:e2:a2:6a:0d:85:b6:24:
                    23:fa:56:8f:87:63:bd:66:b2:60:6b:1c:8a:c8:ad:
                    48:5f:31:8c:d1:88:d5:84:f5:81:37:ec:3a:70:2b:
                    25:41:af:f9:cc:bf:76:b2:38:33:5e:29:04:35:06:
                    49:43:c7:c7:18:6e:41:7c:00:e3:b5:28:75:7b:60:
                    2f:9e:85:6b:27:2f:a0:65:de:ad:9c:bc:90:d4:aa:
                    2e:98:0b:89:6f:8b:62:8c:17:06:3e:53:b6:22:03:
                    1e:51:e1:86:56:0e:15:6e:fd:09:50:13:18:3c:d9:
                    92:f2:1f:20:c8:9b:e1:43:f2:30:2d:44:a0:a6:ee:
                    47:89:d1:8a:f8:8c:0c:5a:44:68:fa:50:a3:af:61:
                    50:1d:18:14:36:4e:c2:e5:33:1c:a7:1f:a0:ff:cb:
                    a2:58:f8:4c:e8:54:cf:2e:bc:0e:76:79:59:02:4b:
                    e0:7c:58:ab:4b:57:3a:56:a3:26:8d:f2:77:b0:c8:
                    27:25:69:2d:c8:13:5e:72:e9:eb:71:af:00:04:b0:
                    37:59:9c:7d:e8:e1:b7:ed:ec:1e:19:90:18:dd:e0:
                    c1:34:d9:7b:57:73:78:60:82:1d:06:07:c2:b1:ff:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:82:CC:85:14:73:BA:0B:DA:15:06:DE:18:FD:20:5C:08:A8:10:2C
            X509v3 Authority Key Identifier:
                keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/Z4LMhRRzugvaFQbeGP0gXAioECw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:82:5d:0b:07:38:97:11:6f:0d:d0:74:7e:0b:6b:cf:98:a8:
         ad:38:81:f4:cf:45:76:64:42:f8:c7:38:dd:78:55:2e:a9:f7:
         92:55:bb:48:0e:cb:f3:3d:fa:9e:e4:2f:4e:b4:7f:05:fc:f3:
         0a:0c:9a:02:55:08:0b:e6:83:2e:ba:bc:ff:78:d0:d8:c0:ee:
         44:19:8a:ca:dc:35:4f:26:20:02:f1:ba:b9:60:a1:15:99:9b:
         4e:a9:1e:51:73:fd:31:80:32:74:e1:02:a7:6c:ff:e7:fd:6f:
         2e:46:1f:75:74:d3:48:d0:03:55:96:54:95:d4:fe:38:17:4d:
         af:b9:ed:16:0a:20:9b:06:81:bd:b3:2f:0e:a0:0e:1d:e6:00:
         04:b5:37:76:06:38:36:02:1e:67:ef:79:e9:8b:9f:94:e7:e3:
         ee:16:e8:a3:66:0e:42:a9:e3:d5:af:e1:61:ea:6f:0b:91:66:
         61:ad:b7:4f:7f:0e:d8:6a:da:f7:7e:63:35:80:5e:18:09:c0:
         b7:52:e9:be:cb:94:b1:f7:8a:69:20:35:26:3f:b3:f9:f0:b1:
         5a:fc:7f:00:fe:e5:6b:bd:c5:91:61:ce:9c:dd:08:4d:e2:fc:
         68:64:5b:7a:1d:f7:0c:53:e6:22:4d:6a:2d:e6:c8:d0:89:cc:
         d6:9b:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:14 2024 by rpki-client on console-ams.rpki-client.org