Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/1Y8l15-bX7iJ_q621VzQw8c5Hzk.roa
File:                     1Y8l15-bX7iJ_q621VzQw8c5Hzk.roa (raw, json)
Hash identifier:          DYDDe62/hNu0ey504Xg3lZvmFKkE5gFLJf9/PtCHa7o=
Subject key identifier:   D5:8F:25:D7:9F:9B:5F:B8:89:FE:AE:B6:D5:5C:D0:C3:C7:39:1F:39
Certificate issuer:       /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial:       01856E78CAC0838EBBCF351D08A96D0ACBE5
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/1Y8l15-bX7iJ_q621VzQw8c5Hzk.roa
Signing time:             Sun 01 Jan 2023 17:54:48 +0000
ROA not before:           Sun 01 Jan 2023 17:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5511
IP address blocks:        62.229.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:78:ca:c0:83:8e:bb:cf:35:1d:08:a9:6d:0a:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
        Validity
            Not Before: Jan  1 17:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d58f25d79f9b5fb889feaeb6d55cd0c3c7391f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:c3:f5:e1:73:c7:c9:37:d6:ba:0a:d8:38:
                    e7:d8:44:6e:10:b9:66:77:81:fa:4c:07:e7:48:b1:
                    0c:c1:53:ee:40:9b:c7:f2:05:41:54:21:5a:5a:30:
                    ef:8a:3e:2b:57:6c:a8:6b:44:05:d2:20:bb:23:0a:
                    e0:9f:0e:55:12:7b:08:2d:00:1e:9e:ee:2b:6f:c4:
                    4d:cd:a6:7c:7b:5a:7a:b2:da:4a:3d:42:d4:fa:5b:
                    a7:12:43:5b:b0:72:0e:e7:b1:3f:e6:7a:b6:95:db:
                    97:2b:b3:2e:1c:d4:b0:8f:25:43:71:c6:8e:06:3f:
                    30:95:a4:a9:5f:33:08:78:f5:73:08:4f:67:91:76:
                    e3:00:27:5a:c6:78:17:a8:32:81:b8:91:96:fa:61:
                    d6:69:74:a8:aa:3a:00:15:2c:c7:38:17:f6:09:4a:
                    18:31:ed:b1:0d:84:25:29:8b:92:61:66:bb:91:a1:
                    24:d6:37:80:1b:5b:57:90:9d:9d:a6:ac:24:2f:f3:
                    a4:d4:54:9a:2b:77:63:5d:64:67:d1:1a:a2:f8:d0:
                    0c:16:cf:18:34:5c:05:89:32:36:fd:bd:c2:a8:08:
                    01:3b:c6:86:26:69:06:4c:11:02:4b:82:0e:0e:68:
                    1a:1c:a9:9c:9e:59:9f:16:16:11:07:a6:5d:3f:a5:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8F:25:D7:9F:9B:5F:B8:89:FE:AE:B6:D5:5C:D0:C3:C7:39:1F:39
            X509v3 Authority Key Identifier:
                keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/1Y8l15-bX7iJ_q621VzQw8c5Hzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.229.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:03:76:7d:56:10:6e:96:95:c3:37:89:89:b5:4d:0e:6b:37:
         db:ea:8a:e6:28:c5:43:e7:48:2e:5c:bb:41:a5:a1:65:ab:72:
         6c:22:56:2f:5d:3e:91:15:37:93:46:f6:cb:55:ba:38:9f:92:
         b0:c2:f2:98:8a:c8:e8:e9:c5:88:69:b5:6f:fa:a5:75:20:d0:
         99:3e:be:44:0c:34:c3:82:22:eb:b8:d7:a3:c8:bb:eb:9f:ca:
         3b:e8:87:9f:d1:c7:d0:f3:c2:49:86:43:c4:1a:23:02:13:2f:
         8b:9a:f6:d9:a1:a4:b8:54:3d:7a:61:04:e1:0f:cc:6c:fd:e6:
         d2:f2:02:fd:06:08:85:f3:23:cd:c8:22:33:df:ed:18:8e:3e:
         a3:83:d7:cf:45:38:ea:17:11:14:30:65:58:25:b7:6d:fa:f7:
         b3:04:c8:a0:68:bc:f0:f5:14:e9:04:a5:d5:03:f6:51:2e:ff:
         e6:a1:c8:2e:71:7f:c4:55:da:9e:a7:b1:de:6f:de:d7:91:3d:
         70:1e:58:b5:bb:27:4b:7a:2e:c5:de:e8:23:66:bc:bc:57:fd:
         0f:60:9d:03:24:9f:b5:ac:4a:81:ae:7c:9b:ff:95:ba:38:b1:
         86:db:57:12:24:f4:66:75:07:0d:cb:a4:88:f2:4e:31:d4:90:
         c2:3b:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:58 2024 by rpki-client on console-fra.rpki-client.org