Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/r_Rmwdu2RWKBzy8bzwmCQyr1uyE.roa
File:                     r_Rmwdu2RWKBzy8bzwmCQyr1uyE.roa (raw, json)
Hash identifier:          JYq8wn46pWeyZPkuVBS60Egv6UoblykmD98+6mdE8H8=
Subject key identifier:   AF:F4:66:C1:DB:B6:45:62:81:CF:2F:1B:CF:09:82:43:2A:F5:BB:21
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       0185719E8523FD67DDA5AF3D8B556978BE9C
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/r_Rmwdu2RWKBzy8bzwmCQyr1uyE.roa
Signing time:             Mon 02 Jan 2023 08:34:52 +0000
ROA not before:           Mon 02 Jan 2023 08:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51054
IP address blocks:        62.76.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:85:23:fd:67:dd:a5:af:3d:8b:55:69:78:be:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  2 08:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aff466c1dbb6456281cf2f1bcf0982432af5bb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:4b:20:f5:ef:23:3f:e8:a6:24:66:e2:9e:
                    ac:1f:9b:e7:cc:1b:41:f7:12:a8:8c:80:f2:e6:f0:
                    2b:88:22:85:cf:41:fb:fb:c3:f0:60:c5:6d:bc:25:
                    d2:48:68:fe:84:ed:36:ff:63:cd:1e:5d:23:f7:ac:
                    b1:fa:e8:db:fc:8a:4d:be:1b:4c:14:71:87:42:a2:
                    79:9c:0a:5b:37:5f:23:1f:69:d5:14:12:04:54:7b:
                    cf:46:09:84:6e:a1:7c:84:ec:f3:4d:0c:ff:1c:4c:
                    43:05:7d:95:69:ac:61:c2:f1:b0:f9:98:5c:32:76:
                    35:b9:c1:98:ff:4a:9d:2e:93:55:2a:8b:e7:1e:c7:
                    44:6a:66:0a:92:e0:81:c7:fc:fa:e6:d5:0f:2a:ee:
                    25:83:be:15:c0:0f:e1:3e:fe:8e:80:e0:07:5d:ac:
                    97:23:4f:f8:fd:96:22:90:b9:7f:91:10:2d:e5:92:
                    2f:43:98:32:ca:5e:a5:51:1d:1d:6b:a7:37:48:b0:
                    29:70:78:92:27:f2:87:b6:9d:ad:59:65:eb:d6:6b:
                    f5:53:5c:e4:94:84:b5:03:d3:64:4e:c6:e1:11:d2:
                    68:cf:f0:ed:1e:c3:59:47:06:fa:08:ed:3b:18:08:
                    84:e0:cf:2b:3e:3c:dc:64:a5:b3:ab:5e:dd:e0:54:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F4:66:C1:DB:B6:45:62:81:CF:2F:1B:CF:09:82:43:2A:F5:BB:21
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/r_Rmwdu2RWKBzy8bzwmCQyr1uyE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:84:81:44:11:b6:f8:72:11:34:59:22:24:41:40:2f:67:
         7f:2d:ba:f1:33:f2:1b:45:ba:60:77:bc:46:82:fa:1a:db:14:
         24:9c:9f:73:e4:c1:e7:d0:ea:8c:8c:be:03:ac:81:56:eb:92:
         de:bf:7a:25:d9:3e:19:22:af:df:83:b5:60:60:b4:f9:69:11:
         e4:f4:23:28:20:8c:17:66:57:e0:69:f3:3d:2f:91:3b:ff:a6:
         e1:b2:31:c8:f6:02:b6:0d:d6:27:c5:3f:5a:cb:b4:9a:2b:c2:
         69:24:8d:b9:42:c2:ff:f3:01:ae:4f:1c:c8:33:a5:77:e6:3d:
         4f:01:cb:66:a6:9e:80:4b:86:0e:1c:02:16:c2:93:3d:86:96:
         4e:c8:a2:22:b2:4c:45:62:2d:35:33:b6:07:b7:c8:2c:50:68:
         68:dc:2f:20:73:a5:4c:26:0c:bb:96:24:96:04:91:a2:c4:4f:
         72:e5:3d:cf:38:00:a2:d0:8c:8e:09:51:af:14:c7:d2:c4:72:
         10:78:8e:87:ce:bd:47:42:b8:62:57:cf:73:49:2c:bc:fd:62:
         b3:19:86:39:47:2d:c6:c9:e0:f4:73:24:d2:f6:f4:41:6f:78:
         09:71:96:00:53:db:9e:02:db:90:81:30:dd:7b:93:8e:73:d3:
         2e:58:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org