Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/SqHiBzYVcncLRpV5GyK3JBkgkUE.roa
File:                     SqHiBzYVcncLRpV5GyK3JBkgkUE.roa (raw, json)
Hash identifier:          tDxKsIPZ6Ha5jEsEfOIPjj9PPV1sbC8jGF+PiX2H3vY=
Subject key identifier:   4A:A1:E2:07:36:15:72:77:0B:46:95:79:1B:22:B7:24:19:20:91:41
Certificate issuer:       /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial:       01856BAE978C5BA0AB04159B7DEAB1BD1E2F
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/SqHiBzYVcncLRpV5GyK3JBkgkUE.roa
Signing time:             Sun 01 Jan 2023 04:54:42 +0000
ROA not before:           Sun 01 Jan 2023 04:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50304
IP address blocks:        62.176.216.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ae:97:8c:5b:a0:ab:04:15:9b:7d:ea:b1:bd:1e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
        Validity
            Not Before: Jan  1 04:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4aa1e207361572770b4695791b22b72419209141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:1b:dc:a5:a0:98:31:ad:3a:72:2a:81:25:
                    6b:76:58:2b:fb:19:0a:4e:5f:27:d4:ab:e0:9a:f2:
                    b8:8c:cf:4f:e1:56:d6:23:eb:cc:3e:31:c3:df:20:
                    48:2d:ae:18:d0:24:d7:8c:0a:16:a6:5f:7f:4b:18:
                    a8:6a:55:10:2d:9d:67:13:c7:0b:b7:35:ae:33:ee:
                    7b:95:c5:2b:a4:5d:ba:66:f6:cb:2e:f2:4b:d1:90:
                    1a:aa:9e:29:03:10:de:95:43:4f:ab:1e:a5:20:84:
                    02:db:60:c3:61:e5:3f:f5:d5:9c:f5:5c:aa:63:72:
                    62:e7:f7:87:70:84:4f:c4:ad:48:b9:0c:fa:f6:a9:
                    6f:ed:5c:7a:83:b8:aa:fa:0b:f5:43:2c:9e:6b:84:
                    88:d7:4e:95:88:23:f1:25:a6:f4:85:6d:d4:5a:cb:
                    dc:25:14:8c:c6:6a:28:d0:9b:82:82:49:83:8b:c0:
                    bb:60:fc:0c:0c:b9:10:c5:1e:f5:22:99:1b:2a:59:
                    f2:68:a4:c7:b7:ac:c6:81:28:be:8b:96:b2:4b:40:
                    67:3b:e8:af:77:b5:e5:d1:2e:94:ef:84:de:31:c0:
                    09:af:2a:c9:31:db:79:06:28:2a:8e:dd:2a:9f:20:
                    f5:e7:e7:67:55:12:75:06:15:7d:97:6e:b6:a6:93:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:E2:07:36:15:72:77:0B:46:95:79:1B:22:B7:24:19:20:91:41
            X509v3 Authority Key Identifier:
                keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/SqHiBzYVcncLRpV5GyK3JBkgkUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.176.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:4c:88:5d:34:2d:33:71:53:e4:6a:8a:b8:da:87:08:1a:ca:
         66:06:3c:59:e7:65:c1:2b:b8:e3:af:1e:8d:4e:8f:8b:82:63:
         b1:64:d4:94:cc:ed:25:a9:07:3a:10:0e:81:35:db:34:e2:46:
         9c:18:cf:1f:53:0d:e5:f6:c2:80:76:15:f6:76:35:47:e7:f1:
         85:ae:c0:7b:ff:5f:4c:fd:a0:bb:0d:47:3c:aa:3a:4a:d2:7b:
         96:05:75:9b:10:68:6d:85:9c:15:21:91:5e:a1:18:b0:6c:d0:
         cc:71:c9:63:63:33:dc:3d:72:28:60:7e:bf:86:63:69:32:2c:
         f2:bc:e0:84:4e:90:70:69:b6:62:35:db:15:af:d3:46:79:49:
         ff:ee:39:0d:2d:10:36:59:0a:69:20:ae:41:08:05:35:7c:91:
         5c:c2:34:7b:23:84:c0:de:50:4d:86:8a:bb:f1:74:49:19:df:
         5f:f1:57:06:65:01:39:15:b2:eb:35:75:43:d1:96:2f:a5:10:
         60:01:44:2c:bb:76:b6:6e:80:16:70:01:43:b5:c3:81:ee:3f:
         4d:5e:73:e8:b3:6b:16:bd:94:89:d8:58:a7:f1:fa:15:bb:14:
         a8:f0:fd:33:8b:83:15:aa:10:6f:0d:aa:bf:5d:a6:d5:7a:ff:
         9c:d6:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:38 2024 by rpki-client on console-ams.rpki-client.org