Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/swwmvCq2u9j8m7Eg2W_9E7axU5s.roa
File:                     swwmvCq2u9j8m7Eg2W_9E7axU5s.roa (raw, json)
Hash identifier:          A8gzOOyrCL9ow8XDTnjZnldnHv4cuD/FqFtp5j/xPyE=
Subject key identifier:   B3:0C:26:BC:2A:B6:BB:D8:FC:9B:B1:20:D9:6F:FD:13:B6:B1:53:9B
Certificate issuer:       /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial:       0185723A3670FB129D53B178967A6EB1BBB7
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/swwmvCq2u9j8m7Eg2W_9E7axU5s.roa
Signing time:             Mon 02 Jan 2023 11:24:55 +0000
ROA not before:           Mon 02 Jan 2023 11:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59599
IP address blocks:        62.132.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:3a:36:70:fb:12:9d:53:b1:78:96:7a:6e:b1:bb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
        Validity
            Not Before: Jan  2 11:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b30c26bc2ab6bbd8fc9bb120d96ffd13b6b1539b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:60:75:44:30:fb:ec:ac:9a:37:dc:c4:47:
                    73:45:35:ca:fc:41:c2:9f:ea:b7:d7:b7:ba:1e:ce:
                    2e:87:c5:a8:1d:e6:74:3c:f9:3b:2e:8b:2b:00:cd:
                    e9:21:fb:6b:2f:04:c8:20:04:08:5c:76:28:29:68:
                    8d:19:73:3e:01:27:8f:ce:ed:c8:15:eb:e9:a8:7a:
                    20:f8:4b:eb:bd:f8:09:8a:74:02:a9:71:5e:be:6c:
                    f6:dd:1c:c7:eb:9f:d5:ad:8c:d3:d4:86:3e:cb:a9:
                    06:b3:b9:7a:43:7c:04:43:cc:1b:cb:00:8a:f5:3c:
                    7a:43:a4:37:8d:6d:be:ba:4d:b0:57:b0:65:ab:aa:
                    7b:d8:ec:40:bb:5d:7e:ea:94:09:d6:5d:07:82:f3:
                    0f:6f:b8:65:66:88:6f:cb:07:ae:10:d8:6d:b7:9a:
                    5b:6a:fe:eb:54:3e:0f:9b:3d:ed:cd:88:f1:ec:21:
                    2b:89:f0:90:95:e9:b6:09:c5:4a:c0:b8:7d:4b:a3:
                    b7:4b:94:6e:63:39:3d:84:bc:47:70:00:f3:fe:9d:
                    18:e7:c2:9d:59:9a:fc:03:fe:90:34:8b:c6:ce:fd:
                    0c:40:f8:de:d5:42:99:5e:12:55:c5:17:86:b8:ac:
                    89:28:cd:b3:ff:a9:2e:47:4b:1e:a4:ee:e5:09:fb:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0C:26:BC:2A:B6:BB:D8:FC:9B:B1:20:D9:6F:FD:13:B6:B1:53:9B
            X509v3 Authority Key Identifier:
                keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/swwmvCq2u9j8m7Eg2W_9E7axU5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.132.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:92:10:76:ad:ac:8b:20:02:9f:cb:ac:fa:3f:2a:82:9a:fe:
         b5:93:54:69:95:40:0c:13:d3:b5:c5:21:87:8e:56:a7:92:b5:
         af:6b:2a:e9:ac:e5:04:e5:fd:ab:70:f9:e3:79:79:12:03:85:
         1d:70:53:89:9a:2e:c2:10:c2:7f:2d:7b:d3:d7:86:49:3a:59:
         70:cd:31:59:b9:20:79:26:da:4c:73:e9:8f:bb:c6:34:77:4d:
         16:63:8f:48:1c:71:4f:11:eb:8a:77:25:b0:c7:45:73:66:2d:
         b8:b4:0e:08:9e:4f:6e:19:f5:64:8d:d5:63:b0:c4:83:4b:e5:
         20:06:88:86:fb:69:2c:20:83:b2:a7:a2:20:e5:ba:73:8a:69:
         4c:35:79:63:37:d9:0b:df:4e:a6:78:a0:f7:8c:84:8f:b7:43:
         43:55:a1:97:10:0d:85:fb:84:76:8e:35:dd:4a:74:ab:9a:25:
         13:0e:8a:f6:38:3c:5d:45:fc:e4:60:cb:bc:90:ce:9f:a3:d0:
         fd:f9:7f:b3:82:8d:ab:2d:94:41:ad:17:a0:fa:4b:42:9f:35:
         0e:af:33:58:5d:a7:73:d6:7a:ee:46:57:45:ee:c8:51:2f:6a:
         ae:e2:3e:9b:48:28:04:26:b6:a6:4a:37:ec:f1:92:a2:e8:dc:
         d7:c1:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org