Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/62J1s2czdKy663WKNM1GcS8Fnn4.roa
File:                     62J1s2czdKy663WKNM1GcS8Fnn4.roa (raw, json)
Hash identifier:          zCyBmgtPUS14YlNa0wJuKfGKarkcXKqeXnEeXMEs+ek=
Subject key identifier:   EB:62:75:B3:67:33:74:AC:BA:EB:75:8A:34:CD:46:71:2F:05:9E:7E
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       018921B7F311062B8DDADB53431F008675D2
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/62J1s2czdKy663WKNM1GcS8Fnn4.roa
Signing time:             Tue 04 Jul 2023 16:24:10 +0000
ROA not before:           Tue 04 Jul 2023 16:24:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60566
IP address blocks:        45.140.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:21:b7:f3:11:06:2b:8d:da:db:53:43:1f:00:86:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jul  4 16:24:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb6275b3673374acbaeb758a34cd46712f059e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:48:af:71:91:3b:a3:12:a0:4a:26:a4:b4:
                    e1:82:44:a8:72:d6:7a:f7:aa:f0:fa:f8:ca:31:08:
                    06:c8:47:db:ed:09:cd:7f:1a:b4:3e:e1:c8:0c:8d:
                    51:f8:48:6c:07:25:bc:55:f4:cb:56:33:ee:a1:d6:
                    9c:86:0b:b7:c1:0e:f2:15:ba:7a:6c:6c:04:e6:e4:
                    af:ba:54:c9:f6:51:50:11:06:ec:c8:84:a1:78:03:
                    81:84:bd:9c:a6:a0:28:12:69:ca:0b:32:96:2c:15:
                    23:e1:a0:93:33:b6:d3:30:d9:a5:d5:39:cf:84:c7:
                    e5:63:1c:81:4d:b3:f8:38:37:92:74:2d:0f:09:e5:
                    c7:d3:f5:f4:46:90:07:c6:11:fe:65:46:04:41:ea:
                    8e:12:95:53:06:65:c1:7d:18:62:fc:7f:ec:df:68:
                    41:87:7e:4a:0f:b9:6d:5e:b0:c7:ea:e8:2f:32:fd:
                    78:ff:90:51:92:25:51:ed:d7:15:45:f2:55:59:d5:
                    b6:f2:26:bc:91:cb:31:86:4d:86:21:c9:57:cc:6e:
                    8c:d6:40:01:44:4b:cd:2c:ca:2e:2c:e4:c0:74:0d:
                    28:6c:9f:52:24:43:d3:57:ef:0f:95:87:85:03:ef:
                    e6:d2:62:21:86:6a:a5:a8:92:60:ec:88:53:cc:b8:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:62:75:B3:67:33:74:AC:BA:EB:75:8A:34:CD:46:71:2F:05:9E:7E
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/62J1s2czdKy663WKNM1GcS8Fnn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:33:fb:e7:de:41:a3:28:29:1d:ab:1c:b7:fe:19:b7:fd:
         45:e6:ed:b6:26:92:4c:78:f9:58:0b:56:36:1b:0c:de:c8:43:
         f7:58:6d:33:0e:d8:0a:be:db:2f:fa:1a:84:2a:ee:dd:61:69:
         c3:77:98:ab:f6:9a:4e:ff:b9:64:46:d0:2f:d0:e1:0e:6f:bf:
         38:d9:73:58:6b:c2:b8:57:1c:69:3f:dd:8a:61:62:b4:a9:84:
         1e:f1:63:32:83:34:db:6f:00:16:11:07:8f:7f:23:90:3c:19:
         a8:06:13:b7:61:e1:2d:93:e8:d6:6a:e1:41:38:17:77:15:85:
         ed:ae:33:3e:62:8b:ff:db:46:0a:45:8c:ae:36:f9:57:1e:5f:
         a4:67:a7:5f:7f:6a:5c:05:7a:d1:44:c4:d2:ff:8c:9d:56:10:
         0b:72:12:ad:7f:7f:9a:48:bc:7b:48:14:37:f6:9a:da:bc:23:
         5e:ac:95:85:f3:e9:01:22:fa:56:96:fb:67:5f:82:b0:81:99:
         c2:64:62:23:f8:f3:64:93:e1:42:fa:00:ce:7f:0b:f9:42:f4:
         9d:b4:2d:7c:42:4c:51:22:82:12:c0:b0:58:ed:2a:7e:cd:a2:
         bc:91:1b:28:f5:9e:75:48:06:6e:ff:07:6c:8d:11:ac:47:0a:
         e8:f0:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 08:26:49 2023 by rpki-client on console-ams.rpki-client.org