Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/evHeE851NSFM7hBv1fno3dnxy0o.roa
File:                     evHeE851NSFM7hBv1fno3dnxy0o.roa (raw, json)
Hash identifier:          TFy9rWvyLAeEOzVfhoV0GmwjR2u344Ya63oI8xKBAQw=
Subject key identifier:   7A:F1:DE:13:CE:75:35:21:4C:EE:10:6F:D5:F9:E8:DD:D9:F1:CB:4A
Certificate issuer:       /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial:       0189DF04733B3F9A43891FDB350AB9A43DD7
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/evHeE851NSFM7hBv1fno3dnxy0o.roa
Signing time:             Thu 10 Aug 2023 10:35:58 +0000
ROA not before:           Thu 10 Aug 2023 10:35:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9121
IP address blocks:        62.106.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Aug 2023 13:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:df:04:73:3b:3f:9a:43:89:1f:db:35:0a:b9:a4:3d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
        Validity
            Not Before: Aug 10 10:35:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7af1de13ce7535214cee106fd5f9e8ddd9f1cb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:e4:a0:1c:fc:ce:f8:7e:60:05:47:ac:e0:
                    8a:fa:4d:15:b0:3b:f4:aa:cd:a9:19:2e:6f:a6:56:
                    71:13:90:7b:d5:c3:ac:7a:d1:57:41:e9:ce:46:f0:
                    e6:97:ab:94:7d:9f:5a:1a:ea:dc:7b:12:25:98:82:
                    b3:d2:a7:8a:39:58:93:0a:df:b8:d4:62:22:1e:d0:
                    c9:34:22:d8:6c:c1:a7:f1:55:4a:0e:18:3b:75:30:
                    4e:e0:bd:41:81:98:75:56:5c:93:c4:0c:9d:45:91:
                    38:f9:67:58:c5:db:54:e7:42:28:ae:47:62:a4:6d:
                    6b:b8:1c:b2:b8:54:1a:a0:ea:bf:c6:43:b9:63:e7:
                    05:dc:3c:13:35:c0:7b:64:26:e7:ae:50:50:b5:72:
                    57:e1:ec:4e:68:30:f1:43:9b:c2:44:23:45:38:12:
                    c5:4f:77:c0:96:6d:54:0b:f3:91:57:e8:0b:a8:29:
                    aa:41:63:e6:2e:f6:83:bd:97:b0:5b:26:7e:b3:c3:
                    f5:16:fa:eb:98:c4:d3:d9:00:f6:fd:74:14:61:a6:
                    35:2e:a5:72:15:9f:67:60:78:ef:c7:32:70:0b:06:
                    69:a7:e7:41:be:4f:65:59:e8:a4:92:17:30:12:6f:
                    8b:b8:fb:f3:2d:22:30:f0:a7:76:4b:99:00:d0:db:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F1:DE:13:CE:75:35:21:4C:EE:10:6F:D5:F9:E8:DD:D9:F1:CB:4A
            X509v3 Authority Key Identifier:
                keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/evHeE851NSFM7hBv1fno3dnxy0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:47:68:b6:5c:33:0e:62:5e:10:d5:cf:f1:05:21:4f:21:1b:
         7f:24:a8:04:79:f8:36:60:14:db:17:48:f0:38:f0:c3:34:f9:
         1b:ab:21:93:c6:ca:f2:11:0b:9c:70:84:78:af:15:74:fa:2a:
         a4:f0:bd:ec:51:d7:2c:e1:23:01:aa:e3:20:6e:ae:ad:4f:c9:
         51:bd:fc:ba:a7:dd:76:2c:f3:a8:9c:38:ba:40:10:9d:f1:0f:
         6b:83:4b:ff:03:08:c6:1e:1e:e7:2e:e3:af:a7:99:90:cb:a5:
         55:1d:5b:1a:19:84:78:e8:85:6e:6b:f0:22:02:83:ba:d5:09:
         30:60:b8:6b:c0:72:b3:9e:c6:3e:06:b7:3c:78:94:da:58:8e:
         8c:1a:c7:e2:40:57:a1:a9:f7:75:91:db:7c:63:9d:e8:4d:68:
         75:0a:38:32:56:d1:6e:de:d1:78:c9:ae:8f:03:93:f6:36:4c:
         ac:ad:1e:7b:8e:f4:4b:a4:64:ee:7c:c6:7a:7d:13:27:5e:ab:
         7f:35:29:be:4b:92:61:41:f5:8d:d2:9f:fa:19:7b:0a:1a:3d:
         3a:43:f5:ed:35:a6:53:a7:e6:90:d6:93:47:9d:d4:a0:e8:1b:
         ae:41:d2:d7:b5:82:f8:27:38:1e:eb:41:79:6c:1a:be:10:5b:
         d3:59:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:31 2024 by rpki-client on console-ams.rpki-client.org