Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vU6nEuyUvfFqp19xiXMzDkyOAwU.roa
File:                     vU6nEuyUvfFqp19xiXMzDkyOAwU.roa (raw, json)
Hash identifier:          IuMOkCVFFyeXsajS9dj6XzSTYj0OR9QklqQ/mKVkRwg=
Subject key identifier:   BD:4E:A7:12:EC:94:BD:F1:6A:A7:5F:71:89:73:33:0E:4C:8E:03:05
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       018BAB491F253FC32702FC99B3A655C1FE09
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vU6nEuyUvfFqp19xiXMzDkyOAwU.roa
Signing time:             Tue 07 Nov 2023 19:36:17 +0000
ROA not before:           Tue 07 Nov 2023 19:36:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60660
IP address blocks:        62.113.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ab:49:1f:25:3f:c3:27:02:fc:99:b3:a6:55:c1:fe:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Nov  7 19:36:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd4ea712ec94bdf16aa75f718973330e4c8e0305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:12:4a:d5:47:f9:15:85:5e:ef:cb:de:17:
                    ba:8c:26:2d:ca:5a:44:94:d3:8e:1d:ba:c4:b4:84:
                    95:aa:fd:d1:84:f6:de:d4:81:6f:2e:7e:19:56:d4:
                    fd:39:67:1e:ad:a3:08:28:b9:94:92:c3:d7:f6:3c:
                    a2:99:80:64:ab:5e:6e:ad:e9:ed:f2:07:8b:ec:6c:
                    d6:58:b7:86:f1:55:40:0c:bc:af:45:bf:57:d9:fd:
                    9a:00:2b:4b:88:1b:5d:8f:60:8c:c5:cd:f3:d1:e9:
                    22:0f:c6:ca:d5:c9:43:ee:80:2e:76:3f:b1:cc:ba:
                    b5:6c:d6:a1:87:4a:b8:61:d3:b2:f0:34:29:e0:f8:
                    6d:5a:d7:da:c6:ec:d6:3b:cf:27:4e:06:3d:4d:a5:
                    c0:51:c5:ac:a8:0d:ce:52:95:12:88:9d:92:4d:ad:
                    ba:23:77:b0:50:da:6a:0d:14:15:66:37:d7:d4:4d:
                    f9:6a:0f:80:ee:ef:6e:cf:c1:63:2a:e6:ff:aa:65:
                    c8:08:34:49:d7:d4:1e:80:03:aa:ef:02:ac:32:c9:
                    ab:a7:ea:a1:38:52:9c:b6:af:84:ba:6a:e0:fc:60:
                    23:f6:f7:ce:14:b5:c3:29:38:f3:58:75:d5:e4:5c:
                    be:53:d5:be:1a:44:e2:3a:0e:b1:2a:7c:16:ab:fd:
                    d0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:A7:12:EC:94:BD:F1:6A:A7:5F:71:89:73:33:0E:4C:8E:03:05
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vU6nEuyUvfFqp19xiXMzDkyOAwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.113.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:65:ee:19:f8:c3:c8:0f:ff:2f:15:c4:ea:e5:15:5f:fe:23:
         71:75:80:93:7e:93:45:ef:94:ee:6e:0e:17:92:47:8d:59:a8:
         5c:66:38:55:5a:f5:67:60:9d:fc:75:57:8e:c2:ee:a5:2b:ff:
         96:8c:7f:c1:1a:6a:6c:0a:91:06:bb:8d:b8:90:42:34:ed:ae:
         a9:ca:cc:27:0e:18:6f:38:57:eb:99:7e:57:23:62:f5:11:41:
         5f:86:23:21:36:cb:58:e3:b7:89:48:a3:fb:9f:99:2b:08:f3:
         92:43:85:a9:c1:0e:14:63:b5:d0:10:05:fc:ea:0f:7a:31:30:
         73:89:92:de:80:5d:91:35:19:53:2d:86:ec:a5:35:4e:96:82:
         7d:2f:e7:bd:77:45:b6:83:08:40:9e:7e:ef:82:f3:ed:0c:4a:
         c5:05:e5:dd:4d:c9:a8:84:3b:ee:29:f7:f3:54:29:e5:59:bd:
         4b:4f:98:a7:a9:c3:64:e7:d0:c9:d4:56:ad:47:fd:36:b0:29:
         21:3e:16:d5:0e:b2:81:25:ae:3b:3a:42:79:b8:fe:7d:c4:66:
         a6:45:d4:3e:f5:51:15:87:0d:d5:35:10:83:91:cc:b3:8a:08:
         c7:9a:75:22:e8:14:03:c9:af:05:d4:19:44:8b:a8:d5:6b:9a:
         06:0e:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:44 2024 by rpki-client on console-ams.rpki-client.org