Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/QiifFciIdKTphmxe1IuyGxskBdU.roa
File:                     QiifFciIdKTphmxe1IuyGxskBdU.roa (raw, json)
Hash identifier:          YpdMAW61rO2WrTVarT1W5KpdGd1zmV/u6b6PsXWUtsE=
Subject key identifier:   42:28:9F:15:C8:88:74:A4:E9:86:6C:5E:D4:8B:B2:1B:1B:24:05:D5
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       018DE520CC7F5C7F04F092964486E272EA34
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/QiifFciIdKTphmxe1IuyGxskBdU.roa
Signing time:             Mon 26 Feb 2024 11:15:48 +0000
ROA not before:           Mon 26 Feb 2024 11:15:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206092
IP address blocks:        62.3.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 May 2024 16:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e5:20:cc:7f:5c:7f:04:f0:92:96:44:86:e2:72:ea:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Feb 26 11:15:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=42289f15c88874a4e9866c5ed48bb21b1b2405d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:b4:43:50:a4:7e:96:21:ec:44:aa:54:38:
                    c1:8a:d3:e2:83:28:e3:de:25:67:10:2f:a3:4a:a7:
                    b2:23:18:09:db:ba:ee:4d:af:9c:c1:92:7e:5e:08:
                    9f:05:6e:65:bd:22:8d:a4:48:8a:f2:a2:f2:5f:9c:
                    be:77:8b:f2:20:8c:50:8c:f4:10:c1:2a:a9:06:cb:
                    06:a8:f8:8c:d5:26:2a:85:b5:09:7d:ff:64:4d:91:
                    ef:c0:c5:f1:f1:5d:97:c8:03:c0:5b:7a:45:24:a0:
                    ea:42:80:3e:2f:48:3b:41:fd:39:07:70:77:65:c7:
                    ef:f2:7f:30:f4:e8:04:cb:57:03:e8:d0:bb:72:1f:
                    92:3b:2d:e5:d4:8b:98:92:f5:9c:67:50:34:6a:ab:
                    81:86:ec:12:00:f2:c5:75:60:73:80:18:90:a4:b6:
                    49:f3:51:bb:0b:d2:aa:02:31:07:00:3c:16:47:57:
                    95:c9:5e:fe:b9:1b:57:b5:62:b5:f6:5e:81:5d:0c:
                    db:33:bc:23:41:ce:c3:6e:23:92:ce:db:42:05:4f:
                    70:a7:5e:ff:09:60:8e:db:57:fb:2c:fe:91:96:b0:
                    9e:1e:96:8a:03:96:d8:90:45:4b:f4:60:fb:60:95:
                    f8:53:bc:9c:f7:ff:4c:a5:39:df:ee:33:65:6f:42:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:28:9F:15:C8:88:74:A4:E9:86:6C:5E:D4:8B:B2:1B:1B:24:05:D5
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/QiifFciIdKTphmxe1IuyGxskBdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:42:5f:9c:7b:68:99:63:f3:7d:59:47:0c:01:c2:08:cb:
         a2:cb:ea:79:77:ad:6f:4e:48:ba:45:38:70:0f:62:10:ee:7d:
         21:a9:25:08:70:1e:73:18:60:a8:f4:15:4b:df:07:61:d8:dd:
         c6:14:c9:b3:2f:14:43:de:c8:6e:35:7f:e0:88:3c:9b:c6:67:
         63:cd:ea:66:e7:84:ac:2b:50:af:ee:fc:ff:90:a1:b1:cd:5a:
         13:f1:fa:53:e6:ce:d7:53:36:24:eb:56:9c:d8:07:45:b4:76:
         54:5e:df:b1:ce:2b:54:13:41:8e:67:e3:48:61:92:fb:a9:e6:
         5a:61:31:1b:34:41:21:8a:f2:a4:b1:c0:cb:4f:2b:9f:d0:82:
         5c:1f:5f:55:1c:a5:29:00:e5:da:0b:5f:40:74:31:15:ea:53:
         12:7c:bc:a3:78:9b:10:0a:38:0d:38:9b:7f:0a:99:80:3b:d7:
         58:10:1d:9c:75:85:ab:a0:d8:fe:ef:11:cf:ab:88:d9:93:0f:
         64:a9:5c:80:69:9d:93:0a:c1:58:52:8c:52:38:5c:7c:5d:ed:
         a4:7d:c5:b2:3d:f5:8f:c1:20:1e:04:b1:b0:60:bd:45:de:8e:
         c4:41:76:5c:f5:58:98:e7:80:f0:9b:35:16:81:be:6d:8a:c1:
         6c:1a:9d:e7
-----BEGIN CERTIFICATE-----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Generated at Fri May 3 19:54:04 2024 by rpki-client on console-fra.rpki-client.org