Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60602.roa
File:                     AS60602.roa (raw, json)
Hash identifier:          q562b7BdjkCJIb67GQCFCzyBc/JQoJxG4zIuwOn5V3Y=
Subject key identifier:   2B:EB:DE:A4:6E:D2:5F:47:8C:4F:70:30:8D:8B:0B:E2:E9:7F:3B:38
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       6D3D8F5BA3F75DB62574AB578429C7EE21A4FE90
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60602.roa
Signing time:             Thu 12 Jan 2023 12:07:42 +0000
ROA not before:           Thu 12 Jan 2023 12:02:42 +0000
ROA not after:            Thu 11 Jan 2024 12:07:42 +0000
asID:                     60602
IP address blocks:        193.151.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3d:8f:5b:a3:f7:5d:b6:25:74:ab:57:84:29:c7:ee:21:a4:fe:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Jan 12 12:02:42 2023 GMT
            Not After : Jan 11 12:07:42 2024 GMT
        Subject: CN=2BEBDEA46ED25F478C4F70308D8B0BE2E97F3B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5a:5c:b5:38:50:fb:9a:70:3e:4c:04:04:20:
                    64:e1:9f:a5:dc:90:c4:43:15:96:38:89:6e:72:d4:
                    61:ab:2c:2c:59:4c:0a:b5:94:3e:4c:d8:9f:ba:0a:
                    b1:04:eb:52:1c:08:70:7f:b8:e3:12:7e:2f:7a:a4:
                    70:0e:cc:fd:2b:f5:cd:6c:e4:53:24:16:60:a5:e7:
                    f2:27:f7:99:14:d0:59:74:9c:71:b1:5e:61:b8:cd:
                    4d:6e:d9:e0:1b:63:a8:82:0d:89:3e:f8:cd:92:2c:
                    5f:20:f0:d3:19:e1:9b:b9:18:82:b7:71:3a:a0:fd:
                    39:10:67:d6:c3:1a:66:6a:03:04:a1:bd:57:f1:a2:
                    f7:03:6f:bf:2a:f7:53:ef:5d:68:85:43:d6:a5:ea:
                    5e:c6:ea:10:0d:0a:e7:6c:55:e2:a1:54:95:32:76:
                    63:fd:62:4e:76:0b:cf:ad:64:e3:6d:b3:0c:c2:bb:
                    55:ea:e0:eb:58:ce:7b:06:6c:96:2f:3e:2a:b7:d2:
                    5f:27:3f:3f:6a:53:9f:fb:23:ba:2d:07:b4:b9:5c:
                    c7:fe:ef:d4:34:42:8e:ec:6d:e5:bd:9b:2d:10:ae:
                    3b:89:18:28:34:5d:dd:de:cc:d7:1d:10:98:d6:33:
                    1c:9b:8e:97:cb:f3:f1:a9:7c:f3:41:8c:12:52:7f:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EB:DE:A4:6E:D2:5F:47:8C:4F:70:30:8D:8B:0B:E2:E9:7F:3B:38
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60602.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:ef:a2:36:f6:a6:70:5a:4f:7d:cd:af:be:5c:f6:7d:bf:a7:
         21:8c:62:ba:b3:58:ab:97:63:b4:7a:a1:c4:27:77:08:99:21:
         71:11:cc:97:8c:9f:a3:5c:2d:b2:ab:22:7c:ec:cc:fb:5a:25:
         df:35:c9:0e:cc:0f:a5:42:d6:5c:79:33:bb:67:51:2f:6a:70:
         09:16:0f:be:91:74:77:4c:4b:a3:8d:f1:88:8c:83:51:12:e8:
         6a:19:d5:89:bd:b6:97:ad:7d:ca:aa:ad:44:57:68:79:f0:f1:
         5c:70:4c:1e:17:3e:1e:6c:72:7a:71:c7:86:93:97:51:80:3a:
         be:61:88:77:05:e6:70:e4:ee:c6:e2:c2:39:6d:4c:6a:f8:b7:
         ba:fd:f8:b8:17:76:9a:c1:dc:2a:c0:e6:8c:f1:d1:ed:a6:f0:
         57:9e:29:73:d4:d1:54:13:8a:0e:62:85:90:89:1e:a9:a5:64:
         47:ac:a4:c9:92:0b:69:3f:4f:e7:40:67:40:9c:06:80:50:77:
         4d:1d:d5:1f:c1:a8:d4:7e:eb:f2:aa:c9:19:bc:1c:4c:bd:69:
         59:62:e2:e2:58:80:5d:73:c6:68:db:79:94:4a:bc:cd:fb:e5:
         b5:46:ab:1f:ab:92:f7:e5:39:bb:d2:06:6b:2d:b3:37:be:6c:
         d4:90:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org