Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/WfJniF3TIctIQ-MQQJJWJ0YEwbA.roa
File:                     WfJniF3TIctIQ-MQQJJWJ0YEwbA.roa (raw, json)
Hash identifier:          tgBaP938djt+ymEk+4zer0gUooyMe0Z1HRnsybLPULQ=
Subject key identifier:   59:F2:67:88:5D:D3:21:CB:48:43:E3:10:40:92:56:27:46:04:C1:B0
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       0187B700E4497C5661C9DA82BEB9953A3E91
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/WfJniF3TIctIQ-MQQJJWJ0YEwbA.roa
Signing time:             Tue 25 Apr 2023 06:01:41 +0000
ROA not before:           Tue 25 Apr 2023 06:01:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9121
IP address blocks:        62.108.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:00:e4:49:7c:56:61:c9:da:82:be:b9:95:3a:3e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Apr 25 06:01:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=59f267885dd321cb4843e310409256274604c1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:8e:c5:9f:38:4c:00:93:e8:26:06:14:cd:
                    71:d1:63:7c:2b:3b:66:26:09:06:7a:c9:d2:f8:02:
                    dc:f7:aa:69:90:d6:0b:51:45:5c:5f:63:ae:1c:91:
                    e0:fa:16:ca:c2:ef:4b:0c:98:1a:bc:0c:f5:74:a3:
                    8d:04:cb:7d:b0:69:72:4d:2e:b9:5a:c1:e2:21:a9:
                    f3:b7:cd:eb:e7:11:97:a7:0b:67:32:26:45:8f:2d:
                    75:df:96:c9:39:fc:ea:87:cf:bd:33:a3:54:13:c6:
                    ea:73:fd:2d:18:7b:c1:f1:97:23:b1:9c:04:10:27:
                    1e:59:af:1e:b1:1b:6b:3d:ce:d6:28:74:aa:ee:fe:
                    da:84:e0:de:63:70:87:c5:63:65:b5:c8:87:70:0f:
                    30:96:db:d2:4d:49:98:a9:57:b5:ec:39:29:79:ed:
                    be:b6:5d:3c:c4:f3:20:16:c3:20:a6:ab:f9:7a:8a:
                    f5:e7:e9:74:bb:77:67:55:cf:8d:7b:f7:ea:bd:4d:
                    83:6c:3d:cc:9c:9c:cb:48:5c:8c:10:d1:3b:06:b8:
                    bd:64:e3:98:b4:e9:45:fd:6a:39:a3:8e:64:b5:7e:
                    be:34:fb:54:65:9d:39:dd:3e:21:02:8a:64:4e:28:
                    eb:12:84:17:4c:14:b6:f0:5d:87:3a:79:44:ff:a2:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F2:67:88:5D:D3:21:CB:48:43:E3:10:40:92:56:27:46:04:C1:B0
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/WfJniF3TIctIQ-MQQJJWJ0YEwbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.108.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:03:97:19:b8:30:e7:18:69:34:7b:18:d2:3f:0a:a1:b6:
         75:3c:df:db:95:f8:44:16:2a:2d:b2:d2:88:cf:6c:59:42:cc:
         83:d4:08:9c:15:8a:b0:8d:e3:94:6b:8c:16:3f:d2:fe:9e:0a:
         2b:9e:bf:bc:3c:02:c4:15:8e:3c:39:b8:5a:da:3a:87:5a:70:
         08:26:88:d0:68:d9:f4:63:a6:f9:56:b5:5e:04:cf:81:40:c5:
         dd:25:d4:65:c9:e8:51:eb:d7:67:8a:44:a8:2a:9e:60:b0:15:
         f9:7a:48:80:46:74:37:3c:e2:44:91:4e:7b:0c:3d:ab:76:f2:
         c4:9b:8a:93:3d:50:75:2e:60:b2:5b:16:13:82:cc:af:05:52:
         ee:ba:28:b5:94:d0:9e:7c:5a:f4:7e:17:10:ee:8f:be:85:f3:
         80:a2:58:f3:83:bb:b1:8f:18:65:df:37:01:e2:e0:4e:2f:e3:
         5c:ac:e1:9e:cf:1d:d8:4c:68:2e:2e:db:59:b5:d8:46:fd:f3:
         be:07:76:53:a9:1b:0c:d5:54:96:d7:92:03:1b:7a:e3:f7:72:
         4b:15:fb:75:0c:d3:a8:60:da:c4:24:17:73:99:f7:b1:cd:ef:
         af:fe:97:a3:0b:79:24:ca:fe:47:05:56:e4:25:89:56:36:17:
         33:f5:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:34 2023 by rpki-client on console.sobornost.net