Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/JMlqv11pCHx-plNBI_SMaFkGl0c.roa
File:                     JMlqv11pCHx-plNBI_SMaFkGl0c.roa (raw, json)
Hash identifier:          mooE/kEaaWfLy8M5ZEZYUPVyFBFWY8cgq8QURQAwwM8=
Subject key identifier:   24:C9:6A:BF:5D:69:08:7C:7E:A6:53:41:23:F4:8C:68:59:06:97:47
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       0185710C0823E031D3423827705BD4F09F0D
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/JMlqv11pCHx-plNBI_SMaFkGl0c.roa
Signing time:             Mon 02 Jan 2023 05:54:51 +0000
ROA not before:           Mon 02 Jan 2023 05:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13037
IP address blocks:        37.252.48.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:08:23:e0:31:d3:42:38:27:70:5b:d4:f0:9f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Jan  2 05:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24c96abf5d69087c7ea6534123f48c6859069747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:12:0a:83:c2:30:12:68:a6:41:9a:36:4c:b7:
                    8d:89:3b:5d:22:d3:09:6c:ea:1f:de:52:da:9a:98:
                    7f:a4:de:69:8b:59:99:ee:29:ed:27:9b:c0:e6:38:
                    88:0e:68:62:9f:af:83:76:2c:a3:f6:48:46:b8:8b:
                    b2:f3:0f:40:f1:fd:30:1f:f5:5c:e4:dd:f6:c1:7b:
                    80:a7:eb:c4:7e:60:ee:6d:7d:7e:7d:73:54:90:7b:
                    31:33:60:50:55:75:5a:cc:6c:83:60:a9:02:0c:4a:
                    ae:4b:11:04:a6:3a:1d:8a:c9:a7:1f:ee:cf:34:b8:
                    e2:a3:a1:a3:ae:94:f2:9b:e5:d8:f4:fd:67:79:30:
                    80:0f:4b:ee:b6:9b:d1:9e:06:83:4d:3f:9f:31:74:
                    ed:4a:f9:29:df:ba:ef:23:5c:90:76:cc:16:95:12:
                    d2:08:82:56:8a:13:05:53:a2:07:49:0e:99:b7:be:
                    00:47:43:22:ca:49:9c:09:36:61:15:56:b1:54:21:
                    77:de:d7:a2:33:ca:81:05:cd:a9:20:45:01:3b:f2:
                    22:31:6d:c6:d7:92:fd:7b:9c:9f:51:e3:0b:c4:7a:
                    e9:32:cf:85:19:e2:2c:36:63:b5:b7:87:98:fd:27:
                    3f:6f:c7:96:b8:8e:c9:2f:c4:f1:7e:52:2a:03:b5:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:6A:BF:5D:69:08:7C:7E:A6:53:41:23:F4:8C:68:59:06:97:47
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/JMlqv11pCHx-plNBI_SMaFkGl0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.252.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:7b:c2:9a:de:04:1b:23:5e:5c:56:91:a3:95:91:f6:3c:
         de:20:71:6f:6e:72:1e:63:d8:61:67:10:59:20:d4:b1:65:20:
         16:b5:ef:d2:47:dc:30:36:2a:ef:17:b9:d8:bf:b2:ed:28:fd:
         b0:21:e6:08:14:0f:94:ad:2a:40:4c:22:94:fa:dc:e8:5c:8f:
         f4:1c:f1:8f:ce:38:17:77:70:59:c6:37:c8:99:7d:cf:18:3e:
         7a:90:56:6c:b2:fc:95:4b:46:8f:51:76:b9:37:e1:3b:62:db:
         f8:ab:4f:ea:fb:c2:1b:55:8c:a4:90:01:27:1a:73:f3:5b:3f:
         73:e8:47:c6:dd:30:c3:c4:34:11:ef:7f:0c:c6:de:20:9c:3f:
         63:9e:41:e5:ff:2d:1c:f9:d1:16:3c:3a:f2:79:fa:03:d6:a4:
         de:5a:f8:e4:bd:42:1d:79:69:fe:60:ca:3f:31:ca:7f:e9:64:
         bf:cf:9c:7d:5a:d8:4f:b8:3d:53:e2:79:56:b4:e1:a0:6b:ca:
         3e:ac:23:cb:18:74:dc:b5:de:91:2e:e8:88:44:0b:2c:d8:b6:
         c3:b4:9f:6f:bd:f1:d0:21:bd:23:7e:13:65:ba:91:6a:c8:d3:
         84:8e:24:db:9d:79:6e:9a:96:5c:d0:90:ab:b4:38:e2:a4:11:
         41:3d:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:23 2024 by rpki-client on console-ams.rpki-client.org