Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/7OEQ8O6wxc2kd1zbvsPbp1-bAA8.roa
File:                     7OEQ8O6wxc2kd1zbvsPbp1-bAA8.roa (raw, json)
Hash identifier:          LdMTYuSMx6i6DkZuQsIQAcwnfblIE0cE8CzADX2Y4YM=
Subject key identifier:   EC:E1:10:F0:EE:B0:C5:CD:A4:77:5C:DB:BE:C3:DB:A7:5F:9B:00:0F
Certificate issuer:       /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial:       01925156B0AB87B230F878543358B20E71E1
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/7OEQ8O6wxc2kd1zbvsPbp1-bAA8.roa
Signing time:             Thu 03 Oct 2024 07:44:48 +0000
ROA not before:           Thu 03 Oct 2024 07:44:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34918
IP address blocks:        46.36.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 11:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:51:56:b0:ab:87:b2:30:f8:78:54:33:58:b2:0e:71:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
        Validity
            Not Before: Oct  3 07:44:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ece110f0eeb0c5cda4775cdbbec3dba75f9b000f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:13:f8:13:5e:60:00:f2:ec:10:36:02:4d:
                    6f:1b:91:f6:76:0c:22:b8:c4:48:93:0b:d5:a5:ed:
                    0c:6d:bd:2f:a0:8b:f5:91:56:e3:ba:b0:56:b4:8f:
                    da:6b:26:f8:ff:f7:03:df:cd:3d:29:ad:f3:51:d1:
                    d7:54:35:cc:c0:ed:55:1a:ac:64:db:f1:80:a8:80:
                    f9:66:a6:19:c2:4c:4f:a8:a4:44:1a:c8:38:21:3f:
                    15:1b:87:2c:05:00:55:4b:16:b5:92:be:ca:83:31:
                    6f:0d:de:38:58:d6:05:ce:ed:5c:21:fc:a0:5a:5f:
                    f1:4b:fb:3d:dd:09:34:de:a9:e4:1c:a5:37:8f:5b:
                    d4:7e:81:87:5e:fc:65:15:c2:b6:d2:83:21:f7:a9:
                    01:e0:f3:06:c3:f6:81:fa:36:0e:24:80:0c:e0:13:
                    e2:74:bc:b6:fb:7d:0c:cb:d4:30:bb:5c:ce:5a:55:
                    d7:af:e1:3e:12:b5:e4:d4:4b:66:55:ac:89:f8:0d:
                    a3:91:82:81:b5:c4:11:04:44:42:15:9d:f8:80:4a:
                    1d:8e:19:aa:3b:16:82:4e:d0:41:f8:9f:ca:75:7a:
                    d5:67:a7:5d:37:8c:72:5e:fe:52:97:cd:61:0b:fa:
                    30:63:5f:c4:47:83:28:91:dc:cf:de:52:7a:d1:a7:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E1:10:F0:EE:B0:C5:CD:A4:77:5C:DB:BE:C3:DB:A7:5F:9B:00:0F
            X509v3 Authority Key Identifier:
                keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/7OEQ8O6wxc2kd1zbvsPbp1-bAA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.36.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:79:63:cc:ce:db:a5:1d:de:c0:ad:a2:ef:8b:0e:43:41:
         a6:c8:9c:57:ab:b3:e1:63:e6:4b:97:ce:ba:2f:6e:9f:b4:c1:
         67:c6:d4:23:60:b5:49:70:97:f1:a4:ea:5f:c9:62:49:f8:b3:
         f5:98:0c:de:d6:14:01:38:94:26:6b:8c:ee:eb:09:85:7d:5e:
         73:3a:a0:60:51:2b:ac:7b:d7:f9:5c:48:9e:e4:85:67:ac:bb:
         86:21:6e:07:36:49:2e:37:c2:e7:35:1b:c2:b3:55:dc:97:4e:
         72:4e:06:34:f3:73:82:6e:1e:0c:ce:1d:09:ac:31:98:15:8f:
         4a:62:af:22:1f:e4:4f:4c:dc:76:c3:f2:ae:03:b3:32:65:84:
         b1:8f:24:45:74:03:d6:46:91:f1:4b:48:ba:b3:41:b6:6e:56:
         c5:69:c8:3f:57:cd:fb:11:d3:9f:ef:1f:c5:ff:c8:9b:ae:39:
         5a:55:86:19:1b:52:d8:45:b1:b8:6b:20:68:dd:d5:bf:f3:8a:
         62:45:a1:4f:98:1d:86:92:ff:dc:0c:5f:26:7c:2f:d3:55:a0:
         8b:77:89:1f:a6:52:bf:ea:71:54:c5:bc:ba:da:1a:99:bc:b9:
         24:5a:2e:6e:ce:03:84:1b:a4:c2:e6:2e:81:39:51:15:a7:c7:
         c3:c8:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:48:37 2024 by rpki-client on console-ams.rpki-client.org