Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Bm377vmxSYlwr3ORWO_rHUX87W4.roa
File:                     Bm377vmxSYlwr3ORWO_rHUX87W4.roa (raw, json)
Hash identifier:          l0eQ+auOJpJQFJgUVQG8I0J+GONYmvrH5+hLJrBmOBg=
Subject key identifier:   06:6D:FB:EE:F9:B1:49:89:70:AF:73:91:58:EF:EB:1D:45:FC:ED:6E
Certificate issuer:       /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial:       0191FF716D810E1E9CFE2131956DEFF3002C
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Bm377vmxSYlwr3ORWO_rHUX87W4.roa
Signing time:             Tue 17 Sep 2024 10:05:09 +0000
ROA not before:           Tue 17 Sep 2024 10:05:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214384
IP address blocks:        46.36.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 08:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:ff:71:6d:81:0e:1e:9c:fe:21:31:95:6d:ef:f3:00:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
        Validity
            Not Before: Sep 17 10:05:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=066dfbeef9b1498970af739158efeb1d45fced6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:df:da:99:a6:01:dc:b1:6a:8d:7a:e2:81:
                    5d:bb:b8:19:b7:a5:73:a6:40:84:19:8a:47:7f:f0:
                    9a:ef:92:1a:5f:b8:5b:c2:89:90:0d:6f:4d:78:b2:
                    a0:49:2c:72:8f:81:98:66:78:26:14:72:6d:b4:16:
                    f1:24:b3:f7:cb:c9:8a:bf:00:b9:92:1c:50:90:80:
                    6e:0f:c8:af:a8:2b:b0:4b:38:d7:4b:3d:6a:33:f0:
                    3a:53:9c:4b:dc:47:28:60:f0:25:a1:23:aa:c9:14:
                    b2:4f:f0:0c:b6:6a:b4:c3:15:77:1c:5e:6e:af:a1:
                    7f:52:4e:bf:f2:17:8f:21:27:23:1a:21:c9:a2:d2:
                    5b:f6:af:c0:13:72:31:a6:96:18:de:c5:ae:ae:e2:
                    2b:de:0b:28:30:79:11:11:bd:29:7d:3d:d5:11:4a:
                    01:a9:02:6f:aa:a9:49:99:d1:d8:c6:7a:d9:7c:d2:
                    5e:55:4a:36:d4:f9:ab:43:65:33:2c:45:ca:cb:46:
                    79:99:99:9d:d6:d8:cb:a5:fb:d7:86:cc:1e:74:5d:
                    af:c9:22:81:76:21:12:dd:1c:b3:dc:d7:b6:0e:e9:
                    75:2b:5c:2e:41:c1:0d:f5:9f:70:c4:b9:a3:a3:1d:
                    c8:4e:38:6a:8e:3e:8e:66:f7:67:51:68:d5:dc:1e:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6D:FB:EE:F9:B1:49:89:70:AF:73:91:58:EF:EB:1D:45:FC:ED:6E
            X509v3 Authority Key Identifier:
                keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Bm377vmxSYlwr3ORWO_rHUX87W4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.36.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:0d:16:d6:27:78:bd:ea:f7:df:87:86:03:83:35:9c:af:
         96:30:b9:39:77:ae:05:89:08:27:75:74:47:a9:27:18:e6:9f:
         6c:87:9b:4b:36:1c:36:bb:d7:91:9e:b8:3c:2c:63:d3:8e:49:
         06:2b:e0:60:dc:49:2c:54:b1:c3:2e:ec:ec:0e:62:e8:04:e0:
         09:9b:50:ef:8a:b0:2a:b9:ed:4d:25:b5:e3:21:18:d7:d6:ae:
         1b:b7:d5:42:2b:f9:35:e7:84:89:33:82:79:41:67:00:4c:ce:
         8a:19:bc:67:7c:a2:2c:77:d8:4a:b8:70:53:0e:0d:08:73:45:
         f0:04:f7:ce:c9:f0:17:28:1a:15:64:21:cd:d4:08:ca:6f:88:
         89:79:0c:bf:4c:e1:0a:ca:7a:e4:a3:54:4f:09:79:28:71:df:
         02:7a:8a:95:92:dc:5a:0b:28:b7:dd:10:b7:63:46:62:ae:d9:
         09:ad:6e:d3:7d:dd:87:86:4f:d9:34:5d:87:e4:7b:86:30:77:
         e8:f0:4c:7d:d5:e2:a1:b2:9d:e4:43:85:32:f6:28:e6:4a:15:
         8d:e1:3d:27:09:f3:12:7d:b6:7d:cf:06:95:48:b2:78:99:df:
         4f:59:17:0d:52:ea:db:48:98:f4:0e:04:da:54:84:5f:bd:4d:
         e0:bb:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 10:37:17 2024 by rpki-client on console-ams.rpki-client.org