Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/iL5N3v35AD3FIKiAIM3AHftKLho.roa
File:                     iL5N3v35AD3FIKiAIM3AHftKLho.roa (raw, json)
Hash identifier:          fpuoVef3QDIrxIyNp3pvXjoenQ/ET8xXOIRXLBxQVVo=
Subject key identifier:   88:BE:4D:DE:FD:F9:00:3D:C5:20:A8:80:20:CD:C0:1D:FB:4A:2E:1A
Certificate issuer:       /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial:       01910C7B2D52FA311536C3EBCE761B42E221
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/iL5N3v35AD3FIKiAIM3AHftKLho.roa
Signing time:             Thu 01 Aug 2024 05:48:04 +0000
ROA not before:           Thu 01 Aug 2024 05:48:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        194.246.36.0/24 maxlen: 24
                          194.246.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 05:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:0c:7b:2d:52:fa:31:15:36:c3:eb:ce:76:1b:42:e2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
        Validity
            Not Before: Aug  1 05:48:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=88be4ddefdf9003dc520a88020cdc01dfb4a2e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:52:bd:27:d7:6e:9c:95:45:d9:7e:2f:5b:
                    73:ed:e4:08:e7:23:25:ea:73:94:8f:f6:cc:1e:b0:
                    53:ad:ff:a9:cc:14:4f:a0:cd:a1:de:6b:76:ac:e9:
                    75:96:80:e7:9b:1c:6e:57:b3:6b:95:9c:8c:02:6a:
                    97:43:e7:60:d1:29:bd:3b:25:46:4f:9e:0e:3b:18:
                    1b:c5:40:9d:9b:e8:f5:9e:e9:78:09:5a:1a:8e:6f:
                    ba:3d:7f:93:ce:bf:29:f1:54:79:f3:a5:65:c7:99:
                    c7:12:8d:3c:87:7b:50:08:93:f3:56:18:74:97:2f:
                    2d:92:4b:a9:d9:62:18:1d:8e:cc:76:88:94:3d:45:
                    dc:c1:0a:e5:ed:d4:11:48:1b:87:90:b2:cc:7c:c1:
                    b9:5e:9f:72:08:7b:d8:a9:fb:b0:37:c8:78:f7:12:
                    15:59:2f:b7:9b:a9:2f:dc:a4:0f:da:50:72:63:85:
                    1b:ce:e3:34:1c:3c:e9:9e:27:b9:25:7f:a2:8c:97:
                    f9:35:fb:e2:70:19:b5:05:1d:50:9f:da:90:13:b2:
                    82:6e:15:0d:0b:57:05:e1:ac:5a:ad:98:de:19:5d:
                    70:91:77:ae:75:86:0f:8f:32:fb:43:c5:0d:f3:2f:
                    4e:3e:0d:1b:7d:ff:46:47:81:1f:dd:37:b0:8f:0f:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BE:4D:DE:FD:F9:00:3D:C5:20:A8:80:20:CD:C0:1D:FB:4A:2E:1A
            X509v3 Authority Key Identifier:
                keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/iL5N3v35AD3FIKiAIM3AHftKLho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.246.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:e4:d4:24:67:eb:4c:b6:6a:44:8e:03:19:ba:27:d5:c1:
         37:ec:ab:c8:da:1b:87:6c:5f:ef:19:6c:6e:fc:3f:48:a2:24:
         ff:af:c6:10:88:56:51:c8:99:48:35:ce:38:44:08:7a:8b:45:
         4f:44:cf:4b:b4:09:eb:5a:3d:a5:e4:1e:62:0e:57:dd:0a:3c:
         f7:dc:34:0a:ef:0b:5c:4b:e2:82:3f:aa:22:f6:81:86:1e:99:
         b0:2b:09:b9:40:51:56:1e:bc:3d:e2:c0:d8:01:2a:de:fa:4a:
         d9:71:d2:d8:fe:90:62:d5:be:d3:72:c8:3c:b3:95:65:5b:5e:
         b1:de:22:9f:9b:b6:93:a0:84:3b:95:f6:de:b1:6e:de:f3:72:
         7c:10:18:f3:fa:ae:93:c8:f7:de:49:21:24:fd:0d:8d:10:3d:
         42:1a:e3:86:80:df:1f:4d:04:65:9c:8d:15:47:d9:83:a6:80:
         88:7e:cc:b8:93:04:d4:e9:9f:1b:58:f5:fe:d2:88:e7:fb:24:
         0b:0f:67:eb:8a:2d:59:26:28:b8:03:19:5f:c6:28:3c:03:fb:
         5c:a1:21:7c:4a:d7:97:e8:16:d7:5f:70:29:23:bd:48:49:7f:
         5a:41:bb:95:54:7b:bc:6b:76:67:99:17:10:13:8f:39:24:05:
         6b:29:5e:af
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 6 07:25:33 2024 by rpki-client on console-ams.rpki-client.org