Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/pUr46cKLFtuCVa8rCVoYp9Ydsbc.roa
File:                     pUr46cKLFtuCVa8rCVoYp9Ydsbc.roa (raw, json)
Hash identifier:          XRRcg1Kyzjtf6I9WJY6gmUTl2T/cKyCvDp74mfB7qCU=
Subject key identifier:   A5:4A:F8:E9:C2:8B:16:DB:82:55:AF:2B:09:5A:18:A7:D6:1D:B1:B7
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       018B3363BBC2F2FFBF69B6489B87F042F37C
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/pUr46cKLFtuCVa8rCVoYp9Ydsbc.roa
Signing time:             Sun 15 Oct 2023 12:50:55 +0000
ROA not before:           Sun 15 Oct 2023 12:50:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     32787
IP address blocks:        37.224.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:33:63:bb:c2:f2:ff:bf:69:b6:48:9b:87:f0:42:f3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Oct 15 12:50:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a54af8e9c28b16db8255af2b095a18a7d61db1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:f1:a1:46:e0:ac:ad:1d:93:17:25:cc:27:
                    8b:ac:8c:3b:ed:23:c6:1e:2a:f0:e0:17:a7:a2:66:
                    c9:86:e7:ae:c1:e3:68:d4:d8:a8:1f:b6:28:c1:d4:
                    11:a3:b3:00:2b:99:74:ca:88:4e:00:c1:8d:76:49:
                    16:20:79:1f:ed:74:30:e7:97:da:1a:fc:fd:82:83:
                    7f:b3:86:18:03:17:56:ce:65:a4:a2:63:2d:91:77:
                    2e:49:0c:3b:3e:42:35:89:dd:ee:08:fd:04:6a:da:
                    ab:17:ac:f8:ee:c7:0d:de:f1:5d:ed:d0:64:a0:f5:
                    f8:75:2c:29:b7:e8:83:3d:bd:d4:3d:9e:a7:df:74:
                    ce:9e:aa:50:16:95:23:b4:be:f4:fe:9b:9a:b5:8b:
                    7b:1d:90:ea:a2:4c:cf:5b:aa:83:59:4f:b0:e8:0f:
                    0b:4a:79:2f:84:85:62:98:0e:08:8d:35:56:ae:9e:
                    8f:67:52:6f:35:42:35:a8:cf:00:4d:94:1b:5a:e3:
                    78:6f:55:4f:e6:66:42:db:f2:07:e3:db:28:18:28:
                    18:bf:2f:ff:a6:74:54:57:71:bd:98:f3:2d:6f:6e:
                    12:dd:1b:80:07:16:15:c0:11:95:aa:6e:49:b5:2f:
                    ca:9f:ec:12:a6:2d:31:51:b1:33:cc:f6:bd:c6:a9:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:F8:E9:C2:8B:16:DB:82:55:AF:2B:09:5A:18:A7:D6:1D:B1:B7
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/pUr46cKLFtuCVa8rCVoYp9Ydsbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.224.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:f6:54:9c:92:c6:13:0d:b2:83:c9:bc:ca:09:8c:86:8d:
         3a:d0:79:a0:3e:9d:6d:d6:c0:44:4b:2d:69:5c:f6:4a:86:cf:
         b5:84:d7:da:c2:ba:72:fb:81:6d:5d:95:19:7f:bf:fd:70:dd:
         1b:09:bb:30:64:26:d3:7c:5e:fb:5a:71:5f:be:7a:90:ea:0e:
         2f:c9:ac:22:9c:59:d5:c7:3a:65:50:c7:cb:24:44:fa:6c:bf:
         47:e0:0b:b0:df:9a:0d:41:ee:93:1e:3b:54:d1:14:32:8e:82:
         58:9c:8d:ab:57:2f:6f:3c:8f:e8:ef:ff:c1:06:be:a9:5d:16:
         cd:c5:0e:1b:a8:7a:71:a5:bd:fb:46:2d:a2:62:ed:26:53:c9:
         22:44:8d:40:11:1e:ba:44:dd:75:95:c3:3d:49:e5:0f:e5:e4:
         7d:56:b5:84:8f:6e:00:67:e0:2d:e7:73:81:57:8b:93:6c:a4:
         c9:bb:04:99:05:f7:9b:ae:5c:ff:35:ae:5d:7a:4d:12:42:ed:
         aa:33:07:f2:68:5a:8c:a8:74:ce:81:6e:45:12:f7:00:4b:fd:
         cb:ec:b7:78:17:dc:12:b9:82:6a:81:ac:87:75:80:75:f8:08:
         b5:e5:fa:d1:e3:0e:a1:15:8b:54:24:f2:8b:c9:23:e1:84:2a:
         e9:ca:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:07 2024 by rpki-client on console-ams.rpki-client.org