Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Bplyc4BfdrhKN307-AIKs68q1jQ.roa
File:                     Bplyc4BfdrhKN307-AIKs68q1jQ.roa (raw, json)
Hash identifier:          Bbyl8RXv/WeS6eoJEY6Y6Ghx0OI+yI/OxX5lPPHO3i4=
Subject key identifier:   06:99:72:73:80:5F:76:B8:4A:37:7D:3B:F8:02:0A:B3:AF:2A:D6:34
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       0190FAC9262EF2DE4E8A98FF54388FB25DF5
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Bplyc4BfdrhKN307-AIKs68q1jQ.roa
Signing time:             Sun 28 Jul 2024 19:20:04 +0000
ROA not before:           Sun 28 Jul 2024 19:20:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21859
IP address blocks:        46.37.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 05:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fa:c9:26:2e:f2:de:4e:8a:98:ff:54:38:8f:b2:5d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jul 28 19:20:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=06997273805f76b84a377d3bf8020ab3af2ad634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:94:71:92:01:38:1a:67:74:04:1f:04:49:
                    f7:69:60:76:3d:22:fb:d4:2f:f9:be:58:dd:21:3e:
                    d4:b3:ab:88:4b:e4:7c:ce:51:91:d1:2b:33:f6:f6:
                    3e:9d:be:23:95:8f:68:a5:1a:e1:58:85:07:75:2a:
                    95:d4:28:6a:60:1d:cd:b1:e2:3f:8f:98:4b:f6:52:
                    a1:7f:a2:83:9d:ae:29:0d:f9:85:67:a4:8d:93:74:
                    7a:9d:7a:db:f7:ac:1a:bc:58:c9:cb:03:88:0b:f3:
                    70:e9:35:d9:f1:8d:09:d6:0c:1e:7a:2e:c5:82:47:
                    da:09:2a:5f:39:41:ac:e2:03:29:7b:40:b6:0b:8c:
                    82:ef:67:87:b5:3b:49:4e:e7:01:ef:20:31:e2:4d:
                    c7:75:8d:20:ca:12:3e:28:ee:2f:01:f8:38:83:6e:
                    c5:c0:98:00:13:a2:1c:c1:42:dd:0b:e6:c3:df:53:
                    a5:ab:59:89:17:0d:54:e2:dd:a2:25:98:0f:84:d8:
                    5f:66:59:70:df:11:39:4c:d8:9e:bd:f0:9a:f0:ae:
                    da:f5:54:43:7d:f9:ab:4f:72:75:67:2b:d9:dd:3d:
                    25:45:70:ed:f1:a3:cb:00:25:58:0f:b0:e5:9e:09:
                    96:f1:06:16:62:af:62:3e:96:b8:c1:2d:48:3b:26:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:99:72:73:80:5F:76:B8:4A:37:7D:3B:F8:02:0A:B3:AF:2A:D6:34
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Bplyc4BfdrhKN307-AIKs68q1jQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:52:5d:e3:bf:5b:dc:b1:94:83:79:5c:7c:1b:99:bf:28:
         79:60:03:79:56:05:68:14:9a:4f:45:ed:5d:9c:d2:bc:23:31:
         7b:f2:05:0a:b8:b5:ab:58:a2:2e:1d:69:01:4e:df:0b:5f:15:
         a4:42:9b:07:9f:33:4d:a8:42:5d:09:0d:6f:16:10:0f:3f:e8:
         6f:f0:e5:c2:30:b7:79:45:a5:81:3c:41:17:ec:11:34:4e:a0:
         df:72:7c:a4:fc:15:c1:1a:f7:ae:3e:8d:ed:7d:c8:b6:3d:a4:
         14:45:6a:a9:1c:9b:3b:ae:fc:2d:c2:ea:21:6e:d6:5a:62:18:
         3f:5a:45:79:27:7a:93:8d:c9:59:3b:12:66:ee:67:e9:68:21:
         4d:99:de:63:5a:86:ca:46:d5:85:84:fc:b9:df:5b:e2:70:68:
         fb:e6:f5:cd:a5:78:31:b0:d5:82:70:25:c2:ad:1b:63:af:d3:
         ce:76:f3:7e:0a:a6:8a:2c:3f:d5:28:10:4d:a7:8f:52:3c:8c:
         fd:4a:93:91:56:0f:d5:7d:af:bd:a6:f8:66:27:e4:c8:57:63:
         73:26:84:cb:e2:7f:49:57:47:69:67:f5:8a:87:e7:02:19:44:
         54:a2:16:ec:dc:0b:a1:aa:dd:99:3b:4d:f3:3d:56:33:60:24:
         76:16:db:a6
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 28 07:05:42 2024 by rpki-client on console-ams.rpki-client.org