Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FJ7invGzeD9Tz47JgzX6wE--DeQ.roa
File:                     FJ7invGzeD9Tz47JgzX6wE--DeQ.roa (raw, json)
Hash identifier:          J8Zmpl9p6DnAYZGOo6j7ar9FkbYknQayjOmG1LUHsdo=
Subject key identifier:   14:9E:E2:9E:F1:B3:78:3F:53:CF:8E:C9:83:35:FA:C0:4F:BE:0D:E4
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01897238B7601C9FE721B66B9A2F63697910
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FJ7invGzeD9Tz47JgzX6wE--DeQ.roa
Signing time:             Thu 20 Jul 2023 07:34:26 +0000
ROA not before:           Thu 20 Jul 2023 07:34:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6939
IP address blocks:        46.37.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:38:b7:60:1c:9f:e7:21:b6:6b:9a:2f:63:69:79:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jul 20 07:34:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=149ee29ef1b3783f53cf8ec98335fac04fbe0de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d2:0e:e1:b1:6b:96:3b:13:78:6a:77:ee:52:
                    e0:7c:00:c7:51:cf:67:44:9e:7a:15:05:8a:64:cc:
                    60:91:14:0d:e3:0e:7d:08:d4:77:c1:a7:33:fd:42:
                    27:e9:94:65:30:b3:6d:c0:a5:71:30:91:c7:47:9a:
                    98:f7:0e:8e:f8:35:e9:3f:f3:06:1c:47:6b:72:05:
                    08:33:d6:b7:12:9d:60:4f:93:fb:31:de:c7:6f:0f:
                    09:ef:e3:02:7f:f3:4e:eb:69:ba:48:e6:f7:e0:4e:
                    17:3f:16:49:6d:63:ed:9f:b7:b8:2e:06:63:e6:93:
                    a3:55:9f:d8:cd:80:91:bd:1c:5d:b5:75:58:b8:c7:
                    dc:8b:a5:30:81:92:c9:e3:20:c5:8c:6b:ca:34:dc:
                    91:a9:d9:57:be:ea:37:b7:ba:47:05:7c:09:33:8d:
                    60:21:6b:eb:df:e2:7f:69:90:7a:4b:45:27:9e:ce:
                    d9:83:cc:97:19:a1:13:fa:a3:2e:9a:2b:f9:24:97:
                    c5:7b:97:6c:7f:6e:f4:32:b0:66:9b:9c:95:d6:af:
                    f6:26:6a:d7:28:18:9d:ac:77:ed:4b:be:e1:2a:66:
                    fb:b9:fd:35:a8:51:cf:d9:0e:37:94:20:7d:62:94:
                    13:7e:25:7a:2e:57:2c:56:ba:b5:f9:88:a3:cb:03:
                    92:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9E:E2:9E:F1:B3:78:3F:53:CF:8E:C9:83:35:FA:C0:4F:BE:0D:E4
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FJ7invGzeD9Tz47JgzX6wE--DeQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:ef:66:8f:3c:71:f6:5b:29:ca:3e:dc:aa:8a:20:60:e7:
         a4:ca:e4:ad:4a:fc:6b:5b:75:b7:fd:88:f4:8d:61:79:89:b7:
         ca:62:35:d8:60:de:00:4e:3a:e2:54:3c:da:e9:c8:2a:a5:b1:
         dd:64:00:3c:c5:e7:ca:0d:36:4e:e3:14:d9:71:a4:53:71:cc:
         33:e3:87:0c:61:db:0b:67:c3:2b:e0:be:29:4b:8f:14:42:3a:
         d2:a2:ed:da:24:30:b4:d7:03:b8:17:f2:72:3b:8b:e1:bf:fc:
         19:0c:89:6b:c3:ff:77:71:e7:60:98:18:26:8e:84:c4:7a:42:
         46:08:43:14:08:80:83:7b:75:f1:c7:57:0d:13:9e:5f:f3:38:
         93:bf:1d:f2:28:9f:87:6e:18:cc:fa:af:81:96:38:f6:fa:9b:
         0a:ff:5d:6b:fc:71:0d:0b:88:8d:c4:b2:d7:df:17:af:b1:14:
         94:64:5b:64:59:0e:7c:07:f2:75:ea:26:2c:66:91:7f:e1:c9:
         8c:d9:25:26:70:32:42:68:e2:e2:bb:ab:6c:e6:61:b8:b3:7f:
         a0:19:f5:ce:fb:e1:4f:08:f2:ea:9f:8c:ad:5b:c9:c7:3b:e1:
         49:78:d2:02:82:77:d1:dd:6f:34:f7:b1:25:32:77:19:b2:03:
         59:75:3b:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlyOLdgHJ/nIbZrmi9jaXkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNzIwMDczNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDllZTI5ZWYxYjM3ODNmNTNjZjhlYzk4MzM1ZmFjMDRmYmUwZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tIO4bFrljsTeGp37lLgfADHUc9n
RJ56FQWKZMxgkRQN4w59CNR3wacz/UIn6ZRlMLNtwKVxMJHHR5qY9w6O+DXpP/MG
HEdrcgUIM9a3Ep1gT5P7Md7Hbw8J7+MCf/NO62m6SOb34E4XPxZJbWPtn7e4LgZj
5pOjVZ/YzYCRvRxdtXVYuMfci6UwgZLJ4yDFjGvKNNyRqdlXvuo3t7pHBXwJM41g
IWvr3+J/aZB6S0Unns7Zg8yXGaET+qMumiv5JJfFe5dsf270MrBmm5yV1q/2JmrX
KBidrHftS77hKmb7uf01qFHP2Q43lCB9YpQTfiV6LlcsVrq1+YijywOSlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSe4p7xs3g/U8+OyYM1+sBPvg3kMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvRko3aW52R3plRDlUejQ3Smd6WDZ3RS0tRGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVuMA0G
CSqGSIb3DQEBCwUAA4IBAQBt5e9mjzxx9lspyj7cqoogYOekyuStSvxrW3W3/Yj0
jWF5ibfKYjXYYN4ATjriVDza6cgqpbHdZAA8xefKDTZO4xTZcaRTccwz44cMYdsL
Z8Mr4L4pS48UQjrSou3aJDC01wO4F/JyO4vhv/wZDIlrw/93cedgmBgmjoTEekJG
CEMUCICDe3Xxx1cNE55f8ziTvx3yKJ+HbhjM+q+Bljj2+psK/11r/HENC4iNxLLX
3xevsRSUZFtkWQ58B/J16iYsZpF/4cmM2SUmcDJCaOLiu6ts5mG4s3+gGfXO++FP
CPLqn4ytW8nHO+FJeNICgnfR3W8097ElMncZsgNZdTvj
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org