Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JpjgLm5LX2GuJwiUY-QED7_5stI.roa
File:                     JpjgLm5LX2GuJwiUY-QED7_5stI.roa (raw, json)
Hash identifier:          76F8eBUNTG9l10ZR1VKmCo0wEgAvOAipGKBsDasoYis=
Subject key identifier:   26:98:E0:2E:6E:4B:5F:61:AE:27:08:94:63:E4:04:0F:BF:F9:B2:D2
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       018B44987EB52DF5DA039375AB4A140837B9
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JpjgLm5LX2GuJwiUY-QED7_5stI.roa
Signing time:             Wed 18 Oct 2023 21:02:06 +0000
ROA not before:           Wed 18 Oct 2023 21:02:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.37.98.0/24 maxlen: 24
                          46.37.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:44:98:7e:b5:2d:f5:da:03:93:75:ab:4a:14:08:37:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Oct 18 21:02:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2698e02e6e4b5f61ae27089463e4040fbff9b2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:2e:a8:d4:27:43:7f:e5:31:e5:3b:03:fa:
                    79:f7:b8:58:a2:6c:3d:ab:1a:7a:61:69:32:cf:65:
                    63:c3:3d:9b:41:80:ca:21:5e:dd:8b:97:35:c1:ab:
                    ef:fd:e0:3e:f4:42:39:82:c8:a8:d7:b0:dd:40:eb:
                    cc:ff:32:73:3a:8e:a0:b2:c0:20:f8:9f:6f:e7:91:
                    e9:e8:50:51:b2:40:b2:9d:04:43:18:0a:18:8f:61:
                    89:50:e1:6f:5a:60:7c:ab:24:20:6e:3b:3a:d3:c5:
                    1f:af:a4:5e:ed:32:ed:de:da:23:e1:06:2b:b2:25:
                    4c:1f:b5:9c:55:5f:49:21:d7:fc:88:4e:2e:b5:f3:
                    d5:33:fb:2f:c1:73:9a:bf:6e:6f:5e:51:2b:c5:61:
                    b1:9a:4e:a4:c0:78:e6:a0:c7:e8:31:f3:17:cf:59:
                    c2:b3:79:cb:9a:f8:b1:58:87:d4:59:35:fc:d2:d1:
                    63:85:ff:5d:94:c2:97:78:15:2b:c8:96:8a:f4:19:
                    63:79:7e:11:68:0b:37:18:b1:0f:13:6e:7a:47:78:
                    e4:53:12:a9:64:55:1f:7e:91:70:15:d4:ae:22:c1:
                    a0:6d:a3:20:09:19:2f:69:1c:c9:01:01:42:f5:f3:
                    ff:21:05:5a:91:6a:2c:1c:35:fe:3e:a3:0f:14:60:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:98:E0:2E:6E:4B:5F:61:AE:27:08:94:63:E4:04:0F:BF:F9:B2:D2
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JpjgLm5LX2GuJwiUY-QED7_5stI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.98.0/24
                  46.37.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:7e:7f:6d:19:a9:19:32:48:a6:81:d1:1f:30:d9:a5:9c:
         68:20:e4:a0:00:05:9d:5a:9a:91:29:62:f9:17:92:61:06:bb:
         c3:bc:5d:56:c1:c3:08:cf:b6:53:cb:60:8f:88:7c:27:54:a7:
         68:9e:bc:77:ae:2f:60:21:5a:85:a7:61:56:7f:f5:8c:70:24:
         08:8b:92:67:d4:f4:93:90:99:dc:43:18:c7:2f:ba:d6:32:16:
         3a:b9:bf:87:ab:98:db:0e:ad:90:ba:26:f4:4b:6a:c4:9b:a2:
         85:3b:1a:2a:cc:b6:79:85:db:e4:00:cb:c8:09:f5:de:45:24:
         36:f6:95:fa:32:78:70:57:cf:37:87:25:db:a2:3a:14:ea:67:
         2a:79:c2:29:79:0f:76:b7:50:1f:f6:24:f7:82:39:e2:25:bd:
         66:65:0d:68:b7:9f:99:9f:aa:6a:97:c3:7d:6b:da:15:60:d6:
         f3:5f:41:c2:9b:5a:fb:f8:a8:86:5b:c1:f5:3e:91:32:4b:e4:
         82:76:71:b7:50:5b:ed:19:22:59:e8:3b:7f:45:6d:c3:34:c2:
         31:f5:25:d4:a1:a1:8a:78:5b:fe:c1:80:13:73:94:ae:3d:ad:
         f4:76:09:04:5d:e3:90:84:38:b0:f0:24:54:3a:31:71:24:51:
         4c:5d:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 21:33:12 2023 by rpki-client on console-ams.rpki-client.org