Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LLGoaHDFV5gqsLtAqvNVn8H_3S8.roa
File:                     LLGoaHDFV5gqsLtAqvNVn8H_3S8.roa (raw, json)
Hash identifier:          o7Q4lZ2Z5G0cyeQslKyBfXWx9s5nQ6AcrvKkLXPmo0s=
Subject key identifier:   2C:B1:A8:68:70:C5:57:98:2A:B0:BB:40:AA:F3:55:9F:C1:FF:DD:2F
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01856D0AE06B5A2B1C00196CC4C19FAB079E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LLGoaHDFV5gqsLtAqvNVn8H_3S8.roa
Signing time:             Sun 01 Jan 2023 11:15:07 +0000
ROA not before:           Sun 01 Jan 2023 11:15:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        46.37.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:e0:6b:5a:2b:1c:00:19:6c:c4:c1:9f:ab:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan  1 11:15:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cb1a86870c557982ab0bb40aaf3559fc1ffdd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:b8:5c:53:88:3c:24:4e:08:49:50:8e:c6:
                    b9:cf:f1:bc:7b:7b:a6:c9:00:cd:19:a3:98:02:23:
                    37:b4:54:00:4d:27:82:f9:a9:ca:e2:7a:6d:86:bb:
                    73:c0:7c:4d:fe:3b:8d:9c:3f:f6:19:cd:da:2c:56:
                    26:ec:60:40:fc:1d:73:db:9c:8c:46:b7:76:17:15:
                    e5:69:c7:2a:6a:ba:68:10:ff:c7:1d:be:18:08:7f:
                    5f:5d:f4:ac:26:6c:94:cf:f7:d6:9e:cf:ca:15:42:
                    5a:74:fb:31:58:83:7b:9f:7d:42:18:eb:45:ce:83:
                    6a:49:e0:fe:57:a2:22:f9:79:0e:39:33:d7:ed:d3:
                    77:3a:91:13:c9:8e:7b:77:42:8a:ea:9f:1c:7a:a4:
                    27:67:09:29:0a:e9:b9:77:81:ec:c2:80:98:cc:5d:
                    2e:e9:b1:0f:20:36:63:5b:20:60:bb:f9:4a:19:69:
                    5a:dd:9c:02:90:1d:47:18:57:f9:da:70:d3:5c:95:
                    8c:ff:6a:b1:c0:45:b9:e3:46:30:f6:3d:49:b2:94:
                    cb:2d:a6:85:12:29:c6:c8:f4:77:a2:2b:8a:9d:1e:
                    05:17:cd:fe:77:00:60:00:d5:55:fa:55:4e:4e:34:
                    9e:7f:15:11:d9:96:74:44:1a:dc:45:c3:92:64:12:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B1:A8:68:70:C5:57:98:2A:B0:BB:40:AA:F3:55:9F:C1:FF:DD:2F
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LLGoaHDFV5gqsLtAqvNVn8H_3S8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:64:f2:63:48:24:0e:72:0a:26:5a:df:a0:fa:4b:8a:34:05:
         36:f2:17:93:5f:9d:74:23:52:50:a8:23:1e:6e:ac:a7:a2:53:
         ac:1a:93:b0:d3:f0:47:de:90:91:09:0b:1f:cf:d6:b2:e9:ad:
         33:ad:49:e0:42:fe:25:77:92:60:92:79:20:59:fc:48:b6:f7:
         68:72:5e:d3:d6:d4:ec:ed:3c:b8:41:77:3e:f5:2f:85:96:de:
         83:43:68:45:b1:bc:2e:7b:20:34:57:00:ab:e7:84:41:f1:fa:
         f0:ad:ed:59:b1:61:0f:9c:fd:f9:58:c6:6e:28:60:2e:a4:f7:
         11:17:14:2f:3a:c3:70:df:47:fd:40:65:70:45:cc:dd:f2:49:
         8f:7b:87:2f:75:17:7e:17:be:5c:50:51:1c:76:06:eb:d3:ac:
         62:4b:4c:8b:8b:58:94:55:ea:bc:85:8e:97:bd:cd:83:c2:2d:
         0b:df:89:52:8f:d4:c1:51:5c:63:3a:10:78:8a:88:2c:e2:cd:
         58:78:ae:ca:70:56:cc:f0:4b:39:a6:b4:e8:83:90:25:48:1c:
         49:4b:1e:af:0e:9a:cf:8e:95:b1:8a:2e:4b:db:b8:f2:55:fa:
         0a:ed:aa:a1:75:a6:e9:ac:4c:ff:6a:01:0f:68:43:43:e9:10:
         2a:94:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org