Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NctvEi17cdNdFBt_SwZgrKtjfvU.roa
File:                     NctvEi17cdNdFBt_SwZgrKtjfvU.roa (raw, json)
Hash identifier:          6K+C5JCo8sUalrFWI2qIcqcsueszmymNf5mJutDFXeg=
Subject key identifier:   35:CB:6F:12:2D:7B:71:D3:5D:14:1B:7F:4B:06:60:AC:AB:63:7E:F5
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       0196E21A82DC906F747B68EAE2847CA5CCCB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NctvEi17cdNdFBt_SwZgrKtjfvU.roa
Signing time:             Sun 18 May 2025 06:35:10 +0000
ROA not before:           Sun 18 May 2025 06:35:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        46.37.98.0/24 maxlen: 24
                          46.37.113.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 01 Jun 2025 22:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:e2:1a:82:dc:90:6f:74:7b:68:ea:e2:84:7c:a5:cc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: May 18 06:35:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=35cb6f122d7b71d35d141b7f4b0660acab637ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:90:a7:fd:b5:35:c9:44:81:66:65:fd:33:
                    85:a9:08:ef:f1:ed:b5:99:c3:e3:9b:b4:fa:29:18:
                    d1:44:fc:52:20:24:b4:fe:a0:56:54:ca:44:a1:2b:
                    1e:40:65:54:c6:0d:bc:e3:42:cb:be:57:d4:0f:bc:
                    9e:f8:fe:f8:f6:22:36:4d:08:9f:6f:fa:98:63:c8:
                    12:2c:95:a7:fb:d9:67:ae:15:61:94:69:e9:8b:af:
                    4a:89:2a:aa:69:3d:06:f2:c9:26:11:21:45:38:be:
                    94:e7:36:15:62:d4:5b:9f:d5:b8:2a:f0:e6:af:76:
                    c6:96:44:82:68:9c:0f:02:ef:7e:d9:d0:02:0e:a7:
                    69:36:79:b5:89:c6:ce:03:ef:a2:66:4f:41:45:ba:
                    34:5c:6a:9d:7a:80:2c:2b:5c:93:a5:0c:60:6c:62:
                    25:19:5f:14:91:37:11:85:6b:dd:31:16:23:e6:22:
                    0c:c2:54:46:7a:f3:87:86:20:14:8b:12:d4:95:4c:
                    6c:91:c9:da:83:2f:4b:e9:fa:41:50:c1:9b:44:b6:
                    bb:25:9e:79:39:0e:bd:ab:40:cf:6f:1e:f3:e4:8b:
                    be:8b:80:a6:ae:09:67:a9:7b:5d:11:95:11:3f:31:
                    b1:46:b8:f0:a1:e5:e6:b1:5f:64:6d:70:86:38:c1:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:6F:12:2D:7B:71:D3:5D:14:1B:7F:4B:06:60:AC:AB:63:7E:F5
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NctvEi17cdNdFBt_SwZgrKtjfvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.98.0/24
                  46.37.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:21:4a:46:30:1f:01:36:46:ae:79:b1:e0:23:d9:4b:ba:51:
         30:58:b1:a4:07:42:3d:a2:cf:ce:58:09:fb:22:9a:4a:60:8b:
         d9:89:64:93:44:d6:97:73:dd:4f:91:d4:38:7c:29:de:51:fe:
         1f:62:8e:b6:be:54:24:dc:e4:3a:64:01:7c:52:38:98:2e:30:
         02:24:e0:a3:e5:6e:c1:73:ac:61:05:4a:5c:22:89:95:65:72:
         da:ba:96:0b:e0:77:cf:3a:4b:bc:66:07:d0:8c:f9:9a:e0:7d:
         c8:3e:22:24:23:c5:0d:98:68:85:25:93:0a:50:e9:f9:e2:96:
         70:68:03:09:3d:f4:c9:7d:a2:4e:4b:4a:c9:9a:c3:a1:53:ff:
         f5:14:7d:f6:89:9c:1b:01:0f:6e:45:32:f5:47:5a:be:44:cb:
         42:06:33:ab:77:e8:32:3c:dd:86:41:99:0b:27:81:9f:b0:e8:
         2d:4a:47:38:15:c8:b2:48:49:42:bb:95:4b:4b:4c:e2:c5:72:
         05:63:e4:9c:15:d8:c3:72:c8:8d:3b:fd:53:b2:4e:41:9b:28:
         c2:05:44:13:f2:62:48:9a:8f:4d:d4:0a:1a:d8:36:7d:63:27:
         1c:07:7f:ff:6a:cc:47:24:2d:a7:b7:08:eb:7d:6c:ec:25:db:
         f1:0d:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:04:41 2025 by rpki-client