Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/UTn5XelxBkr-xaa_UMcHWav-epM.roa
File:                     UTn5XelxBkr-xaa_UMcHWav-epM.roa (raw, json)
Hash identifier:          Zabdjo7qYqg5lRNz2s+e4B7ShwyeW9FKS0+tGjraSb4=
Subject key identifier:   51:39:F9:5D:E9:71:06:4A:FE:C5:A6:BF:50:C7:07:59:AB:FE:7A:93
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       018620C1FED4A9293687866F03B3A2F75DAF
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/UTn5XelxBkr-xaa_UMcHWav-epM.roa
Signing time:             Sun 05 Feb 2023 08:47:09 +0000
ROA not before:           Sun 05 Feb 2023 08:47:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        46.37.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:20:c1:fe:d4:a9:29:36:87:86:6f:03:b3:a2:f7:5d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Feb  5 08:47:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5139f95de971064afec5a6bf50c70759abfe7a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:82:c4:c9:00:f8:80:cc:d3:7d:dd:02:32:
                    3a:6f:be:57:40:5c:34:90:d4:7d:13:c0:b3:ea:b3:
                    a4:7f:7c:45:7e:7d:b5:23:ce:a5:c7:9b:4b:2a:05:
                    9a:f3:77:8f:ee:58:14:f5:d1:af:72:33:81:e1:ce:
                    bd:be:2f:52:c5:21:4a:2f:cb:00:31:2c:31:79:03:
                    2c:c2:4b:39:3f:d1:4b:0c:24:ae:06:6c:a7:f4:69:
                    5d:9f:c0:93:95:32:f9:b5:6d:44:0c:1b:41:de:23:
                    c7:d3:dc:88:26:e3:f3:6a:7b:a7:01:3e:c3:dc:b2:
                    0a:ca:08:8d:86:fc:4e:09:a6:2e:9a:51:3c:cb:e7:
                    8f:b8:70:f0:f8:a9:9e:91:7c:98:53:c1:6d:dc:d1:
                    dd:39:7a:43:6e:fe:b0:7e:3d:4f:ff:3a:48:99:c7:
                    19:a7:93:f5:44:89:c7:49:4f:2c:bb:57:aa:5f:4d:
                    99:16:2e:1e:a7:d2:7b:e6:75:a6:7d:3a:d7:9b:bb:
                    68:0c:9c:c9:5c:18:23:a2:7a:00:27:ba:86:6c:86:
                    b0:3f:e4:ca:b4:db:0b:61:8c:15:72:a2:92:19:e2:
                    18:c4:72:8f:4b:38:08:43:d3:b1:a0:34:1f:91:c3:
                    71:9d:75:cb:1b:36:37:cc:25:0d:f9:09:e0:ad:b9:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:39:F9:5D:E9:71:06:4A:FE:C5:A6:BF:50:C7:07:59:AB:FE:7A:93
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/UTn5XelxBkr-xaa_UMcHWav-epM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:7a:c4:98:e9:ba:91:e6:7c:1c:e5:ed:60:8a:50:b4:0b:
         8c:75:96:8e:d0:43:3a:50:dd:34:a1:7f:9f:58:68:35:77:e5:
         58:2b:fd:1b:fc:7d:d0:eb:83:3b:de:1a:18:91:6b:b7:a9:da:
         8a:a4:bf:b6:a0:83:a0:49:df:2e:d7:ca:b5:71:51:a9:06:66:
         1b:eb:4a:93:db:4e:a7:df:be:5c:c6:9e:75:66:f2:5f:28:46:
         53:84:30:16:34:14:67:e5:55:87:d0:e7:d3:56:ff:e8:ec:b1:
         f7:8f:6b:b4:04:5b:a8:79:8a:c2:1c:b4:f0:3b:e7:f0:20:8d:
         39:51:c8:c4:9e:c2:8f:cc:30:80:a0:48:a8:89:f0:c4:f2:c2:
         4a:61:45:64:07:8b:26:5a:17:dd:17:78:96:11:3f:fc:7b:4c:
         2f:a6:c2:58:62:42:b9:79:0e:c3:ed:e4:06:c0:87:69:27:53:
         cf:39:db:b2:8f:b3:d1:ce:4a:e2:5f:fe:d1:3b:2c:7c:80:c1:
         88:2d:19:83:53:e4:4e:82:6f:ff:d7:5c:e4:48:77:c3:8d:a8:
         dd:b4:42:1a:68:5b:48:1f:34:65:7b:ad:56:ea:ca:c6:63:10:
         a3:bb:4d:80:2d:e4:54:1d:af:81:5c:1e:65:c3:38:f9:21:d0:
         f2:69:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org