Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eB-7mNoHJcS-FwwcV0jQ9NSjr5c.roa
File:                     eB-7mNoHJcS-FwwcV0jQ9NSjr5c.roa (raw, json)
Hash identifier:          v0007TxAGxdvrulSt4UA74qnH+0rExLAiGZ5QH2sScY=
Subject key identifier:   78:1F:BB:98:DA:07:25:C4:BE:17:0C:1C:57:48:D0:F4:D4:A3:AF:97
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       0188901A715ED8D0D1119CE6B00DD6313200
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eB-7mNoHJcS-FwwcV0jQ9NSjr5c.roa
Signing time:             Tue 06 Jun 2023 09:47:11 +0000
ROA not before:           Tue 06 Jun 2023 09:47:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.37.98.0/24 maxlen: 24
                          46.37.113.0/24 maxlen: 24
                          46.37.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Jun 2023 08:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:1a:71:5e:d8:d0:d1:11:9c:e6:b0:0d:d6:31:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jun  6 09:47:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=781fbb98da0725c4be170c1c5748d0f4d4a3af97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:fa:fe:ea:7f:91:20:e5:0f:ea:ae:a6:86:
                    92:c2:46:69:1e:2e:35:1f:dc:3f:20:fa:04:cd:ed:
                    92:f0:96:da:ff:2c:a6:dc:2c:dd:b6:ac:52:fc:b7:
                    a8:9e:fb:12:ca:b6:76:8f:69:41:2f:41:29:d3:0e:
                    50:5b:7e:b8:a1:87:4a:c0:e5:ae:09:01:66:4e:6b:
                    2d:01:18:41:78:de:fc:e3:6b:3a:c7:69:0d:63:a8:
                    16:5a:28:1e:b2:54:a4:db:d2:cb:76:2a:85:26:6e:
                    42:83:7f:8c:37:11:ee:44:26:bb:8b:6d:85:08:2c:
                    0c:fc:32:70:b4:ab:f0:cb:0b:b3:09:c7:3c:ac:0a:
                    b0:0a:41:05:0a:f2:c6:a9:9b:d8:27:d5:b0:7e:14:
                    61:a3:84:55:3c:4f:c5:1e:7a:ed:89:14:9c:94:39:
                    56:17:9d:17:4c:bf:28:48:1b:02:0d:30:c2:b2:1a:
                    a9:18:53:3b:e1:cf:ff:e9:a1:c5:e9:52:29:fc:62:
                    e1:13:32:a6:50:32:4c:7a:11:3f:51:d4:5a:87:98:
                    fa:db:2c:14:18:e2:72:74:43:41:7c:c1:84:62:ea:
                    dd:50:bc:1e:7e:16:76:45:08:9c:bd:b4:1c:b6:17:
                    42:f8:52:e1:cc:7d:35:87:fb:a6:66:28:83:e5:42:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:BB:98:DA:07:25:C4:BE:17:0C:1C:57:48:D0:F4:D4:A3:AF:97
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eB-7mNoHJcS-FwwcV0jQ9NSjr5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.98.0/24
                  46.37.113.0-46.37.114.255

    Signature Algorithm: sha256WithRSAEncryption
         9a:02:23:b7:bc:9d:df:33:35:e6:62:38:73:66:59:b3:5f:f3:
         95:02:e7:76:61:4b:2e:8d:90:4d:56:84:7c:47:30:3f:68:80:
         41:54:88:7d:5e:52:58:a4:e7:4e:69:b7:cb:a3:cf:3e:62:6b:
         d5:97:01:ea:60:af:67:cb:a7:8c:a2:d9:d9:1d:4f:73:19:06:
         64:f6:71:27:70:ea:bc:f9:31:ad:4c:5f:58:13:70:60:15:48:
         92:c9:12:1e:5c:ac:9b:7d:9a:87:2d:ce:e6:78:eb:bd:b1:68:
         7d:6f:93:dc:99:58:a7:99:5a:21:a9:e5:79:bf:66:06:f5:e8:
         cf:79:da:8c:a0:df:35:72:c4:73:62:b7:76:d4:d6:c5:38:d7:
         9b:6d:b5:10:55:54:ba:f2:28:6f:17:2d:23:32:85:47:6f:c1:
         b4:80:6c:a9:8f:4b:ec:97:c8:fc:07:2a:7f:e0:19:1d:51:44:
         77:e8:11:92:8e:81:73:7b:a0:5d:af:2d:96:89:2a:ac:50:07:
         77:3c:68:51:32:59:7c:ff:6c:b3:24:40:67:23:2d:69:98:bf:
         17:8b:11:d8:bb:d4:a6:40:7c:e1:4a:79:23:ca:ac:d4:15:fa:
         1f:79:cd:e7:70:b4:cb:d6:39:81:9f:0b:7c:2f:2d:23:1b:c0:
         a9:71:c9:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org