Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fuYKa1b1NpSGrnr-ZE7qddL4uwA.roa
File:                     fuYKa1b1NpSGrnr-ZE7qddL4uwA.roa (raw, json)
Hash identifier:          tjttXZUJPtEdPcF3ctMsdEOT9k+UfGndTHi9jX8xoBY=
Subject key identifier:   7E:E6:0A:6B:56:F5:36:94:86:AE:7A:FE:64:4E:EA:75:D2:F8:BB:00
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01856D0AE73BB8275F1C87D600A7FFF6082D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fuYKa1b1NpSGrnr-ZE7qddL4uwA.roa
Signing time:             Sun 01 Jan 2023 11:15:09 +0000
ROA not before:           Sun 01 Jan 2023 11:15:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212384
IP address blocks:        46.37.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:e7:3b:b8:27:5f:1c:87:d6:00:a7:ff:f6:08:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan  1 11:15:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ee60a6b56f5369486ae7afe644eea75d2f8bb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:5a:36:3c:0e:6e:16:f3:04:e8:08:b2:c0:
                    c9:2c:bc:81:84:ba:2d:d2:3e:fa:f9:61:93:25:d9:
                    f7:2d:66:38:93:39:b5:ad:b6:47:4e:91:ab:b9:79:
                    dc:59:ba:fd:7c:36:c4:17:ad:08:df:0f:e1:9e:80:
                    12:68:38:ee:7d:90:10:5a:f6:04:e6:9d:96:b3:41:
                    8e:5d:56:2b:20:02:8d:45:0a:ee:29:d1:37:ff:1e:
                    9a:78:16:55:8f:2b:0f:8f:dc:f5:b7:ca:70:e1:b6:
                    cc:4b:e5:d0:21:1f:0c:28:fe:00:6d:66:f1:7d:6a:
                    d6:be:bb:b9:2e:7d:a9:77:34:02:0b:b3:27:bc:e0:
                    84:a9:b7:ec:a6:c8:66:80:e5:11:39:78:4f:5d:e7:
                    c4:8b:63:15:a8:01:46:ba:b7:78:d3:7d:9c:77:7d:
                    0c:6d:3c:96:d3:2e:60:60:f2:e4:32:ba:92:a5:02:
                    07:7b:4c:78:09:92:b5:e8:d4:1e:c7:ad:a4:11:bb:
                    5d:e7:19:c3:12:bf:ee:94:0a:5a:5b:be:f6:10:79:
                    c6:93:29:48:ea:10:2b:51:49:13:44:12:74:a0:9a:
                    dd:35:0a:3c:7e:69:b9:5a:97:dd:5b:db:4c:3e:39:
                    55:e3:93:b4:e2:bc:ff:73:01:84:2e:e8:15:d6:8f:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E6:0A:6B:56:F5:36:94:86:AE:7A:FE:64:4E:EA:75:D2:F8:BB:00
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fuYKa1b1NpSGrnr-ZE7qddL4uwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d3:dd:14:cc:33:4b:fb:21:e2:5c:c1:4d:39:8a:10:65:bf:
         b9:cc:bc:38:10:ce:f1:e6:b1:8f:6d:ab:41:00:dc:9d:41:dc:
         00:49:95:ca:1a:fa:bb:f1:82:e6:4c:f7:56:35:82:59:f8:82:
         f8:bd:d3:53:58:89:a8:ed:b6:e5:1b:0f:d4:ae:98:55:e8:63:
         ad:6f:b6:cb:d4:1d:33:fa:9c:c6:9f:74:c9:5f:f4:0c:39:15:
         48:fc:a1:19:70:bd:9c:9a:dc:cf:f8:3a:1d:92:e7:38:b8:b7:
         97:77:6f:8c:1b:e8:d9:03:d4:d0:31:d6:14:36:e8:ea:8a:56:
         4b:d9:90:b9:ca:27:ab:f4:1b:77:ac:3c:01:97:13:ef:fc:50:
         de:09:c0:65:3f:38:82:60:8d:b1:42:c2:61:2c:33:14:81:18:
         bc:cf:20:f3:b8:c5:b6:f4:20:74:1a:74:0a:a0:fe:07:06:dd:
         32:c0:4b:03:54:83:02:8c:17:5d:b0:3d:af:3f:c5:03:dd:7b:
         a6:61:51:db:f7:d9:88:dd:4c:1e:42:19:47:bf:2e:38:10:cf:
         2c:e2:dc:9c:39:bc:e8:00:17:77:88:cd:79:65:75:f6:09:f2:
         21:7b:6c:09:9b:21:d1:3a:0d:1e:7b:97:a8:30:d6:2e:ba:91:
         e5:60:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org