Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jM658T9tW9gSdGCYk8LOEmMXIBk.roa
File:                     jM658T9tW9gSdGCYk8LOEmMXIBk.roa (raw, json)
Hash identifier:          jZRoxIPHhNlgYoVJGoh0xq6HHPQmJeZRZHvAFSaZTnA=
Subject key identifier:   8C:CE:B9:F1:3F:6D:5B:D8:12:74:60:98:93:C2:CE:12:63:17:20:19
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       0188E25F00591B13895960945F04C2EB144C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jM658T9tW9gSdGCYk8LOEmMXIBk.roa
Signing time:             Thu 22 Jun 2023 09:10:56 +0000
ROA not before:           Thu 22 Jun 2023 09:10:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     18229
IP address blocks:        46.37.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:5f:00:59:1b:13:89:59:60:94:5f:04:c2:eb:14:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jun 22 09:10:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8cceb9f13f6d5bd81274609893c2ce1263172019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:12:23:0f:1a:78:71:e4:d7:48:20:eb:22:
                    76:2a:6b:fc:ea:9f:4c:56:06:77:ef:d9:36:b4:00:
                    46:64:95:f5:ac:16:36:37:b4:ba:ff:d1:96:81:e0:
                    f6:f3:5a:2d:95:c7:b4:e7:f4:c7:00:af:ac:9f:fe:
                    a1:e1:5f:fc:8e:ec:af:27:00:0d:f1:52:d9:18:b7:
                    89:8d:d0:4a:cd:5f:4e:83:30:8b:ef:33:a4:83:ef:
                    17:8c:4e:5b:65:32:70:dd:f2:3e:9f:fb:5f:6f:28:
                    84:ba:63:79:4e:8a:e0:05:1d:2b:74:8d:83:0f:86:
                    c9:30:4f:28:e9:b0:9d:0f:54:04:23:a6:94:35:2f:
                    a9:ad:90:50:7b:7c:c3:b3:fe:c7:d6:6b:41:05:cf:
                    07:fe:24:8c:ae:da:4d:04:e6:85:cc:7c:b8:38:d4:
                    6a:47:a5:71:04:fb:22:5a:60:7c:55:b9:42:cd:8a:
                    90:8f:1d:7d:f3:ec:5f:cb:06:7c:a5:9a:39:40:92:
                    f3:53:d0:9f:f8:b2:ef:a5:42:a1:25:e8:14:eb:ec:
                    b8:7c:78:ce:1c:c5:25:16:f7:99:b4:9b:ef:bc:54:
                    8e:ce:ab:c0:5a:51:98:15:80:20:22:d7:36:d8:25:
                    80:d5:33:36:ef:bd:91:7d:8a:54:92:e6:6f:6d:3d:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:B9:F1:3F:6D:5B:D8:12:74:60:98:93:C2:CE:12:63:17:20:19
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jM658T9tW9gSdGCYk8LOEmMXIBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ad:c5:2c:2b:2d:ab:6d:47:2b:b7:b9:6b:53:33:85:e1:8f:
         c9:c5:b6:d9:e4:4a:ea:c0:27:9a:f8:d3:78:8a:78:f5:1f:2c:
         db:55:5d:fd:7b:e9:84:13:87:2c:7c:eb:47:75:03:0e:27:47:
         22:b0:e6:03:83:3c:b5:fd:17:ec:b1:ac:6f:90:9b:09:3a:9a:
         32:a3:a5:ac:5a:36:76:24:26:07:68:4b:2b:0b:38:c5:76:48:
         de:33:73:88:32:b3:f8:df:13:6c:50:82:01:03:c7:67:b6:60:
         10:f7:92:0b:94:cd:de:f4:cc:c2:47:84:d4:c1:e4:22:ef:36:
         60:76:4f:7a:3d:db:ff:03:f2:28:2f:ca:fc:a4:5e:d8:96:55:
         3a:13:a2:1b:e4:14:0b:b6:6e:90:67:be:6a:46:45:72:38:89:
         02:9e:da:1e:65:9e:62:aa:91:0e:3b:a1:dc:56:84:dd:b8:9a:
         7d:18:4e:06:72:bc:dd:5d:e0:d7:d0:6f:0b:bf:e7:f6:2a:1b:
         27:c7:a8:03:cd:47:34:50:6a:63:90:fa:b5:6e:e7:47:bb:90:
         0a:94:6a:f2:8b:5c:5c:db:d8:37:d2:cc:49:84:3e:bb:ce:99:
         95:3a:18:62:18:85:a7:c8:67:90:ed:b0:01:05:91:16:4b:89:
         21:92:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org