Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa
File:                     lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa (raw, json)
Hash identifier:          rSuraqNi2tyX4VN0ZJfEBJ7fpeApVa3jH/ymm/kYqpc=
Subject key identifier:   96:C3:75:01:D1:8F:5A:80:26:15:BB:79:BB:D3:7E:66:BE:9B:31:EF
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01856D0AE576C8124815A24D7E8A97A1B228
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa
Signing time:             Sun 01 Jan 2023 11:15:08 +0000
ROA not before:           Sun 01 Jan 2023 11:15:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210574
IP address blocks:        46.37.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:e5:76:c8:12:48:15:a2:4d:7e:8a:97:a1:b2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan  1 11:15:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96c37501d18f5a802615bb79bbd37e66be9b31ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:b8:03:3c:c6:b4:05:08:c8:d1:33:6a:fa:
                    09:4c:04:38:17:98:b7:64:f0:cb:d1:19:8e:e0:f3:
                    ce:2b:91:dd:db:f0:a1:ca:bf:d0:9d:86:1f:f7:08:
                    c1:47:e2:06:80:dc:56:8d:c1:d5:79:e4:e2:e0:0e:
                    85:e8:af:2d:c5:1d:0e:ff:3f:98:43:f7:db:8c:a5:
                    bf:e5:88:c4:81:14:90:3a:9a:01:7c:67:db:48:92:
                    03:10:3d:34:46:f7:af:8b:1c:78:aa:6b:4a:62:a2:
                    49:9d:af:01:b3:61:78:37:15:ca:19:14:30:0a:06:
                    4f:fd:b2:4e:a2:2b:95:3f:55:3f:2b:1a:76:89:57:
                    81:6c:ac:4e:c4:3d:f2:6d:fc:ad:af:44:36:21:93:
                    d8:60:35:69:5f:d1:b8:62:1f:ae:69:76:75:56:6d:
                    85:8e:40:7e:93:45:d5:2f:69:d8:e8:bc:6b:68:fe:
                    72:b5:9a:5f:06:ee:da:57:78:d9:8f:a8:65:fe:64:
                    49:7f:53:bb:9f:26:02:76:24:b6:a2:bb:4e:e2:e6:
                    af:dd:7e:73:5e:b8:28:ec:ce:e5:a3:b0:ba:2f:f9:
                    03:16:ba:fb:c4:95:ce:ed:6f:34:0c:57:89:dd:aa:
                    08:22:2a:91:e1:b7:03:09:81:9f:36:2f:91:6a:16:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C3:75:01:D1:8F:5A:80:26:15:BB:79:BB:D3:7E:66:BE:9B:31:EF
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:3f:4f:50:e8:c0:7b:7f:96:da:13:3b:5d:37:ef:59:1e:
         35:84:69:3a:d9:dd:43:80:04:be:ff:04:7d:23:18:13:8b:f8:
         63:d3:b4:cd:94:ce:4b:37:c2:d4:32:1b:f8:a5:f8:b8:f1:92:
         7c:8e:04:01:86:ef:67:ed:ff:90:d1:ab:6c:81:7c:55:92:9d:
         85:6a:7e:11:9d:1b:b7:c1:bf:c0:05:8e:ef:a3:21:4c:f6:f4:
         c8:7f:23:94:e1:41:f6:37:8a:69:81:be:ca:2f:9b:52:03:d5:
         fa:f2:53:cc:b1:36:0d:d0:47:c5:5c:b0:47:97:78:2c:7b:17:
         de:20:3e:d3:b8:6d:d6:34:29:b8:65:e4:43:d7:08:da:67:13:
         35:6c:62:99:e3:13:40:ec:49:c0:78:ea:3b:55:eb:51:bc:14:
         c6:33:da:5e:f1:f5:66:c6:ae:c2:16:8e:a3:26:3e:ab:88:d8:
         28:3f:39:99:b2:5d:f7:cc:7c:a2:6c:da:54:b9:f4:4d:a4:43:
         b1:04:d4:6a:df:d2:9c:1e:f9:13:59:20:b8:1b:29:5f:1f:bd:
         b6:a7:16:58:26:05:67:3c:5b:60:12:ea:82:49:49:d2:ad:87:
         65:da:8e:a1:a2:5d:ac:e1:43:f7:4a:5a:6b:ab:04:43:fd:70:
         db:eb:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org