Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/muvz1WKrUcu1ay9vu5CKpgPZpas.roa
File:                     muvz1WKrUcu1ay9vu5CKpgPZpas.roa (raw, json)
Hash identifier:          hFG1ofSWbyc32lrSo0lF5mNSz7ypD6GiNpJKu3dn504=
Subject key identifier:   9A:EB:F3:D5:62:AB:51:CB:B5:6B:2F:6F:BB:90:8A:A6:03:D9:A5:AB
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       0189CB47A9A231299A6A01B0279D4A18745D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/muvz1WKrUcu1ay9vu5CKpgPZpas.roa
Signing time:             Sun 06 Aug 2023 14:36:58 +0000
ROA not before:           Sun 06 Aug 2023 14:36:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     174
IP address blocks:        46.37.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:cb:47:a9:a2:31:29:9a:6a:01:b0:27:9d:4a:18:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Aug  6 14:36:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9aebf3d562ab51cbb56b2f6fbb908aa603d9a5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:0d:92:d0:bb:c3:33:d2:65:a0:e1:97:ef:
                    bf:d4:04:a5:aa:52:16:aa:a4:cb:40:67:f2:8e:34:
                    58:cf:5f:c5:a1:06:a6:d8:89:0b:6f:94:73:4c:b5:
                    68:18:f8:30:87:39:f1:53:a8:1b:dc:dd:8b:35:e8:
                    02:a6:00:f9:f2:ea:66:88:27:01:24:09:2c:b6:14:
                    af:26:53:9f:76:bc:04:fa:79:a2:9d:b0:87:fa:30:
                    17:dc:9a:29:80:d4:fe:a6:04:54:53:08:c6:fa:6a:
                    dc:a8:5b:5a:58:5a:8b:c8:57:85:4f:80:49:cb:6a:
                    8b:7d:f3:c5:9a:4d:e3:b7:a2:dc:e0:01:8c:bb:bc:
                    e6:1e:af:e8:14:a6:30:db:02:9b:8f:5c:00:29:42:
                    38:8d:7e:43:aa:f0:9e:36:6d:b7:ff:9e:59:4b:dd:
                    14:ac:f3:d8:96:8d:d7:ec:7b:54:35:ec:47:af:87:
                    eb:72:ae:c6:86:34:2f:d9:18:67:d8:ce:9e:5f:38:
                    54:b3:0e:5b:e9:3a:34:d9:98:70:71:cb:21:e3:b6:
                    eb:f7:d4:22:6b:a0:85:53:5b:96:58:f4:8f:44:89:
                    4c:77:49:66:27:34:7a:54:c8:db:53:3f:9d:33:33:
                    8c:fe:93:63:8c:61:54:1e:50:b4:2d:7d:33:55:8c:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:F3:D5:62:AB:51:CB:B5:6B:2F:6F:BB:90:8A:A6:03:D9:A5:AB
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/muvz1WKrUcu1ay9vu5CKpgPZpas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:3b:fa:c7:30:9c:7c:88:da:60:17:11:20:95:1d:b5:5f:
         ea:d6:96:33:e8:b2:9f:bb:f6:95:2e:97:94:4d:55:ce:b9:09:
         60:8b:14:3c:3e:b4:b8:b1:e9:50:48:64:4c:9b:1b:6c:fe:14:
         05:06:79:87:72:11:9b:2b:c6:d0:ff:89:b5:48:e8:25:7c:1f:
         ec:4c:99:2b:cc:b0:7d:45:e3:98:e3:80:67:6c:9f:f0:53:34:
         62:bc:98:41:60:81:49:37:6a:f6:b3:9b:79:f1:ff:b0:65:ae:
         93:b9:8e:64:76:af:9d:37:ef:53:94:a5:c3:5a:40:39:5e:03:
         d0:3a:ad:45:cf:99:4f:10:04:2a:6d:b9:9a:8f:ad:32:7e:7c:
         f1:c6:f9:cf:03:a7:29:a5:5b:29:3b:14:76:04:81:cf:d1:f5:
         ae:bf:af:d9:0c:02:f3:2b:89:3d:0b:22:55:ec:24:fb:4e:a4:
         44:f7:10:2a:94:af:b6:6c:32:f9:6f:11:2d:02:c8:b0:a9:bb:
         a0:eb:41:de:66:c9:e9:91:a2:b0:34:4a:c5:b7:58:4e:da:42:
         c5:3c:af:9b:b7:6d:97:57:1c:9d:c0:6a:24:36:f5:44:13:f6:
         4e:e9:2f:65:03:35:9a:20:42:97:08:d8:83:04:ec:d4:16:e8:
         77:67:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:38:51 2023 by rpki-client on console-ams.rpki-client.org