Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tecfyMePvB8M4dA8GUpYaglpkV4.roa
File:                     tecfyMePvB8M4dA8GUpYaglpkV4.roa (raw, json)
Hash identifier:          SzDEoDzmP2Zwaz8rCPMG2zzE7X1SjpfR4JaGqLtLf4U=
Subject key identifier:   B5:E7:1F:C8:C7:8F:BC:1F:0C:E1:D0:3C:19:4A:58:6A:09:69:91:5E
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01865AE6D08D3F61E828C6FFDBA9438B196D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tecfyMePvB8M4dA8GUpYaglpkV4.roa
Signing time:             Thu 16 Feb 2023 15:45:21 +0000
ROA not before:           Thu 16 Feb 2023 15:45:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        46.37.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5a:e6:d0:8d:3f:61:e8:28:c6:ff:db:a9:43:8b:19:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Feb 16 15:45:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5e71fc8c78fbc1f0ce1d03c194a586a0969915e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:2a:15:10:0b:f8:f8:3b:c2:83:5f:0c:1f:
                    19:ec:7f:53:85:c4:28:eb:6c:6a:3e:48:ba:d4:7f:
                    ef:50:ab:a6:b8:ec:79:93:d9:e2:e4:0a:46:56:aa:
                    fe:69:d4:62:d5:ef:03:9c:ec:c2:78:2d:ed:ef:b1:
                    83:a1:3f:f4:51:15:32:04:11:72:48:8a:10:2c:56:
                    42:8c:71:d3:3a:25:00:af:09:6e:70:a1:03:b2:4c:
                    c8:db:66:e9:59:d0:a9:8b:df:ec:5b:fc:fe:9c:8a:
                    d8:16:51:6d:e9:5c:19:31:67:1f:f1:ab:cb:9d:ba:
                    d9:41:5c:c7:14:e1:4e:28:23:43:47:8e:43:cf:ca:
                    9e:2f:42:e4:71:23:d4:ad:6f:5c:6b:03:65:70:4f:
                    8d:6a:6e:66:0e:6b:9b:b4:a4:ef:16:51:93:27:47:
                    b4:bc:a2:e6:0f:b4:9b:2a:aa:53:b6:a8:b5:90:73:
                    98:b4:ec:6c:84:38:fa:da:cc:31:f3:c8:7a:12:c9:
                    e8:3b:94:67:fe:0e:2e:72:51:91:1b:cf:c2:b4:ee:
                    e5:47:7e:cf:5a:45:c9:bf:57:12:bf:6e:38:de:ae:
                    63:8f:90:70:19:ad:bc:7e:40:44:98:5a:ab:55:34:
                    0f:a9:61:b0:30:00:94:94:65:4d:d0:41:60:dc:3d:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E7:1F:C8:C7:8F:BC:1F:0C:E1:D0:3C:19:4A:58:6A:09:69:91:5E
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tecfyMePvB8M4dA8GUpYaglpkV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:a0:1f:a8:c1:b3:72:0e:18:ed:6b:a0:e0:44:68:ed:32:
         98:68:99:15:81:de:95:71:ea:2d:20:e7:d2:0c:ea:48:36:cb:
         b6:0e:e1:0c:fb:e6:bd:8b:1b:67:6b:64:2c:c3:50:93:91:f5:
         46:f9:04:f0:cd:ec:45:84:92:72:54:22:9a:43:5d:8c:f0:86:
         66:56:4f:c8:6d:c8:70:c7:c6:e9:d7:71:83:6e:d7:3a:a1:8d:
         95:cd:c8:69:f4:d7:c8:4e:66:5f:48:1b:57:40:65:22:c4:27:
         2c:bb:76:ef:10:0a:7f:f2:43:18:88:d8:7d:7d:15:89:88:f0:
         a2:eb:86:47:1f:a2:f2:14:8e:9e:e1:9e:82:2e:d5:6c:9f:5e:
         20:d0:f2:99:2e:52:95:10:01:56:42:40:0b:d0:11:23:59:44:
         a1:51:93:a2:3f:f1:86:47:58:92:67:c6:7f:83:6a:27:0b:00:
         9f:88:ae:d1:3a:42:4f:a9:95:b9:6e:b4:8e:bf:66:66:72:1d:
         47:fe:2b:4d:14:9b:1b:03:f9:6f:01:8b:99:d8:fd:77:eb:50:
         e7:64:20:ea:f2:00:57:99:b1:83:0e:fd:e8:50:0f:da:25:f8:
         8c:aa:cb:c0:3f:c8:eb:04:91:a0:29:20:b0:35:b2:65:aa:7d:
         52:8a:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 02:37:05 2023 by rpki-client on console-ams.rpki-client.org