Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/SMHJ6bJLD02CX_mKlFv_BMYk5y8.roa
File:                     SMHJ6bJLD02CX_mKlFv_BMYk5y8.roa (raw, json)
Hash identifier:          6MIgoUvsctgfRHBCnp5xXvdfJw9i9WOnuWoYO0Hv+J8=
Subject key identifier:   48:C1:C9:E9:B2:4B:0F:4D:82:5F:F9:8A:94:5B:FF:04:C6:24:E7:2F
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       018E4320AC84FACFA52433DEFB556E0DE215
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/SMHJ6bJLD02CX_mKlFv_BMYk5y8.roa
Signing time:             Fri 15 Mar 2024 17:19:58 +0000
ROA not before:           Fri 15 Mar 2024 17:19:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212150
IP address blocks:        80.244.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 07:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:43:20:ac:84:fa:cf:a5:24:33:de:fb:55:6e:0d:e2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Mar 15 17:19:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=48c1c9e9b24b0f4d825ff98a945bff04c624e72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:4d:85:f3:1e:ae:fe:fa:b1:6e:85:5d:76:
                    6a:67:c3:26:77:a2:c5:9b:ee:a9:5a:e0:5e:4d:a5:
                    98:ff:b5:24:bf:9d:ef:3e:ad:e1:9e:9b:31:71:1a:
                    4c:f9:52:bb:cd:92:a2:6c:5e:a5:16:e4:ae:83:aa:
                    d0:84:29:7f:15:e5:ba:d3:1b:5d:df:22:9f:46:d7:
                    59:9b:62:2f:0b:0c:67:de:6f:82:5f:6f:32:21:c6:
                    e3:8a:fd:e2:f1:22:f1:c2:c4:64:83:b8:76:9f:32:
                    c4:b6:0c:d7:40:f0:5c:51:eb:b5:4b:f7:a2:7b:31:
                    87:4a:3c:1b:3e:18:a5:6e:35:a8:41:c2:31:21:1a:
                    5a:f0:db:2f:c8:79:1f:01:44:a3:d2:fb:e6:7c:c7:
                    07:89:29:7c:c9:25:3c:b2:a1:40:f4:47:bc:3d:d5:
                    02:d4:c8:58:1e:f6:17:89:18:9d:84:78:6c:a1:82:
                    3a:c7:11:3d:94:ac:c0:19:a5:90:38:54:0d:49:18:
                    bb:4f:69:9a:b5:1d:9f:c5:43:af:08:c8:a1:d0:ea:
                    49:95:55:49:30:35:98:73:ec:61:d3:56:4d:c8:a4:
                    12:e1:90:6f:d1:e5:76:b7:2c:df:a2:aa:22:e3:83:
                    43:7f:b8:51:e7:e1:1b:b0:1b:b0:9d:91:9e:d4:e3:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C1:C9:E9:B2:4B:0F:4D:82:5F:F9:8A:94:5B:FF:04:C6:24:E7:2F
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/SMHJ6bJLD02CX_mKlFv_BMYk5y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:50:76:23:56:42:34:75:41:2a:89:b7:ad:cf:31:59:48:cc:
         48:0c:83:09:52:1c:32:bb:46:20:39:4b:0a:cd:75:ae:a2:5c:
         60:ea:50:01:9a:72:f5:8b:40:21:dd:7f:bd:6e:dd:b6:eb:bf:
         4f:c8:3c:1e:eb:91:77:2d:7b:6d:eb:eb:6a:82:bf:86:7c:29:
         2c:c5:08:0e:11:bd:c8:73:6a:11:c5:0b:f7:5e:f8:0e:60:21:
         9a:8e:56:52:b7:9f:26:2b:86:b6:7d:01:50:84:f5:1d:06:9c:
         a2:65:0b:1d:28:c9:0c:33:bf:2f:f7:c8:60:9c:d3:29:6d:0f:
         b7:91:46:4f:15:97:56:b6:fd:16:43:2d:70:82:b6:4c:72:60:
         34:46:84:39:b4:77:5b:23:c0:bf:f4:bb:95:7c:63:47:39:87:
         3f:54:1e:1d:a5:b4:6b:cd:eb:6c:c5:e0:bd:0f:5b:a7:e6:03:
         68:b7:a1:83:ea:73:a2:1d:fb:b0:28:06:36:02:9f:73:1a:c9:
         f8:7a:74:46:b8:74:c1:c1:65:8a:6a:dc:c9:95:1c:e7:91:56:
         cf:67:e3:1d:f4:25:ab:f9:89:7c:2d:ec:8c:ea:3b:14:ae:1b:
         c4:8c:7f:5e:2d:c8:3a:f0:01:81:99:1b:cd:f5:97:b7:c7:e8:
         4f:86:24:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5DIKyE+s+lJDPe+1VuDeIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzA3ZTA4NjY0MDA1NmJjMjcxZDVkMmIzZTI0ZDAxNDQw
YmFhMDQwHhcNMjQwMzE1MTcxOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGMxYzllOWIyNGIwZjRkODI1ZmY5OGE5NDViZmYwNGM2MjRlNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsVNhfMerv76sW6FXXZqZ8Mmd6LF
m+6pWuBeTaWY/7Ukv53vPq3hnpsxcRpM+VK7zZKibF6lFuSug6rQhCl/FeW60xtd
3yKfRtdZm2IvCwxn3m+CX28yIcbjiv3i8SLxwsRkg7h2nzLEtgzXQPBcUeu1S/ei
ezGHSjwbPhilbjWoQcIxIRpa8NsvyHkfAUSj0vvmfMcHiSl8ySU8sqFA9Ee8PdUC
1MhYHvYXiRidhHhsoYI6xxE9lKzAGaWQOFQNSRi7T2matR2fxUOvCMih0OpJlVVJ
MDWYc+xh01ZNyKQS4ZBv0eV2tyzfoqoi44NDf7hR5+EbsBuwnZGe1OMInQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjByemySw9Ngl/5ipRb/wTGJOcvMB8GA1UdIwQY
MBaAFMpwfghmQAVrwnHV0rPiTQFEC6oEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMt
Yjk5Y2UzMGQ4MzlmLzEvU01ISjZiSkxEMDJDWF9tS2xGdl9CTVlrNXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMtYjk5Y2UzMGQ4Mzlm
LzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQOMA0G
CSqGSIb3DQEBCwUAA4IBAQCQUHYjVkI0dUEqibetzzFZSMxIDIMJUhwyu0YgOUsK
zXWuolxg6lABmnL1i0Ah3X+9bt22679PyDwe65F3LXtt6+tqgr+GfCksxQgOEb3I
c2oRxQv3XvgOYCGajlZSt58mK4a2fQFQhPUdBpyiZQsdKMkMM78v98hgnNMpbQ+3
kUZPFZdWtv0WQy1wgrZMcmA0RoQ5tHdbI8C/9LuVfGNHOYc/VB4dpbRrzetsxeC9
D1un5gNot6GD6nOiHfuwKAY2Ap9zGsn4enRGuHTBwWWKatzJlRznkVbPZ+Md9CWr
+Yl8LeyM6jsUrhvEjH9eLcg68AGBmRvN9Ze3x+hPhiTb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org