Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/1-SCt523pa8tyfuGumnIUof3sCTU.roa
File:                     1-SCt523pa8tyfuGumnIUof3sCTU.roa (raw, json)
Hash identifier:          2kFr6UvNO58ixaPH8VM/MDpol4QF+OHBiKgdS+JQq0g=
Subject key identifier:   F9:20:AD:E7:6D:E9:6B:CB:72:7E:E1:AE:9A:72:14:A1:FD:EC:09:35
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       018572DF0EE59EB041D39634271AEAEF78EB
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/1-SCt523pa8tyfuGumnIUof3sCTU.roa
Signing time:             Mon 02 Jan 2023 14:24:58 +0000
ROA not before:           Mon 02 Jan 2023 14:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210439
IP address blocks:        146.247.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 Feb 2023 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:df:0e:e5:9e:b0:41:d3:96:34:27:1a:ea:ef:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jan  2 14:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f920ade76de96bcb727ee1ae9a7214a1fdec0935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:46:d5:d1:b5:99:a4:1d:14:c0:f6:f5:c2:
                    c6:d3:9e:0f:e9:84:de:73:05:a8:49:b1:89:4c:23:
                    53:fb:a0:fc:91:0d:09:a0:b7:45:94:d7:c0:20:dc:
                    ae:a2:a7:48:fd:78:d5:d6:d4:b8:0c:43:a4:1f:09:
                    12:f9:51:d8:66:05:16:1f:90:42:44:6c:59:61:23:
                    3d:7e:60:11:62:c6:05:d6:b2:2f:d3:aa:62:67:12:
                    46:7e:dd:d5:81:3a:83:6d:6d:a3:5c:52:d5:76:0f:
                    d9:06:56:6c:67:c0:61:67:b6:61:50:c2:61:66:6b:
                    d4:9f:fa:a5:28:46:b8:55:f0:ab:51:a2:f0:c0:87:
                    15:b0:98:72:66:69:11:06:11:ad:35:ca:a6:ae:58:
                    5b:8f:d2:74:7a:a5:a9:48:08:e2:fa:84:12:d4:b7:
                    55:27:bc:04:4c:2b:25:c0:33:87:f2:34:53:75:8a:
                    c3:5f:ab:2b:17:67:d7:35:29:9d:09:f7:29:4b:1c:
                    1c:c9:dc:7e:a5:72:93:5d:78:b1:6e:c1:7b:4d:39:
                    c4:2a:b1:49:51:b4:92:70:60:9d:5b:3b:aa:c9:36:
                    e7:63:59:0a:24:ba:59:91:35:9c:7b:c9:8a:bc:78:
                    16:01:e8:fa:96:1e:93:e9:8d:4d:75:1a:37:bf:5d:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:20:AD:E7:6D:E9:6B:CB:72:7E:E1:AE:9A:72:14:A1:FD:EC:09:35
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/1-SCt523pa8tyfuGumnIUof3sCTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:74:38:d1:56:91:4c:c9:15:40:2a:2f:2e:22:c6:43:ee:c2:
         b4:59:9d:85:c2:94:f1:ba:67:6e:3e:1e:bf:fd:d5:7c:3f:7c:
         b5:97:a2:48:20:9b:46:1c:e8:1f:fb:e4:80:bc:f6:86:e5:0a:
         2b:9c:58:46:45:14:3c:e8:ee:9f:93:6a:f5:dd:56:c1:00:e4:
         78:41:1f:4d:8d:10:d6:69:72:bb:c0:20:39:c4:57:17:87:95:
         6b:28:ec:15:5c:30:ce:3e:ef:0d:d9:10:bd:6f:19:43:b6:d8:
         77:d2:a7:04:61:8c:87:4e:02:3d:8f:b8:2b:56:90:7b:d6:93:
         5a:39:4d:49:b7:f7:1d:62:16:48:8c:e7:3a:92:6e:5c:7f:5c:
         59:d5:83:85:2d:8b:81:fb:aa:c3:81:a3:9e:77:11:43:7b:47:
         8c:05:79:07:fa:25:1e:0f:f3:68:32:37:8b:ec:a2:0e:67:f5:
         2e:73:2b:ed:fe:47:87:3b:22:5d:be:ca:dd:32:41:f7:64:68:
         2d:88:a8:8d:57:6c:1b:86:eb:bf:3b:47:10:6b:9c:f7:55:3d:
         fd:b1:4b:28:88:91:f8:94:90:10:0e:3f:5c:89:4b:2f:c2:a6:
         1f:d9:8a:bd:74:ed:a3:0d:59:20:a1:63:bf:42:a5:0e:46:c5:
         3b:d9:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org