Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/6I4-9cxKU91TnwnGhYY6Eid9_Pw.roa
File:                     6I4-9cxKU91TnwnGhYY6Eid9_Pw.roa (raw, json)
Hash identifier:          YnwVSFdLpTbEJi5Awv7/vrfOZ5XkPG0OpP/jExNsne8=
Subject key identifier:   E8:8E:3E:F5:CC:4A:53:DD:53:9F:09:C6:85:86:3A:12:27:7D:FC:FC
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       018619A950123BCAB10C01E04081FFC1E7C7
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/6I4-9cxKU91TnwnGhYY6Eid9_Pw.roa
Signing time:             Fri 03 Feb 2023 23:42:51 +0000
ROA not before:           Fri 03 Feb 2023 23:42:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        146.247.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:19:a9:50:12:3b:ca:b1:0c:01:e0:40:81:ff:c1:e7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Feb  3 23:42:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e88e3ef5cc4a53dd539f09c685863a12277dfcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:51:7f:c7:87:20:5a:85:c3:43:5f:90:35:
                    cd:2f:48:4f:09:0c:03:fb:15:41:1f:f3:27:24:ff:
                    d4:f9:01:17:69:b4:e8:ef:c5:5b:c5:6d:12:25:14:
                    2d:70:61:23:08:e8:f1:95:ed:04:b8:61:27:7f:00:
                    d5:d2:82:06:95:b7:d5:00:2d:ec:ee:d8:c2:23:28:
                    25:30:02:c8:48:6f:c6:8e:fd:9b:20:fc:62:fa:30:
                    a4:ac:99:38:76:44:12:48:44:f5:b1:56:b6:9e:c7:
                    f8:8f:30:4e:10:f9:50:99:dc:17:65:f2:a4:d6:ea:
                    e4:de:be:6f:ae:86:61:75:ee:01:df:97:c0:ab:6d:
                    c3:d8:2c:6b:50:79:49:2d:11:72:83:83:81:d5:b0:
                    2e:49:b3:f5:76:43:57:28:f1:5e:ac:bc:1d:a4:f3:
                    8e:65:62:fc:4d:3f:7b:4f:95:d4:5f:ff:91:69:0e:
                    74:b3:7b:76:55:94:35:83:91:e2:39:e6:b6:3a:a1:
                    15:d1:09:ba:24:cc:16:79:d5:a0:1b:37:d6:89:8a:
                    5d:0c:e8:55:9a:61:f0:ac:ba:e5:55:8a:fe:2a:24:
                    21:b4:bd:7d:c1:94:f2:9f:f0:c8:cd:e6:40:1a:cb:
                    39:62:f3:60:d3:d1:22:46:37:32:42:b8:4e:66:11:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8E:3E:F5:CC:4A:53:DD:53:9F:09:C6:85:86:3A:12:27:7D:FC:FC
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/6I4-9cxKU91TnwnGhYY6Eid9_Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:2e:29:19:d1:8e:a7:86:b6:1c:d3:00:22:9c:6e:4a:ef:
         01:d9:31:fe:6e:92:c0:9d:89:9f:a6:ad:f7:13:c8:3b:a9:df:
         db:75:3d:f3:20:7d:01:6e:37:91:95:22:4f:10:ea:ea:10:a8:
         2f:0c:58:56:6c:62:4a:3e:ca:ce:10:a5:d1:a3:c7:d6:0e:19:
         ba:e9:79:18:b0:02:7b:f7:29:43:43:79:d0:53:d4:6f:45:43:
         c0:2b:be:1b:c7:47:d9:f4:0c:bb:61:dc:39:3f:4c:a3:ed:c7:
         17:c2:5a:38:1b:c7:7a:2a:91:4d:ad:95:02:59:6d:5d:4c:91:
         1b:bc:d0:c7:d2:b8:91:d0:8a:f0:ab:98:84:5c:df:4e:6d:11:
         06:ed:e2:de:5d:75:7d:bd:ee:4c:6a:68:6a:28:4b:1a:49:88:
         50:0e:39:c6:a4:63:72:59:06:6a:fd:40:60:42:fc:c2:04:fb:
         ee:3a:73:b2:b4:d4:e9:75:8e:5b:af:02:cb:fc:02:ea:78:bb:
         73:8f:6a:fe:d1:a5:e0:98:e5:ec:28:b8:50:25:18:13:69:ab:
         54:f4:ee:df:8b:eb:8e:c1:27:24:34:0d:e3:09:53:51:72:ba:
         67:5a:37:28:9d:07:ef:2c:17:cc:cb:56:d2:69:26:bf:9a:51:
         9e:3d:6b:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYZqVASO8qxDAHgQIH/wefHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwMjAzMjM0MjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODhlM2VmNWNjNGE1M2RkNTM5ZjA5YzY4NTg2M2ExMjI3N2RmY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYlRf8eHIFqFw0NfkDXNL0hPCQwD
+xVBH/MnJP/U+QEXabTo78VbxW0SJRQtcGEjCOjxle0EuGEnfwDV0oIGlbfVAC3s
7tjCIyglMALISG/Gjv2bIPxi+jCkrJk4dkQSSET1sVa2nsf4jzBOEPlQmdwXZfKk
1urk3r5vroZhde4B35fAq23D2CxrUHlJLRFyg4OB1bAuSbP1dkNXKPFerLwdpPOO
ZWL8TT97T5XUX/+RaQ50s3t2VZQ1g5HiOea2OqEV0Qm6JMwWedWgGzfWiYpdDOhV
mmHwrLrlVYr+KiQhtL19wZTyn/DIzeZAGss5YvNg09EiRjcyQrhOZhF5JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiOPvXMSlPdU58JxoWGOhInffz8MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvNkk0LTljeEtVOTFUbnduR2hZWTZFaWQ5X1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdrMA0G
CSqGSIb3DQEBCwUAA4IBAQAC0y4pGdGOp4a2HNMAIpxuSu8B2TH+bpLAnYmfpq33
E8g7qd/bdT3zIH0BbjeRlSJPEOrqEKgvDFhWbGJKPsrOEKXRo8fWDhm66XkYsAJ7
9ylDQ3nQU9RvRUPAK74bx0fZ9Ay7Ydw5P0yj7ccXwlo4G8d6KpFNrZUCWW1dTJEb
vNDH0riR0Irwq5iEXN9ObREG7eLeXXV9ve5MamhqKEsaSYhQDjnGpGNyWQZq/UBg
QvzCBPvuOnOytNTpdY5brwLL/ALqeLtzj2r+0aXgmOXsKLhQJRgTaatU9O7fi+uO
wSckNA3jCVNRcrpnWjconQfvLBfMy1bSaSa/mlGePWtP
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org