Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/7mqpXDtRAleQ3DqfJaa9uWJN9IM.roa
File:                     7mqpXDtRAleQ3DqfJaa9uWJN9IM.roa (raw, json)
Hash identifier:          3s0V9YXxrR85p7atYnVhLj8yAbO8jhDvhKG1deOnSLM=
Subject key identifier:   EE:6A:A9:5C:3B:51:02:57:90:DC:3A:9F:25:A6:BD:B9:62:4D:F4:83
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       018B3F81B3776FBB3E8CB7D009E4DC5D08A3
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/7mqpXDtRAleQ3DqfJaa9uWJN9IM.roa
Signing time:             Tue 17 Oct 2023 21:19:06 +0000
ROA not before:           Tue 17 Oct 2023 21:19:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        146.247.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 19:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3f:81:b3:77:6f:bb:3e:8c:b7:d0:09:e4:dc:5d:08:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Oct 17 21:19:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee6aa95c3b51025790dc3a9f25a6bdb9624df483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:fd:fe:fe:b7:aa:da:21:98:26:5f:1e:d7:
                    75:7a:3b:6f:3c:aa:62:92:af:43:a5:38:94:f3:0a:
                    77:66:0c:87:ea:91:5c:1d:ff:9f:f9:e9:e5:db:b7:
                    80:c3:a4:8b:4b:a0:8e:f0:55:92:b3:b1:4d:fb:48:
                    11:9d:b3:78:49:5d:73:6d:5f:b3:6b:19:42:8b:57:
                    bf:fb:b9:7f:c3:1b:18:43:50:99:8f:08:c5:16:5e:
                    9c:6c:c8:73:3d:e0:f1:0f:5a:df:41:54:96:a5:99:
                    ad:e7:56:f2:7a:4d:59:c3:17:56:ea:84:d5:5d:35:
                    76:22:70:d0:53:b0:1a:94:1d:a7:9a:87:37:8f:37:
                    2b:1e:a7:b9:4f:c7:dc:92:0f:fc:c7:7f:a1:ad:94:
                    0f:15:dd:70:18:e2:bf:f1:aa:21:a8:85:98:4f:46:
                    ac:cf:41:b7:fc:18:f5:6d:63:a2:f7:72:9a:f7:3c:
                    f1:70:c1:c2:ac:9f:82:a5:c5:b8:40:d3:c7:e2:e7:
                    5c:00:14:fc:37:45:37:62:80:42:59:69:ba:b3:52:
                    91:eb:ad:ce:61:f1:34:16:bb:ae:51:1e:6d:59:8f:
                    4c:91:0d:f9:2e:da:81:c5:b5:72:35:da:26:f5:86:
                    ec:22:59:26:93:4d:fe:72:38:ab:a2:73:a5:c9:da:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6A:A9:5C:3B:51:02:57:90:DC:3A:9F:25:A6:BD:B9:62:4D:F4:83
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/7mqpXDtRAleQ3DqfJaa9uWJN9IM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:58:25:cf:26:3e:af:4e:a6:06:4d:33:06:92:a5:07:47:
         36:a1:7f:0d:97:6e:92:f3:9d:c3:4e:03:0d:59:f4:9b:44:c6:
         0f:49:21:85:5f:73:ca:2c:dc:a2:e5:1a:c2:8e:72:10:4f:a5:
         ac:35:32:73:5b:74:26:03:6f:a0:24:dc:ef:3b:b9:ec:01:06:
         80:42:20:fc:45:aa:a3:0d:8d:ed:ef:1f:7b:ab:88:64:45:3e:
         7e:c9:03:91:59:68:e0:ca:77:81:c7:1e:8a:8a:d6:48:76:96:
         29:0a:b1:7e:5a:25:00:08:cb:17:30:20:e7:6d:03:42:c5:45:
         92:3d:e8:d2:8f:b2:ce:6a:39:d8:36:d9:06:f1:29:f9:5c:e8:
         9c:e1:4c:a9:72:02:12:20:b8:79:2a:59:77:79:13:64:b9:56:
         cf:22:b3:95:9a:47:17:d6:48:f5:d4:35:a2:ba:46:4e:76:05:
         7b:75:83:75:19:df:58:b5:b3:1c:73:7d:2b:c2:86:ba:59:1a:
         a5:c4:40:71:00:26:af:d0:0f:b2:e7:c3:ca:1b:3d:e4:e2:75:
         eb:f1:66:f1:45:a8:ad:e9:dd:0f:ca:7e:30:fa:d6:8b:b0:32:
         a1:f2:dd:88:ea:e3:e8:46:2d:9f:41:8a:61:07:93:ff:d4:49:
         74:6e:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org