Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa
File:                     EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa (raw, json)
Hash identifier:          OMy7u2i2bx5npv9okxU1hJEoHwZJ78Jot3yLotxU7FU=
Subject key identifier:   11:46:72:EC:A5:93:A8:53:2A:A8:26:78:C0:0D:86:A2:9A:3E:B1:EA
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       018572DF0F570808F25BB32F2746C4650B7B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa
Signing time:             Mon 02 Jan 2023 14:24:59 +0000
ROA not before:           Mon 02 Jan 2023 14:24:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        146.247.116.0/24 maxlen: 24
                          146.247.118.0/24 maxlen: 24
                          146.247.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:df:0f:57:08:08:f2:5b:b3:2f:27:46:c4:65:0b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jan  2 14:24:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114672eca593a8532aa82678c00d86a29a3eb1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:18:0d:ed:ca:76:f1:a5:9b:28:a1:e7:2e:
                    d9:28:42:4f:41:c4:60:ad:1d:31:59:f5:21:dc:8c:
                    54:ca:91:af:16:14:2c:74:49:02:78:21:00:f4:f9:
                    62:02:1a:b3:31:36:1a:a5:d5:36:a0:9b:d5:74:90:
                    7d:de:eb:61:98:78:f8:8e:cd:20:55:99:bf:4c:3b:
                    20:91:c5:ea:1f:b6:c2:d5:ba:a7:82:25:46:07:26:
                    2d:41:11:06:c4:5c:13:a8:55:55:96:b9:a6:24:e2:
                    fa:b9:98:c7:8b:15:04:4a:12:b5:9f:a7:1e:bb:62:
                    a0:3f:24:33:15:2e:33:41:d8:8f:69:30:1a:9e:76:
                    74:53:5a:4e:9e:fd:d8:30:c2:a4:fd:23:43:ba:7c:
                    4b:af:ba:29:82:06:9c:c8:4f:ae:9e:86:06:25:c8:
                    fb:8e:b3:2e:b8:7f:b6:40:3a:14:43:d3:30:f9:0a:
                    0a:82:bf:60:5a:bf:2f:a7:7a:a0:ef:10:54:6a:45:
                    c7:ab:62:8f:a5:d5:82:16:c0:c2:d8:00:31:43:d6:
                    32:b8:05:11:b6:bc:40:8a:bb:77:c0:09:6a:61:e5:
                    96:1f:9b:94:01:cb:4d:ca:20:9d:0e:58:df:e6:88:
                    4f:e2:51:64:32:33:53:13:ae:56:82:9e:32:af:f9:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:46:72:EC:A5:93:A8:53:2A:A8:26:78:C0:0D:86:A2:9A:3E:B1:EA
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.116.0/24
                  146.247.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:4f:d4:f7:55:f5:3e:b1:98:ad:87:ec:37:f5:1d:2a:7a:
         5e:4a:bf:8c:80:36:eb:ed:57:35:68:64:24:26:62:62:b9:77:
         cc:b0:89:c8:fd:04:31:a0:ff:69:08:3d:70:ec:31:b9:4a:a6:
         ed:00:93:38:7d:64:d7:14:c4:6f:62:ac:07:c8:0b:14:4a:3e:
         ed:46:d3:9d:50:75:84:6b:4a:7b:5a:40:9c:83:39:c2:3b:ac:
         9a:a4:36:1f:e6:33:29:9c:b3:65:d9:3a:15:87:11:2e:b5:aa:
         56:51:53:a4:d4:b7:bf:63:94:be:9d:fd:6b:e8:4b:0e:50:15:
         6a:d3:12:97:39:1d:40:e7:cb:05:8a:0b:93:da:57:33:88:25:
         d8:29:64:98:42:b1:4e:3e:f0:90:a7:b1:ca:27:50:a9:6c:67:
         ae:52:69:91:7a:56:20:15:5f:69:4e:b9:17:6f:0a:7c:11:df:
         fd:70:73:d3:9d:6c:c7:f6:d9:00:58:88:f0:99:92:28:a9:2b:
         24:80:bb:05:15:48:a5:a8:fd:06:54:21:09:9a:f7:3b:2a:5a:
         8e:38:97:a9:cb:10:31:b8:31:20:83:c0:20:4e:ae:6d:0e:c4:
         94:40:26:8e:5b:dd:34:10:b3:43:de:60:d9:1b:d7:a3:9b:fc:
         81:4b:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org