Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/dDC1SaLArp08IeRbqWZUQGzpbCU.roa
File:                     dDC1SaLArp08IeRbqWZUQGzpbCU.roa (raw, json)
Hash identifier:          R86S+ygo2JQolmq9Sjt5UMoSAthZMoyz5N3Cc/SUv/w=
Subject key identifier:   74:30:B5:49:A2:C0:AE:9D:3C:21:E4:5B:A9:66:54:40:6C:E9:6C:25
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       0188F7B160E99939207FDE50C8394E87D205
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/dDC1SaLArp08IeRbqWZUQGzpbCU.roa
Signing time:             Mon 26 Jun 2023 12:32:56 +0000
ROA not before:           Mon 26 Jun 2023 12:32:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55154
IP address blocks:        146.247.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f7:b1:60:e9:99:39:20:7f:de:50:c8:39:4e:87:d2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jun 26 12:32:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7430b549a2c0ae9d3c21e45ba96654406ce96c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:2c:b7:44:72:96:c1:bb:3c:af:47:1b:e2:
                    89:de:a2:0f:a2:a5:5e:99:ae:44:9c:ed:55:fa:d3:
                    71:79:2d:79:a1:75:20:d8:4b:7b:10:73:1a:22:79:
                    21:22:9a:07:c0:19:ee:85:1c:e8:c1:ac:a5:67:5b:
                    db:3c:55:0e:71:eb:68:94:eb:d1:2d:16:fe:27:30:
                    5c:eb:ac:21:7d:f9:ff:7f:2f:32:22:3e:a9:38:07:
                    2b:45:e4:a5:5f:c8:51:8a:95:3e:2d:13:d7:63:1d:
                    26:97:5d:d8:83:46:de:59:f4:e2:85:67:4c:5d:d0:
                    a7:32:55:16:6a:17:b6:87:d0:dd:26:2f:28:53:58:
                    40:32:fc:d6:b3:96:7f:8f:b5:9a:79:45:63:48:bf:
                    a4:8a:11:c1:b0:d4:75:90:ed:44:19:4c:f3:6a:d2:
                    49:2b:77:50:22:7d:a9:00:1f:6e:85:bc:55:ed:62:
                    ea:1d:bd:6d:af:32:28:af:54:6d:8e:45:ee:59:93:
                    24:ec:34:34:20:bf:50:bd:d9:8f:8a:dc:62:62:10:
                    5f:a3:53:68:32:ce:55:e5:66:f5:3a:df:9c:d1:f4:
                    80:06:b8:86:fa:01:d8:64:7f:23:f2:59:82:e4:98:
                    2f:d6:76:62:bd:db:34:3f:10:77:95:1d:dc:cd:5f:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:30:B5:49:A2:C0:AE:9D:3C:21:E4:5B:A9:66:54:40:6C:E9:6C:25
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/dDC1SaLArp08IeRbqWZUQGzpbCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:2c:2b:68:0c:c0:e1:50:f4:77:01:fe:2b:c4:de:a7:49:
         bb:4b:8f:ec:9c:9e:ec:38:52:dc:25:ac:de:86:86:76:d3:0e:
         11:99:25:9e:e2:d5:48:78:c3:07:75:8d:b6:81:79:13:1c:fa:
         6a:83:a4:f5:e1:1c:5c:ea:2d:b7:fa:36:ac:6d:13:79:6b:70:
         0e:87:2f:a7:86:02:04:d7:11:f3:1c:e1:73:dd:76:c0:2d:3d:
         0f:b9:a9:c3:e8:56:ae:f2:54:61:28:86:9e:b1:90:39:7a:2b:
         1b:83:0c:57:5f:4d:f4:2d:f0:8e:66:d9:02:9c:18:af:ee:8c:
         23:4f:f1:5a:a1:30:3d:2a:86:82:ea:97:ab:52:66:f2:15:de:
         f9:f2:8b:14:a3:25:cb:a3:b6:8c:2c:2f:a2:78:50:fd:96:53:
         8d:ff:c6:53:c3:95:d9:88:84:45:fd:59:13:ab:85:c5:0d:e8:
         9b:33:57:0a:24:ce:e0:e0:8b:c0:fa:28:23:ab:33:0d:67:0c:
         8c:e1:b1:3c:7e:10:b9:81:0a:8e:1e:8c:eb:99:b5:be:90:71:
         f5:39:d9:21:1e:6b:30:44:f5:a1:ed:18:3d:dc:82:b8:ff:fd:
         13:93:80:e4:b8:9e:97:b9:90:fc:7c:a6:24:59:22:f0:bb:d7:
         62:41:d4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 12:34:43 2023 by rpki-client on console-ams.rpki-client.org