Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C29TsUpz4Gukj_MNeu3xWuyxB4c.roa
File:                     C29TsUpz4Gukj_MNeu3xWuyxB4c.roa (raw, json)
Hash identifier:          Qv9t2jrOt3GD5aeXFO26+dHMHcqmFfpmRQVvvwILbtI=
Subject key identifier:   0B:6F:53:B1:4A:73:E0:6B:A4:8F:F3:0D:7A:ED:F1:5A:EC:B1:07:87
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018CC86FB34C8F1F40D525164A929CB6BBFF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C29TsUpz4Gukj_MNeu3xWuyxB4c.roa
Signing time:             Tue 02 Jan 2024 04:30:12 +0000
ROA not before:           Tue 02 Jan 2024 04:30:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206150
IP address blocks:        45.130.140.0/24 maxlen: 24
                          2a0f:f43::/32 maxlen: 48
                          2a0f:f47::/32 maxlen: 48
                          2a0f:f45::/32 maxlen: 48
                          2a0f:f41::/32 maxlen: 32
                          2a0f:f44::/32 maxlen: 48
                          2a0f:f40::/32 maxlen: 32
                          2a0f:f46::/32 maxlen: 48
                          2a07:e342::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 05:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:b3:4c:8f:1f:40:d5:25:16:4a:92:9c:b6:bb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  2 04:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0b6f53b14a73e06ba48ff30d7aedf15aecb10787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:53:36:0a:61:76:ab:88:aa:e5:25:f9:89:
                    dc:da:f4:21:cb:60:64:59:9e:de:f7:a6:7b:de:5f:
                    0d:b2:a6:9c:b6:d4:a2:45:6a:be:e3:f5:8e:f3:08:
                    95:21:fa:39:16:40:83:37:1f:8e:59:1e:00:d9:cf:
                    d2:20:33:b0:da:08:05:00:d1:0b:5e:af:4a:b4:7e:
                    b1:64:af:d9:43:2c:ff:b0:ad:9e:76:32:1b:85:94:
                    c7:13:27:f2:f2:be:99:df:69:ad:46:b2:63:f8:97:
                    7e:c5:77:33:ad:a0:b2:eb:ec:4a:a1:04:aa:79:a1:
                    82:dd:96:df:9b:a9:a1:3a:bf:1c:ef:06:2c:2b:ff:
                    5b:6b:9a:3d:4a:19:9d:9c:89:4f:42:e4:6a:79:0d:
                    74:9d:fe:52:a6:06:4b:f8:5b:dc:e9:eb:7b:95:ae:
                    92:78:0c:6e:0c:3e:84:dc:ae:59:ca:19:c4:de:fb:
                    33:a3:1f:e2:3e:04:9b:b9:81:14:00:d4:eb:d7:4d:
                    14:d0:1d:17:3f:2f:da:65:91:ea:e4:f7:6d:46:06:
                    b8:70:b0:28:fe:44:ba:c7:37:23:f9:4b:6e:bc:a6:
                    c1:fe:0d:65:18:16:65:db:15:5c:a6:0b:be:89:1c:
                    a0:de:4f:fe:21:21:b5:87:5f:08:31:bd:02:bc:e1:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6F:53:B1:4A:73:E0:6B:A4:8F:F3:0D:7A:ED:F1:5A:EC:B1:07:87
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C29TsUpz4Gukj_MNeu3xWuyxB4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.140.0/24
                IPv6:
                  2a07:e342::/32
                  2a0f:f40::/31
                  2a0f:f43::-2a0f:f47:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ab:f9:28:07:de:63:46:c5:8a:54:3a:37:08:d7:ea:74:7c:9a:
         77:a2:6c:88:3a:7a:48:15:04:9e:6e:55:ad:84:54:36:86:f2:
         3a:d6:37:18:51:a2:d3:32:0b:4f:c3:ea:44:8a:86:50:45:09:
         e3:77:dc:3a:16:b4:68:49:67:20:c5:3a:8a:63:89:63:83:ab:
         7a:39:af:e9:e6:af:73:01:9a:ea:0e:e0:0e:48:54:2b:be:2e:
         18:e7:b9:75:d2:b2:51:21:58:28:3d:43:94:c6:fc:57:a5:ad:
         48:03:c2:83:d0:32:c2:19:70:a4:03:bb:dc:7e:9c:79:f5:1f:
         d9:b9:0d:6c:9b:9e:f9:57:18:fb:c6:cb:13:ed:c6:b0:90:21:
         1d:22:0b:89:18:89:6f:fa:76:44:d9:1a:38:97:6b:90:b0:13:
         92:83:59:47:19:37:89:02:75:75:fb:93:27:8b:74:cd:c0:53:
         ee:63:e6:c8:7b:ed:da:e8:f5:e3:a0:8a:98:e8:22:fa:77:b8:
         49:f8:37:f5:ee:87:6f:02:fb:b9:2b:25:b6:eb:56:f4:bf:a5:
         13:bb:9d:fb:5a:cb:a2:a7:e5:67:81:8a:24:fd:79:05:70:42:
         54:69:7c:a7:54:db:1b:30:f4:f5:f4:95:22:22:29:6a:d6:04:
         97:c1:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----