Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SamtxkGTmhMCaBojL8Ya7zp14jY.roa
File:                     SamtxkGTmhMCaBojL8Ya7zp14jY.roa (raw, json)
Hash identifier:          vcfdCFcY5sl+i/Zt20Wd7ZlTZw0ZkbbC5QbuCYDV4/k=
Subject key identifier:   49:A9:AD:C6:41:93:9A:13:02:68:1A:23:2F:C6:1A:EF:3A:75:E2:36
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       018D7F95CA39974F73A1DEF0D8BD6D28F292
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SamtxkGTmhMCaBojL8Ya7zp14jY.roa
Signing time:             Tue 06 Feb 2024 18:02:19 +0000
ROA not before:           Tue 06 Feb 2024 18:02:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215738
IP address blocks:        2a0f:b241:51::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7f:95:ca:39:97:4f:73:a1:de:f0:d8:bd:6d:28:f2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Feb  6 18:02:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=49a9adc641939a1302681a232fc61aef3a75e236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0d:c5:c5:64:61:30:12:57:3e:28:b1:c8:42:
                    90:0e:ef:a2:26:2b:7c:53:42:5a:19:97:06:53:24:
                    a4:a1:4c:21:dc:8c:c2:42:ad:f8:98:8c:76:92:3a:
                    df:e4:38:f1:68:72:fa:cd:6f:2f:f8:db:aa:39:20:
                    1c:8a:60:86:84:c8:ef:5f:21:a9:f5:3b:18:a8:e4:
                    68:e9:64:db:94:01:73:45:f5:c9:c1:5c:de:b4:4c:
                    57:2e:b9:cf:14:c6:a6:39:96:97:3e:74:b6:66:9d:
                    95:96:b8:d2:f0:e6:1a:08:d5:af:1b:0f:25:16:0d:
                    44:01:2d:0c:d4:0a:4e:2a:4d:6b:f5:e0:96:f1:1d:
                    8a:60:ff:82:c0:27:73:7e:ae:20:09:f0:a2:3d:d9:
                    4b:b7:7d:e3:e8:5e:ba:31:6c:e9:b1:4d:64:e6:47:
                    d2:1b:4d:1c:ab:f7:88:b0:e5:01:94:5b:83:37:a6:
                    91:66:91:6a:4b:cd:3f:36:fe:4f:e0:30:38:5c:44:
                    20:55:ca:fb:74:1a:4f:ab:2b:7a:21:84:69:ac:80:
                    41:97:38:18:4b:b0:8d:3d:68:2a:12:91:eb:0d:82:
                    94:9c:c3:5b:14:80:b0:9c:30:7e:e9:16:ad:53:4c:
                    a3:1d:ec:08:eb:cf:e0:d9:c6:f9:b8:00:cd:f9:b6:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:AD:C6:41:93:9A:13:02:68:1A:23:2F:C6:1A:EF:3A:75:E2:36
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SamtxkGTmhMCaBojL8Ya7zp14jY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b241:51::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:a7:c5:ec:8e:9d:27:61:30:fd:a4:33:ae:e9:19:9f:83:
         c1:af:7d:ad:7f:2c:05:60:43:a2:fb:9a:6e:23:74:c9:29:e8:
         e7:55:7f:6f:6b:34:08:30:99:da:08:ce:15:fc:92:bd:9d:b7:
         f9:ad:02:a0:af:81:52:2f:ea:7f:b8:c7:f8:19:87:f3:ad:fa:
         93:26:b0:7f:33:96:ca:19:ac:40:bf:7b:6b:44:44:d8:d4:61:
         eb:60:1e:91:f5:df:ac:6f:ad:b5:ab:b7:f0:c1:7c:09:4f:57:
         b6:b2:47:81:f0:30:ae:a2:74:77:bf:7c:47:77:52:2e:2d:88:
         e1:cd:3e:9f:a4:d3:1a:bc:13:5d:f9:cd:da:6b:0e:27:48:6c:
         25:01:af:d5:07:27:04:fa:c0:b5:7d:46:22:de:9c:49:65:ad:
         92:0d:dc:c1:e6:10:94:84:e3:e7:93:a4:11:38:6c:91:7f:93:
         a0:be:1b:09:c0:40:d5:87:e5:09:ea:61:84:ac:42:6d:f7:ee:
         c7:48:0f:7e:f7:c7:01:be:99:5b:d6:32:df:c8:ec:ee:98:02:
         7f:5d:f1:bf:26:6f:ad:70:96:ca:c3:ba:61:d0:c4:c3:55:cb:
         5c:ab:42:7f:de:0f:2a:07:30:01:7f:4a:3d:13:8f:d0:a3:84:
         a6:0d:f5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----