Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/fvD1UBjWXW2ywyhXjVkK9yd9SGY.roa
File:                     fvD1UBjWXW2ywyhXjVkK9yd9SGY.roa (raw, json)
Hash identifier:          0Dcthjruw3doNv/DRa2X02vqSLdkJhAa9SZC2A1zirE=
Subject key identifier:   7E:F0:F5:50:18:D6:5D:6D:B2:C3:28:57:8D:59:0A:F7:27:7D:48:66
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       018D7FABB65F18DD97A6E3C46B9354748BF7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/fvD1UBjWXW2ywyhXjVkK9yd9SGY.roa
Signing time:             Tue 06 Feb 2024 18:26:16 +0000
ROA not before:           Tue 06 Feb 2024 18:26:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204374
IP address blocks:        2a0f:b241:e9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7f:ab:b6:5f:18:dd:97:a6:e3:c4:6b:93:54:74:8b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Feb  6 18:26:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ef0f55018d65d6db2c328578d590af7277d4866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:c7:4d:8e:c5:6d:38:2d:18:73:21:d7:78:
                    80:07:12:9b:eb:b7:1a:1d:aa:11:d5:fa:57:11:9a:
                    7d:69:36:91:60:1a:18:6f:d9:c7:e7:e9:29:4a:ba:
                    13:4d:f6:6a:9d:4b:a3:22:dc:20:13:46:fd:8b:4a:
                    e1:ab:d0:a9:51:e1:46:66:a7:0d:7c:31:ba:d4:6e:
                    56:fb:c4:ec:f3:1c:65:75:86:6a:62:88:a4:0d:d9:
                    ab:c1:17:60:8a:f7:d5:68:4c:fd:6e:57:6e:c1:e2:
                    5f:f7:88:fe:91:66:a7:c7:28:39:51:36:49:be:dc:
                    a5:38:68:29:b1:68:cf:9b:4e:d4:f6:36:b8:d1:5f:
                    ba:a3:1e:7b:1a:55:51:5c:d3:ad:d8:5c:ac:76:cc:
                    47:0f:92:51:8e:e4:ec:13:bd:ef:f9:9a:b6:64:5a:
                    33:bb:bb:f1:25:d5:f5:30:f1:8a:43:99:43:dd:5e:
                    47:b7:39:98:a4:72:8e:52:94:58:b3:e1:c3:0d:c6:
                    06:25:95:d8:4a:49:3e:b0:30:bd:45:48:b2:fa:9a:
                    46:25:f6:b8:d2:a8:b9:4b:16:f1:9c:c7:c4:b6:c3:
                    7a:b3:a0:7f:b9:d0:54:f8:b2:47:4f:7a:b1:7d:72:
                    81:45:6c:e5:3f:d7:9c:24:e8:bb:30:0b:56:c1:9e:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F0:F5:50:18:D6:5D:6D:B2:C3:28:57:8D:59:0A:F7:27:7D:48:66
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/fvD1UBjWXW2ywyhXjVkK9yd9SGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b241:e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:51:86:ae:7f:2b:39:3a:94:37:ca:2e:19:90:ef:6c:68:
         fa:6d:2e:97:d4:b7:cd:21:c0:70:44:e6:b1:c8:8c:3f:ea:e8:
         1c:3b:4d:1a:e2:0c:3d:e9:ca:8b:f6:9c:89:e2:f8:78:28:df:
         90:57:82:2c:ed:c7:d4:e5:ff:df:28:e1:26:ed:33:6c:26:95:
         dd:4f:ac:6e:7a:78:eb:63:dd:85:fb:5f:8b:8e:38:3f:24:46:
         88:b9:ba:c5:9f:f6:c5:f3:41:f3:45:e6:0d:0a:d2:23:23:59:
         14:22:28:c5:f7:e0:d0:fc:d7:e0:6d:74:48:9c:ee:c9:8c:e6:
         72:a7:dc:d6:41:49:36:82:c3:ea:92:74:5f:9f:7b:c0:ca:28:
         a0:a3:17:e3:00:72:1b:25:71:64:66:e5:66:f9:50:15:49:64:
         49:da:db:ae:3a:66:46:09:f6:9c:41:e3:82:95:e1:98:f6:ac:
         9d:18:10:d5:8b:67:fb:04:15:ae:70:06:30:8a:d8:f5:fc:5c:
         c8:42:3e:c8:6e:f9:b7:20:d5:7e:16:eb:0a:92:13:f5:fb:d8:
         df:9e:42:3f:ae:83:b7:3a:30:80:7a:ff:7a:a5:41:43:f7:4f:
         be:15:2f:82:b5:9b:84:5d:09:11:25:5a:65:26:e8:25:8d:07:
         2d:7d:43:d9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/q7ZfGN2XpuPEa5NUdIv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWYwZjU1MDE4ZDY1ZDZkYjJjMzI4NTc4ZDU5MGFmNzI3N2Q0ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0HHTY7FbTgtGHMh13iABxKb67ca
HaoR1fpXEZp9aTaRYBoYb9nH5+kpSroTTfZqnUujItwgE0b9i0rhq9CpUeFGZqcN
fDG61G5W+8Ts8xxldYZqYoikDdmrwRdgivfVaEz9blduweJf94j+kWanxyg5UTZJ
vtylOGgpsWjPm07U9ja40V+6ox57GlVRXNOt2FysdsxHD5JRjuTsE73v+Zq2ZFoz
u7vxJdX1MPGKQ5lD3V5HtzmYpHKOUpRYs+HDDcYGJZXYSkk+sDC9RUiy+ppGJfa4
0qi5SxbxnMfEtsN6s6B/udBU+LJHT3qxfXKBRWzlP9ecJOi7MAtWwZ649QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH7w9VAY1l1tssMoV41ZCvcnfUhmMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZnZEMVVCaldYVzJ5d3loWGpWa0s5eWQ5U0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQDp
MA0GCSqGSIb3DQEBCwUAA4IBAQCNSlGGrn8rOTqUN8ouGZDvbGj6bS6X1LfNIcBw
ROaxyIw/6ugcO00a4gw96cqL9pyJ4vh4KN+QV4Is7cfU5f/fKOEm7TNsJpXdT6xu
enjrY92F+1+Ljjg/JEaIubrFn/bF80HzReYNCtIjI1kUIijF9+DQ/NfgbXRInO7J
jOZyp9zWQUk2gsPqknRfn3vAyiigoxfjAHIbJXFkZuVm+VAVSWRJ2tuuOmZGCfac
QeOCleGY9qydGBDVi2f7BBWucAYwitj1/FzIQj7Ibvm3INV+FusKkhP1+9jfnkI/
roO3OjCAev96pUFD90++FS+CtZuEXQkRJVplJugljQctfUPZ
-----END CERTIFICATE-----