Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/IxejbC5BK50ru1P-BcxTHO96gh8.roa
File:                     IxejbC5BK50ru1P-BcxTHO96gh8.roa (raw, json)
Hash identifier:          5u8xCJKvN7JmPqPv0Pu5/VMbvmwPO3AcJmd04HibZIk=
Subject key identifier:   23:17:A3:6C:2E:41:2B:9D:2B:BB:53:FE:05:CC:53:1C:EF:7A:82:1F
Certificate issuer:       /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial:       019013187DE86D2E9BBDD8A42604627E9CB2
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/IxejbC5BK50ru1P-BcxTHO96gh8.roa
Signing time:             Thu 13 Jun 2024 19:34:50 +0000
ROA not before:           Thu 13 Jun 2024 19:34:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216258
IP address blocks:        92.42.98.0/24 maxlen: 26
                          2a13:2140::/32 maxlen: 48
                          2a13:2141:1::/48 maxlen: 48
                          2a13:2142:1::/48 maxlen: 48
                          2a13:2142:2::/48 maxlen: 48
                          2a13:2143:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 11:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:13:18:7d:e8:6d:2e:9b:bd:d8:a4:26:04:62:7e:9c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
        Validity
            Not Before: Jun 13 19:34:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2317a36c2e412b9d2bbb53fe05cc531cef7a821f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:64:b6:82:5a:a8:97:28:7e:e5:c1:1b:0d:
                    ca:47:21:d3:fc:a9:16:59:51:ce:3c:a2:b2:40:f5:
                    9e:66:b3:fa:f1:27:5b:cd:7b:30:5f:7a:28:7f:06:
                    75:7f:03:b6:42:2a:bd:c2:38:9a:11:a7:97:98:67:
                    89:7e:b7:f2:31:bf:25:01:5a:2d:e9:a9:fd:a1:c8:
                    0f:20:f8:57:c0:bd:be:72:5f:e6:3b:f4:47:1d:ac:
                    07:90:c3:d5:74:03:0c:b9:ce:b0:b2:6c:7e:90:78:
                    4c:09:a2:be:8b:1f:ea:a2:69:ea:b8:53:b3:fe:bf:
                    65:ef:bc:65:72:af:51:15:f3:bc:a9:1d:5c:28:0b:
                    3e:68:cb:26:6f:16:35:27:c0:1d:80:23:59:fd:5b:
                    52:8a:2b:72:08:1b:5e:af:a3:b9:ef:8a:b5:2b:46:
                    99:b6:1d:f8:c4:5f:5c:a4:28:10:33:c0:2a:2a:1a:
                    a8:7d:ed:e8:27:fe:5a:54:56:12:7f:49:0a:3f:4d:
                    db:f5:84:16:6e:36:08:e9:94:41:68:c6:50:e8:7d:
                    7e:4c:01:88:d3:d1:91:2b:d0:cc:8d:2d:81:b0:8a:
                    1b:7e:36:6c:9e:e3:12:03:a3:a5:a6:ce:16:be:29:
                    7d:e5:2d:e6:ef:c8:14:23:9c:64:80:62:66:44:d8:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:17:A3:6C:2E:41:2B:9D:2B:BB:53:FE:05:CC:53:1C:EF:7A:82:1F
            X509v3 Authority Key Identifier:
                keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/IxejbC5BK50ru1P-BcxTHO96gh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.98.0/24
                IPv6:
                  2a13:2140::/32
                  2a13:2141:1::/48
                  2a13:2142:1::-2a13:2142:2:ffff:ffff:ffff:ffff:ffff
                  2a13:2143:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:e8:2f:74:71:42:e8:1c:a7:7b:31:99:ca:9c:d9:35:b1:78:
         fa:2f:f9:4d:60:64:b9:9f:f8:05:29:37:b3:82:06:58:7d:0a:
         16:0e:11:d3:bb:82:35:9d:09:71:b4:95:76:25:81:77:c3:a5:
         d7:3e:b4:c7:8c:83:c7:72:37:52:74:28:ca:00:ee:6a:8f:4e:
         01:b0:b7:8a:af:e5:9f:1c:e2:0f:ef:e6:9e:8c:10:64:20:4c:
         dc:b5:71:9e:ed:20:ea:f5:86:24:05:11:b1:04:66:22:5d:bf:
         51:88:54:83:58:a8:eb:11:ca:62:fc:0e:4b:65:d2:09:9b:9c:
         f6:84:5a:93:c9:1d:e0:82:7a:b7:b7:04:d3:6e:83:3a:b8:7d:
         50:b6:ba:24:47:0e:43:e4:ad:d8:57:d2:14:ba:56:1d:01:13:
         3c:12:67:58:7b:04:e4:15:2e:00:18:b3:2a:47:f8:68:9b:98:
         55:ce:f5:e6:f3:c3:89:d2:ae:8a:08:66:a8:d5:08:86:9f:06:
         fc:d3:32:a1:cc:94:ed:65:b0:01:22:fb:03:b5:bf:6f:a8:80:
         7b:09:32:9a:65:d3:4b:4d:99:79:be:17:ea:60:93:39:51:24:
         d0:b7:ed:9a:d4:3b:a4:e2:a0:bc:ba:f9:3a:9e:1f:e6:b9:57:
         d1:57:da:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZATGH3obS6bvdikJgRifpyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU2MTllZjk2YTNhZmQwMmZjMmQ1ZDAwM2E5NDdlNGQy
ZDU5MGEwHhcNMjQwNjEzMTkzNDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzE3YTM2YzJlNDEyYjlkMmJiYjUzZmUwNWNjNTMxY2VmN2E4MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMNktoJaqJcofuXBGw3KRyHT/KkW
WVHOPKKyQPWeZrP68SdbzXswX3oofwZ1fwO2Qiq9wjiaEaeXmGeJfrfyMb8lAVot
6an9ocgPIPhXwL2+cl/mO/RHHawHkMPVdAMMuc6wsmx+kHhMCaK+ix/qomnquFOz
/r9l77xlcq9RFfO8qR1cKAs+aMsmbxY1J8AdgCNZ/VtSiityCBter6O574q1K0aZ
th34xF9cpCgQM8AqKhqofe3oJ/5aVFYSf0kKP03b9YQWbjYI6ZRBaMZQ6H1+TAGI
09GRK9DMjS2BsIobfjZsnuMSA6Olps4Wvil95S3m78gUI5xkgGJmRNjyLQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFCMXo2wuQSudK7tT/gXMUxzveoIfMB8GA1UdIwQY
MBaAFBnuYZ75ajr9AvwtXQA6lH5NLVkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEt
ZWIyNzdhMjBmMjdmLzEvSXhlamJDNUJLNTBydTFQLUJjeFRITzk2Z2g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEtZWIyNzdhMjBmMjdm
LzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAMBAIAATAGAwQAXCpiMDME
AgACMC0DBQAqEyFAAwcAKhMhQQABMBIDBwAqEyFCAAEDBwAqEyFCAAIDBwAqEyFD
AAEwDQYJKoZIhvcNAQELBQADggEBAIfoL3RxQugcp3sxmcqc2TWxePov+U1gZLmf
+AUpN7OCBlh9ChYOEdO7gjWdCXG0lXYlgXfDpdc+tMeMg8dyN1J0KMoA7mqPTgGw
t4qv5Z8c4g/v5p6MEGQgTNy1cZ7tIOr1hiQFEbEEZiJdv1GIVINYqOsRymL8Dktl
0gmbnPaEWpPJHeCCere3BNNugzq4fVC2uiRHDkPkrdhX0hS6Vh0BEzwSZ1h7BOQV
LgAYsypH+GibmFXO9ebzw4nSrooIZqjVCIafBvzTMqHMlO1lsAEi+wO1v2+ogHsJ
Mppl00tNmXm+F+pgkzlRJNC37ZrUO6TioLy6+TqeH+a5V9FX2j4=