Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/vP-3kuxLTePMmuBmEP2fOjdL3K4.roa
File:                     vP-3kuxLTePMmuBmEP2fOjdL3K4.roa (raw, json)
Hash identifier:          lDNQyEiPCy6PUaPB9wQFC4Q+kJ+7e23E7S7YJwSJS1s=
Subject key identifier:   BC:FF:B7:92:EC:4B:4D:E3:CC:9A:E0:66:10:FD:9F:3A:37:4B:DC:AE
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       018FCA0B94FF71F330408EA8597383B85D95
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/vP-3kuxLTePMmuBmEP2fOjdL3K4.roa
Signing time:             Thu 30 May 2024 15:08:27 +0000
ROA not before:           Thu 30 May 2024 15:08:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44334
IP address blocks:        92.61.160.0/20 maxlen: 24
                          2a03:4600::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 11:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ca:0b:94:ff:71:f3:30:40:8e:a8:59:73:83:b8:5d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: May 30 15:08:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bcffb792ec4b4de3cc9ae06610fd9f3a374bdcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:ba:67:55:50:8b:06:be:ff:96:0a:55:08:
                    24:44:b7:e6:21:80:c4:36:b3:9b:a0:1b:a1:21:47:
                    a7:80:c2:31:ef:ff:f4:e1:f4:0e:8f:24:25:d9:ca:
                    bb:ab:51:cc:2e:c3:9e:92:e0:62:69:45:cd:59:ef:
                    86:1f:b9:d7:bf:2d:e3:53:3f:42:0e:68:9c:d3:5e:
                    30:09:90:89:1c:7d:21:ff:97:df:27:50:c5:39:74:
                    23:34:a4:9e:81:a6:5e:42:6c:e1:51:3f:8c:a1:96:
                    ff:a1:55:de:d0:9c:c5:be:54:b3:06:7e:43:fe:dc:
                    7e:3a:58:ab:bc:e7:8c:c7:b1:e7:00:c5:ad:9c:37:
                    9b:00:ae:99:be:0a:22:c6:13:f4:b6:b1:84:25:32:
                    b5:51:8e:77:c4:b3:82:38:c1:92:03:d1:46:6d:2f:
                    50:19:e7:c5:8c:24:71:e8:9d:ef:dc:1a:63:d3:8d:
                    3e:6c:92:56:f8:e2:51:c7:87:3e:7e:da:61:d5:67:
                    bf:e7:3a:84:cd:48:fa:00:17:f8:e9:12:9a:e2:10:
                    d6:11:12:3a:f8:27:10:68:a7:06:b5:f4:27:e0:0d:
                    73:b8:34:82:0d:ca:cc:a6:ff:b1:98:0c:3c:7c:9e:
                    2e:7d:fb:76:15:5a:5e:03:a8:1b:c9:2e:90:20:3e:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:B7:92:EC:4B:4D:E3:CC:9A:E0:66:10:FD:9F:3A:37:4B:DC:AE
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/vP-3kuxLTePMmuBmEP2fOjdL3K4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.160.0/20
                IPv6:
                  2a03:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:35:e5:26:52:43:c2:84:8b:29:74:60:0c:45:ad:75:09:3e:
         ac:ca:00:b6:9c:44:06:91:e0:52:5f:60:3b:27:58:a3:07:7b:
         65:0c:ab:d8:53:0c:22:f8:7c:82:4c:85:87:05:33:59:61:02:
         d6:4e:3e:a4:8f:cf:85:30:e9:ec:2e:5f:10:de:bc:30:50:7a:
         b6:79:af:4a:f7:f1:af:27:66:26:5b:0f:1b:7f:26:c7:39:57:
         02:63:a6:a3:e4:d8:c6:d5:8e:e3:58:1d:d6:b9:89:27:01:39:
         f6:55:b5:36:f9:67:87:8a:15:9b:f1:cb:23:cf:99:92:77:6d:
         54:2e:38:0e:25:84:93:ba:99:a8:ef:4d:8e:7b:2e:55:b3:e9:
         2b:87:d7:c7:d9:1e:95:50:a6:52:5d:b3:aa:e1:58:83:1e:dc:
         f2:f5:cb:62:82:01:8e:52:57:2e:2a:5f:24:35:05:bc:93:22:
         9f:ec:71:b4:b9:d4:47:b9:61:ee:7e:95:78:32:3d:87:1a:f5:
         c9:de:16:7c:81:92:d5:c3:3a:81:65:cd:24:1d:0c:a2:81:d3:
         8b:3c:08:95:82:aa:c4:d0:1b:3e:24:de:fe:db:4c:ca:29:ce:
         12:7e:11:35:66:c7:f9:c6:d8:99:14:2e:63:a8:c1:09:fc:71:
         b1:df:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----