Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JSkdROi0aiMF-XnbGON1spnh2bI.roa
File:                     JSkdROi0aiMF-XnbGON1spnh2bI.roa (raw, json)
Hash identifier:          nqIL1ru2rXBQAuerexUe9WH1EpcFS1Id5shsaJ5Uj6I=
Subject key identifier:   25:29:1D:44:E8:B4:6A:23:05:F9:79:DB:18:E3:75:B2:99:E1:D9:B2
Certificate issuer:       /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial:       01929C194D8BF0EC321B0C20D39FCEE9F772
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JSkdROi0aiMF-XnbGON1spnh2bI.roa
Signing time:             Thu 17 Oct 2024 20:09:16 +0000
ROA not before:           Thu 17 Oct 2024 20:09:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a0e:dfc3::/32 maxlen: 32
                          2a0e:dfc5::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 13:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9c:19:4d:8b:f0:ec:32:1b:0c:20:d3:9f:ce:e9:f7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
        Validity
            Not Before: Oct 17 20:09:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=25291d44e8b46a2305f979db18e375b299e1d9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:e8:c1:f9:06:26:bc:25:6e:47:e3:04:4f:
                    d2:bd:99:8d:86:3e:1a:34:f7:45:3c:c1:b3:54:7e:
                    ec:8d:0e:5c:f2:db:07:19:15:65:f5:57:fa:59:86:
                    7a:3d:b9:37:a9:a2:c3:fb:45:c9:a2:67:4a:af:86:
                    32:f6:9f:cf:24:97:06:3c:f6:dc:43:a6:eb:d2:f8:
                    98:b6:71:cd:28:5a:57:1d:8c:4f:48:d5:b6:88:56:
                    9d:b6:e4:7d:79:7a:04:8d:2b:1a:8d:14:39:09:50:
                    18:4d:44:a1:31:e7:44:10:01:5e:de:e2:65:4c:b4:
                    e0:14:66:91:39:90:77:19:a7:06:89:f0:52:68:cf:
                    aa:0a:54:e9:4d:be:4e:1b:83:a3:ea:15:ff:a6:d2:
                    e5:44:f4:29:fd:7a:55:8c:8f:6b:db:e9:35:20:d1:
                    2a:a4:5e:e5:38:96:6e:83:32:eb:e7:6f:b3:17:9d:
                    45:06:5b:86:9f:90:a1:5c:fd:32:37:7d:ee:26:33:
                    ca:1d:f8:15:da:86:a8:b4:77:59:fb:da:fd:ca:10:
                    72:e0:35:56:84:fa:5c:bc:67:93:1e:f5:31:64:31:
                    d1:73:ab:da:17:d4:e8:06:68:e0:56:cf:96:5f:3b:
                    e5:17:96:2d:d3:2a:3d:02:ce:05:15:57:2d:d8:30:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:29:1D:44:E8:B4:6A:23:05:F9:79:DB:18:E3:75:B2:99:E1:D9:B2
            X509v3 Authority Key Identifier:
                keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JSkdROi0aiMF-XnbGON1spnh2bI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:dfc3::/32
                  2a0e:dfc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:9d:74:35:24:51:51:d0:59:8d:94:1e:51:7d:8a:98:05:64:
         5e:01:d9:b5:66:96:35:87:44:c2:03:b7:8a:3f:5a:e0:d8:d3:
         13:e6:26:79:0f:3f:4f:87:f8:98:9a:33:b2:7c:52:4d:cc:8f:
         0e:bc:8f:49:29:f5:ce:0b:ac:07:6e:46:36:cc:e3:da:96:1b:
         10:06:ee:27:cf:2a:3a:6d:a9:78:7a:d1:ac:a4:71:05:96:09:
         3b:b6:94:89:b7:91:77:45:c0:f8:d3:d0:90:af:39:09:b5:60:
         83:45:dc:e3:21:6d:4c:70:c1:83:f6:e5:1b:a7:aa:37:a2:6e:
         e8:68:1e:26:9e:19:07:b6:cf:39:fd:d4:38:a5:a1:a7:b1:87:
         5b:f2:b5:15:34:d6:7b:16:51:63:27:38:1e:b5:ff:e6:7c:d3:
         fe:3c:77:ff:bf:3e:8a:6c:03:63:90:d9:be:2e:a8:e0:5a:89:
         05:32:70:c5:ad:75:54:04:5d:8e:a1:07:44:4a:cf:fa:bd:e2:
         2f:77:32:ef:1b:24:ec:a1:e2:ea:be:99:a0:dd:71:b9:73:d0:
         b3:91:43:ed:91:a6:2f:07:ff:08:c3:31:59:7d:ce:e6:49:d8:
         5c:c4:11:9e:e5:49:53:cd:da:32:66:0b:9e:18:69:13:fa:8f:
         69:5e:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----