Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/K1ISssoqoDhMoE67grfj1l_mStw.roa
File:                     K1ISssoqoDhMoE67grfj1l_mStw.roa (raw, json)
Hash identifier:          HqlOiCY370OFPVlKtn1niI4f8zrfsJu/GtVrGyrL+TY=
Subject key identifier:   2B:52:12:B2:CA:2A:A0:38:4C:A0:4E:BB:82:B7:E3:D6:5F:E6:4A:DC
Certificate issuer:       /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial:       01927D4BCACF2E15ABDCE60E959664C715B1
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/K1ISssoqoDhMoE67grfj1l_mStw.roa
Signing time:             Fri 11 Oct 2024 20:36:11 +0000
ROA not before:           Fri 11 Oct 2024 20:36:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35196
IP address blocks:        2a0e:dfc0::/32 maxlen: 32
                          2a0e:dfc3::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 19:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:7d:4b:ca:cf:2e:15:ab:dc:e6:0e:95:96:64:c7:15:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
        Validity
            Not Before: Oct 11 20:36:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2b5212b2ca2aa0384ca04ebb82b7e3d65fe64adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:19:36:27:dd:1c:4c:77:6c:59:92:0c:1f:ec:
                    88:2d:78:63:c1:29:20:b9:7b:fb:e1:a3:06:73:f0:
                    54:52:25:a1:31:12:3b:3a:03:4a:4d:86:88:9b:04:
                    e2:4e:a0:f2:06:aa:08:df:13:86:e4:ab:dd:38:6f:
                    03:18:87:7e:ff:b4:4f:17:e8:6a:dc:87:e9:62:10:
                    41:38:7e:e2:c4:b3:4a:76:ac:82:7d:d3:3d:bf:eb:
                    f1:77:5b:dd:96:69:39:5b:2b:c3:62:29:ac:be:2d:
                    ee:ad:ad:4d:ad:61:0b:40:02:00:9d:53:3d:27:9e:
                    27:fb:32:c7:5d:bf:75:ac:80:c6:08:b0:0c:f1:26:
                    6b:c1:ae:13:84:c8:ae:d1:03:30:34:d1:05:93:a9:
                    a6:a0:5c:3f:40:16:3f:96:ac:9a:99:f2:a8:63:c9:
                    96:51:69:9c:0e:f0:c9:d4:90:39:66:45:c5:1e:f4:
                    e1:55:10:ba:31:90:e7:23:45:2d:dc:f6:65:23:f5:
                    f0:57:64:56:a5:d4:ac:9d:d6:5e:13:93:2b:e0:79:
                    73:08:ff:83:1d:37:35:b0:b2:e7:37:58:7d:b5:98:
                    02:e3:9f:a9:16:ba:2e:37:7f:8e:4a:91:8c:e4:1b:
                    18:b6:24:76:ae:cf:a7:1e:4b:7b:b4:22:d5:79:a6:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:12:B2:CA:2A:A0:38:4C:A0:4E:BB:82:B7:E3:D6:5F:E6:4A:DC
            X509v3 Authority Key Identifier:
                keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/K1ISssoqoDhMoE67grfj1l_mStw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:dfc0::/32
                  2a0e:dfc3::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:27:e4:7b:5e:b2:ed:d1:79:09:ad:3d:8c:99:56:4d:92:
         24:a1:fb:76:34:e6:3e:f2:1a:a8:bf:eb:04:58:13:58:e8:f7:
         c0:5e:ae:b0:a8:48:7e:9c:3b:4f:c5:cb:f9:f1:61:de:fa:85:
         04:ec:88:35:00:d0:6d:99:96:37:cd:be:2d:9c:51:99:89:37:
         0f:db:dd:cb:a7:1e:98:b6:32:14:94:a7:6f:33:00:55:55:13:
         19:31:bd:1e:97:e7:8e:34:b8:e7:ad:23:b7:f3:7a:44:cf:c5:
         b9:56:81:0a:1a:c2:1a:62:b4:a4:ec:cc:a8:4d:1d:8d:c9:ba:
         d0:99:f5:e9:43:26:06:b8:f0:a5:87:bf:45:8c:f0:d2:27:6f:
         65:b1:70:93:4d:c2:3e:be:b1:2a:45:cb:e8:aa:c5:9f:68:42:
         c6:e9:33:cc:4a:5b:41:01:52:86:71:4b:16:60:28:8f:3a:e2:
         e7:6c:0e:33:da:5b:72:99:01:f6:a9:79:0c:c9:22:19:75:51:
         63:67:ce:e8:c4:b5:b2:c3:11:13:29:58:5d:09:be:40:58:79:
         dc:d0:aa:a5:96:89:af:a9:b1:75:b3:5a:52:63:89:6b:fb:5d:
         bf:f7:20:49:57:23:27:f1:9d:f9:0e:a3:9b:62:2f:3a:d7:93:
         d4:1a:6e:e4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJ9S8rPLhWr3OYOlZZkxxWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjQxMDExMjAzNjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjUyMTJiMmNhMmFhMDM4NGNhMDRlYmI4MmI3ZTNkNjVmZTY0YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBk2J90cTHdsWZIMH+yILXhjwSkg
uXv74aMGc/BUUiWhMRI7OgNKTYaImwTiTqDyBqoI3xOG5KvdOG8DGId+/7RPF+hq
3IfpYhBBOH7ixLNKdqyCfdM9v+vxd1vdlmk5WyvDYimsvi3ura1NrWELQAIAnVM9
J54n+zLHXb91rIDGCLAM8SZrwa4ThMiu0QMwNNEFk6mmoFw/QBY/lqyamfKoY8mW
UWmcDvDJ1JA5ZkXFHvThVRC6MZDnI0Ut3PZlI/XwV2RWpdSsndZeE5Mr4HlzCP+D
HTc1sLLnN1h9tZgC45+pFrouN3+OSpGM5BsYtiR2rs+nHkt7tCLVeaYU0QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCtSErLKKqA4TKBOu4K349Zf5krcMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvSzFJU3Nzb3FvRGhNb0U2N2dyZmoxbF9tU3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg7fwAMF
ACoO38MwDQYJKoZIhvcNAQELBQADggEBAGlKJ+R7XrLt0XkJrT2MmVZNkiSh+3Y0
5j7yGqi/6wRYE1jo98BerrCoSH6cO0/Fy/nxYd76hQTsiDUA0G2ZljfNvi2cUZmJ
Nw/b3cunHpi2MhSUp28zAFVVExkxvR6X5440uOetI7fzekTPxblWgQoawhpitKTs
zKhNHY3JutCZ9elDJga48KWHv0WM8NInb2WxcJNNwj6+sSpFy+iqxZ9oQsbpM8xK
W0EBUoZxSxZgKI864udsDjPaW3KZAfapeQzJIhl1UWNnzujEtbLDERMpWF0JvkBY
edzQqqWWia+psXWzWlJjiWv7Xb/3IElXIyfxnfkOo5tiLzrXk9QabuQ=
-----END CERTIFICATE-----