Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RHfmzUz1zQkIOUq5xcqlR1ZcfW4.roa
File:                     RHfmzUz1zQkIOUq5xcqlR1ZcfW4.roa (raw, json)
Hash identifier:          MVVkXWkn0n17RN9qHXOQHljHvqCOIVP9MjxKr+cffcc=
Subject key identifier:   44:77:E6:CD:4C:F5:CD:09:08:39:4A:B9:C5:CA:A5:47:56:5C:7D:6E
Certificate issuer:       /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial:       0192C34B7C7A35EC703375ACC452F9C059C0
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RHfmzUz1zQkIOUq5xcqlR1ZcfW4.roa
Signing time:             Fri 25 Oct 2024 10:49:17 +0000
ROA not before:           Fri 25 Oct 2024 10:49:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0e:dfc0::/32 maxlen: 32
                          2a0e:dfc3::/32 maxlen: 32
                          2a0e:dfc5::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 10:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:c3:4b:7c:7a:35:ec:70:33:75:ac:c4:52:f9:c0:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
        Validity
            Not Before: Oct 25 10:49:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4477e6cd4cf5cd0908394ab9c5caa547565c7d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:3b:07:4f:f3:8b:7d:2c:e2:c6:35:96:a7:
                    3f:f2:39:2a:a2:7a:c9:00:b3:7b:11:93:11:f9:c3:
                    53:fd:3d:61:23:18:66:d2:4c:bd:25:17:4d:b4:30:
                    b0:71:91:7d:d9:9b:ed:c4:84:f8:c3:50:e4:e6:26:
                    6d:a5:9d:21:c2:ff:a4:73:31:4b:6c:6f:13:f7:a6:
                    9b:10:74:72:23:79:f9:dc:fc:80:eb:9c:df:cf:69:
                    5c:30:7a:ae:66:a0:c6:8f:3c:77:16:66:7b:76:09:
                    1e:cd:cf:e1:0a:77:df:67:d9:24:19:92:a3:a1:bc:
                    58:ae:a6:41:8d:e2:d9:03:12:e8:72:6c:de:19:c7:
                    72:2f:3e:aa:80:34:a2:45:8b:c7:3a:09:98:41:c6:
                    7a:8b:ea:91:db:99:9c:3f:b1:81:64:f8:46:90:ca:
                    44:67:20:67:90:e1:39:0d:db:0c:7f:d6:9a:74:02:
                    3a:8b:da:c6:02:93:96:1c:56:b9:b4:8d:a4:04:c1:
                    99:0d:ac:db:22:53:2f:f7:bb:93:87:28:0b:98:15:
                    b8:99:09:f2:61:3d:43:18:82:90:0a:42:2f:94:a9:
                    a7:c4:b0:b1:cf:4a:b4:05:e6:cd:be:42:cb:97:55:
                    b5:3f:f7:0a:3e:27:7c:26:db:5d:44:6c:9f:93:9a:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:77:E6:CD:4C:F5:CD:09:08:39:4A:B9:C5:CA:A5:47:56:5C:7D:6E
            X509v3 Authority Key Identifier:
                keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RHfmzUz1zQkIOUq5xcqlR1ZcfW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:dfc0::/32
                  2a0e:dfc3::/32
                  2a0e:dfc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:86:fb:2a:46:17:18:61:8e:17:a0:10:43:c5:94:a5:07:d4:
         48:8c:ea:71:4a:11:15:a6:49:36:59:ed:19:b8:fc:50:39:98:
         03:be:09:94:74:e0:64:52:77:8f:7f:24:c4:8d:58:2d:1d:67:
         7c:13:b4:c7:88:1e:01:4c:08:67:6a:36:6c:8b:53:6d:f2:fd:
         f7:0d:09:b8:24:da:c1:4c:d1:00:34:f5:4c:f6:bb:35:c4:be:
         4b:11:17:6e:7e:5d:29:c5:ea:45:41:82:50:fe:57:b2:0d:13:
         81:81:35:e4:6e:31:da:e3:e4:37:24:6d:32:f0:8a:60:b2:45:
         e8:3d:5a:63:14:77:dd:82:b5:df:2a:ac:d1:4a:79:d5:28:7f:
         bc:d7:bf:49:ec:a5:5d:7d:19:9e:ac:39:df:ce:b3:13:f8:ed:
         b7:06:02:38:5b:8e:93:b1:61:d1:a2:e5:81:94:e2:d8:b9:7a:
         26:52:8d:83:33:6a:19:b8:41:19:55:47:12:c4:1c:2e:58:cc:
         a7:df:c7:65:32:3c:c1:3f:28:ca:b6:1b:11:4e:7c:d7:33:bb:
         f8:60:df:f1:4d:81:9a:5c:cf:47:67:df:b2:f7:d7:d4:46:c5:
         d4:87:db:83:1c:24:9e:e2:39:ce:fd:ac:39:6c:5c:b9:b6:e0:
         78:be:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----