Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/4b45-27HUCXtUJH72BfKp6F3vtU.roa
File:                     4b45-27HUCXtUJH72BfKp6F3vtU.roa (raw, json)
Hash identifier:          jHyvI3aY56HJN4lSlGl6TJhss7jxzLKU06iEDCpMhLk=
Subject key identifier:   E1:BE:39:FB:6E:C7:50:25:ED:50:91:FB:D8:17:CA:A7:A1:77:BE:D5
Certificate issuer:       /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial:       01913DC19F41CA66F5F690DBDEF78B3E2218
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/4b45-27HUCXtUJH72BfKp6F3vtU.roa
Signing time:             Sat 10 Aug 2024 19:26:24 +0000
ROA not before:           Sat 10 Aug 2024 19:26:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204908
IP address blocks:        185.124.13.0/24 maxlen: 24
                          2a03:9000::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 09:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:3d:c1:9f:41:ca:66:f5:f6:90:db:de:f7:8b:3e:22:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
        Validity
            Not Before: Aug 10 19:26:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e1be39fb6ec75025ed5091fbd817caa7a177bed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:66:18:b3:57:59:fc:ea:55:0b:e0:8e:c4:
                    17:db:85:8e:e8:fc:2a:f2:a5:00:0e:72:92:13:89:
                    7e:c1:15:22:d6:a2:db:12:10:71:bd:d4:5e:e0:9b:
                    0c:67:49:c0:95:f5:a3:17:d9:d6:1c:4b:9d:6f:93:
                    32:67:bf:72:9b:6b:72:7c:75:06:41:3e:8b:21:6c:
                    89:34:85:f4:07:4d:66:a3:8c:dc:80:07:26:1d:b1:
                    99:0e:00:82:c7:d3:42:bd:84:fa:9d:d2:09:7a:55:
                    ba:7a:31:85:98:86:8a:23:fc:97:c8:d9:7c:0e:a7:
                    e0:23:5b:9d:a0:4a:3f:85:33:69:b0:84:e9:2b:39:
                    18:c1:6c:64:a7:17:f6:c3:76:48:e7:57:be:2d:0b:
                    05:f2:61:50:1d:d5:76:79:fe:2c:3c:4d:b7:fa:97:
                    f9:bf:56:0a:ec:7d:71:ba:60:a9:ee:ef:ab:95:ae:
                    31:45:43:24:08:24:75:3a:42:ee:af:35:ce:01:79:
                    e9:b7:67:30:70:90:f0:13:25:e8:6c:75:3c:52:49:
                    37:81:2f:cd:16:62:ef:75:9c:d2:33:c4:84:9b:52:
                    5b:87:ec:32:b3:3a:d1:01:cd:c5:ed:c2:c0:68:5b:
                    c6:95:4e:2c:44:9a:a7:2a:48:1c:c0:7a:03:42:32:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BE:39:FB:6E:C7:50:25:ED:50:91:FB:D8:17:CA:A7:A1:77:BE:D5
            X509v3 Authority Key Identifier:
                keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/4b45-27HUCXtUJH72BfKp6F3vtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.13.0/24
                IPv6:
                  2a03:9000::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:dd:3f:fe:38:6b:6f:a9:bc:f9:75:67:23:75:14:2f:cb:f4:
         63:52:b6:f2:88:51:ad:42:3b:81:ac:b6:0a:b5:5a:14:bf:e0:
         a1:45:ce:dd:32:48:b6:b8:98:7c:e4:1f:37:12:26:2f:fd:c5:
         9f:c5:8f:16:17:6d:d7:09:f5:e0:33:18:4d:9f:76:86:26:ea:
         62:fb:cd:ae:d4:c8:38:21:66:ec:3f:f3:e5:44:7f:27:46:3f:
         e6:a6:93:57:6d:27:d8:12:cf:ef:e5:ec:52:e8:9a:bf:53:35:
         40:90:52:77:2b:ff:0c:6b:8b:3e:6c:6c:92:cc:2e:be:ed:ec:
         cd:44:b9:ff:d1:51:fd:41:d1:54:c8:1b:f8:c2:77:2d:73:ee:
         04:b7:bc:34:10:a7:f8:f9:ab:5b:ac:ce:0b:4e:c3:11:8a:ba:
         f1:c7:76:ba:21:57:5a:53:35:2d:e4:23:57:fc:e6:90:7e:cf:
         09:f8:77:b6:52:46:a2:22:6f:93:39:6a:53:5a:5d:c2:bb:ef:
         ae:5e:0a:2c:06:84:a7:3c:7c:5e:e3:c8:1c:9d:77:b3:99:b0:
         6f:78:90:c3:53:bb:a1:a3:b9:f7:c8:68:51:3e:35:97:dd:9e:
         45:4d:fa:b9:2a:5e:d7:fa:c5:c4:37:94:f8:aa:73:74:8b:58:
         9d:68:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----