Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/Tad5DFvWh8EeemOiTklD_ycdHyY.roa
File:                     Tad5DFvWh8EeemOiTklD_ycdHyY.roa (raw, json)
Hash identifier:          4RJyEk9iq8g/8/3SK52M9kRamFBGGuA12iSCYy70ebk=
Subject key identifier:   4D:A7:79:0C:5B:D6:87:C1:1E:7A:63:A2:4E:49:43:FF:27:1D:1F:26
Certificate issuer:       /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial:       018FE75D141AB61C26B8DE03714ED4E38AE9
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/Tad5DFvWh8EeemOiTklD_ycdHyY.roa
Signing time:             Wed 05 Jun 2024 07:46:27 +0000
ROA not before:           Wed 05 Jun 2024 07:46:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214865
IP address blocks:        62.169.139.0/24 maxlen: 24
                          2a14:5140:1::/48 maxlen: 48
                          2a14:5140:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 08:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e7:5d:14:1a:b6:1c:26:b8:de:03:71:4e:d4:e3:8a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
        Validity
            Not Before: Jun  5 07:46:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4da7790c5bd687c11e7a63a24e4943ff271d1f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:4e:51:0c:e9:11:b7:9d:f8:c2:1b:29:a8:
                    15:cd:7f:db:48:51:51:1c:12:85:ac:77:6c:f7:58:
                    d5:93:cd:a2:da:d7:ec:35:d6:9a:83:60:6e:07:e7:
                    b4:15:e6:36:f3:a1:b3:72:c0:7b:82:d3:41:ae:c9:
                    c9:29:1c:1d:c5:7f:d4:74:95:0a:b5:cd:30:14:2d:
                    ec:e2:62:82:49:0a:5d:6a:66:e5:7d:27:c5:40:a1:
                    52:8c:30:d7:2f:6c:32:8d:28:0f:ee:8d:6c:86:45:
                    d2:dc:97:ed:54:e5:97:2a:3e:18:dc:c7:e7:5f:c1:
                    21:29:b2:63:94:ff:78:5a:02:17:cf:bc:45:57:2f:
                    49:5f:7b:21:c7:2d:a0:58:36:df:5f:3a:ea:3f:84:
                    47:7d:07:bc:c9:ed:1a:12:e1:97:7c:55:ba:74:9b:
                    f9:52:d9:93:55:42:73:e1:9a:94:91:9c:96:08:30:
                    4b:e3:cc:55:7d:3b:57:36:09:b2:43:75:4a:bc:a0:
                    7b:cd:49:a1:dd:28:8b:e1:8b:bc:f5:56:65:4b:88:
                    0c:35:7e:c2:ff:70:16:b9:b0:5c:98:9c:2e:36:fa:
                    30:c8:7c:a3:4f:51:8d:01:1f:f4:53:34:9a:ed:a1:
                    6c:4a:c2:7c:6b:f4:0b:75:33:8a:7a:50:3a:44:ef:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A7:79:0C:5B:D6:87:C1:1E:7A:63:A2:4E:49:43:FF:27:1D:1F:26
            X509v3 Authority Key Identifier:
                keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/Tad5DFvWh8EeemOiTklD_ycdHyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.139.0/24
                IPv6:
                  2a14:5140:1::-2a14:5140:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         01:5e:75:14:96:05:b3:6a:78:39:46:a7:fe:53:f6:97:b8:88:
         9e:77:d9:fe:f0:ec:8c:cb:d8:2a:33:09:f6:d4:0c:3f:7c:e7:
         f0:60:f5:0d:4e:76:25:eb:0c:fa:69:f3:e9:3e:75:88:22:c4:
         a3:01:91:88:8f:72:21:f7:9e:c0:d4:0f:da:d7:17:79:9c:f9:
         d9:f2:f9:c0:09:6a:1c:76:ac:c8:ba:e7:56:b3:a9:84:88:be:
         a9:d5:51:9c:1b:93:8b:2e:16:5c:7a:9b:f0:0d:f8:a2:10:a6:
         e4:d0:28:b6:89:9e:15:c8:0a:18:28:87:25:ec:48:e5:01:a8:
         2f:03:c2:d0:96:30:c5:bc:cf:25:cb:0d:24:b9:e1:1b:ec:37:
         12:12:2d:e3:f0:ab:3b:59:18:f2:66:4d:a8:51:1c:46:f5:d1:
         4f:cf:19:a1:ef:2b:23:a1:90:7f:1e:a2:ec:82:06:a8:6b:ef:
         65:35:b8:b5:d8:12:2d:4d:f6:07:e0:44:95:3e:d0:2f:9d:1b:
         8d:59:18:6b:b0:f3:e3:d6:75:21:2d:4b:5d:f8:5d:9a:5a:8c:
         ae:dc:d6:c9:98:3d:0a:98:8f:55:ae:16:ac:06:e5:a1:63:9e:
         b2:8e:8c:cc:43:50:67:d3:d2:f0:57:cf:2f:b6:70:de:77:b7:
         3b:5e:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----