Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7DMTJU6-ZA2owoWsQ-s3lN_67PE.roa
File:                     7DMTJU6-ZA2owoWsQ-s3lN_67PE.roa (raw, json)
Hash identifier:          ABmtTIby6VOfJAywGCWhfeSRCoTQvfyqhY9nR+3EUHs=
Subject key identifier:   EC:33:13:25:4E:BE:64:0D:A8:C2:85:AC:43:EB:37:94:DF:FA:EC:F1
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       019285465579D153CD6442881B26E4077D7F
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7DMTJU6-ZA2owoWsQ-s3lN_67PE.roa
Signing time:             Sun 13 Oct 2024 09:47:11 +0000
ROA not before:           Sun 13 Oct 2024 09:47:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214943
IP address blocks:        2a14:7e00::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 19:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:85:46:55:79:d1:53:cd:64:42:88:1b:26:e4:07:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Oct 13 09:47:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec3313254ebe640da8c285ac43eb3794dffaecf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:fa:f2:3f:33:11:55:00:e3:89:8d:f8:7c:
                    13:7b:52:92:e1:98:83:2a:a7:9d:b8:91:df:8a:ba:
                    3a:0f:69:a7:06:53:e2:0d:70:2d:1f:3d:12:06:38:
                    80:28:8a:19:30:eb:ae:ae:2c:26:8c:72:d9:40:5a:
                    14:82:6a:9b:3d:ee:d1:64:aa:32:b7:32:db:2b:55:
                    a4:4f:3e:d3:68:bc:d6:ec:6a:32:49:df:cc:06:e1:
                    f5:38:15:6f:80:03:92:11:4d:cb:bd:07:ae:0c:13:
                    9f:b1:19:93:fe:dc:35:26:6d:cc:35:38:27:cd:f2:
                    b8:1e:4a:9a:ee:a0:e0:1c:b5:a5:15:e9:ee:07:7b:
                    77:61:8e:c4:91:db:e2:f5:66:5d:52:98:f8:1b:48:
                    6c:fe:6a:92:c4:03:d1:f4:fe:56:60:fe:43:3c:1b:
                    2a:d9:83:60:50:82:b3:45:83:07:4e:4b:da:6d:7c:
                    bb:e4:2e:5b:14:de:05:a9:89:46:88:a8:e7:a7:90:
                    ec:2d:6b:3e:0b:0f:ef:74:29:17:d0:b1:e8:0a:28:
                    4b:02:9d:4c:7c:c6:9d:72:2e:e0:2e:64:fb:df:af:
                    51:15:6a:77:69:55:35:a1:a2:70:69:d5:4d:d9:0e:
                    62:a8:19:fb:4d:92:2c:49:4b:f5:43:f5:c6:85:b8:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:33:13:25:4E:BE:64:0D:A8:C2:85:AC:43:EB:37:94:DF:FA:EC:F1
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7DMTJU6-ZA2owoWsQ-s3lN_67PE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:82:93:65:94:a6:3e:a2:50:ee:16:da:45:d1:1b:31:af:
         cf:35:5d:ed:f4:2a:19:9f:dc:31:93:f4:8b:6b:7b:62:1a:83:
         29:3a:b0:1d:15:35:d4:cc:6a:14:e3:9f:95:32:ae:0a:4f:a9:
         ff:b8:12:c3:b4:a2:05:a2:ef:15:6e:ec:da:17:43:b4:c3:86:
         4d:2f:a0:c7:8b:3e:42:5a:3d:5d:67:cc:e2:e4:34:49:ee:56:
         ae:16:bc:dd:cf:c9:e2:cd:a2:68:7d:ac:be:be:6d:16:ba:3f:
         fe:8a:83:4f:d2:6f:eb:8a:30:3a:ba:0a:e7:48:22:32:f6:47:
         c4:bb:dd:f0:a1:61:2b:ff:6e:af:25:b7:1d:60:8d:5c:f4:aa:
         26:5d:bb:b1:70:8d:4c:ef:dd:3d:9e:0e:18:b9:08:0e:ea:12:
         2a:6f:94:e1:0b:2c:03:73:68:27:6c:6e:0e:5b:13:a1:fc:45:
         c5:7f:98:e1:ad:7b:6c:6d:33:fb:25:b2:f6:48:1b:e7:38:10:
         7e:c3:9d:f8:1e:f7:5f:f8:4e:75:da:cc:82:d9:c6:64:d6:d2:
         75:ff:0f:b6:c4:90:5c:17:02:4a:2b:ee:c6:fb:15:d8:c5:b7:
         8f:9c:bb:ed:60:66:18:d2:2a:79:59:a6:1b:3f:1e:5e:5b:b4:
         11:d2:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----