Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7f5KipcR7C8N_T2QPe-JigazyaE.roa
File:                     7f5KipcR7C8N_T2QPe-JigazyaE.roa (raw, json)
Hash identifier:          z04apJRrAfkgJGZQXfSDUpBDMMX22hozUYDAAcbQbUs=
Subject key identifier:   ED:FE:4A:8A:97:11:EC:2F:0D:FD:3D:90:3D:EF:89:8A:06:B3:C9:A1
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       0191CC00AF6D093D9D8139B4CB1498CAA46C
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7f5KipcR7C8N_T2QPe-JigazyaE.roa
Signing time:             Sat 07 Sep 2024 10:21:22 +0000
ROA not before:           Sat 07 Sep 2024 10:21:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213220
IP address blocks:        2a0a:e2c0::/29 maxlen: 32

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 07:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:cc:00:af:6d:09:3d:9d:81:39:b4:cb:14:98:ca:a4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Sep  7 10:21:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=edfe4a8a9711ec2f0dfd3d903def898a06b3c9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:eb:90:5d:c5:5b:b4:33:fe:ec:59:8a:2c:
                    2b:99:97:14:96:94:47:ca:77:b9:3f:62:08:44:34:
                    42:22:d2:11:fa:89:ee:e4:9c:0e:a5:df:b1:a1:ec:
                    3f:82:62:2d:76:f0:74:74:9e:50:ab:90:c1:93:60:
                    ca:5a:bd:d3:eb:b8:b6:1a:4e:4f:cc:14:d8:25:45:
                    b5:d0:a1:90:63:3a:63:55:a3:c3:8b:79:9f:87:ab:
                    6c:49:89:f3:e9:7a:c7:6c:b6:3f:2b:52:78:81:23:
                    85:30:a3:94:4e:7e:80:d9:77:0d:d0:0f:6f:46:18:
                    06:86:cf:2c:4c:35:79:70:50:81:9d:3f:3a:85:13:
                    fc:c1:68:65:1c:cd:98:6e:d1:7f:86:dd:19:1a:6a:
                    ce:6b:77:38:63:f4:43:32:dd:94:d2:77:d5:4b:87:
                    d9:61:17:22:d1:79:1f:22:d5:07:e7:8c:7d:6f:00:
                    f6:6c:d6:40:33:c9:2a:6e:db:ff:0b:cf:4a:14:94:
                    10:50:d4:3f:cb:40:96:49:5f:97:ca:0b:6f:53:3d:
                    db:9a:58:3b:54:82:ca:b5:63:bf:d4:89:f6:d8:b6:
                    a5:68:a3:1e:13:1d:9d:66:a0:29:23:3e:68:fb:86:
                    b6:75:69:cc:5f:d2:8a:be:ff:1a:35:a1:41:34:ba:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:4A:8A:97:11:EC:2F:0D:FD:3D:90:3D:EF:89:8A:06:B3:C9:A1
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7f5KipcR7C8N_T2QPe-JigazyaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:e2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:27:ef:fa:f8:1f:15:1b:92:ed:32:93:8d:fc:03:ba:0a:
         c9:b6:2d:6c:a9:45:50:ad:f9:ae:b6:55:5f:1c:20:f4:20:90:
         67:a6:ba:b2:26:c2:a7:9c:25:74:d5:4a:0b:3c:d6:97:4d:4f:
         8f:55:1b:73:5f:2d:55:f3:52:b1:77:b7:c1:27:82:ba:12:ab:
         4e:e0:f5:77:64:97:57:86:88:f5:1d:dc:5c:d2:90:7d:1b:fb:
         30:c8:7d:f8:e7:3a:6f:11:b4:9e:05:fb:fb:3e:97:95:ed:30:
         8d:ad:40:ca:07:29:32:2d:88:ef:06:4e:7f:5a:da:ce:fb:e4:
         26:b8:c8:ab:f6:e4:0c:6a:40:16:6a:27:9a:7c:dd:de:cc:e6:
         e2:e7:0e:61:70:03:37:bf:90:8a:95:56:34:26:b9:4a:82:04:
         58:fd:1c:89:6f:ca:25:d6:72:e4:26:dd:87:21:9e:36:83:02:
         e2:48:be:f7:4c:d5:ba:47:e0:e4:f9:23:0b:51:48:23:9f:42:
         c6:4e:80:72:2f:d3:fd:78:20:b2:9d:6b:63:81:d7:3f:2d:17:
         3b:ba:a7:4f:99:7d:0e:db:55:f0:98:a9:af:b8:83:9c:70:0c:
         e7:5e:d0:91:6e:4e:59:5c:db:c1:46:a2:ed:80:6c:76:02:6f:
         dd:ed:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----