Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Ou-JFzs1StFaiZntkLZMF71JQDo.roa
File:                     Ou-JFzs1StFaiZntkLZMF71JQDo.roa (raw, json)
Hash identifier:          maHI14hyHRv+CpRoQ1DzKhqk0VqfaPqhdZcYNs5LOlY=
Subject key identifier:   3A:EF:89:17:3B:35:4A:D1:5A:89:99:ED:90:B6:4C:17:BD:49:40:3A
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       0191D89329A9EDA0F99E09E238D3016C2AB6
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Ou-JFzs1StFaiZntkLZMF71JQDo.roa
Signing time:             Mon 09 Sep 2024 20:56:48 +0000
ROA not before:           Mon 09 Sep 2024 20:56:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214967
IP address blocks:        2a12:28c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 11:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d8:93:29:a9:ed:a0:f9:9e:09:e2:38:d3:01:6c:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Sep  9 20:56:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3aef89173b354ad15a8999ed90b64c17bd49403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:ad:ac:27:64:fc:46:e9:62:12:37:bf:b6:
                    d7:e3:e0:42:b0:6d:a1:e4:f0:36:09:2a:c4:1c:44:
                    ed:5f:18:5d:39:14:d4:44:c2:75:89:78:c1:ad:ff:
                    2a:32:8d:92:01:b5:20:73:94:d0:d7:06:47:5d:92:
                    de:9c:ea:8a:ee:bb:f4:3a:6e:17:ba:a0:7f:a6:89:
                    91:02:91:0d:b8:67:75:2c:c1:d6:3c:20:c4:b7:4c:
                    c4:66:b9:f6:f0:86:29:e1:79:48:42:0d:82:cc:7a:
                    5d:48:9a:79:cf:44:2a:4d:3b:f8:79:8c:7a:b0:c8:
                    5b:5e:3d:a5:4a:d8:fd:65:e4:b5:81:6e:62:2a:e8:
                    9a:66:ed:27:39:bc:b6:ab:18:c3:9c:1d:19:67:1d:
                    27:ce:58:1f:a6:ad:a9:0a:2c:20:6a:ce:80:bb:da:
                    b8:91:94:e6:ac:33:6f:95:8a:9a:62:09:a0:c1:e9:
                    5f:9a:5a:85:f8:d2:a3:67:c5:f9:cd:a2:69:46:bd:
                    6b:26:b1:8b:8b:b7:b1:f0:5f:7a:dd:b5:fe:2f:fa:
                    dc:3b:ee:44:bf:5b:6a:31:3a:e8:ca:75:3f:15:3c:
                    dc:26:1e:60:0c:fc:20:ae:e9:62:0c:1c:b0:75:c3:
                    24:b3:e2:c9:dc:22:f5:f2:d5:7d:2f:5b:cb:57:a7:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:89:17:3B:35:4A:D1:5A:89:99:ED:90:B6:4C:17:BD:49:40:3A
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Ou-JFzs1StFaiZntkLZMF71JQDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:28c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:de:77:85:19:d6:be:bd:9d:1c:ab:be:57:ca:d9:06:8c:bf:
         0e:a9:60:b4:ea:82:cb:ef:23:cf:fb:d4:ba:70:9c:a0:22:02:
         be:8d:c2:81:c8:8a:bc:cd:d4:6f:04:83:4e:b6:6c:e7:fe:bc:
         3f:85:bc:0a:14:b3:be:59:93:b8:d4:c3:2c:97:2c:e3:48:da:
         47:ee:68:cf:b2:5f:f9:47:d9:4b:bc:c1:dc:8a:02:13:5d:e7:
         96:43:35:d4:1d:10:0b:9a:eb:1f:41:fb:c3:7c:57:1b:f4:d6:
         00:39:1b:0f:02:5a:32:65:10:6c:b4:02:80:1a:ed:2d:47:f4:
         db:42:2a:8d:85:8a:b8:3e:f0:9f:c9:f5:7e:70:e5:d7:c1:96:
         64:37:39:35:a1:d7:cc:2b:7e:02:5e:4d:11:df:39:45:73:ed:
         c5:9d:22:ff:05:9c:9c:27:8a:c6:f9:87:48:95:4e:9f:20:77:
         38:b7:d3:76:69:0f:ed:00:54:c9:6c:8f:ac:68:4a:67:5c:a0:
         c6:ff:6b:5e:b7:c0:6d:23:e7:0f:ca:09:94:8a:76:d8:81:53:
         6b:8f:9b:85:63:bf:54:8c:c2:e9:d8:05:c9:bd:38:df:b2:d6:
         2f:bf:a1:2c:c1:f6:b2:46:a2:f3:bb:a8:df:1e:74:e0:33:1b:
         28:81:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----