Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa
File:                     vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa (raw, json)
Hash identifier:          FUz/4h/Ris/QldTOuqdypYkQckoce3gMhmsV1q8ON3Y=
Subject key identifier:   BE:EE:E0:9D:53:AD:0F:3A:AD:D0:FA:DD:08:D8:18:FB:D2:6A:A2:A1
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018CC4256453CFFCCFDEE236D39F9E0FC3A9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa
Signing time:             Mon 01 Jan 2024 08:30:34 +0000
ROA not before:           Mon 01 Jan 2024 08:30:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198231
IP address blocks:        2a0d:77c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 09:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:64:53:cf:fc:cf:de:e2:36:d3:9f:9e:0f:c3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 08:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=beeee09d53ad0f3aadd0fadd08d818fbd26aa2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:aa:86:9d:fe:e3:52:37:70:f0:4b:f4:32:
                    5c:b9:39:46:7a:86:b4:70:a2:36:96:7d:5d:d0:fe:
                    41:9e:55:3b:f5:67:8e:1e:03:bb:90:7e:ef:aa:76:
                    2f:c2:cf:5b:49:1a:77:cb:ec:61:a2:f1:c4:3e:72:
                    ee:f1:c8:d3:72:dd:68:6e:a6:64:19:43:cf:02:8c:
                    c9:e3:5d:69:ec:ec:77:12:22:f1:bc:93:c7:ae:16:
                    74:26:3c:74:e8:94:41:27:0d:c6:e5:fa:07:a0:b8:
                    83:79:b4:ca:e2:09:62:52:33:d3:54:27:53:2a:2a:
                    8a:ad:5e:7e:56:c8:01:88:f1:db:6c:65:ef:45:4a:
                    0d:e5:59:9e:6b:1f:8b:1e:9a:2c:03:b4:03:6c:f4:
                    df:5a:dc:18:14:01:ac:e5:c5:8c:52:2d:99:27:7b:
                    70:7e:17:c3:c9:b9:f0:f7:4b:a3:86:1b:5e:5d:05:
                    9c:59:75:65:97:65:7d:9f:d1:5f:79:eb:ef:32:bc:
                    ef:a6:b0:3b:e0:23:92:0c:10:b5:36:84:46:e2:aa:
                    7d:b9:ff:82:23:f5:42:ad:44:81:8f:db:89:8c:53:
                    9e:af:ab:a7:21:8d:78:63:a8:66:fa:4d:0e:93:12:
                    33:13:8f:ff:55:8a:10:ea:94:32:03:78:19:11:f8:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:E0:9D:53:AD:0F:3A:AD:D0:FA:DD:08:D8:18:FB:D2:6A:A2:A1
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:77c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:79:1b:7f:23:a0:d4:d3:db:5d:88:39:b3:d8:7c:3a:5d:96:
         44:40:bc:c7:45:11:52:9b:56:50:8c:bc:24:b8:52:87:75:f3:
         fb:08:79:43:6b:1e:60:0f:ff:c5:ad:14:8f:05:87:f9:de:4d:
         8a:bd:cd:51:d0:08:a2:6d:9f:36:6b:f9:57:dd:47:8d:f6:75:
         c6:81:9a:6d:0e:36:96:2c:07:6a:43:21:46:ae:a2:7c:3f:19:
         82:2e:2f:51:1e:fd:e3:90:c7:df:7a:da:ff:2c:33:6b:cb:ee:
         5e:ea:f8:c4:6c:65:e4:a0:7a:18:51:c5:74:64:8b:ef:55:ad:
         3d:d2:4b:ac:c6:10:1e:77:65:69:14:8d:02:d8:f6:c7:fc:d1:
         ff:df:59:bb:39:b9:9e:40:b8:e1:ba:26:3b:33:e1:c2:fa:c2:
         f1:9f:27:72:22:4b:af:a5:6c:08:3d:d0:ec:fd:c0:b9:41:56:
         ab:96:61:5b:a9:7d:e9:33:47:a2:bf:27:f3:fd:10:03:01:d1:
         6a:66:a9:f7:10:2a:c6:38:66:bd:ce:1c:36:67:79:f9:16:69:
         78:3c:00:35:de:ec:33:a9:ec:a9:87:88:60:95:a3:43:51:a3:
         fb:49:ba:41:b7:77:0a:31:80:54:d7:47:e4:82:c5:02:cb:d9:
         5a:5f:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----