Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/ieZqnVsQSj4C-V3bIpYDKT3fb5M.roa
File:                     ieZqnVsQSj4C-V3bIpYDKT3fb5M.roa (raw, json)
Hash identifier:          Ti+ZxbNi7hNha4Sg46yUPB0ybmvdN/mRV7pbl2/EAqg=
Subject key identifier:   89:E6:6A:9D:5B:10:4A:3E:02:F9:5D:DB:22:96:03:29:3D:DF:6F:93
Certificate issuer:       /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial:       018E840949D73987B7370837F6346A95225D
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/ieZqnVsQSj4C-V3bIpYDKT3fb5M.roa
Signing time:             Thu 28 Mar 2024 07:49:45 +0000
ROA not before:           Thu 28 Mar 2024 07:49:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a11:5183::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 14:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:84:09:49:d7:39:87:b7:37:08:37:f6:34:6a:95:22:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
        Validity
            Not Before: Mar 28 07:49:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=89e66a9d5b104a3e02f95ddb229603293ddf6f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:34:44:18:a3:ca:ac:21:33:de:e8:37:bb:
                    ae:e9:92:77:48:0f:ac:7b:1a:0b:15:75:fc:af:06:
                    2f:b2:8c:fb:dc:93:a5:11:8d:dd:0d:fc:ea:74:b8:
                    e0:40:9e:83:65:22:1b:24:9b:b9:5d:ae:e5:5c:ca:
                    65:d4:fd:23:8d:c0:ee:b1:f3:2c:72:cf:12:10:d0:
                    26:ec:d0:8c:d7:8e:34:e8:96:f3:09:a3:2c:45:7f:
                    b1:3d:7b:a9:98:77:91:d8:3c:d3:55:df:42:6e:b2:
                    cd:43:e3:ee:f3:41:0b:c4:96:45:5f:5f:11:a3:96:
                    42:2c:f0:aa:f7:7e:ae:42:eb:ba:1f:b5:a2:e9:0c:
                    a0:51:fa:f3:fc:56:72:07:52:a3:28:f1:74:de:f6:
                    ef:c3:75:f2:e8:43:c3:b2:4e:c1:9a:68:91:24:0f:
                    83:97:a6:ab:65:0d:be:0c:87:0f:c3:21:9f:2f:16:
                    c2:07:cb:86:be:2f:6a:98:b0:f7:c8:e8:38:f0:19:
                    45:42:5c:f5:1e:f9:87:9d:61:b2:2c:0d:59:79:92:
                    e6:f5:cd:71:3d:7f:dd:27:b2:55:4f:b7:e0:65:cf:
                    5f:27:eb:fa:38:ed:6f:ac:68:af:0b:b0:84:5b:52:
                    ba:9a:c1:c3:63:54:53:51:17:9e:a1:0c:c1:18:26:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E6:6A:9D:5B:10:4A:3E:02:F9:5D:DB:22:96:03:29:3D:DF:6F:93
            X509v3 Authority Key Identifier:
                keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/ieZqnVsQSj4C-V3bIpYDKT3fb5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:5183::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:47:47:9d:1d:d1:88:20:9c:1e:81:13:a5:03:1e:37:38:
         fd:5c:69:a3:a4:96:9e:36:c3:de:b4:d1:00:5d:51:2d:51:ac:
         46:28:4b:72:a1:1e:f7:a5:cd:92:28:71:9e:12:2f:5b:f7:1f:
         c0:36:1e:d6:b0:7c:f6:e6:59:fb:cd:ca:ce:47:87:7d:3c:af:
         aa:09:da:e2:99:ed:0f:a2:a9:22:8f:c5:ad:cc:80:9e:7a:ca:
         4e:2b:57:fc:47:34:3c:4d:98:9a:d6:b1:a5:af:d3:35:02:f7:
         b1:b4:a2:6b:25:93:4e:bc:b4:a5:87:5d:19:0c:c1:d0:13:77:
         f3:d3:7d:82:97:d0:6a:fa:9a:e3:62:c9:c7:89:ba:7b:aa:1b:
         f8:7b:00:33:20:cd:53:0f:15:77:d6:82:6b:8c:5c:55:d5:f2:
         2d:88:b7:00:97:13:38:c5:3c:78:45:19:19:fd:c5:0c:f1:43:
         87:8e:c4:5b:13:15:ab:70:c1:58:a6:ce:57:bc:9d:98:e7:d8:
         64:b7:0e:cd:81:5e:71:ea:9f:f4:c2:86:04:c7:f5:41:06:1d:
         8a:fd:2c:e2:45:9e:08:f9:e6:56:0e:a6:f6:c7:16:fe:1a:85:
         bd:0e:e5:0a:ae:bb:62:08:02:f9:b6:6c:16:5d:ea:7e:1b:f1:
         47:6c:56:5d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY6ECUnXOYe3Nwg39jRqlSJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDc0ZTM5ZGRhNDAwZDEzNjEyNmU2YzNlZmIxY2Y5MzQ0
Mjc3ZWYwHhcNMjQwMzI4MDc0OTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWU2NmE5ZDViMTA0YTNlMDJmOTVkZGIyMjk2MDMyOTNkZGY2ZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQE0RBijyqwhM97oN7uu6ZJ3SA+s
exoLFXX8rwYvsoz73JOlEY3dDfzqdLjgQJ6DZSIbJJu5Xa7lXMpl1P0jjcDusfMs
cs8SENAm7NCM14406JbzCaMsRX+xPXupmHeR2DzTVd9CbrLNQ+Pu80ELxJZFX18R
o5ZCLPCq936uQuu6H7Wi6QygUfrz/FZyB1KjKPF03vbvw3Xy6EPDsk7BmmiRJA+D
l6arZQ2+DIcPwyGfLxbCB8uGvi9qmLD3yOg48BlFQlz1HvmHnWGyLA1ZeZLm9c1x
PX/dJ7JVT7fgZc9fJ+v6OO1vrGivC7CEW1K6msHDY1RTUReeoQzBGCYBlwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFInmap1bEEo+Avld2yKWAyk932+TMB8GA1UdIwQY
MBaAFFvXTjndpADRNhJubD77HPk0QnfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlkT09kMmtBTkUyRW01c1B2c2MtVFJDZC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84OWVjMjUtNzJkYy00ZjBmLThiMmYt
YWQ3ODkwYzJlNzUyLzEvaWVacW5Wc1FTajRDLVYzYklwWURLVDNmYjVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84OWVjMjUtNzJkYy00ZjBmLThiMmYtYWQ3ODkwYzJlNzUy
LzEvVzlkT09kMmtBTkUyRW01c1B2c2MtVFJDZC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhFRgzAN
BgkqhkiG9w0BAQsFAAOCAQEAHkVHR50d0YggnB6BE6UDHjc4/Vxpo6SWnjbD3rTR
AF1RLVGsRihLcqEe96XNkihxnhIvW/cfwDYe1rB89uZZ+83KzkeHfTyvqgna4pnt
D6KpIo/FrcyAnnrKTitX/Ec0PE2Ymtaxpa/TNQL3sbSiayWTTry0pYddGQzB0BN3
89N9gpfQavqa42LJx4m6e6ob+HsAMyDNUw8Vd9aCa4xcVdXyLYi3AJcTOMU8eEUZ
Gf3FDPFDh47EWxMVq3DBWKbOV7ydmOfYZLcOzYFeceqf9MKGBMf1QQYdiv0s4kWe
CPnmVg6m9scW/hqFvQ7lCq67YggC+bZsFl3qfhvxR2xWXQ==
-----END CERTIFICATE-----