Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6Nsk314np97q-n5O8_KIOJZi6mw.roa
File:                     6Nsk314np97q-n5O8_KIOJZi6mw.roa (raw, json)
Hash identifier:          pc/le3WmQj+Tjwsb/VsWkuXXAjddgikxPAHq2GipVWo=
Subject key identifier:   E8:DB:24:DF:5E:27:A7:DE:EA:FA:7E:4E:F3:F2:88:38:96:62:EA:6C
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       0191F766181A3E3A62A92B92240B1EA0E504
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6Nsk314np97q-n5O8_KIOJZi6mw.roa
Signing time:             Sun 15 Sep 2024 20:35:48 +0000
ROA not before:           Sun 15 Sep 2024 20:35:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215462
IP address blocks:        2a05:9a40::/29 maxlen: 29
                          2a13:b9c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 18:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f7:66:18:1a:3e:3a:62:a9:2b:92:24:0b:1e:a0:e5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Sep 15 20:35:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8db24df5e27a7deeafa7e4ef3f288389662ea6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:3e:80:61:64:46:cc:72:4f:89:39:07:60:
                    6e:42:d2:b9:cf:76:61:0b:c8:3f:4b:53:73:d3:8e:
                    56:f0:1d:46:23:bc:5e:bd:24:7f:d3:5f:19:f4:2d:
                    ec:eb:13:6c:e4:c9:ee:c2:72:98:16:0c:73:b3:96:
                    8d:d5:10:4d:70:15:88:a8:b5:62:83:d3:20:5e:5c:
                    40:4f:8d:a0:43:75:2b:ee:e5:f1:82:ee:a3:84:9e:
                    8b:82:7a:04:88:09:3e:92:97:c8:a6:5e:7f:6b:2d:
                    1c:a5:cf:65:e4:31:87:8e:d9:ac:94:ab:27:5d:55:
                    b3:d2:63:10:39:7e:f3:db:4c:73:79:18:83:d8:58:
                    29:4c:9f:e2:3c:d4:2a:f6:18:6c:91:22:15:82:66:
                    c2:5e:54:bc:20:35:2b:95:67:c3:b2:8a:59:33:b2:
                    50:d1:5d:e2:07:e7:16:6a:bb:34:24:6a:64:d3:fa:
                    ec:f9:e5:8a:08:3d:52:c7:1f:0b:44:7b:b0:b1:8d:
                    e8:32:ea:9b:ef:d1:fd:c5:eb:25:9f:93:8b:0e:3d:
                    fe:12:4e:73:58:85:92:b1:c8:e6:43:66:37:6a:aa:
                    21:3f:3c:7a:a2:89:fd:fa:ac:e2:1a:8c:18:86:5e:
                    09:06:9f:97:a4:fd:b6:80:ae:ba:3c:eb:32:52:b7:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DB:24:DF:5E:27:A7:DE:EA:FA:7E:4E:F3:F2:88:38:96:62:EA:6C
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6Nsk314np97q-n5O8_KIOJZi6mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9a40::/29
                  2a13:b9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         be:7e:20:5a:71:d4:0e:94:46:71:dd:e2:04:1c:d3:16:16:34:
         02:f4:f4:4a:0c:b7:31:64:5a:32:60:2f:87:8a:b6:a5:cd:0c:
         2e:8f:a3:73:ca:cc:5b:6e:f1:97:71:bd:9b:a2:0e:af:ed:83:
         ae:fd:dd:fa:e9:40:4b:16:2b:f9:a5:59:82:e1:1e:ca:5e:9e:
         fb:b2:59:08:cc:ca:2c:c5:14:34:bd:fe:df:78:f9:65:fc:3d:
         26:3b:fe:36:ef:4b:f8:96:16:8a:8f:59:f5:c2:20:36:7f:ba:
         fb:44:96:52:1b:1a:15:fc:4d:ee:40:68:e0:ca:68:36:64:09:
         9f:6f:d8:6d:a3:10:8d:b8:9f:9d:ae:29:7a:be:4d:8c:d6:a2:
         2b:a7:a2:70:33:53:3c:f3:01:ec:70:e6:3f:8d:5b:3f:f1:e1:
         29:f3:6f:b0:11:c7:5e:bd:8f:7b:de:40:58:ee:12:bb:a6:21:
         13:51:c6:87:43:32:9c:41:83:f3:8e:b6:d9:0d:d2:12:37:d0:
         10:28:3c:8b:a5:37:c8:6e:b6:b6:45:49:c4:b8:a6:7c:aa:0d:
         5a:ec:56:15:57:68:1a:83:6d:88:5d:a3:9c:fd:12:af:5f:02:
         84:31:81:0a:31:d5:21:b0:61:bc:c3:81:ac:eb:c7:32:0e:fc:
         8f:b1:50:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----