Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa
File:                     FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa (raw, json)
Hash identifier:          mluKOgjMptlAIXvqcFfIPpZBZMlgyaOSuHfAonU29AE=
Subject key identifier:   15:27:58:A2:D8:94:1C:70:16:AB:1F:58:9F:73:57:9F:B2:DF:4A:91
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018EF643DB14B7B0507C81B493781788C44B
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa
Signing time:             Fri 19 Apr 2024 12:10:25 +0000
ROA not before:           Fri 19 Apr 2024 12:10:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216164
IP address blocks:        2a05:4142::/32 maxlen: 32
                          2a05:4143::/32 maxlen: 32
                          2a05:4144::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 22:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f6:43:db:14:b7:b0:50:7c:81:b4:93:78:17:88:c4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Apr 19 12:10:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=152758a2d8941c7016ab1f589f73579fb2df4a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:36:7a:6a:4e:b1:7f:68:27:69:2b:d3:87:
                    80:17:c6:26:35:80:bb:a1:78:0e:e0:5d:e0:b0:85:
                    29:57:18:6a:a8:3a:99:1c:45:cd:e5:fc:f6:b3:33:
                    21:b2:03:99:3a:25:71:80:e2:0f:0f:9c:cb:fe:25:
                    4c:a7:61:48:5e:74:73:59:ad:85:8b:28:0d:71:f9:
                    70:d4:a3:ba:3a:f2:d5:cb:49:8d:70:46:5b:2f:88:
                    eb:51:f6:45:ad:67:22:46:a3:08:53:59:e7:99:13:
                    9f:d1:39:38:48:ab:7f:b5:43:3c:83:cf:2f:72:5d:
                    4b:8f:de:8c:0d:a6:32:80:22:b7:86:a2:00:3e:e0:
                    da:f9:ac:84:eb:77:d3:d5:14:43:04:3d:6c:2a:93:
                    5c:26:47:7c:eb:0b:b7:d3:e2:4c:c4:cd:00:f3:89:
                    5d:43:4c:c9:e1:e7:54:05:f6:16:d8:7c:a9:e3:bc:
                    64:23:50:21:a0:de:35:fe:76:69:6d:6d:4b:0a:f5:
                    ea:a0:ba:8f:2e:ef:cd:04:63:41:ce:e7:db:e7:77:
                    94:4a:b4:d6:6a:cc:fa:81:de:3c:63:e8:3f:cb:d0:
                    2b:e6:09:0c:47:c0:2d:a8:7f:a8:3a:1e:c5:47:13:
                    35:80:12:cc:6a:85:0c:a2:01:ea:81:7c:1e:5e:4c:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:58:A2:D8:94:1C:70:16:AB:1F:58:9F:73:57:9F:B2:DF:4A:91
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4142::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:f7:78:58:35:c5:46:b5:0e:45:96:1c:28:da:b3:94:3f:
         83:d5:78:83:20:18:9b:84:0e:d6:5d:52:4b:19:14:01:e6:55:
         13:ee:69:19:50:7a:81:03:b2:03:c0:a7:5b:90:8c:b0:51:94:
         5e:87:12:9a:9a:63:69:5d:50:cc:aa:3a:47:11:90:68:36:da:
         2a:07:e2:1e:87:c6:06:12:37:cc:b9:1a:bc:af:74:b6:ab:ff:
         98:16:60:7b:22:58:f6:af:11:e5:71:de:0f:35:bb:f1:61:b7:
         23:28:d3:2f:cf:1d:22:27:69:c8:fc:cc:b8:90:c1:64:ac:14:
         0f:e8:17:79:96:75:b6:a3:a9:d6:af:d7:9d:f7:1d:57:f3:64:
         b3:08:ff:6d:dd:2f:6e:d4:b4:3d:33:7c:ad:f9:1b:93:58:30:
         6c:5e:bd:be:0e:91:cf:b3:28:56:a3:f5:f8:21:c3:ac:dc:7d:
         28:79:9c:cb:3e:08:97:73:aa:1c:5c:79:fa:d3:ad:a5:ce:6c:
         21:8b:33:24:e3:1f:04:60:2b:2d:5c:eb:2a:38:f6:93:3f:ce:
         ef:94:61:ab:34:3c:c3:0d:fe:44:3a:55:33:90:f6:40:88:be:
         59:f7:af:78:e0:53:b1:dd:c2:67:13:bc:4d:6e:e9:e6:a9:53:
         2f:d0:53:02
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAY72Q9sUt7BQfIG0k3gXiMRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjQwNDE5MTIxMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTI3NThhMmQ4OTQxYzcwMTZhYjFmNTg5ZjczNTc5ZmIyZGY0YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWQ2empOsX9oJ2kr04eAF8YmNYC7
oXgO4F3gsIUpVxhqqDqZHEXN5fz2szMhsgOZOiVxgOIPD5zL/iVMp2FIXnRzWa2F
iygNcflw1KO6OvLVy0mNcEZbL4jrUfZFrWciRqMIU1nnmROf0Tk4SKt/tUM8g88v
cl1Lj96MDaYygCK3hqIAPuDa+ayE63fT1RRDBD1sKpNcJkd86wu30+JMxM0A84ld
Q0zJ4edUBfYW2Hyp47xkI1AhoN41/nZpbW1LCvXqoLqPLu/NBGNBzufb53eUSrTW
asz6gd48Y+g/y9Ar5gkMR8AtqH+oOh7FRxM1gBLMaoUMogHqgXweXkyTpwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFBUnWKLYlBxwFqsfWJ9zV5+y30qRMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvRlNkWW90aVVISEFXcXg5WW4zTlhuN0xmU3BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQEqBUFC
AwUAKgVBRDANBgkqhkiG9w0BAQsFAAOCAQEAL0T3eFg1xUa1DkWWHCjas5Q/g9V4
gyAYm4QO1l1SSxkUAeZVE+5pGVB6gQOyA8CnW5CMsFGUXocSmppjaV1QzKo6RxGQ
aDbaKgfiHofGBhI3zLkavK90tqv/mBZgeyJY9q8R5XHeDzW78WG3IyjTL88dIidp
yPzMuJDBZKwUD+gXeZZ1tqOp1q/XnfcdV/Nkswj/bd0vbtS0PTN8rfkbk1gwbF69
vg6Rz7MoVqP1+CHDrNx9KHmcyz4Il3OqHFx5+tOtpc5sIYszJOMfBGArLVzrKjj2
kz/O75RhqzQ8ww3+RDpVM5D2QIi+WfeveOBTsd3CZxO8TW7p5qlTL9BTAg==
-----END CERTIFICATE-----