Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Nm6cmKuXFSs2ePYNbcEZ5vOneYc.roa
File:                     Nm6cmKuXFSs2ePYNbcEZ5vOneYc.roa (raw, json)
Hash identifier:          BumLhgcp7YhtfuLd8kF+Hdpju14MXgffKvxjVldiRFA=
Subject key identifier:   36:6E:9C:98:AB:97:15:2B:36:78:F6:0D:6D:C1:19:E6:F3:A7:79:87
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018D1EA2A3E29C3E64BEBDD7749E0D56B1A7
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Nm6cmKuXFSs2ePYNbcEZ5vOneYc.roa
Signing time:             Thu 18 Jan 2024 22:13:11 +0000
ROA not before:           Thu 18 Jan 2024 22:13:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211522
IP address blocks:        2a05:4145::/32 maxlen: 48
                          2a05:4145:1::/48 maxlen: 48
                          2a11:e104::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 16:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1e:a2:a3:e2:9c:3e:64:be:bd:d7:74:9e:0d:56:b1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan 18 22:13:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=366e9c98ab97152b3678f60d6dc119e6f3a77987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:95:63:00:21:e3:96:18:e6:f3:83:f3:de:
                    53:93:ca:d9:18:e5:52:d5:a9:c2:2e:14:2e:b1:18:
                    61:2a:db:09:fb:96:3b:65:2e:75:2d:87:8e:12:a7:
                    dd:45:32:f2:f4:a2:ef:62:9c:69:2e:eb:32:14:45:
                    80:7b:fb:61:44:12:4b:7b:ad:e2:26:05:5d:5a:a3:
                    c2:6b:de:c2:55:90:5f:19:da:f9:84:ea:b1:9c:b6:
                    a9:61:56:d3:87:ef:3d:b2:0d:75:1b:c1:f9:6e:ed:
                    e7:ff:ac:18:d2:3e:cf:da:bd:bb:71:26:10:47:6b:
                    7e:0c:25:d3:28:35:70:2b:c7:78:6e:49:bf:04:ba:
                    00:ce:11:d9:ee:ab:92:4a:4b:88:93:a8:f4:91:a5:
                    16:33:26:42:94:83:cf:f4:2f:75:8e:5c:41:59:14:
                    37:58:7d:ad:75:5a:5c:92:6f:8c:23:df:b8:bf:12:
                    7d:d3:e7:fd:db:3d:3e:66:57:da:35:0b:58:75:f9:
                    aa:14:c0:25:23:0c:82:30:00:89:b3:d3:b5:22:a2:
                    a7:6a:87:08:aa:ad:2d:0c:a6:74:2f:67:7d:87:51:
                    60:83:6f:86:67:ea:ea:e2:45:66:1c:b6:d8:cc:91:
                    06:5f:ee:8d:62:e7:a5:7e:78:bf:62:ac:4c:66:46:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6E:9C:98:AB:97:15:2B:36:78:F6:0D:6D:C1:19:E6:F3:A7:79:87
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Nm6cmKuXFSs2ePYNbcEZ5vOneYc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4145::/32
                  2a11:e104::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:a6:0d:a5:c9:06:43:23:6d:20:d2:c3:b3:f4:66:b8:51:25:
         44:70:9c:7d:7f:b8:39:b8:c2:c3:1d:45:df:b2:e6:84:b5:b4:
         e6:2d:28:10:09:37:e8:6c:76:72:82:8a:08:0a:e5:53:49:76:
         f9:3f:c0:6b:95:a1:6d:2e:76:4b:9c:25:e2:29:0e:34:22:ca:
         63:22:0e:92:01:8f:c5:c3:d2:6d:ad:a9:8b:79:cd:99:41:58:
         85:d3:ed:59:9e:ba:4c:ef:f5:2c:08:e6:a2:5b:bd:51:75:55:
         7d:86:eb:51:ae:9d:df:9c:a9:74:5e:ba:bd:90:dd:72:ec:09:
         e2:2e:35:0e:87:ae:52:de:52:b0:d2:74:2a:c1:a0:9b:41:22:
         70:89:88:e6:e5:4d:a2:40:21:ee:cc:1a:fb:b9:33:e9:f2:95:
         e2:76:98:33:bc:2e:ff:41:ca:00:ef:fa:ec:21:8a:ab:00:94:
         4c:e4:6d:dd:61:39:ab:ae:4f:40:4d:a1:09:e9:5e:5e:1c:16:
         2c:c7:ea:ca:80:b7:fb:3e:ea:39:dd:37:64:ed:3d:ea:22:56:
         37:de:5b:39:f9:ff:29:c9:ff:e4:9a:2e:59:af:09:b3:b7:82:
         f1:f5:11:b8:c8:2a:93:4c:95:59:e0:68:26:91:21:c1:26:2a:
         d8:1b:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----