Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZWjv29JBIeW31RTk49sDKJ71l3M.roa
File:                     ZWjv29JBIeW31RTk49sDKJ71l3M.roa (raw, json)
Hash identifier:          /jnHKjD4cSYrddVQNigEsg/FfSDY699tyq7ycwkNYXo=
Subject key identifier:   65:68:EF:DB:D2:41:21:E5:B7:D5:14:E4:E3:DB:03:28:9E:F5:97:73
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018CC3B679C6676D5A8F5942E22514FED8CF
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZWjv29JBIeW31RTk49sDKJ71l3M.roa
Signing time:             Mon 01 Jan 2024 06:29:24 +0000
ROA not before:           Mon 01 Jan 2024 06:29:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211522
IP address blocks:        2a05:4145:1::/48 maxlen: 48
                          2a05:4145::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 22:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:79:c6:67:6d:5a:8f:59:42:e2:25:14:fe:d8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 06:29:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6568efdbd24121e5b7d514e4e3db03289ef59773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:55:ef:49:ba:dc:f8:49:62:f4:4c:5d:cd:4d:
                    ea:26:ba:2d:f2:60:e3:4c:bc:ad:3c:81:99:08:3c:
                    27:80:a0:03:03:48:49:7e:a8:85:ee:45:49:5d:dc:
                    bb:18:75:4c:cb:b1:c5:6d:0e:3a:d5:b9:af:d7:79:
                    03:0d:2a:3e:5f:87:17:fd:49:fd:68:e2:75:00:58:
                    ec:c1:a2:68:6b:5a:97:3b:f5:1c:0e:9d:d9:c0:11:
                    bb:a5:9a:11:a5:c7:d1:85:0f:08:ea:83:93:58:75:
                    44:33:78:2f:e4:13:92:54:d2:43:86:fb:df:b2:75:
                    86:eb:40:1e:b6:7e:0b:6c:6c:e4:8b:42:bb:a3:bf:
                    ab:f2:31:98:82:a1:a6:7d:3f:a6:61:7b:3b:e0:86:
                    a8:e7:6c:e9:c1:8d:9b:5e:0f:c3:e5:2d:2b:6b:6c:
                    f2:10:5c:76:2e:24:36:ad:8d:07:1b:d4:c9:9b:74:
                    18:33:3f:30:dc:72:04:db:d7:7a:dc:85:85:7d:83:
                    72:5e:49:f1:3c:d3:2e:13:10:c7:4e:c5:18:03:8d:
                    56:78:44:ab:03:5f:1d:a3:7d:b2:77:ab:51:22:01:
                    dd:0c:48:09:bd:0a:50:b8:13:97:a7:80:e3:20:f3:
                    a8:a3:fb:de:93:fb:e5:f4:da:64:bc:d3:30:94:3c:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:EF:DB:D2:41:21:E5:B7:D5:14:E4:E3:DB:03:28:9E:F5:97:73
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZWjv29JBIeW31RTk49sDKJ71l3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4145::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:82:92:cc:48:b6:2b:a7:6c:b2:ce:19:d7:80:72:15:f2:
         fc:cb:9b:d7:87:09:63:d9:2e:7e:7d:94:07:4d:ce:33:d7:95:
         dc:5f:3d:25:2c:1e:29:92:9d:ff:b0:86:0e:92:29:68:72:a9:
         5f:e4:50:76:25:cd:ab:b2:08:74:4c:77:77:b2:73:9a:96:a1:
         eb:f4:15:13:92:76:ba:b3:ab:16:00:6e:13:ac:dc:15:ef:6d:
         fc:f4:a8:68:58:e7:80:18:b2:32:86:97:8e:86:2a:6a:24:e9:
         0e:55:ec:23:ae:0d:6c:2d:d3:26:1e:ff:f8:8e:af:61:1e:32:
         e0:c1:78:c2:4c:59:51:48:22:e3:7e:ff:de:da:dd:c5:b4:b0:
         f6:18:57:24:31:48:f5:2c:d9:23:56:f8:6b:f8:17:12:0c:6f:
         0f:46:ee:1a:5b:2e:da:a7:43:25:c0:e8:e8:d7:d7:d8:8b:e3:
         98:22:78:17:21:b2:e6:87:22:ea:bc:49:32:5c:85:7b:5b:bf:
         ed:77:d7:5f:de:5b:92:0e:90:f2:97:60:41:23:35:33:f0:52:
         f0:c9:fa:d6:f4:96:06:c2:9a:3b:2a:a2:fa:42:8f:32:a0:09:
         6e:e0:a7:ce:c6:c7:84:9d:05:7a:db:3a:59:d9:dc:6a:ba:6c:
         ae:53:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----