Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/joH2XxqdbYQuXUAFb9ngv_uAQTk.roa
File:                     joH2XxqdbYQuXUAFb9ngv_uAQTk.roa (raw, json)
Hash identifier:          5jspen2B8xe0zZ64v/z7CVfj88wSOL+B0Tv8PThp/pc=
Subject key identifier:   8E:81:F6:5F:1A:9D:6D:84:2E:5D:40:05:6F:D9:E0:BF:FB:80:41:39
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       018CC4937126235D1E5846C87FC588024B35
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/joH2XxqdbYQuXUAFb9ngv_uAQTk.roa
Signing time:             Mon 01 Jan 2024 10:30:46 +0000
ROA not before:           Mon 01 Jan 2024 10:30:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212815
IP address blocks:        185.171.202.0/24 maxlen: 24
                          2a10:4646:50::/44 maxlen: 44
                          2a10:4640::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 14 Feb 2024 13:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:71:26:23:5d:1e:58:46:c8:7f:c5:88:02:4b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  1 10:30:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8e81f65f1a9d6d842e5d40056fd9e0bffb804139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:02:0d:34:20:84:ff:db:3e:ea:07:df:c8:45:
                    58:c9:54:3f:a3:b0:44:26:ed:74:8a:68:c0:1e:9f:
                    3b:55:31:1b:51:5a:48:f1:ac:fb:5d:98:79:5f:e8:
                    ce:ee:11:62:4a:c4:8a:1d:14:fb:14:a9:5f:6c:53:
                    7b:0f:4f:9f:6a:81:b0:f2:b9:f6:ee:21:78:43:f7:
                    17:88:3a:24:40:a5:45:1b:d2:ef:fc:b6:fa:74:52:
                    9a:02:3b:f7:0b:cd:4e:ed:f2:ed:fd:98:c9:c9:ce:
                    fa:c6:05:50:d0:3a:b2:8d:70:b8:56:8a:1e:fb:c2:
                    31:b0:fe:bb:2a:bd:a3:73:f0:41:c9:d8:55:d8:c2:
                    39:7e:00:d8:2f:11:bb:61:d6:ac:a4:3a:c4:79:11:
                    43:dc:c7:3e:89:aa:75:50:71:94:38:db:0a:43:79:
                    8f:3c:50:d5:cc:f0:26:e3:36:5c:ed:a0:3c:30:36:
                    d6:23:d8:53:b2:76:41:b4:82:a7:d2:b0:50:1c:b9:
                    01:e4:24:6d:44:01:ae:eb:b1:09:66:ac:e2:6f:cf:
                    58:72:ba:9d:6b:f7:59:83:f5:a9:ec:6c:e0:27:35:
                    7d:70:95:f4:c9:bf:2d:1e:18:18:08:a3:28:d6:39:
                    6c:d0:a2:69:f7:e7:63:47:70:12:de:fe:c4:44:8b:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:81:F6:5F:1A:9D:6D:84:2E:5D:40:05:6F:D9:E0:BF:FB:80:41:39
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/joH2XxqdbYQuXUAFb9ngv_uAQTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.202.0/24
                IPv6:
                  2a10:4640::/32
                  2a10:4646:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         c3:13:ff:ea:19:da:21:1f:36:44:ac:d5:a4:3e:21:8c:a1:1d:
         8e:19:24:14:d6:4e:fd:c3:b3:bf:8e:c2:54:a6:0b:17:95:8d:
         b9:2f:dc:02:ae:a0:9a:fa:0c:45:ed:dd:13:ce:a1:d8:36:53:
         6e:67:5c:7a:9c:fc:69:f1:96:ef:75:30:90:63:8c:85:87:bc:
         1a:d4:6e:2b:8d:f9:7a:b6:7b:f7:09:d5:c1:4a:4e:48:b3:3a:
         fc:d4:52:53:c7:51:48:0b:cc:91:4f:4f:eb:46:f4:2c:e7:91:
         eb:b1:32:e0:85:e3:d9:2d:a0:86:18:4a:4f:32:f9:70:bc:dd:
         00:e5:4a:c0:27:35:ff:92:96:bb:04:2c:df:14:56:55:06:dd:
         92:96:c2:41:f2:75:2a:7e:da:9a:69:5d:83:34:df:94:43:a6:
         6b:8d:00:bc:ec:5d:fb:f3:55:b8:29:2b:d5:ea:93:52:6b:62:
         c1:74:67:3c:19:19:a7:c2:a6:7f:a8:b1:f2:df:75:c2:32:11:
         1c:86:eb:d9:01:3e:22:ad:bd:a3:34:9a:05:ca:c5:e8:6e:98:
         2c:86:4e:d5:ec:70:c9:18:31:7c:21:e5:44:f8:72:ff:0c:5d:
         a9:fb:e3:40:8c:ce:8b:64:6e:d7:48:b8:81:23:9f:9c:10:fe:
         3a:6d:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----