Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1-E9y6P3XS__zdL68k5mM6N8Njg0.roa
File:                     1-E9y6P3XS__zdL68k5mM6N8Njg0.roa (raw, json)
Hash identifier:          oA52Ln2Eg/iddFyq1AevkKxWzPqo47PHBygOUERlk+I=
Subject key identifier:   F8:4F:72:E8:FD:D7:4B:FF:F3:74:BE:BC:93:99:8C:E8:DF:0D:8E:0D
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       018DB5D576569A57DBCAB668A3FB3267ADE0
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1-E9y6P3XS__zdL68k5mM6N8Njg0.roa
Signing time:             Sat 17 Feb 2024 06:51:22 +0000
ROA not before:           Sat 17 Feb 2024 06:51:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206271
IP address blocks:        195.93.226.0/24 maxlen: 24
                          2a0a:280::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 20 May 2024 12:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b5:d5:76:56:9a:57:db:ca:b6:68:a3:fb:32:67:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Feb 17 06:51:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f84f72e8fdd74bfff374bebc93998ce8df0d8e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:2f:8c:a1:ce:ed:a9:e5:4b:8e:a3:0d:f4:
                    11:77:a4:10:f8:04:61:71:be:34:bb:c8:0e:47:5b:
                    04:88:48:cf:50:88:d9:36:1f:e4:d7:26:ba:5e:e3:
                    ee:33:2f:47:bb:d8:fb:df:f3:68:b9:67:99:0f:f3:
                    5d:a7:90:d3:01:a9:6c:88:c7:db:6f:22:97:e8:bf:
                    36:7d:57:23:61:29:a3:32:dd:0b:6a:ec:52:4c:68:
                    4d:91:a1:e5:27:3e:e4:18:00:60:f2:cc:ef:59:27:
                    cc:72:75:ac:7e:10:8b:d9:dc:a5:38:ae:05:c0:75:
                    84:ef:14:88:06:88:29:23:9c:69:26:55:55:91:74:
                    72:0c:9e:5b:93:73:8d:66:54:29:2a:4f:e3:da:f4:
                    dc:8f:59:22:1c:6c:51:15:50:07:a9:43:f6:d8:61:
                    c9:c4:61:99:c0:0f:d5:d2:5d:06:e5:78:ef:60:1d:
                    62:01:b7:2f:a2:11:73:e5:4d:27:cc:74:64:4a:5c:
                    8d:6c:9b:c6:3a:11:44:de:1c:87:29:56:4b:7a:70:
                    60:3a:e6:03:d2:c9:9b:97:ca:b9:e0:28:ab:88:bc:
                    0f:67:6e:f9:39:74:1e:be:f3:a7:2d:08:97:98:50:
                    83:58:9b:28:4d:06:a5:73:1a:b1:4e:9b:56:30:04:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4F:72:E8:FD:D7:4B:FF:F3:74:BE:BC:93:99:8C:E8:DF:0D:8E:0D
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1-E9y6P3XS__zdL68k5mM6N8Njg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.226.0/24
                IPv6:
                  2a0a:280::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:af:78:a3:d4:43:5e:bb:13:38:a6:39:6f:4d:b8:3b:5b:
         6b:4e:e4:98:b8:9f:97:7c:5b:c9:0d:32:b8:28:5e:a4:2f:40:
         9e:3b:85:dc:c3:01:fd:03:51:41:92:05:93:65:fb:84:9b:98:
         ea:83:93:45:61:02:3c:1d:9a:9b:24:ee:bf:bc:a9:19:cd:81:
         9c:51:25:11:62:e8:32:ae:3b:6e:6a:98:1f:8f:11:a2:c0:6d:
         3f:66:88:b9:5c:ad:fe:0e:3c:5f:0b:38:28:af:0e:b5:d5:3d:
         13:31:5b:b1:04:aa:3b:21:b4:7a:b7:43:6a:3a:80:b1:b9:07:
         b5:4e:cd:83:79:1a:e5:6f:35:90:e6:26:3d:2b:75:89:83:70:
         05:d2:57:e9:1c:24:39:4d:70:fa:34:96:03:06:70:f5:73:40:
         19:bf:71:0d:87:b6:8c:c2:82:d4:33:a3:0b:b5:1f:08:49:fa:
         e0:4e:db:d4:a2:7f:b4:eb:1a:86:e0:4b:6d:bb:9d:fa:e1:b1:
         db:e9:13:59:0d:f4:04:50:af:eb:aa:57:95:02:b0:f1:b4:11:
         d4:d4:e7:b9:3b:11:7d:57:29:6e:ef:60:1e:60:c2:1c:c0:58:
         c3:78:db:5f:f7:ef:7b:59:7a:e2:b7:27:90:55:f8:d2:97:be:
         9c:02:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----