Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/C-hBfarYYWizOuVrPfa9lbZGLYU.roa
File:                     C-hBfarYYWizOuVrPfa9lbZGLYU.roa (raw, json)
Hash identifier:          MRYoJFbIYojwsxzuZyl/ICIvP6E4W4HNBXBrDi2IbiY=
Subject key identifier:   0B:E8:41:7D:AA:D8:61:68:B3:3A:E5:6B:3D:F6:BD:95:B6:46:2D:85
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       018CC9BBF06FEE566EAC21E6FAD9C3CC967B
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/C-hBfarYYWizOuVrPfa9lbZGLYU.roa
Signing time:             Tue 02 Jan 2024 10:33:06 +0000
ROA not before:           Tue 02 Jan 2024 10:33:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202709
IP address blocks:        194.147.24.0/22 maxlen: 24
                          2a0d:840::/29 maxlen: 32

Validation:               Failed, certificate revoked on Fri 03 May 2024 13:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:f0:6f:ee:56:6e:ac:21:e6:fa:d9:c3:cc:96:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: Jan  2 10:33:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0be8417daad86168b33ae56b3df6bd95b6462d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:55:ab:12:8d:3d:e6:bc:81:32:de:ef:8a:
                    40:3b:52:f1:ca:d0:ea:e9:65:94:8d:81:74:9a:c5:
                    34:62:43:41:df:1e:51:36:82:3d:41:0a:64:73:a1:
                    49:fb:a5:7f:5b:a1:bb:04:8f:60:80:cb:8c:6c:03:
                    36:d1:17:6e:a6:d2:1d:ff:3f:b9:49:3e:00:ae:26:
                    05:38:3c:69:9e:16:af:41:71:bb:2c:f1:13:ae:d8:
                    4f:b6:9c:bd:eb:ee:79:91:c2:95:92:83:56:a9:bd:
                    38:ac:75:f7:b7:30:6a:0b:70:d5:da:2d:d8:7b:bb:
                    d2:61:0d:f6:e8:49:2b:95:ee:25:09:9c:29:0e:7a:
                    0c:f8:ca:03:06:d1:32:9c:a4:59:bc:ad:d8:bf:a2:
                    0c:12:d2:cf:fb:5b:09:99:8e:09:3c:73:0a:b4:c2:
                    38:0c:e4:41:41:0f:05:82:aa:fc:d0:e6:e0:96:84:
                    5a:80:d2:dc:e6:62:1f:03:9a:7f:4c:2d:bf:15:ae:
                    3b:61:e6:81:71:e6:7a:03:7a:56:67:cc:aa:e5:bc:
                    0a:35:9e:56:00:13:c0:b5:49:1a:0c:87:7f:5f:df:
                    17:a7:08:a8:c9:54:2c:da:83:d2:2c:fd:7d:09:02:
                    30:93:bf:55:cd:44:d3:78:60:53:53:10:77:d5:f4:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:41:7D:AA:D8:61:68:B3:3A:E5:6B:3D:F6:BD:95:B6:46:2D:85
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/C-hBfarYYWizOuVrPfa9lbZGLYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.24.0/22
                IPv6:
                  2a0d:840::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:b2:d3:a0:90:b4:73:0c:7d:d5:bc:ce:c7:45:ef:0f:a8:c4:
         58:af:20:9f:6c:cf:b7:1c:77:31:23:a0:d4:57:ee:05:50:ef:
         75:e2:74:46:78:de:85:26:da:26:16:fd:1a:54:58:fe:eb:5e:
         d4:69:0a:61:d0:12:aa:6a:27:91:a2:9d:99:2a:e2:dc:30:46:
         c1:00:d3:2f:55:b8:e0:42:87:cd:89:cd:cf:8f:79:f4:f5:51:
         f1:21:6e:ab:6e:29:18:58:a4:79:fd:16:8e:0f:96:68:b9:8d:
         c6:f6:20:97:43:f9:71:fd:07:8f:a0:82:bb:c8:ef:ef:f7:ae:
         99:c3:22:a2:f4:ce:4c:35:4d:3d:84:8f:de:77:9d:4c:f1:53:
         9e:7c:4b:50:0a:23:fc:0f:f9:fa:21:bc:84:2d:90:a2:0b:39:
         f9:da:34:1c:e9:44:15:2b:cc:52:b2:3f:8b:a5:94:fe:13:e5:
         9c:4b:55:f3:ac:7b:49:0f:11:17:1a:ee:8f:39:ce:46:e6:30:
         77:e8:51:fa:bc:58:cf:20:5d:2b:d4:3f:48:43:c3:68:a4:b6:
         25:cd:e7:a4:5f:37:77:11:87:ff:34:a4:f8:85:9f:12:e2:50:
         27:28:33:2e:c8:cf:07:a2:bd:f0:84:d4:bb:4c:6b:75:fe:16:
         cb:eb:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----