Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7yM3JGL8mF62FSdFf0Yhco117a8.roa
File:                     7yM3JGL8mF62FSdFf0Yhco117a8.roa (raw, json)
Hash identifier:          k/iVk1qRaJ6AV9H44rOssQ7DHXlyroQDYlYb/SMYmmY=
Subject key identifier:   EF:23:37:24:62:FC:98:5E:B6:15:27:45:7F:46:21:72:8D:75:ED:AF
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA29746A0B25CFB18A532C294919B10D
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7yM3JGL8mF62FSdFf0Yhco117a8.roa
Signing time:             Tue 02 Jan 2024 12:32:43 +0000
ROA not before:           Tue 02 Jan 2024 12:32:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213021
IP address blocks:        2a0e:8f02:2010::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 12:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:74:6a:0b:25:cf:b1:8a:53:2c:29:49:19:b1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef23372462fc985eb61527457f4621728d75edaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:b5:85:3f:bc:45:5f:ee:36:49:26:a4:2d:
                    72:1e:42:b3:2f:f6:3d:a6:58:ab:cc:65:ed:19:bd:
                    6c:5e:18:e0:54:5d:80:86:53:d8:63:1e:12:15:42:
                    5c:4d:fe:0f:52:54:98:bc:19:1b:18:c9:fd:37:10:
                    79:59:0b:69:fb:fb:05:bb:01:ec:c3:68:0c:33:fe:
                    65:09:2f:77:bb:18:c9:3b:1b:40:d6:1c:38:9c:2a:
                    13:40:e5:c8:c4:5a:b4:e3:44:a9:b3:8c:cc:de:79:
                    1a:dc:4a:ee:e8:8f:a6:5c:e9:61:e3:3b:fe:37:bb:
                    2e:9a:d2:03:64:73:37:0c:4c:51:f4:48:e7:70:a3:
                    14:04:21:a0:3f:2b:59:52:92:47:6b:41:89:68:36:
                    1e:3f:52:40:5b:39:cd:7a:a1:96:a3:4b:0d:e1:9a:
                    d8:9f:ac:61:ac:17:07:9a:78:1a:21:15:5d:94:fc:
                    92:4e:42:78:2d:33:8d:ba:98:17:13:2f:5e:e6:5d:
                    e0:19:db:d6:ca:42:c2:ef:24:a5:9f:c0:52:77:3d:
                    ec:40:cf:6d:30:c1:e3:8b:9c:88:5b:88:9d:b2:23:
                    8e:98:a9:b0:ad:ad:9c:17:ca:f1:4f:42:1d:2e:1e:
                    a9:5d:6c:17:48:7c:88:ac:b6:bf:4a:8d:62:0b:68:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:23:37:24:62:FC:98:5E:B6:15:27:45:7F:46:21:72:8D:75:ED:AF
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/7yM3JGL8mF62FSdFf0Yhco117a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:60:b7:d7:56:ad:37:0f:44:50:8a:5b:a8:02:10:84:7a:28:
         66:6b:ec:d1:1b:52:4b:87:97:6e:cb:0d:81:4d:c0:fc:1d:d6:
         cf:e7:54:01:02:34:0c:01:35:48:3f:15:59:35:d4:89:09:d1:
         36:ca:1e:52:bc:e7:a7:b8:ab:18:14:5b:06:7f:45:86:be:fa:
         c5:c0:20:89:92:16:22:3a:4d:35:b1:2e:ed:45:73:87:ed:a2:
         b2:cc:4f:ed:8f:7b:91:5e:44:24:3e:86:db:89:26:d1:e6:27:
         d0:43:29:36:89:f6:75:c3:5e:ab:39:2a:d2:68:d2:a4:f1:ba:
         c9:2b:1b:0b:4b:c2:c0:e2:7e:f1:ee:c0:2b:3e:f6:48:fb:1d:
         d0:c7:d4:eb:99:b1:5c:46:f5:66:f0:6a:c1:19:d0:91:65:19:
         f7:11:31:6b:66:4c:5a:13:52:9c:e4:fe:e2:59:9e:65:60:a4:
         5c:e2:6f:b9:3f:56:f7:05:f3:c9:86:43:5e:ac:ae:bd:90:a8:
         3b:a8:40:a3:0c:2c:30:0c:67:fc:cc:ad:8a:c9:09:44:88:3e:
         7d:60:ec:78:f1:01:10:4a:3a:21:9f:99:e3:90:cf:27:a1:8a:
         c4:52:98:03:cf:25:d5:33:cd:f6:4e:10:46:98:1b:81:27:a4:
         a7:4d:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----