Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/3SFNiYHARNh3RRtN7DtM7djTsBU.roa
File:                     3SFNiYHARNh3RRtN7DtM7djTsBU.roa (raw, json)
Hash identifier:          1BGSCgP9oWGCTv+SlmNYrGAe5iS8kLMrSNmhWMgArQE=
Subject key identifier:   DD:21:4D:89:81:C0:44:D8:77:45:1B:4D:EC:3B:4C:ED:D8:D3:B0:15
Certificate issuer:       /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial:       018E6722E986D212E4F45C4B3EA5295CE50F
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/3SFNiYHARNh3RRtN7DtM7djTsBU.roa
Signing time:             Fri 22 Mar 2024 17:08:44 +0000
ROA not before:           Fri 22 Mar 2024 17:08:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60318
IP address blocks:        2a06:b300::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 19:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:67:22:e9:86:d2:12:e4:f4:5c:4b:3e:a5:29:5c:e5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
        Validity
            Not Before: Mar 22 17:08:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dd214d8981c044d877451b4dec3b4cedd8d3b015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:0d:29:f5:3c:1a:1b:56:37:66:7a:6a:3e:
                    67:91:a7:3c:00:9f:e5:c7:6d:d1:22:80:92:80:34:
                    75:c4:f0:89:fb:15:66:b5:b1:06:31:b4:3e:81:80:
                    d8:73:7e:be:57:16:1a:8f:9d:44:91:a8:44:71:b5:
                    4e:7d:5c:47:f2:64:84:74:23:45:3f:ff:99:4e:58:
                    38:1d:42:e1:c4:a2:59:96:2c:e3:20:51:36:04:f6:
                    b6:5d:bd:ab:49:b9:08:96:5d:c3:79:2d:16:fa:2f:
                    8d:69:23:69:be:f3:dd:e1:67:5e:d2:54:dc:a8:79:
                    59:0a:f6:7d:0f:ec:f7:93:06:eb:f5:4e:df:21:8d:
                    2c:6a:5f:27:98:e8:6c:d7:6f:b9:e4:e7:c2:bb:31:
                    d8:93:cf:15:d8:b8:8f:16:59:29:61:1f:dc:f4:81:
                    12:d8:9e:b5:75:93:0f:49:ae:45:61:45:43:e9:1f:
                    e1:db:6b:15:08:11:91:df:a4:d3:5a:18:2a:9e:13:
                    a0:41:e3:20:bb:84:52:a1:f4:f3:e4:0e:5c:5d:af:
                    bd:c9:6f:b9:81:74:23:23:67:47:e0:13:5a:22:36:
                    35:17:7c:47:76:08:7e:af:cf:93:0e:bb:98:e6:4f:
                    38:8a:b2:05:16:e2:8d:15:d8:aa:13:e8:91:69:18:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:4D:89:81:C0:44:D8:77:45:1B:4D:EC:3B:4C:ED:D8:D3:B0:15
            X509v3 Authority Key Identifier:
                keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/3SFNiYHARNh3RRtN7DtM7djTsBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:b300::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:8f:a1:9b:31:3f:76:bb:f1:eb:9d:5c:1a:01:9c:3f:3f:
         ca:d3:09:88:85:c8:1c:01:59:3b:7d:c1:d6:ea:73:c4:b4:a9:
         96:11:fd:18:46:35:3d:25:fb:92:e1:2d:62:60:aa:3f:73:05:
         eb:13:91:f2:94:18:c8:b2:3c:d9:10:04:09:fa:c7:ce:7e:77:
         93:e3:84:dd:c5:1f:73:20:d7:4e:26:0a:16:33:2f:f3:fa:88:
         32:1f:dc:c9:c4:db:7f:0f:fd:7b:91:51:22:d8:c1:30:aa:eb:
         28:e4:e0:e4:16:0d:11:69:26:0a:4b:b2:aa:75:b4:dd:a1:39:
         54:e6:d3:70:2c:7a:3b:96:06:f9:07:2d:2e:72:6d:55:91:20:
         c9:d0:f9:7d:23:dc:52:bd:94:88:05:ed:db:e5:ba:6b:54:6c:
         61:85:82:e4:ea:4a:99:9f:cf:88:f1:37:20:3f:7c:b9:ba:c9:
         ab:a8:b3:0a:9c:82:bc:e0:45:3e:73:51:04:06:41:92:3b:4c:
         86:3a:1f:18:8c:d5:5f:2b:9a:50:87:00:f3:a9:18:44:02:ba:
         69:2b:44:67:04:e2:fc:d0:b5:b3:cf:b7:6c:90:ae:b5:0b:39:
         6b:e8:67:5e:1d:1f:3b:f7:10:6e:2a:7c:d1:14:d3:58:6c:44:
         b4:ce:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----