Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/8UcejSoPieNKt4ssZtOnLluR5hs.roa
File:                     8UcejSoPieNKt4ssZtOnLluR5hs.roa (raw, json)
Hash identifier:          gimPIl/nLK/u8mNzazNT0Wo7KMc4aAa2u4aV1uUzSJ8=
Subject key identifier:   F1:47:1E:8D:2A:0F:89:E3:4A:B7:8B:2C:66:D3:A7:2E:5B:91:E6:1B
Certificate issuer:       /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial:       018D1CF62D59138E896025183CB466077234
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/8UcejSoPieNKt4ssZtOnLluR5hs.roa
Signing time:             Thu 18 Jan 2024 14:25:11 +0000
ROA not before:           Thu 18 Jan 2024 14:25:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201856
IP address blocks:        95.141.254.0/24 maxlen: 24
                          2a13:4d80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 08:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1c:f6:2d:59:13:8e:89:60:25:18:3c:b4:66:07:72:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
        Validity
            Not Before: Jan 18 14:25:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1471e8d2a0f89e34ab78b2c66d3a72e5b91e61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:72:b2:41:c3:65:2e:8e:f6:73:bf:c6:84:
                    44:32:be:d5:27:fe:5d:80:67:ea:8e:1b:f2:ac:c9:
                    83:3e:f4:66:22:d0:63:87:25:0d:79:b0:dd:85:de:
                    f4:17:ae:22:4d:6a:f7:e1:3a:fb:9a:ec:db:b9:51:
                    9f:4e:89:25:f6:f7:a1:ed:6a:34:d7:f6:3f:11:44:
                    da:c4:4c:48:b9:d1:89:c7:f7:23:c5:93:8f:98:66:
                    b6:4d:9c:66:95:5f:b3:10:af:94:6b:4b:20:0b:24:
                    88:67:c9:3d:a2:99:8c:32:0b:b1:48:9d:2a:2d:de:
                    8a:a6:7c:b5:f7:1f:cf:6c:78:48:5d:dd:36:b5:d4:
                    05:c9:38:a7:6b:85:ef:86:29:e1:69:72:43:5d:3e:
                    c7:82:f2:ee:c6:40:15:8e:f9:c7:99:4f:58:c0:c0:
                    26:23:41:bb:05:9f:77:eb:8b:18:82:2a:d7:e3:9d:
                    12:a6:ee:dd:4f:13:8c:c4:64:d1:0f:98:b3:d1:12:
                    91:c8:d2:17:53:5d:95:63:39:c4:e5:c5:eb:c2:8f:
                    9f:57:9c:91:66:99:e4:06:6b:17:2d:10:7e:b8:7c:
                    d6:f3:2f:48:3c:a8:cb:82:8d:7e:67:eb:e1:91:0f:
                    04:2e:5d:9c:0e:c1:86:98:68:5a:e9:4b:dd:84:93:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:1E:8D:2A:0F:89:E3:4A:B7:8B:2C:66:D3:A7:2E:5B:91:E6:1B
            X509v3 Authority Key Identifier:
                keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/8UcejSoPieNKt4ssZtOnLluR5hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.141.254.0/24
                IPv6:
                  2a13:4d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:e3:69:82:3f:4f:bf:67:8a:05:d5:88:2d:e4:6d:35:c3:0e:
         99:59:ce:f2:1f:8b:3d:0f:ae:86:9b:4d:7e:a4:a6:1d:fc:2f:
         e4:f8:5b:85:f4:5a:53:3f:71:d6:a3:47:9c:a0:8a:f8:4f:5d:
         4e:bf:e6:63:ee:30:af:34:67:19:12:0b:f6:cf:3e:1a:39:00:
         a8:47:60:d7:2a:9d:b0:89:95:64:b6:03:24:1e:24:6a:b5:2a:
         22:de:e3:eb:58:a3:e0:36:a2:6e:46:65:2e:04:1f:4f:98:d7:
         9f:78:b3:8d:a5:2e:35:5b:fd:29:1a:ba:88:a9:aa:5b:84:ad:
         70:70:7b:0c:f0:86:8d:c9:ae:21:65:88:16:d7:58:87:67:0d:
         df:b5:0d:e9:8f:14:f0:23:d9:fa:6e:9c:10:fc:c4:fd:7e:12:
         e4:08:0d:ef:7c:bf:bd:e9:85:be:74:60:74:bd:07:ff:b6:d1:
         d9:ac:e7:96:ed:ae:9a:db:8c:24:2e:97:44:fa:67:45:1d:81:
         78:fd:85:ed:3d:08:88:30:78:1a:13:73:07:a9:3d:f3:5a:8e:
         d5:b3:e0:b4:52:74:55:08:e2:17:d1:6d:39:bb:31:d9:52:e4:
         9b:0a:51:74:e5:0d:4a:14:38:8a:2e:fb:b8:73:7b:c9:c8:e8:
         39:0f:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----