Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa
File:                     uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa (raw, json)
Hash identifier:          5L+J+yR2L/P2Po4qwqDaRnPQVPCygAT3u9e9UU4jpJc=
Subject key identifier:   B8:9A:5E:67:3B:BA:64:88:CB:A1:F4:CD:13:67:F3:0F:61:4B:CD:67
Certificate issuer:       /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial:       018D20D4C5AB27DF5E8C9C35EA34157B7CFC
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa
Signing time:             Fri 19 Jan 2024 08:27:11 +0000
ROA not before:           Fri 19 Jan 2024 08:27:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201856
IP address blocks:        95.141.254.0/24 maxlen: 24
                          2a13:4d80::/29 maxlen: 32

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 20:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:20:d4:c5:ab:27:df:5e:8c:9c:35:ea:34:15:7b:7c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
        Validity
            Not Before: Jan 19 08:27:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b89a5e673bba6488cba1f4cd1367f30f614bcd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:eb:f2:9b:69:00:15:92:d0:d9:86:16:cd:
                    32:0c:ee:91:0e:c7:cc:14:da:36:bf:db:22:c0:3c:
                    a1:b7:35:ce:d0:5b:39:3b:2c:62:1e:ba:03:67:83:
                    87:fd:fc:b5:e0:af:50:9b:25:0a:30:76:a7:3e:c4:
                    f2:41:ce:a6:4b:70:f8:ae:c7:e5:0d:0d:40:7d:fc:
                    ed:eb:45:62:ab:a5:ac:4b:da:bc:e8:a4:b9:af:44:
                    f6:54:6e:3f:01:10:35:7f:8a:08:93:9b:ba:c9:2a:
                    58:d2:ea:05:4d:65:c1:99:9c:c1:ed:18:22:83:38:
                    c4:b9:b9:79:e9:f2:fd:29:7e:46:60:50:39:7c:00:
                    80:e7:98:0b:7d:9b:61:ad:86:dc:51:33:19:20:c5:
                    6a:c2:4b:dc:51:fa:2a:55:51:56:13:bc:bf:02:3d:
                    f1:b9:ac:18:fc:42:a2:67:4d:86:c1:16:be:cf:c3:
                    89:be:de:89:85:00:04:69:30:8f:a9:e8:a9:09:e1:
                    86:b2:4f:5b:89:45:00:fe:89:83:ac:d0:db:97:c2:
                    7d:46:7b:64:03:8a:1c:70:48:d4:70:db:33:f3:7f:
                    5e:42:0b:e8:a5:c8:af:a2:69:1b:4d:8e:9e:dd:c6:
                    a1:d3:c1:71:f7:42:15:eb:49:0a:77:d9:f4:55:ed:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9A:5E:67:3B:BA:64:88:CB:A1:F4:CD:13:67:F3:0F:61:4B:CD:67
            X509v3 Authority Key Identifier:
                keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.141.254.0/24
                IPv6:
                  2a13:4d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:90:b9:04:d8:26:fd:36:e0:1f:66:d9:d8:23:a0:52:39:ad:
         e0:a5:a8:78:0c:e0:b7:65:90:43:5a:49:00:f6:c0:b3:35:6b:
         a6:8f:4c:de:eb:73:c3:3a:b8:a8:ef:8e:fb:3d:31:b0:2a:93:
         5c:f8:60:ac:0a:c8:cf:87:ab:d1:a2:be:8b:58:5f:49:51:c1:
         8a:31:ca:08:0b:cb:c0:72:60:53:ca:c9:29:9b:27:21:6c:6b:
         79:81:01:24:a1:91:e6:dc:d4:a8:c5:27:d7:f6:06:a9:02:f7:
         a5:19:f4:f6:d5:88:0c:85:3b:10:0f:a9:50:9d:53:1b:3b:1b:
         26:5f:fb:16:6b:a8:88:7e:46:b3:85:fa:3e:8d:07:49:af:d6:
         22:49:85:6d:d8:56:16:3b:06:1e:3a:f5:f1:39:11:fb:6f:9c:
         a8:27:c1:3f:3d:2e:42:dd:65:4a:bb:b9:f0:d7:cc:6a:1d:6e:
         f2:23:d4:c7:0f:1a:60:38:b2:2d:c1:72:63:f4:5d:a6:05:03:
         27:b2:14:44:e5:ca:f0:cd:8e:2c:05:7d:26:ba:da:fb:8f:fb:
         2b:56:f8:07:49:d6:d8:3b:f5:ce:ab:de:61:40:aa:d7:bf:44:
         48:53:40:98:5c:dd:ad:2d:9b:db:d5:ca:0e:9d:a3:8b:27:52:
         7d:dc:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----