Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/chXMHKSS7qV22ku3PtX8Ng4Gi-o.roa
File:                     chXMHKSS7qV22ku3PtX8Ng4Gi-o.roa (raw, json)
Hash identifier:          HBl/pQL1PP7myp6Y0xR3vRgV1Q4dhdbPsc6jUCgU3DM=
Subject key identifier:   72:15:CC:1C:A4:92:EE:A5:76:DA:4B:B7:3E:D5:FC:36:0E:06:8B:EA
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       019165EE9F00578358A78162E9D755186FF4
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/chXMHKSS7qV22ku3PtX8Ng4Gi-o.roa
Signing time:             Sun 18 Aug 2024 14:40:22 +0000
ROA not before:           Sun 18 Aug 2024 14:40:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214346
IP address blocks:        194.15.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 21:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:65:ee:9f:00:57:83:58:a7:81:62:e9:d7:55:18:6f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Aug 18 14:40:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7215cc1ca492eea576da4bb73ed5fc360e068bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:87:49:01:81:2a:3e:e8:f1:9d:df:51:dc:
                    49:61:b1:d2:0c:90:ca:cf:d7:0f:3c:0d:16:bb:d4:
                    2a:f9:24:c4:9a:f4:d8:87:37:5d:c5:f7:a4:75:e4:
                    2a:73:b2:ad:ea:ae:58:bd:4d:37:4e:c0:72:ed:e2:
                    4c:07:94:92:eb:92:b0:e5:98:8d:53:5b:71:7f:f3:
                    34:ef:18:f2:8b:6e:e6:7a:b2:07:6b:ae:0c:03:9b:
                    57:21:8d:d4:17:aa:ff:df:10:0a:e5:b6:cf:7c:b3:
                    fb:49:80:a7:9f:5a:c3:59:90:8b:fb:f1:1c:0b:2f:
                    25:22:ce:12:62:0a:be:ee:4a:8c:96:0e:30:e3:5e:
                    7e:91:cb:b3:91:7a:e9:a8:e4:49:bd:8e:14:e9:77:
                    3c:30:5c:04:d8:12:92:f4:44:24:ae:97:67:86:f0:
                    16:25:e5:e0:26:b9:a3:a4:c4:ac:36:94:27:bb:e3:
                    5a:70:8c:22:6a:49:f2:60:ab:d3:76:d7:02:1f:74:
                    47:36:54:47:18:99:f0:a1:e5:f7:80:7f:6f:44:cb:
                    b7:c9:f1:e7:62:a9:d0:e1:a2:f5:87:a3:62:fa:c2:
                    0d:82:f2:70:fc:4e:75:c8:df:54:91:ad:cb:fe:da:
                    61:74:36:e7:8e:ce:c4:7b:11:dc:32:01:4e:d9:44:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:CC:1C:A4:92:EE:A5:76:DA:4B:B7:3E:D5:FC:36:0E:06:8B:EA
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/chXMHKSS7qV22ku3PtX8Ng4Gi-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:26:bb:4e:4c:96:0d:10:91:18:69:b6:a9:5b:39:39:94:
         3d:41:44:33:8c:3d:d9:e4:25:a7:5e:b2:43:05:1b:5a:bb:3a:
         3e:91:a2:2a:45:d8:6b:ee:4e:35:f9:38:b0:08:74:74:3d:01:
         70:3f:13:99:ee:a6:5e:30:70:f8:03:90:32:97:6e:52:4a:0d:
         ab:f6:88:b6:5f:59:13:ca:e9:9f:a1:dc:db:f0:5f:a3:5c:61:
         fd:04:39:74:88:22:bc:88:ff:90:66:f5:bc:02:de:7e:cb:59:
         7e:52:70:e7:8e:c3:c5:ed:a2:3a:c0:03:79:23:a9:a0:5b:de:
         ba:9e:55:33:ea:44:01:43:67:3d:55:f7:1d:c8:33:cf:18:ff:
         9e:b3:6e:b4:a8:30:68:39:bb:f6:a6:06:92:8b:e7:da:34:26:
         d8:9c:6b:d4:7d:c5:a3:77:ff:95:4d:a3:75:08:a8:b6:f5:73:
         1e:d9:bf:b9:a9:0d:56:46:09:91:69:a8:cd:f9:9f:f6:53:16:
         ff:16:70:1e:c9:70:48:6f:c1:f2:ef:d5:61:bc:64:63:87:04:
         e9:a2:e6:36:e3:cc:ac:cb:48:62:92:8f:95:82:3f:34:80:14:
         d3:d1:73:e8:ec:37:13:45:ab:3e:47:8b:5f:94:97:8b:e5:4e:
         b9:1a:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----