Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/B-qjJ8HcR6l2YJL6DmCTvPbHZ-M.roa
File:                     B-qjJ8HcR6l2YJL6DmCTvPbHZ-M.roa (raw, json)
Hash identifier:          MckJhg/ZavHGrqLJ7eYAIkKPMd7cul8mIt2aejbqDtE=
Subject key identifier:   07:EA:A3:27:C1:DC:47:A9:76:60:92:FA:0E:60:93:BC:F6:C7:67:E3
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       01865986378A2012EB28B0093BA5A999C9BC
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/B-qjJ8HcR6l2YJL6DmCTvPbHZ-M.roa
Signing time:             Thu 16 Feb 2023 09:20:13 +0000
ROA not before:           Thu 16 Feb 2023 09:20:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208661
IP address blocks:        2a0c:b6c3::/32 maxlen: 32
                          2a0c:b6c5::/32 maxlen: 32
                          2a0c:b6c4::/32 maxlen: 32
                          2a0c:b6c6::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:59:86:37:8a:20:12:eb:28:b0:09:3b:a5:a9:99:c9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Feb 16 09:20:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07eaa327c1dc47a9766092fa0e6093bcf6c767e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:12:10:e1:0b:f9:86:97:45:58:72:a8:7f:
                    74:fa:cf:07:8b:7a:ee:87:e9:34:64:ab:f2:7f:ac:
                    43:16:29:da:2d:67:e3:86:ef:a8:ad:5a:c7:52:88:
                    c0:85:f5:ab:08:51:67:f5:1a:ae:1b:f5:41:8b:fb:
                    44:25:03:4b:53:f2:8c:fe:d4:cd:36:ca:ab:aa:a4:
                    cd:92:9a:95:1a:fc:07:6b:85:e1:1c:7a:e7:10:0e:
                    67:5b:52:43:d3:55:86:56:4e:7b:8f:eb:f1:80:56:
                    af:ea:27:3a:67:c5:e3:e2:a4:5b:4c:06:f5:20:8f:
                    74:78:c2:97:58:4b:a7:38:e7:f3:d3:64:0a:08:65:
                    1c:82:a4:26:38:7c:f1:a4:f8:e4:36:8d:c1:7f:cd:
                    99:7f:f4:b4:36:3b:d3:94:78:6e:2d:67:d2:ba:28:
                    c8:88:f3:30:ce:79:9b:9b:83:08:c0:d5:17:f1:4f:
                    33:c0:27:01:fe:ff:68:d0:86:bf:59:8b:2b:1f:de:
                    44:fb:b1:7d:36:97:37:ba:81:78:87:c1:30:b9:85:
                    b6:0a:da:e9:3f:4d:dd:06:3a:82:2e:49:a4:af:66:
                    63:ee:68:f2:e7:5c:a9:6a:5e:83:9f:77:8d:bb:d2:
                    7b:2b:b5:e5:fd:ac:5a:fa:f3:8e:35:9e:4c:ea:02:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EA:A3:27:C1:DC:47:A9:76:60:92:FA:0E:60:93:BC:F6:C7:67:E3
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/B-qjJ8HcR6l2YJL6DmCTvPbHZ-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b6c3::-2a0c:b6c6:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:d2:54:06:4f:ff:ab:e3:d4:af:46:c1:d8:d1:9f:d9:5a:
         4a:cb:3f:f2:76:df:3a:a9:f3:80:aa:f4:ef:46:13:3f:05:a9:
         59:7d:32:8a:bf:46:c1:5e:20:1b:d5:cb:42:83:e0:09:22:43:
         e4:e8:ab:15:c8:a4:b6:c7:ba:1a:c4:e0:c1:7f:76:32:d2:f3:
         c6:18:e9:38:ad:12:85:8f:59:65:ac:df:56:e4:08:e2:58:83:
         56:cc:7f:88:ed:27:e1:96:e3:84:6d:3b:98:ff:72:9c:7f:8a:
         a1:b3:b9:d2:ec:a2:1b:52:45:99:53:d9:56:e5:0f:55:1f:55:
         ea:fd:65:9e:fb:54:28:32:ac:58:b8:e5:75:fd:dc:cf:5b:2b:
         37:ce:95:57:42:5a:05:b3:e7:8a:30:86:21:58:81:a1:85:d0:
         9a:67:a8:84:02:c4:0f:7e:48:c4:fd:ee:8c:81:ce:4b:59:d6:
         4e:02:d1:36:24:4a:17:18:3b:d1:80:d9:94:4a:c2:ee:0c:23:
         ae:40:6c:23:60:e0:91:16:7d:47:47:dd:6b:74:ba:00:ea:20:
         66:bb:00:f5:a7:6e:aa:20:b3:c3:4e:ab:6e:80:e2:ab:16:49:
         28:e9:fe:15:07:45:6a:e4:90:57:c1:7a:d4:4f:02:3e:99:8b:
         27:33:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----