Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/C8ms-JrJnd400naXAaNA_3ZHwis.roa
File:                     C8ms-JrJnd400naXAaNA_3ZHwis.roa (raw, json)
Hash identifier:          ISI+meL6hJR7DUc2acDRbz0nCyp8ThYBt8v8LZs/bW0=
Subject key identifier:   0B:C9:AC:F8:9A:C9:9D:DE:34:D2:76:97:01:A3:40:FF:76:47:C2:2B
Certificate issuer:       /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial:       0188E217942E7610D8777B146D224BDAA2C6
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/C8ms-JrJnd400naXAaNA_3ZHwis.roa
Signing time:             Thu 22 Jun 2023 07:52:55 +0000
ROA not before:           Thu 22 Jun 2023 07:52:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207713
IP address blocks:        2a05:541:125::/48 maxlen: 48
                          2a05:541:122::/48 maxlen: 48
                          2a05:541:123::/48 maxlen: 48
                          2a05:541:129::/48 maxlen: 48
                          2a05:541:109::/48 maxlen: 48
                          2a05:541:119::/48 maxlen: 48
                          2a05:541:121::/48 maxlen: 48
                          2a05:541:126::/48 maxlen: 48
                          2a05:541:127::/48 maxlen: 48
                          2a05:541:114::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 10:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:17:94:2e:76:10:d8:77:7b:14:6d:22:4b:da:a2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
        Validity
            Not Before: Jun 22 07:52:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0bc9acf89ac99dde34d2769701a340ff7647c22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:5f:be:86:0d:67:7f:7d:d0:3c:85:1c:ad:
                    52:c1:39:50:dc:14:2e:e3:fd:e7:89:6d:6c:36:47:
                    33:fe:ec:3d:45:8c:95:6c:33:74:31:58:8d:55:b3:
                    39:e1:1d:71:95:f5:ea:04:66:a9:8b:db:90:7c:7b:
                    4d:ab:be:39:a7:ee:6c:e5:26:47:67:e8:3a:35:50:
                    be:b5:fd:09:50:bf:f4:4d:1c:c9:7a:8f:cb:11:1c:
                    76:b4:53:14:2b:3f:9f:f9:7d:1e:18:9d:1c:c6:fa:
                    22:01:59:24:01:d4:68:f2:cc:bd:c4:78:2a:b6:2c:
                    8e:db:67:8b:18:44:39:14:40:a5:f3:22:53:87:c2:
                    3c:67:8e:3c:84:97:7d:50:e1:5e:bd:5d:1d:9c:91:
                    e1:f8:bc:b9:5e:78:3b:2e:96:a3:56:91:78:ea:0d:
                    82:8c:5c:5c:76:df:82:f9:3f:0f:65:a5:2b:f4:b5:
                    ad:44:3f:55:f2:e4:55:6e:6f:4a:ec:20:06:2f:3c:
                    5f:c8:35:6f:53:07:76:88:ca:d3:48:ca:2c:e8:a3:
                    e4:7c:b0:ce:52:74:c0:2e:db:7a:83:ea:c7:90:af:
                    63:30:91:63:6f:ff:8e:1a:d9:28:48:e5:cd:9e:77:
                    17:6c:18:ed:02:e1:95:63:f3:1d:41:94:a6:18:71:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C9:AC:F8:9A:C9:9D:DE:34:D2:76:97:01:A3:40:FF:76:47:C2:2B
            X509v3 Authority Key Identifier:
                keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/C8ms-JrJnd400naXAaNA_3ZHwis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:541:109::/48
                  2a05:541:114::/48
                  2a05:541:119::/48
                  2a05:541:121::-2a05:541:123:ffff:ffff:ffff:ffff:ffff
                  2a05:541:125::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
                  2a05:541:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:c6:65:69:28:b6:ad:bf:c1:19:f9:69:33:e3:28:26:fc:
         05:42:95:ee:58:f0:71:28:a3:fd:1c:bd:e3:d6:27:cd:94:7a:
         d0:73:6e:af:f4:ea:bc:06:e9:e5:c8:bc:6d:fd:c9:f7:8a:12:
         fd:f2:d5:ba:75:82:aa:40:65:4e:81:fd:87:5a:12:81:20:5b:
         86:f3:f3:b3:b4:8b:e0:a4:89:68:13:b1:33:f8:09:e7:0f:2c:
         43:0e:93:79:e6:8a:d0:0d:a9:de:90:ad:93:df:21:5a:7c:70:
         6c:0b:e4:71:2f:4d:47:51:b9:89:93:56:45:50:47:ac:36:f5:
         04:34:d8:90:4b:35:48:8f:11:82:49:93:f5:e8:1a:c0:15:b0:
         ce:dd:e8:9a:ae:bd:70:18:c9:fe:38:f1:d3:9b:0d:cb:a5:43:
         d4:d3:47:35:1c:fd:b3:31:5e:6d:1e:64:7e:b3:d9:68:3a:3f:
         91:58:40:0c:d5:d8:76:3d:42:c3:a4:22:8c:0c:17:ac:4b:c3:
         75:b5:bd:26:3c:a9:5e:56:5b:7c:e9:20:94:32:31:d9:a7:9b:
         af:c7:65:04:77:62:0a:d4:4c:68:20:33:93:28:d4:a0:58:29:
         0d:70:d0:1b:f2:09:00:2e:79:e2:21:fc:4f:f4:95:15:76:98:
         a3:ae:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----