Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/ix1_Y_kMOnI24sLf9RttFIh3EL0.roa
File:                     ix1_Y_kMOnI24sLf9RttFIh3EL0.roa (raw, json)
Hash identifier:          0guUMey0zbUexFzu2XN53L9KFcF3FXqDfzUV2EGh0EU=
Subject key identifier:   8B:1D:7F:63:F9:0C:3A:72:36:E2:C2:DF:F5:1B:6D:14:88:77:10:BD
Certificate issuer:       /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial:       018BC80B79A144020776DF4D536CE8A440C5
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/ix1_Y_kMOnI24sLf9RttFIh3EL0.roa
Signing time:             Mon 13 Nov 2023 09:37:57 +0000
ROA not before:           Mon 13 Nov 2023 09:37:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207713
IP address blocks:        2a05:541:135::/48 maxlen: 48
                          2a05:541:125::/48 maxlen: 48
                          2a05:541:140::/48 maxlen: 48
                          2a05:541:121::/48 maxlen: 48
                          2a05:541:141::/48 maxlen: 48
                          2a05:541:131::/48 maxlen: 48
                          2a05:541:126::/48 maxlen: 48
                          2a05:541:136::/48 maxlen: 48
                          2a05:541:137::/48 maxlen: 48
                          2a05:541:127::/48 maxlen: 48
                          2a05:541:132::/48 maxlen: 48
                          2a05:541:122::/48 maxlen: 48
                          2a05:541:123::/48 maxlen: 48
                          2a05:541:133::/48 maxlen: 48
                          2a05:541:138::/48 maxlen: 48
                          2a05:541:139::/48 maxlen: 48
                          2a05:541:119::/48 maxlen: 48
                          2a05:541:109::/48 maxlen: 48
                          2a05:541:129::/48 maxlen: 48
                          2a05:541:134::/48 maxlen: 48
                          2a05:541:114::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:0b:79:a1:44:02:07:76:df:4d:53:6c:e8:a4:40:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
        Validity
            Not Before: Nov 13 09:37:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8b1d7f63f90c3a7236e2c2dff51b6d14887710bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:09:aa:50:79:19:8b:20:2b:97:cb:d1:28:47:
                    a9:dd:38:09:26:ef:0d:f2:73:24:ca:b2:0d:bd:3f:
                    f5:b3:11:90:cf:78:55:86:d0:83:85:b9:eb:ae:e0:
                    c9:2d:f9:05:8b:3d:11:94:ee:65:bf:57:7d:e8:51:
                    bd:30:7d:40:f4:20:b4:b7:80:19:40:81:df:79:61:
                    ab:9c:38:a1:6f:93:48:92:02:29:38:97:3e:04:99:
                    17:11:a6:6d:06:1b:f2:b8:59:f5:75:e9:0d:0f:7c:
                    29:2c:ac:81:e1:b6:f1:aa:30:7e:51:9e:38:c9:f2:
                    b9:32:2f:5f:09:58:a4:c6:2f:62:90:80:56:51:ae:
                    fb:96:4e:e4:a7:43:2a:04:a7:89:6c:c0:8a:02:f1:
                    1e:d1:c8:51:89:a0:f4:32:37:87:a6:4b:39:8d:eb:
                    7c:08:d5:72:da:f8:28:bb:25:a1:40:7f:74:06:fd:
                    19:4f:6e:20:a0:1b:67:63:1e:2d:7a:81:cf:8f:c0:
                    e2:fe:63:df:b2:a3:83:f6:6f:d9:98:b7:70:74:0f:
                    49:db:88:68:f2:0a:cc:cc:14:c0:7d:3c:59:31:93:
                    1d:ac:73:92:db:cf:06:c0:16:fc:9e:b7:33:71:f4:
                    dc:5e:cf:62:e4:e7:2c:f4:4b:c4:1f:fb:1f:47:07:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:7F:63:F9:0C:3A:72:36:E2:C2:DF:F5:1B:6D:14:88:77:10:BD
            X509v3 Authority Key Identifier:
                keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/ix1_Y_kMOnI24sLf9RttFIh3EL0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:541:109::/48
                  2a05:541:114::/48
                  2a05:541:119::/48
                  2a05:541:121::-2a05:541:123:ffff:ffff:ffff:ffff:ffff
                  2a05:541:125::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
                  2a05:541:129::/48
                  2a05:541:131::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
                  2a05:541:140::/47

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:b2:ad:45:95:8f:d4:d9:ce:60:3b:43:d6:ed:ed:a3:7a:
         f6:f7:9f:fe:28:7c:53:20:5c:68:fd:6d:fe:48:19:9f:e4:3e:
         c2:a3:1d:c0:0c:aa:bb:93:80:7f:cd:a9:2f:c2:da:84:b1:32:
         47:41:04:06:29:cc:b9:dc:57:f6:1d:b6:4f:cc:22:80:6f:17:
         9c:dd:ba:b6:ae:88:03:87:20:c3:48:cf:95:d9:4b:15:d1:c8:
         6f:80:3d:b9:a4:4f:23:91:e4:55:bf:5b:01:7e:69:4b:b0:67:
         6b:de:a5:16:e9:6e:c6:16:fe:e1:5d:b3:91:b2:a3:ce:05:41:
         dc:20:ac:5c:f9:06:f0:f1:19:b8:c6:da:60:e7:af:79:d5:98:
         12:32:a0:d8:e7:bb:8c:44:c7:9e:c5:2f:03:fc:de:aa:5c:a0:
         6e:a3:97:0a:0e:7c:32:f3:6f:21:06:9e:d8:b3:67:62:ef:7c:
         ad:52:b4:bd:4c:b1:3b:b3:05:c5:fb:2a:20:52:5b:c7:e5:57:
         e9:90:82:8c:e1:82:9c:b8:30:01:cf:f5:cf:c9:54:ae:49:a2:
         4e:7e:f8:9b:60:34:82:9e:b4:6c:ef:33:72:24:51:6f:d6:3c:
         a9:9a:d0:11:ad:89:de:0a:33:78:60:d3:3a:69:91:02:c4:03:
         86:35:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----