Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/V5vW9zBoIsfvTUeuWkaGvvX6BSo.roa
File:                     V5vW9zBoIsfvTUeuWkaGvvX6BSo.roa (raw, json)
Hash identifier:          oIEAzggqyynIx27Y5rQWTIWXrRw+VzSOB0X6alzA+/E=
Subject key identifier:   57:9B:D6:F7:30:68:22:C7:EF:4D:47:AE:5A:46:86:BE:F5:FA:05:2A
Certificate issuer:       /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial:       018964C051AD795AC34F7E918838C6756339
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/V5vW9zBoIsfvTUeuWkaGvvX6BSo.roa
Signing time:             Mon 17 Jul 2023 16:47:52 +0000
ROA not before:           Mon 17 Jul 2023 16:47:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        91.210.69.0/24 maxlen: 24
                          2a09:9447::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 19:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:51:ad:79:5a:c3:4f:7e:91:88:38:c6:75:63:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
        Validity
            Not Before: Jul 17 16:47:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=579bd6f7306822c7ef4d47ae5a4686bef5fa052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:06:94:b7:59:68:d7:b5:f7:c0:9e:31:9c:
                    91:f3:34:75:f3:16:76:0c:40:78:f6:8f:14:9d:b9:
                    8f:47:6c:3a:5c:3c:92:54:25:34:16:06:89:ee:b5:
                    fd:30:7e:f2:bc:03:af:cd:46:f4:c4:f7:2b:2c:2f:
                    7a:a2:f9:6c:76:e4:54:19:ce:b0:5b:d6:cc:c8:60:
                    0a:c9:6f:75:2f:62:36:22:28:df:da:91:33:a8:9f:
                    8b:44:14:2e:cc:8a:bc:74:da:90:e7:6e:cf:9a:c4:
                    90:35:3c:88:2c:29:f6:65:14:71:a0:51:8c:71:34:
                    f2:30:84:2a:79:94:b2:f9:a4:99:2c:71:c8:e3:1a:
                    41:9c:b3:cd:b3:6c:21:f1:14:ea:50:e3:37:e4:6c:
                    6f:2e:02:f1:5d:6a:ac:10:46:e1:f6:2a:dd:e1:01:
                    6e:dd:88:42:5b:ac:98:fa:8a:48:b5:b9:93:eb:a0:
                    9d:6a:00:28:47:23:16:ed:1f:2a:d2:39:1e:57:b4:
                    b3:93:e8:4d:ee:88:86:01:df:ac:fa:d3:d1:4a:90:
                    79:03:21:9d:30:83:49:33:a3:d7:4f:9d:03:32:1d:
                    90:88:6a:31:18:9b:6f:aa:cc:c8:83:28:49:81:4f:
                    91:9c:88:8b:00:47:b8:5d:2c:03:fc:1b:56:bd:16:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9B:D6:F7:30:68:22:C7:EF:4D:47:AE:5A:46:86:BE:F5:FA:05:2A
            X509v3 Authority Key Identifier:
                keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/V5vW9zBoIsfvTUeuWkaGvvX6BSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.69.0/24
                IPv6:
                  2a09:9447::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:44:35:6f:9d:73:01:61:f1:41:53:85:e6:e9:ec:92:36:07:
         f7:d6:f1:df:f4:b9:03:aa:2a:61:83:ab:8d:3f:d2:41:11:1c:
         08:4c:0d:7d:6b:6b:3a:fa:51:17:ab:d1:e7:78:d6:2d:91:bd:
         ca:f8:a0:ce:dc:23:fe:c6:8b:33:3d:49:49:7b:36:33:6a:9e:
         e1:c5:f8:c5:fc:0b:20:c0:d6:00:e7:6f:ad:55:ab:60:8f:15:
         ef:40:bb:1e:eb:6f:88:3a:ac:a6:cc:63:22:e8:59:71:e5:8b:
         f3:5a:d6:8f:13:33:26:06:41:11:62:90:ec:05:0e:84:4d:cc:
         37:a4:f7:82:11:75:c8:a1:2d:b2:fe:b1:c9:2e:ff:27:31:03:
         6d:4c:f5:c8:82:c3:bb:9e:4a:70:30:f8:85:9e:04:a4:3b:fd:
         9e:60:91:38:c7:5e:38:4c:61:2c:ce:8a:65:e2:cd:56:e7:c3:
         25:33:70:e8:13:6e:11:a0:ed:3f:ac:b5:1d:44:83:d9:d2:05:
         ee:b0:24:e4:fb:dd:1c:1c:a4:b0:25:a2:15:f0:8c:10:39:fc:
         f5:c7:5b:5b:42:a1:b0:30:1d:ac:5d:78:c2:fa:50:8e:6a:62:
         85:5e:10:5b:21:0f:05:82:72:9b:87:2b:ac:ea:cc:0d:bc:48:
         c1:34:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----