Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/_adtmygG8eFUbOM92sCCgDz-838.roa
File:                     _adtmygG8eFUbOM92sCCgDz-838.roa (raw, json)
Hash identifier:          ZyAPA0S1cFHjskHDH1RYVr4lKHu+jymrHKwJfsCv9Ns=
Subject key identifier:   FD:A7:6D:9B:28:06:F1:E1:54:6C:E3:3D:DA:C0:82:80:3C:FE:F3:7F
Certificate issuer:       /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial:       018EBD05616EF5D88034024A3EF17DF45CDC
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/_adtmygG8eFUbOM92sCCgDz-838.roa
Signing time:             Mon 08 Apr 2024 09:23:50 +0000
ROA not before:           Mon 08 Apr 2024 09:23:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a0e:7f42::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 12 Oct 2024 20:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:bd:05:61:6e:f5:d8:80:34:02:4a:3e:f1:7d:f4:5c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
        Validity
            Not Before: Apr  8 09:23:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fda76d9b2806f1e1546ce33ddac082803cfef37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:ca:78:c5:b5:0c:03:e9:3f:6b:e5:d1:03:
                    b8:13:95:63:3f:ae:53:ec:77:a2:c8:0b:39:13:b5:
                    75:2e:ae:ba:ed:ea:ff:ff:e1:f6:d9:ec:af:8a:db:
                    ca:07:f7:1d:23:4e:26:46:58:c4:bc:fb:48:d9:09:
                    6d:b5:7a:82:69:bf:88:a2:29:62:04:19:92:6e:10:
                    9d:e2:dc:9e:fe:9d:8d:42:4a:97:f0:ae:96:21:72:
                    c2:7a:76:f8:3c:93:2f:51:06:56:4e:28:55:df:cf:
                    27:16:18:c1:1c:d0:67:b7:94:c9:07:b0:e7:2b:d6:
                    dd:3a:6a:f3:ee:eb:70:2a:14:ab:cd:27:ec:59:97:
                    8a:ef:8f:1a:28:80:bb:54:4b:d6:40:e9:a6:8c:53:
                    8d:85:ab:21:7c:2d:96:b1:94:5a:35:50:92:19:6a:
                    80:67:31:a4:d9:99:c7:e5:00:0a:38:82:99:54:2a:
                    91:2d:d3:5b:5e:f4:78:79:7a:5c:3d:bd:67:c0:18:
                    8d:df:8d:31:b7:65:da:f7:ed:12:3f:55:af:9a:59:
                    28:6d:5c:3e:e3:f9:d7:de:3c:61:c3:34:76:24:e1:
                    15:59:c2:af:59:ea:19:87:f5:d4:fb:8d:55:6d:14:
                    25:f2:33:f8:87:e7:e5:96:04:9d:69:f7:5a:7d:6f:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A7:6D:9B:28:06:F1:E1:54:6C:E3:3D:DA:C0:82:80:3C:FE:F3:7F
            X509v3 Authority Key Identifier:
                keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/_adtmygG8eFUbOM92sCCgDz-838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:7f42::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:ad:b6:0e:4e:ee:49:09:0c:d0:e7:a3:46:cd:c2:b8:1b:c1:
         02:f3:54:50:9f:0a:98:cb:57:70:b8:99:71:66:f1:84:90:5a:
         0e:aa:7e:81:36:0f:bf:52:e0:20:ed:3a:57:39:7f:c5:4a:da:
         92:0c:fe:23:16:b5:ee:67:95:76:06:44:84:ee:ed:fc:f8:cf:
         e0:70:2e:ae:5e:02:76:35:88:ed:8c:55:38:d8:4d:52:06:01:
         4a:f4:47:db:06:54:45:8c:3e:ed:1c:f8:ad:fd:d4:94:33:25:
         7e:11:22:42:13:07:f7:ed:87:ed:24:e6:fd:8e:b8:e0:c7:2b:
         27:62:dc:bc:62:e8:6b:7d:26:2b:b9:5a:cf:db:fb:f1:c7:64:
         3d:e2:85:51:d5:0f:27:ef:58:f6:d1:14:c2:d3:67:e5:1b:60:
         7a:ee:84:56:36:a6:d4:2b:3d:8c:3b:62:c2:51:1f:1b:44:19:
         3c:b2:28:56:cf:ec:15:06:4c:d1:53:4d:46:db:2a:0c:ee:1a:
         55:1c:f3:05:6a:c1:28:3a:40:1a:b1:27:47:04:a3:df:e0:e9:
         fa:65:a7:08:9d:f7:51:2f:a1:d2:d9:71:03:c2:0f:5d:d6:61:
         4d:05:be:c6:86:e7:e5:00:51:09:92:73:36:04:01:5e:75:8a:
         4d:79:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----