Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/ldLEKJHW7qrp7UQNlR9-Ij-CIa4.roa
File:                     ldLEKJHW7qrp7UQNlR9-Ij-CIa4.roa (raw, json)
Hash identifier:          YGUb2i0lGCoUigQ1tDQ2rihT56mLXllQbU8bBgfdCdo=
Subject key identifier:   95:D2:C4:28:91:D6:EE:AA:E9:ED:44:0D:95:1F:7E:22:3F:82:21:AE
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       018CC726DA121A83B685DC47AABFE90C10EE
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/ldLEKJHW7qrp7UQNlR9-Ij-CIa4.roa
Signing time:             Mon 01 Jan 2024 22:31:01 +0000
ROA not before:           Mon 01 Jan 2024 22:31:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     680
IP address blocks:        2a13:dd80::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 14:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:da:12:1a:83:b6:85:dc:47:aa:bf:e9:0c:10:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: Jan  1 22:31:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=95d2c42891d6eeaae9ed440d951f7e223f8221ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:48:58:6b:2d:04:96:28:ec:12:2e:6e:c0:
                    2b:97:42:34:19:65:fd:2f:84:89:d0:c0:33:5c:cf:
                    d1:6e:37:9c:33:e9:80:09:81:e3:cd:76:38:fe:32:
                    2c:c8:50:6f:c7:8e:e3:1c:18:ed:44:eb:e1:0b:d3:
                    49:89:ef:c7:74:2c:62:e1:4b:0a:67:c8:45:b1:c1:
                    1d:48:a5:97:e2:86:46:fc:f7:3b:fc:1b:26:c7:fb:
                    5f:17:d7:71:f1:d0:2b:2d:40:30:85:22:a3:6e:80:
                    26:97:99:9d:30:99:19:3b:3d:d0:ca:fe:6a:fd:9b:
                    5e:8d:fa:d7:2e:84:ef:b0:23:3e:11:d4:4b:20:2e:
                    09:fa:f2:88:8d:17:62:2d:c8:44:e7:b8:11:af:31:
                    41:c5:c9:ba:45:2f:e2:ed:f1:6f:19:d3:1f:49:04:
                    6d:5a:fb:82:f1:15:8b:78:cf:17:da:2c:8a:0b:61:
                    fb:a0:69:75:54:f9:b6:7f:b8:82:02:07:d3:da:8f:
                    ad:d3:c0:85:32:f9:9d:d2:5a:ad:4e:7f:0a:47:7b:
                    ae:53:26:7f:79:e9:70:3b:a3:0a:47:02:26:5e:b7:
                    83:6f:3f:d1:50:0c:0f:df:c6:c5:29:ad:07:37:52:
                    da:16:d2:64:43:5e:1f:68:06:0a:03:0e:b7:ca:b6:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D2:C4:28:91:D6:EE:AA:E9:ED:44:0D:95:1F:7E:22:3F:82:21:AE
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/ldLEKJHW7qrp7UQNlR9-Ij-CIa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:dd80::/29

    Signature Algorithm: sha256WithRSAEncryption
         42:26:32:ef:32:20:52:c4:51:c9:e6:12:f8:8e:33:e4:f2:6b:
         73:ee:6a:7d:c1:7f:2e:bd:74:d4:c6:40:06:e5:4e:a8:d5:e7:
         7b:da:fa:0c:28:22:31:04:13:c0:bd:49:89:39:34:e8:cc:15:
         ae:ce:91:16:97:4e:d3:1a:37:c5:9a:f9:84:14:b9:8a:8c:86:
         dd:b5:d7:7b:66:9d:97:c5:4a:85:60:35:94:1c:9e:b7:fc:58:
         96:bd:fd:96:68:df:e6:79:7f:da:87:7f:b1:65:c1:5b:0f:37:
         db:69:2a:1b:91:f2:c8:87:9a:35:85:db:62:b9:65:7b:73:bb:
         d7:6f:1f:f7:90:2f:88:42:49:1c:f7:b2:78:5e:2c:6a:7f:09:
         0d:85:58:2b:e9:7e:0e:f9:eb:09:b3:31:7a:76:06:0c:47:d7:
         ea:c7:f2:ba:86:88:c1:97:97:ee:50:8f:d0:df:71:9b:8f:9c:
         e3:fa:c1:d7:3d:7b:76:03:1f:0b:4e:cf:c1:12:b9:5e:80:bc:
         33:78:0e:09:cc:05:36:8f:5b:b8:c7:c6:27:0e:19:f2:bf:37:
         29:6c:9d:78:3d:c5:79:87:ae:44:cb:c3:d2:ae:ea:cc:a8:97:
         af:7e:e7:13:6d:a9:bb:50:0a:f8:95:a8:7e:12:c0:38:2d:d3:
         16:40:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----