Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/0A4XFdmvbVZwOQ5-eONAWBE9-ls.roa
File:                     0A4XFdmvbVZwOQ5-eONAWBE9-ls.roa (raw, json)
Hash identifier:          rpJZu54j4A/m11ygr38X8bBGoSvJ9ttjdukOu5d1Usc=
Subject key identifier:   D0:0E:17:15:D9:AF:6D:56:70:39:0E:7E:78:E3:40:58:11:3D:FA:5B
Certificate issuer:       /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial:       0190A559A65BCE7AFFDCF78AE81F60E23AEF
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/0A4XFdmvbVZwOQ5-eONAWBE9-ls.roa
Signing time:             Fri 12 Jul 2024 05:10:34 +0000
ROA not before:           Fri 12 Jul 2024 05:10:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63801
IP address blocks:        2a12:f8c3:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 02:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a5:59:a6:5b:ce:7a:ff:dc:f7:8a:e8:1f:60:e2:3a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
        Validity
            Not Before: Jul 12 05:10:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d00e1715d9af6d5670390e7e78e34058113dfa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:c0:71:27:6c:ec:af:1e:20:3a:a2:db:10:
                    61:af:aa:ac:09:a7:04:89:f3:23:51:fc:10:bf:8f:
                    77:10:2d:55:24:1f:08:b6:35:f7:4c:20:11:4a:cf:
                    de:3a:26:1b:29:04:fa:5a:fa:1d:40:9c:6a:cd:e2:
                    f9:89:16:1a:3d:9d:bc:93:48:ad:d0:94:b1:4a:c5:
                    83:b5:7d:ba:fa:68:cd:f5:a7:c5:bb:ba:aa:ec:d5:
                    bc:ca:18:67:9c:f6:47:2d:38:b5:e0:d2:13:72:fb:
                    54:85:47:e1:45:e8:8c:bf:6d:8c:17:74:a1:70:a9:
                    3d:ec:9b:91:13:66:56:7d:fa:94:61:d1:39:22:8f:
                    bc:db:ce:e1:ba:54:c6:d3:3e:a0:72:39:8f:e3:ba:
                    a5:10:21:10:f9:89:0a:3d:cf:8a:13:ad:ec:ff:f0:
                    b9:0a:d6:32:80:87:e3:bd:59:08:a7:95:14:51:35:
                    a2:70:78:1c:ab:44:d5:48:86:f3:0c:8f:4c:2a:c4:
                    3c:18:fd:d7:bd:9a:64:1d:04:b7:55:a3:94:f2:9a:
                    76:a3:5e:82:c9:f5:b7:0e:91:79:19:04:09:a2:4e:
                    b4:53:23:15:f8:18:56:02:89:7c:4b:77:d8:a9:28:
                    65:81:38:d8:5b:e8:43:3c:6b:c3:ee:e1:25:c1:25:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0E:17:15:D9:AF:6D:56:70:39:0E:7E:78:E3:40:58:11:3D:FA:5B
            X509v3 Authority Key Identifier:
                keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/0A4XFdmvbVZwOQ5-eONAWBE9-ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:f8c3:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:fb:c0:e4:0b:9d:b1:07:5a:1d:16:e5:20:11:5d:6b:7f:
         9f:cb:0f:d9:d6:22:6e:32:68:a0:9c:d4:10:03:dc:67:a4:41:
         cb:2e:43:2d:e5:ab:0e:e5:3b:25:da:fd:5c:38:ef:34:66:e9:
         30:60:7a:3c:da:fb:4f:1d:15:34:90:86:f9:ba:85:5b:8d:63:
         76:69:5c:f6:a3:ca:09:40:77:c6:4d:43:a9:a9:d1:0c:17:86:
         9d:80:dd:13:5c:57:8b:d7:74:2e:d2:ee:7d:43:75:d3:45:af:
         8c:c3:2e:02:a3:a9:95:9b:19:96:b0:2d:bd:54:ba:e0:b0:1b:
         aa:10:d9:b9:f7:8d:06:ad:d8:db:a9:79:fe:73:9f:c5:36:eb:
         72:cc:02:1c:62:7c:16:3a:fa:66:b1:3f:a2:4f:1e:c3:6a:6c:
         fc:8a:9c:a5:89:62:c7:bd:37:e3:be:80:d7:c7:e9:fc:f3:89:
         20:21:2c:4e:97:b0:28:5b:2e:be:b6:69:06:c7:41:8a:c2:ce:
         47:fd:f4:49:4b:61:d1:ce:c1:0b:81:ce:75:7d:b9:f2:ff:91:
         2b:eb:70:73:1b:78:ce:ad:91:4e:b5:d0:28:2a:a2:32:46:67:
         31:f3:6d:a7:0f:93:b7:4e:a2:6a:b6:55:60:c4:11:3d:37:ea:
         af:33:a5:03
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZClWaZbznr/3PeK6B9g4jrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjQwNzEyMDUxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDBlMTcxNWQ5YWY2ZDU2NzAzOTBlN2U3OGUzNDA1ODExM2RmYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj/AcSds7K8eIDqi2xBhr6qsCacE
ifMjUfwQv493EC1VJB8ItjX3TCARSs/eOiYbKQT6WvodQJxqzeL5iRYaPZ28k0it
0JSxSsWDtX26+mjN9afFu7qq7NW8yhhnnPZHLTi14NITcvtUhUfhReiMv22MF3Sh
cKk97JuRE2ZWffqUYdE5Io+8287hulTG0z6gcjmP47qlECEQ+YkKPc+KE63s//C5
CtYygIfjvVkIp5UUUTWicHgcq0TVSIbzDI9MKsQ8GP3XvZpkHQS3VaOU8pp2o16C
yfW3DpF5GQQJok60UyMV+BhWAol8S3fYqShlgTjYW+hDPGvD7uElwSVR9QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNAOFxXZr21WcDkOfnjjQFgRPfpbMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvMEE0WEZkbXZiVlp3T1E1LWVPTkFXQkU5LWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhL4w0Aw
DQYJKoZIhvcNAQELBQADggEBAEWM+8DkC52xB1odFuUgEV1rf5/LD9nWIm4yaKCc
1BAD3GekQcsuQy3lqw7lOyXa/Vw47zRm6TBgejza+08dFTSQhvm6hVuNY3ZpXPaj
yglAd8ZNQ6mp0QwXhp2A3RNcV4vXdC7S7n1DddNFr4zDLgKjqZWbGZawLb1UuuCw
G6oQ2bn3jQat2Nupef5zn8U263LMAhxifBY6+maxP6JPHsNqbPyKnKWJYse9N+O+
gNfH6fzziSAhLE6XsChbLr62aQbHQYrCzkf99ElLYdHOwQuBznV9ufL/kSvrcHMb
eM6tkU610CgqojJGZzHzbacPk7dOomq2VWDEET036q8zpQM=
-----END CERTIFICATE-----