Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/1-SEBRj2ddVI3w1uHK4y3vj6cj50.roa
File:                     1-SEBRj2ddVI3w1uHK4y3vj6cj50.roa (raw, json)
Hash identifier:          GRnQARm8itiPg4e0GddPxLaeb0/X8MOyeJWJFOhH3xw=
Subject key identifier:   F9:21:01:46:3D:9D:75:52:37:C3:5B:87:2B:8C:B7:BE:3E:9C:8F:9D
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       018572C359BE6AB8C2BC8D4C185FA1259AC1
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/1-SEBRj2ddVI3w1uHK4y3vj6cj50.roa
Signing time:             Mon 02 Jan 2023 13:54:43 +0000
ROA not before:           Mon 02 Jan 2023 13:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201110
IP address blocks:        2a05:6740:40c6::/48 maxlen: 48
                          2a05:6740:40c4::/48 maxlen: 48
                          2a05:6740:40c5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c3:59:be:6a:b8:c2:bc:8d:4c:18:5f:a1:25:9a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jan  2 13:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f92101463d9d755237c35b872b8cb7be3e9c8f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:9e:0c:8a:12:2f:f6:49:cd:73:ac:a1:69:
                    fd:c8:01:1e:0e:db:76:6d:28:9f:d3:1d:82:74:35:
                    04:df:9f:ab:c9:b1:3e:9d:22:ce:0d:59:6e:f6:af:
                    6e:09:bb:4f:86:2b:91:2f:c6:5a:47:1f:02:a0:74:
                    5f:09:93:af:6d:94:67:28:d3:90:21:3b:8c:b3:0c:
                    2b:56:81:11:eb:a1:39:7f:7f:e2:ec:2f:e6:ad:77:
                    cc:80:ce:57:73:36:35:d5:95:b7:2a:0c:cf:62:aa:
                    69:a4:47:da:b0:00:72:da:66:77:fe:f2:c4:20:66:
                    f1:e6:24:90:2a:35:67:45:3e:33:9c:0d:e9:d8:d7:
                    46:76:ca:99:57:58:ee:eb:92:15:6a:c8:0e:c3:af:
                    2f:85:1f:71:48:c8:5e:f8:d4:f6:b4:e3:12:ce:82:
                    68:c5:62:ff:d8:f6:fb:51:1e:6f:47:67:8f:00:0e:
                    fb:2a:b4:28:a1:94:12:58:d5:4a:94:ef:3c:f5:1c:
                    d0:0c:6c:f9:22:04:f8:ac:4a:63:1d:ab:82:2f:bd:
                    47:fe:63:91:01:d9:c8:51:2b:cc:13:21:f6:aa:64:
                    f0:a1:3c:bd:3c:bd:63:e5:d0:ed:4b:0b:af:ec:11:
                    45:60:3d:31:20:a9:49:00:f6:c7:94:5f:e3:bf:77:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:01:46:3D:9D:75:52:37:C3:5B:87:2B:8C:B7:BE:3E:9C:8F:9D
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/1-SEBRj2ddVI3w1uHK4y3vj6cj50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:6740:40c4::-2a05:6740:40c6:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:e9:9e:b4:7b:a7:0a:95:9b:c8:d9:d7:6c:6b:1f:3e:e5:
         6b:22:56:56:f7:c2:56:41:ac:aa:b0:09:70:19:4c:19:c5:4a:
         6c:46:8f:15:10:c9:a8:8a:6a:e0:17:30:53:00:8a:0d:6a:08:
         a9:f0:d4:03:0c:58:a8:b3:83:9d:d6:c9:26:a3:c3:e4:fc:57:
         9c:fc:c7:bc:8f:f0:ea:63:a4:ad:e5:6d:2a:f0:cd:b9:d6:32:
         0d:62:db:b1:3b:aa:13:0c:b9:b4:8a:c4:ea:5e:ae:f1:71:6e:
         c3:00:ae:6a:68:47:bb:99:d9:98:04:48:c5:a0:16:53:8b:b2:
         67:3a:bb:6f:f1:4d:84:b5:69:9e:a8:a8:27:6c:db:70:07:83:
         1e:c8:bf:4e:4d:00:2a:67:96:0b:a9:d5:75:7f:c3:b0:b4:6c:
         b9:2e:09:e8:be:83:91:f0:4e:ac:27:96:7f:73:c5:cb:aa:d6:
         32:be:da:a3:5a:8d:6c:d6:10:fd:16:ce:07:ed:14:a2:d1:25:
         1a:f2:bd:73:69:64:d8:85:b1:79:9e:08:af:f4:c6:76:75:c6:
         53:ca:4e:83:5e:f9:b4:52:7a:5c:67:89:86:3b:18:dc:ad:c2:
         54:6e:6f:5b:f8:b2:3d:90:fd:0c:e5:83:f1:cf:6e:ca:14:58:
         ef:1a:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----