Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/0ELam2zYoeK9DgcOE0q3Qn-JTFQ.roa
File:                     0ELam2zYoeK9DgcOE0q3Qn-JTFQ.roa (raw, json)
Hash identifier:          jDjTM5zxoCAO5I/kLhs+2wVLuKXD7ohffHqfPHQpxTI=
Subject key identifier:   D0:42:DA:9B:6C:D8:A1:E2:BD:0E:07:0E:13:4A:B7:42:7F:89:4C:54
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       0187378F5BD9199B4A1DC0FF8C2B7FD371CC
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/0ELam2zYoeK9DgcOE0q3Qn-JTFQ.roa
Signing time:             Fri 31 Mar 2023 12:05:54 +0000
ROA not before:           Fri 31 Mar 2023 12:05:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57797
IP address blocks:        2a12:8ac1::/32 maxlen: 48
                          2a12:8ac0::/29 maxlen: 48
                          2a12:8ac0::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 25 Aug 2023 20:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:37:8f:5b:d9:19:9b:4a:1d:c0:ff:8c:2b:7f:d3:71:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: Mar 31 12:05:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d042da9b6cd8a1e2bd0e070e134ab7427f894c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:5b:1e:88:75:fc:be:c8:c2:4a:04:6f:f0:
                    c5:d3:88:da:52:35:e1:b9:c4:82:8b:bd:2b:3e:0d:
                    04:cf:9f:1b:68:42:3d:5d:2e:e0:cc:b9:3a:7c:eb:
                    93:ce:46:a0:67:fb:a5:91:da:af:c5:6d:bb:88:17:
                    24:16:61:13:39:82:80:8e:1a:b7:dd:44:40:5d:93:
                    d9:24:35:69:f6:ba:f2:23:f7:f6:0d:b0:2a:5f:ec:
                    ae:89:4d:ca:91:33:36:d3:48:b3:22:d7:35:0c:41:
                    de:1d:9d:6c:5b:9e:bb:3c:2c:60:ee:c6:56:19:e7:
                    a9:a2:ca:f5:9b:f1:3b:f4:02:e8:b7:df:e7:55:0b:
                    ed:c2:fb:22:d6:1d:41:cb:39:28:8b:5d:fb:31:1b:
                    39:6b:00:dd:9c:31:6b:34:bc:a8:db:09:8e:79:16:
                    50:33:8e:57:74:d6:63:df:4f:ad:37:37:3e:c2:91:
                    79:18:11:3b:51:eb:ee:f9:bb:65:43:6f:4b:89:23:
                    5c:71:0f:da:41:e4:f5:bf:96:be:d1:72:eb:0d:e6:
                    03:b1:3c:c0:58:4b:af:08:cc:6c:fb:9d:65:e9:ef:
                    b0:97:5f:dd:eb:97:e4:a8:51:6c:f9:db:4a:ae:54:
                    6a:a5:ae:bd:90:66:0a:89:ee:af:5c:9c:05:bf:e8:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:42:DA:9B:6C:D8:A1:E2:BD:0E:07:0E:13:4A:B7:42:7F:89:4C:54
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/0ELam2zYoeK9DgcOE0q3Qn-JTFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:a4:c5:5b:2f:d3:0d:c2:63:84:7d:29:6e:f9:9e:50:2e:
         fc:16:e1:84:29:95:e5:26:36:16:3b:95:c0:9e:f7:5d:23:35:
         13:de:01:cc:ee:97:ff:5d:44:0c:01:50:ff:0f:eb:ba:c2:59:
         8d:ae:be:69:f3:6c:a1:2c:92:1b:cb:79:70:7e:ca:ff:36:da:
         82:f7:e9:bb:b4:27:8e:f9:70:4a:cb:83:bc:c7:61:1c:93:1e:
         9d:fa:c2:0c:a7:f8:0e:c6:c7:14:f8:eb:b8:50:58:13:2c:8d:
         60:14:40:ca:b9:c8:88:af:81:95:45:ed:0d:89:09:2a:26:1a:
         58:87:82:52:0e:95:fd:30:ab:64:c0:3a:7e:c6:8b:a4:b3:f6:
         0a:63:06:f8:f4:99:c5:75:ec:e8:83:f7:54:f3:cb:37:f2:b4:
         59:c4:a6:b8:50:83:fa:f5:59:01:ca:a8:bd:86:7c:c8:0c:40:
         1b:32:0b:3f:0d:9e:a4:42:ef:9f:b9:5d:24:f7:03:30:e3:07:
         64:58:74:b8:4b:3a:31:69:ef:b9:90:59:04:b7:6c:cb:ab:48:
         fe:6d:54:72:57:17:4f:62:99:c2:35:39:12:09:b2:d8:c6:5e:
         7a:c8:ca:85:c2:cd:9a:64:93:9a:06:cf:13:e2:47:36:43:b5:
         27:e9:2a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----