Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/hV04wT07zkA5APfugBkbGH-6Ppk.roa
File:                     hV04wT07zkA5APfugBkbGH-6Ppk.roa (raw, json)
Hash identifier:          Ol8eJS42q9ziZMKKGl//v7ORNgQ1B4KXZQ9loTHFbjs=
Subject key identifier:   85:5D:38:C1:3D:3B:CE:40:39:00:F7:EE:80:19:1B:18:7F:BA:3E:99
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       018CC86F310EB764F4A7308F1F5E51BC17E9
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/hV04wT07zkA5APfugBkbGH-6Ppk.roa
Signing time:             Tue 02 Jan 2024 04:29:39 +0000
ROA not before:           Tue 02 Jan 2024 04:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134521
IP address blocks:        2a05:e580:fc00::/40 maxlen: 40
                          2a05:e580:fb00::/40 maxlen: 40
                          2a05:e580:fd00::/40 maxlen: 40
                          2a05:e580:fe00::/40 maxlen: 40
                          2a05:e580:ff00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 17:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:31:0e:b7:64:f4:a7:30:8f:1f:5e:51:bc:17:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Jan  2 04:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=855d38c13d3bce403900f7ee80191b187fba3e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:e1:fb:ac:91:f8:25:71:29:e2:d2:e7:e5:
                    2f:2f:a9:81:a1:57:58:72:f0:95:cc:3e:d6:fe:9c:
                    c7:3a:79:77:7d:f3:2b:0e:7c:2f:22:17:bf:54:d2:
                    2c:a1:9d:2f:8e:f2:c0:da:d9:87:f0:7a:d7:aa:61:
                    f7:dd:32:c5:1d:8a:11:91:7c:f7:55:d0:69:80:86:
                    33:39:85:61:a7:51:37:ef:2c:5f:d5:4f:4e:2b:a7:
                    96:9d:e7:b0:0a:7b:ce:ea:be:bd:9e:80:a1:a2:d9:
                    3e:5a:22:db:af:a5:bf:c9:88:00:b8:f0:9f:ff:1d:
                    87:8f:9c:f8:1a:c4:0d:30:74:ac:fc:ce:cf:83:e4:
                    12:47:3d:67:df:39:3b:da:df:e0:2e:28:fa:f0:73:
                    f7:8e:3f:ac:a2:8e:12:d5:48:99:52:c5:1c:50:5f:
                    9d:53:18:3f:48:ea:c8:10:4b:f9:e0:f0:68:3e:32:
                    21:c2:87:d0:11:8c:99:72:96:2b:13:4e:99:b8:d8:
                    af:ee:ec:13:9c:e3:a2:b2:72:4d:01:03:30:38:48:
                    d5:34:a7:8f:df:85:91:c7:e7:17:64:d1:46:9e:7e:
                    93:a0:a6:0a:f1:3c:be:b4:8a:f5:56:55:39:90:a2:
                    0d:e4:2e:5e:95:f3:08:28:2f:3c:87:7c:a6:fa:24:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5D:38:C1:3D:3B:CE:40:39:00:F7:EE:80:19:1B:18:7F:BA:3E:99
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/hV04wT07zkA5APfugBkbGH-6Ppk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:e580:fb00::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:2e:1b:86:b9:e0:a2:99:8f:9b:d7:41:ea:80:65:da:8c:
         d8:0f:e1:ae:79:f8:d6:6e:7f:08:b8:7a:58:5c:61:08:75:77:
         c7:b6:e2:2c:e3:32:26:64:ac:95:d5:2b:c3:3f:85:93:cb:0c:
         5c:5b:e0:ea:65:55:b8:92:1c:74:0a:15:08:d4:d2:76:00:a8:
         72:ae:95:99:e8:ff:44:dc:28:0e:e0:04:20:e5:ed:ed:1b:5d:
         27:65:f8:db:f8:ad:57:6e:22:c6:70:2e:1a:14:04:9d:32:42:
         65:98:1a:70:7e:2f:6a:4f:a4:16:9d:fd:9e:44:4b:07:76:e2:
         9a:46:ad:e1:b8:a1:a1:ff:7b:36:c9:f2:9d:ac:2d:47:65:92:
         f7:79:d3:4a:7a:f6:d1:f3:bd:bd:ca:b9:88:9a:0e:b6:d7:f7:
         4b:b8:76:5f:ae:7c:69:cd:f1:e7:c2:f5:22:ba:16:e6:95:63:
         d0:92:c8:3a:f6:9c:b5:35:e1:74:ce:d7:d8:42:eb:0a:d3:7c:
         d8:71:d8:33:f7:c3:a1:9a:f7:04:a4:a0:2e:2b:db:b6:02:76:
         c4:40:07:7a:f5:40:f3:93:16:77:9e:01:ca:0c:af:a8:7d:e5:
         50:34:20:36:1d:a3:d4:b2:4e:a6:21:f5:4e:67:6b:96:3d:f3:
         df:16:98:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----