Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/09VI7jDwVWTOKQ0wNd-i6naU26g.roa
File:                     09VI7jDwVWTOKQ0wNd-i6naU26g.roa (raw, json)
Hash identifier:          VbF1ZEMCHQKQ+Zfu+0Vh2XuIXprM807Bb2N2ZytqgMc=
Subject key identifier:   D3:D5:48:EE:30:F0:55:64:CE:29:0D:30:35:DF:A2:EA:76:94:DB:A8
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       0192B99314D5FFB5F9206C9ADCF30C68E258
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/09VI7jDwVWTOKQ0wNd-i6naU26g.roa
Signing time:             Wed 23 Oct 2024 13:31:17 +0000
ROA not before:           Wed 23 Oct 2024 13:31:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a01:48a0:4001::/48 maxlen: 48
                          2a0d:95c1::/32 maxlen: 32
                          2a0d:c103::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 10:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b9:93:14:d5:ff:b5:f9:20:6c:9a:dc:f3:0c:68:e2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Oct 23 13:31:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d3d548ee30f05564ce290d3035dfa2ea7694dba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:0a:14:9f:18:be:42:4b:4a:6e:b1:51:03:
                    73:85:59:cf:96:b7:c2:7b:f9:0b:eb:6f:8d:b5:86:
                    cf:01:3c:a7:da:27:59:3c:75:26:04:84:42:7e:cf:
                    f4:24:9d:57:25:a9:d7:b0:39:42:03:03:ef:cc:62:
                    8b:ec:35:ef:a8:13:f9:41:06:b8:8c:25:62:e3:56:
                    93:6d:dc:8a:1f:2f:57:d1:56:cc:dd:c2:25:73:d6:
                    ff:42:dc:d5:9f:72:e2:40:94:46:ba:53:5e:14:7d:
                    b0:d3:9d:be:bc:93:8c:fc:d8:de:2d:7e:6b:89:94:
                    79:e6:b6:a0:84:ab:77:11:4e:9f:50:6e:f3:75:69:
                    4b:99:ae:10:cb:c9:1f:34:be:04:7b:9d:f2:c2:65:
                    26:36:1b:c1:79:b5:78:25:4b:1e:a6:5a:de:83:90:
                    0f:8b:83:17:87:73:f1:33:ef:93:00:23:f3:c6:21:
                    a5:8a:90:ac:8b:0c:99:17:4d:8c:71:99:80:ff:df:
                    b0:36:fc:72:0e:46:9a:9a:3f:9d:66:e0:35:84:cb:
                    ef:72:13:ff:c4:75:31:29:83:65:69:b9:c4:ea:e6:
                    34:e5:42:d9:99:ae:00:5f:99:11:8c:da:8e:a2:11:
                    56:f2:91:02:5e:47:b5:c8:17:98:12:12:22:a8:11:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D5:48:EE:30:F0:55:64:CE:29:0D:30:35:DF:A2:EA:76:94:DB:A8
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/09VI7jDwVWTOKQ0wNd-i6naU26g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:48a0:4001::/48
                  2a0d:95c1::/32
                  2a0d:c103::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:11:a0:b8:4b:e6:c4:50:85:cd:ca:88:6a:e5:03:fb:0b:fa:
         2e:c1:02:f7:1d:e4:d4:48:7e:28:68:88:f5:94:eb:7a:09:89:
         42:7d:86:e6:c7:8e:83:50:07:6b:50:1e:74:c1:61:19:c6:92:
         97:65:93:f4:0f:fc:69:fe:6a:53:f8:fc:6d:b5:c0:e0:da:33:
         9e:45:de:37:43:88:37:e1:55:82:bd:89:db:1e:03:03:2f:94:
         6a:9c:a8:14:5c:ec:5c:7a:41:19:a5:6e:06:03:ae:4f:25:6e:
         9c:03:34:cd:2c:1e:82:ec:0a:71:3a:2b:07:98:c5:51:1d:6e:
         79:1a:be:03:f4:e2:fb:e5:26:d1:a5:2d:2d:18:36:d7:a2:82:
         5e:5f:f6:7c:5b:e2:3b:1c:73:72:5b:7a:37:a3:24:ba:f3:84:
         b5:bc:57:57:d1:d8:67:17:4a:c5:7b:5e:a0:cf:5d:69:f7:c8:
         a7:94:76:d4:6d:e3:cb:c8:64:6c:11:0e:46:92:80:a6:95:9d:
         8c:a7:ff:3c:2e:3e:dd:f5:3e:5d:14:82:05:f1:09:73:57:da:
         67:28:78:93:37:1c:2c:9a:15:0d:47:46:19:bd:f1:fb:74:41:
         8b:27:db:fe:9e:43:ae:e1:7d:ba:57:ba:01:61:48:a2:33:aa:
         76:90:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----