Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/piuFPiZsGm9Ke7tPdKfxtbFSqbc.roa
File:                     piuFPiZsGm9Ke7tPdKfxtbFSqbc.roa (raw, json)
Hash identifier:          9b0HlKlHGZW/QR9lNrdMfkWeW0U4p1hjv82r/eBBDpY=
Subject key identifier:   A6:2B:85:3E:26:6C:1A:6F:4A:7B:BB:4F:74:A7:F1:B5:B1:52:A9:B7
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       01926847CD001CF2FC7D23574F2BA811FA0A
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/piuFPiZsGm9Ke7tPdKfxtbFSqbc.roa
Signing time:             Mon 07 Oct 2024 18:39:48 +0000
ROA not before:           Mon 07 Oct 2024 18:39:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a09:d702::/32 maxlen: 32
                          2a0d:afc2::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 09:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:68:47:cd:00:1c:f2:fc:7d:23:57:4f:2b:a8:11:fa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Oct  7 18:39:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a62b853e266c1a6f4a7bbb4f74a7f1b5b152a9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9d:16:bf:d1:17:9f:c3:6a:9f:f3:cb:54:6f:
                    e6:6a:05:88:5f:f2:ea:46:5b:a5:55:cd:7f:a2:b3:
                    6d:77:2f:71:6c:f0:2b:ba:a7:be:ff:ce:e0:1d:43:
                    be:5c:33:6c:8b:b9:34:84:0e:16:9c:39:db:54:84:
                    cf:08:cb:42:90:b3:51:0b:d9:61:e7:e8:93:79:49:
                    d9:12:5a:9f:96:e9:eb:b5:67:51:81:4e:fc:65:7e:
                    de:c8:e5:af:51:99:17:c7:c9:59:1c:c6:73:8f:27:
                    4d:f3:5b:b8:41:0b:8d:93:3b:39:c4:9e:03:1b:5e:
                    a3:fd:b2:cd:36:cf:ff:46:f6:8f:eb:01:8c:51:e6:
                    98:da:b3:b3:d4:6f:8d:39:9e:8c:88:0c:d8:67:91:
                    d1:76:55:8b:5d:f6:97:87:0e:09:68:2d:55:24:a5:
                    7f:83:49:fc:12:75:24:ce:a5:d8:06:c5:78:36:1b:
                    32:c6:85:ee:f9:83:bb:b4:cd:fe:34:c7:79:a0:a2:
                    bd:bd:09:81:d4:d7:5c:85:d2:c4:f7:81:89:42:b6:
                    20:29:7c:2e:76:51:51:b1:65:af:00:9c:8d:49:d1:
                    da:00:57:dc:28:07:44:44:28:10:12:a1:55:98:e6:
                    b7:81:d8:35:e4:6d:19:3c:8e:6c:84:2c:5e:7f:48:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2B:85:3E:26:6C:1A:6F:4A:7B:BB:4F:74:A7:F1:B5:B1:52:A9:B7
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/piuFPiZsGm9Ke7tPdKfxtbFSqbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:d702::/32
                  2a0d:afc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:4e:ae:65:15:3a:af:69:3b:8d:26:84:d5:12:86:46:b1:4f:
         96:61:41:46:eb:c1:27:aa:24:49:c8:e2:23:e0:64:70:ad:a6:
         69:6b:e4:52:13:d1:3d:86:ee:30:2e:18:32:88:62:30:57:45:
         91:5b:69:5a:26:2d:e8:97:69:ba:6d:66:e9:44:d8:c6:91:4f:
         7d:1e:63:98:ba:14:09:cb:34:f1:8b:20:be:48:c1:79:42:30:
         3c:83:2e:7c:0d:d3:1d:f6:6f:a8:b8:3b:a8:30:43:99:fb:83:
         7b:59:14:62:8d:65:11:24:c5:d0:ce:25:5d:ff:ff:c8:97:56:
         e9:db:fd:49:30:52:85:76:f0:11:49:f1:aa:03:95:1b:93:62:
         77:d2:07:13:45:25:12:2b:4c:e0:11:2d:d3:3c:72:56:09:19:
         12:b1:69:d5:b8:1c:9c:47:93:22:6a:98:3f:4e:93:cf:29:3b:
         1c:8b:2f:4c:21:0d:d2:c0:04:a1:4e:ba:fd:9b:d4:a4:af:3a:
         82:ff:7b:c3:cc:31:2a:1d:f0:10:17:4c:31:72:79:74:c0:ec:
         12:61:15:49:13:c1:ce:34:4b:1c:6d:5e:8c:12:f7:5e:97:f0:
         b5:a1:2d:33:c3:2e:1d:d9:9a:c5:fb:92:6c:79:29:37:07:4a:
         a8:03:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----