Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9UnDViF8M7UpI_ChRnL5nSPAGOs.roa
File:                     9UnDViF8M7UpI_ChRnL5nSPAGOs.roa (raw, json)
Hash identifier:          v8HKhhFdFCUImW2J+FDuA4XgPJLPw+99KT7iloUdZlQ=
Subject key identifier:   F5:49:C3:56:21:7C:33:B5:29:23:F0:A1:46:72:F9:9D:23:C0:18:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0191B830AEF48F16BC964C1B313A0E90D0B8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9UnDViF8M7UpI_ChRnL5nSPAGOs.roa
Signing time:             Tue 03 Sep 2024 14:01:23 +0000
ROA not before:           Tue 03 Sep 2024 14:01:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212248
IP address blocks:        2a06:de06:388::/45 maxlen: 48

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 02:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b8:30:ae:f4:8f:16:bc:96:4c:1b:31:3a:0e:90:d0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  3 14:01:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f549c356217c33b52923f0a14672f99d23c018eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:3b:65:65:27:bf:07:e1:79:a8:4c:80:ba:
                    38:32:6b:2c:de:ea:78:53:d8:1f:d0:22:57:02:be:
                    3f:2d:4c:4b:77:af:2c:d5:c0:25:d8:d2:20:4b:69:
                    71:47:60:91:1f:a5:4a:08:e3:5c:b9:a7:a6:24:07:
                    f6:96:20:5a:e3:0b:fc:da:9c:30:46:f8:24:22:d6:
                    30:a6:88:9f:33:a4:d4:74:45:2d:35:f9:93:b0:22:
                    d2:d5:3e:b7:a9:d4:5b:ec:dc:1d:b7:e3:91:f9:91:
                    c6:63:a3:1d:b8:01:ca:3f:cf:e7:ed:9e:76:11:9e:
                    36:16:2c:4e:fe:e6:70:60:e6:e4:b5:f8:bd:20:cc:
                    9f:42:6a:68:8c:8a:56:de:7e:78:2a:5e:ca:ac:86:
                    6a:2b:49:b7:84:d7:4d:ec:4b:34:a0:d3:78:cd:d3:
                    df:53:9b:ca:a8:5a:dd:fa:eb:57:8c:97:7d:48:75:
                    c3:0d:f5:bc:9e:a2:c4:5f:fb:85:97:ce:16:0d:c6:
                    df:2d:37:44:f4:43:8f:0c:25:b3:9c:74:d7:89:0a:
                    68:e6:b5:b3:9e:c2:b0:df:ff:23:f4:e7:c3:37:5a:
                    e0:37:80:d9:29:bc:d3:21:ee:9f:9f:2b:0a:b9:38:
                    71:e1:83:e7:0c:e7:6e:a6:34:17:94:5e:61:fa:31:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:C3:56:21:7C:33:B5:29:23:F0:A1:46:72:F9:9D:23:C0:18:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9UnDViF8M7UpI_ChRnL5nSPAGOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de06:388::/45

    Signature Algorithm: sha256WithRSAEncryption
         21:bb:e6:99:a4:94:3c:68:54:87:7d:97:19:12:82:45:5a:86:
         e4:4c:4e:59:ef:07:a9:c8:17:39:0f:28:78:f7:36:58:ca:86:
         69:2e:97:fd:8d:c2:7b:62:a5:10:14:dd:af:79:d8:18:04:20:
         17:e5:a0:9a:b2:ca:c2:37:38:f6:9e:cc:0e:c2:97:2d:1c:2e:
         3a:01:17:3a:19:c2:3f:bf:04:a6:4c:e7:58:ee:7d:81:c4:d6:
         03:d2:fc:6d:97:6c:1c:2f:82:68:9b:bb:01:ed:99:b3:a8:55:
         68:97:b8:4e:57:f3:0a:1a:67:9d:b3:4e:d6:be:08:1f:97:56:
         40:72:d5:37:a3:6c:31:5e:11:b6:c9:9b:0a:14:12:be:42:d7:
         06:05:cb:79:b1:f8:67:b6:8c:0d:26:95:21:cf:fc:6d:68:f7:
         6d:2c:7b:3b:1c:84:89:af:17:9c:c9:0f:86:11:20:ae:53:4f:
         b7:4b:da:f8:12:67:95:9d:4b:96:66:75:24:57:9e:52:2d:ad:
         e6:59:3d:1e:1a:2c:1d:c3:b4:40:a3:69:16:1a:a1:df:d9:5b:
         e5:f3:3d:8f:58:ee:fc:21:58:9b:f2:89:84:09:ce:fc:4d:8e:
         d4:40:fb:15:39:2b:75:27:d4:a9:35:5a:b1:0a:4a:f2:24:f7:
         ff:e3:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----