Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa
File:                     BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa (raw, json)
Hash identifier:          pr1SKFtA6ThcQx9sy0BbsimchKCODXtrWr1EpKm/jQk=
Subject key identifier:   04:A2:1E:D2:28:3F:4C:88:26:03:88:B0:FF:04:6B:92:AB:7E:1F:93
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CF54C82964360B8F3394FEE789BB1D39E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa
Signing time:             Wed 10 Jan 2024 21:34:41 +0000
ROA not before:           Wed 10 Jan 2024 21:34:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215751
IP address blocks:        2a10:cc40:cc40::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 16:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f5:4c:82:96:43:60:b8:f3:39:4f:ee:78:9b:b1:d3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 10 21:34:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=04a21ed2283f4c88260388b0ff046b92ab7e1f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:bd:6d:65:e0:42:d1:52:5b:24:03:0d:98:
                    7f:4a:a5:b9:78:54:f0:84:ca:57:23:44:ef:8b:a6:
                    19:11:ec:8b:f8:45:6d:26:b7:a4:7c:61:23:f3:d7:
                    66:aa:b7:32:25:73:d2:0d:5c:79:95:15:ab:7e:95:
                    3f:50:8f:92:b5:7a:cf:56:5b:1f:2a:31:4e:20:1a:
                    a4:53:b6:e0:75:ca:ad:ad:30:d8:df:25:fc:03:d7:
                    d0:72:61:e3:67:6e:6f:25:97:ea:2d:8a:09:18:a0:
                    88:78:d5:ed:8f:c2:ea:2f:54:dd:47:eb:fa:07:31:
                    d7:5c:f4:25:02:29:d7:b8:6e:86:e2:d1:c0:33:dd:
                    04:95:22:7e:d5:a6:90:29:d2:4e:f7:c3:ab:74:6a:
                    0d:dd:69:36:ca:ec:61:53:08:ab:c0:35:52:4f:a7:
                    47:ba:c1:c2:f8:e4:41:5c:9d:ff:07:f7:f2:9d:62:
                    e1:8d:d1:3f:57:00:07:4d:27:2f:3e:71:8f:77:01:
                    49:43:44:28:19:7c:39:2f:da:e8:38:52:54:8e:dd:
                    ee:a9:ce:bb:43:cd:a3:97:39:ce:62:80:25:fd:f0:
                    c6:5d:5e:03:4a:d5:20:ea:7a:85:ea:a5:b5:c4:5c:
                    e7:de:b5:06:47:42:81:74:87:0b:a6:1d:2b:1e:d7:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A2:1E:D2:28:3F:4C:88:26:03:88:B0:FF:04:6B:92:AB:7E:1F:93
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:cc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:3d:50:a9:f1:36:30:d1:1b:b5:13:10:7b:6e:de:1a:c1:66:
         8f:ca:47:2e:e9:75:21:20:07:63:af:48:4f:a9:11:cf:a8:79:
         ff:e9:e7:e9:8d:c1:c7:68:4d:7a:43:d1:43:b7:83:ae:77:d6:
         de:5e:b0:d6:55:33:2b:5f:c3:ca:1e:1f:72:ec:0c:9f:02:f9:
         3b:71:82:1f:75:ad:61:af:4e:66:20:22:f5:c5:cd:94:38:d2:
         fe:fb:f0:12:96:49:24:f5:56:36:c9:a6:8d:72:8d:32:10:e3:
         a2:b6:cc:25:11:13:d2:7b:de:a6:6f:2d:08:11:36:60:6f:c2:
         25:28:e4:c1:7a:bf:6a:f3:85:f2:14:81:e8:0c:fd:ff:79:63:
         45:6d:d8:28:30:79:61:7e:92:17:ac:f9:03:83:a0:c0:37:74:
         33:2d:2d:05:fc:0e:4e:19:6e:d0:0a:41:5f:e8:22:50:bf:86:
         d0:fe:ef:6e:06:3e:bb:e3:43:b4:6d:08:be:f6:c3:31:bf:e0:
         91:f4:0e:d6:62:c3:d8:a8:9b:1f:e4:55:53:67:34:89:43:01:
         9c:06:18:76:e9:46:9f:b7:46:6e:92:9f:f1:a6:51:9b:ad:a5:
         ea:71:57:a9:06:2b:28:cb:f1:e2:23:c8:57:90:5b:fb:ed:e1:
         46:ae:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----