Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X6aAlgQYGTpBFKHAhuS8z4tOfzU.roa
File:                     X6aAlgQYGTpBFKHAhuS8z4tOfzU.roa (raw, json)
Hash identifier:          jnR7yafnFKr6oIl0ueVA9MzuscYQS/plZZi8Xvh69AM=
Subject key identifier:   5F:A6:80:96:04:18:19:3A:41:14:A1:C0:86:E4:BC:CF:8B:4E:7F:35
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019122EC1E58906264573CEF122FC47DE06C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X6aAlgQYGTpBFKHAhuS8z4tOfzU.roa
Signing time:             Mon 05 Aug 2024 14:23:05 +0000
ROA not before:           Mon 05 Aug 2024 14:23:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214645
IP address blocks:        2a0e:97c0:3b0::/48 maxlen: 48
                          2a0e:97c0:3b1::/48 maxlen: 48
                          2a0e:97c0:3b2::/48 maxlen: 48
                          2a0e:97c0:3b3::/48 maxlen: 48
                          2a0e:97c0:3b4::/48 maxlen: 48
                          2a0e:97c0:3b5::/48 maxlen: 48
                          2a0e:97c0:3b6::/48 maxlen: 48
                          2a0e:97c0:3b7::/48 maxlen: 48
                          2a0e:97c0:3b8::/48 maxlen: 48
                          2a0e:97c0:3b9::/48 maxlen: 48
                          2a0e:97c0:3ba::/48 maxlen: 48
                          2a0e:97c0:3bb::/48 maxlen: 48
                          2a0e:97c0:3bc::/48 maxlen: 48
                          2a0e:97c0:3bd::/48 maxlen: 48
                          2a0e:97c0:3be::/48 maxlen: 48
                          2a0e:97c0:3bf::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 16:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:22:ec:1e:58:90:62:64:57:3c:ef:12:2f:c4:7d:e0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  5 14:23:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5fa680960418193a4114a1c086e4bccf8b4e7f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:27:3f:14:c0:01:34:c5:b3:5e:58:18:28:
                    8a:71:5e:21:a1:65:3e:77:9b:44:ee:8b:57:b1:5e:
                    4a:f3:ea:65:58:85:9a:bf:93:62:60:34:e6:cd:8d:
                    eb:3f:1e:76:5b:f1:da:c2:67:ae:e5:d5:c0:5f:51:
                    fe:37:0b:f0:d2:4d:11:76:a5:ea:b3:99:3d:53:e8:
                    89:f5:5b:18:e5:2f:e6:ee:ff:c1:db:68:c7:e7:7d:
                    7b:e4:b3:86:f0:7a:f7:43:aa:52:15:aa:8b:14:89:
                    19:3a:fb:c7:6a:32:7b:82:98:10:0e:14:4e:0b:22:
                    82:ed:ed:38:5d:67:16:41:ce:9d:a3:d6:8a:f3:f9:
                    99:39:af:af:8d:9c:d8:51:b4:0c:ed:3e:d1:f0:4e:
                    65:c3:eb:fc:19:fc:84:8f:8a:4c:f5:eb:f5:bb:09:
                    7a:55:09:f3:72:fe:03:e2:03:e1:58:c4:93:3d:e2:
                    b2:cd:01:de:0d:4e:5a:11:d8:dd:a3:36:ab:49:4a:
                    6a:45:6e:cf:a4:01:b3:ba:43:cc:8e:19:89:1f:6f:
                    06:7d:f2:ea:0e:1f:0d:2f:d8:07:16:7a:1b:8c:41:
                    7c:e9:6c:d0:a9:75:d4:f2:18:c2:14:21:23:53:c7:
                    49:b5:a1:37:8b:2e:fb:fd:c8:25:c7:b3:65:ab:7a:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A6:80:96:04:18:19:3A:41:14:A1:C0:86:E4:BC:CF:8B:4E:7F:35
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X6aAlgQYGTpBFKHAhuS8z4tOfzU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:79:1e:ba:c3:d3:ce:3a:49:1e:ad:4c:ce:62:99:4c:89:dd:
         57:80:1d:70:75:62:3e:a4:41:9f:e7:1d:9e:53:29:15:f0:1a:
         4c:20:12:8a:46:74:bf:25:bb:ac:58:24:16:13:e0:24:98:1f:
         ba:92:11:f1:59:6e:53:e8:59:bf:7f:8b:bc:95:33:b2:30:8d:
         24:e4:a6:fe:0a:33:e4:e0:9e:8e:f1:41:1c:5d:d3:51:e7:e3:
         17:27:b6:bf:3d:76:e4:8f:01:6f:65:a8:a2:a6:70:db:25:7b:
         46:11:12:7b:b9:a0:0d:af:d0:aa:2c:c6:63:2f:36:5c:c0:1a:
         76:71:8e:9b:7d:1a:99:4b:b7:71:2d:65:1c:7d:ed:f5:95:0e:
         52:ba:10:fc:10:7f:c0:eb:a5:66:5a:40:34:c4:2c:54:46:5c:
         93:f2:6b:ca:7b:20:bf:0f:c7:1f:d2:0a:06:ac:bf:23:66:7f:
         66:55:92:38:25:0c:30:8d:78:8d:3f:d3:72:e5:58:98:0b:eb:
         d5:08:5e:45:d7:4e:77:c1:cf:1d:d8:09:fc:cd:fe:e7:77:6f:
         c6:50:47:1c:45:61:b8:95:f8:b6:dc:50:2a:e7:3e:cf:7d:32:
         3d:1b:ee:b4:43:ec:2f:9e:cb:68:2a:b2:8d:73:69:8f:22:df:
         f2:5a:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----