Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ciC1hvOaNPX7UAGakcSFCsU1Kz8.roa
File:                     ciC1hvOaNPX7UAGakcSFCsU1Kz8.roa (raw, json)
Hash identifier:          MQETDkG5BgsSfR4He7CwvNX4xNitbacuGLicq1ut4v8=
Subject key identifier:   72:20:B5:86:F3:9A:34:F5:FB:50:01:9A:91:C4:85:0A:C5:35:2B:3F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       01925937991045B5A36E16223659021FA815
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ciC1hvOaNPX7UAGakcSFCsU1Kz8.roa
Signing time:             Fri 04 Oct 2024 20:27:48 +0000
ROA not before:           Fri 04 Oct 2024 20:27:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214106
IP address blocks:        212.232.19.0/24 maxlen: 24
                          2a14:6780:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 15:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:59:37:99:10:45:b5:a3:6e:16:22:36:59:02:1f:a8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Oct  4 20:27:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7220b586f39a34f5fb50019a91c4850ac5352b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:28:60:a9:14:5d:af:d7:86:ef:d5:31:32:
                    55:e6:cf:2d:f6:79:2c:fc:2d:9d:b1:d6:c1:f1:2b:
                    42:15:5d:39:c0:e2:b7:d2:6c:8e:10:af:3b:30:ad:
                    3d:88:d7:ed:b5:ef:82:9c:10:e4:f9:53:01:a2:09:
                    58:61:a7:c2:25:9e:ce:18:4b:01:16:f4:20:a3:14:
                    4e:37:07:0f:67:ec:fc:d4:3d:21:d0:4f:0e:11:a4:
                    16:5a:2c:52:58:2d:3d:ff:2d:4e:ef:f9:4b:c4:0d:
                    48:cc:29:74:a5:75:f5:e2:4b:5a:9d:6a:5e:23:8a:
                    cf:8a:68:4a:08:19:3b:6d:2b:91:27:d3:bd:2c:6b:
                    22:6d:f6:00:40:af:5c:58:e9:50:1b:b0:65:20:ec:
                    62:27:32:f7:66:5d:2c:85:f6:e4:5f:b8:31:d8:b8:
                    2b:70:a0:c5:39:b4:82:74:35:4d:85:49:4a:9a:b8:
                    56:79:22:c1:83:8b:60:a8:a9:6a:ec:f5:b1:f3:d1:
                    ea:8e:d3:3c:44:12:ef:19:f6:7d:90:c2:89:10:30:
                    34:91:7e:18:0e:66:30:1f:ec:fa:b1:80:1a:c0:a8:
                    8b:32:9e:e9:c4:fc:0f:29:10:f4:c2:9f:14:e2:6a:
                    fd:53:b2:07:c1:9d:05:13:3b:66:01:e6:5f:33:f4:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:20:B5:86:F3:9A:34:F5:FB:50:01:9A:91:C4:85:0A:C5:35:2B:3F
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ciC1hvOaNPX7UAGakcSFCsU1Kz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.232.19.0/24
                IPv6:
                  2a14:6780:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:fd:26:c7:8a:27:59:a2:0f:94:aa:5a:9f:4c:55:41:55:
         76:d3:95:59:f0:6c:7c:ff:ce:cb:43:18:64:0d:93:64:a2:50:
         83:e9:4e:5a:08:69:91:39:0f:80:4b:dd:38:8a:5e:90:54:57:
         6e:bf:e0:d9:4a:48:64:f1:8e:39:d8:bf:09:4d:e5:d3:79:02:
         c5:4b:1c:fc:35:0e:da:68:01:cd:1b:b0:c4:0b:2a:69:04:21:
         08:70:e4:3a:15:c0:6c:e9:e6:55:1a:41:7c:b1:ea:30:31:0e:
         41:2d:3a:37:9e:2a:3c:b7:e9:41:00:1a:a7:ac:04:02:7f:1b:
         50:c6:ad:c6:ad:d7:a9:4d:86:d6:0a:58:a3:6c:04:12:f1:35:
         97:77:64:f0:af:dd:73:fe:d3:e7:34:81:d8:63:8f:8b:5f:d6:
         e4:6b:2f:cb:45:f9:c3:92:8a:66:ae:fa:cb:c0:4f:4d:60:27:
         7e:22:4a:46:fe:ed:89:f2:01:7c:f4:f2:57:63:85:d2:37:78:
         c8:48:2d:97:9c:d9:ae:c7:43:6f:40:aa:59:58:20:d1:e0:c4:
         10:c6:f0:3a:26:e6:1e:0f:5d:aa:bd:ea:a1:5d:93:1b:d3:42:
         c0:14:b7:f6:05:38:56:bc:23:29:7d:ad:57:91:d3:f0:aa:0e:
         d7:c5:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----