Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/jmzgBifHJvVBcb-IsVVpZOE1x_c.roa
File:                     jmzgBifHJvVBcb-IsVVpZOE1x_c.roa (raw, json)
Hash identifier:          u/ietQOm7+sGj2TFJI35d/sw8ye7cIvn3X5bl6JTFd4=
Subject key identifier:   8E:6C:E0:06:27:C7:26:F5:41:71:BF:88:B1:55:69:64:E1:35:C7:F7
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       018C6436DCC89B317FD00134776B9030E3A7
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/jmzgBifHJvVBcb-IsVVpZOE1x_c.roa
Signing time:             Wed 13 Dec 2023 17:26:06 +0000
ROA not before:           Wed 13 Dec 2023 17:26:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215877
IP address blocks:        2a10:e300:fff0::/48 maxlen: 48
                          2a10:e300:fff1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:64:36:dc:c8:9b:31:7f:d0:01:34:77:6b:90:30:e3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: Dec 13 17:26:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e6ce00627c726f54171bf88b1556964e135c7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:48:67:ac:aa:aa:1b:9e:d0:2e:d8:12:5a:
                    2a:a7:63:98:93:dd:0c:55:c7:f2:3d:55:a9:c9:1f:
                    c6:3b:b2:3a:a0:fb:f1:70:c3:36:4e:b3:ed:06:09:
                    93:82:e1:d8:c4:49:77:d5:60:3b:00:35:e0:65:16:
                    93:ff:3a:e9:f5:b1:a8:65:dc:07:ca:e0:1c:1a:88:
                    07:8e:b2:d5:d3:84:be:09:91:51:39:4a:b5:4f:5c:
                    47:cb:05:b7:c3:7b:cd:71:e6:ed:c7:85:e0:b8:ad:
                    0b:a4:e5:9e:6a:39:fe:e9:e6:89:e9:93:12:92:63:
                    98:11:69:01:a2:88:df:b9:dd:b4:08:c9:73:0c:14:
                    5c:90:eb:b6:bb:d5:85:82:71:0d:1d:24:8b:39:d0:
                    1e:9c:84:64:4b:52:76:67:ea:d0:30:6e:c9:47:f7:
                    f7:f0:4f:22:23:6a:65:da:a4:58:74:79:b7:4e:96:
                    d1:57:38:58:9b:09:b0:4d:c7:1d:42:27:16:67:85:
                    1e:d5:f3:92:30:a8:0f:35:f4:9a:b2:7b:b2:8e:7d:
                    d1:ba:7c:cb:cf:94:40:74:42:66:d1:f8:12:b9:9b:
                    30:b8:b4:8c:3b:9a:54:6b:3d:28:3d:6b:37:12:40:
                    69:5f:a6:90:1f:8e:b5:dd:f1:98:69:f9:89:39:31:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6C:E0:06:27:C7:26:F5:41:71:BF:88:B1:55:69:64:E1:35:C7:F7
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/jmzgBifHJvVBcb-IsVVpZOE1x_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:e300:fff0::/47

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:86:25:aa:cb:39:8c:85:7b:da:c8:3f:a5:fa:63:b3:9e:
         76:0a:dd:52:48:99:eb:68:bc:c4:9d:3a:20:4a:63:d6:c6:a3:
         6f:49:3f:6e:e2:93:a2:6a:5b:57:b7:4c:91:a3:73:90:0d:62:
         4b:98:d6:89:b6:81:fb:1a:e3:0e:ac:0a:1f:ff:20:d2:23:35:
         d7:01:fe:93:dd:b8:a2:8f:86:77:91:fd:c9:98:d0:9d:1b:e1:
         f9:19:9b:02:6f:8b:56:7a:d4:fe:4f:da:ca:8b:15:6d:b7:4c:
         2d:87:f8:8f:14:05:d0:25:7c:df:a3:45:ed:e7:8a:04:10:05:
         58:2b:65:90:20:bc:e3:ba:0b:2c:20:c4:64:78:d1:12:8d:3d:
         31:06:bb:48:5c:77:78:b2:4d:ee:5b:ae:03:62:7d:6e:83:a5:
         b8:98:5b:58:71:80:d4:81:8a:11:3c:29:bb:8f:57:f8:4a:39:
         cf:ed:90:89:5f:fa:07:c3:fa:fe:8e:ae:dd:68:45:c8:39:a6:
         57:fb:71:c2:38:8c:c8:82:be:92:59:0f:c0:6b:18:e3:d5:e0:
         33:10:63:49:c5:b4:f6:57:c9:d1:b3:71:da:8d:de:d5:76:ce:
         b6:e2:01:c8:9e:1d:8c:1d:0f:e1:2f:4a:9b:e0:0b:ee:4a:81:
         f7:1f:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----