Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/R9jb4hn60g-0-nU_VGWnP9l5Si0.roa
File:                     R9jb4hn60g-0-nU_VGWnP9l5Si0.roa (raw, json)
Hash identifier:          ByFKav8zMWrZRImjmPbIC+3ID5Z9k5ps5LywByWlhqE=
Subject key identifier:   47:D8:DB:E2:19:FA:D2:0F:B4:FA:75:3F:54:65:A7:3F:D9:79:4A:2D
Certificate issuer:       /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial:       01927D4AE1C7E9081B66380780B063D7EB86
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/R9jb4hn60g-0-nU_VGWnP9l5Si0.roa
Signing time:             Fri 11 Oct 2024 20:35:12 +0000
ROA not before:           Fri 11 Oct 2024 20:35:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0d:b9c1::/32 maxlen: 32
                          2a0d:b9c2::/32 maxlen: 32
                          2a0d:b9c5::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:7d:4a:e1:c7:e9:08:1b:66:38:07:80:b0:63:d7:eb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
        Validity
            Not Before: Oct 11 20:35:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=47d8dbe219fad20fb4fa753f5465a73fd9794a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b5:3e:d1:39:5d:a2:9a:fb:20:55:32:97:f2:
                    df:b0:ae:38:67:73:c4:e3:4c:9a:fc:56:69:d7:c0:
                    0d:a2:ee:fd:18:a1:b3:ab:ee:0c:c2:82:7d:ac:d2:
                    1d:0c:00:60:7c:88:82:71:22:cb:11:55:ce:c5:47:
                    80:00:dd:ff:25:62:88:3d:3e:46:cc:c0:7e:61:62:
                    33:10:a0:3a:41:ec:10:88:3a:1c:56:3d:39:b3:7d:
                    f6:48:8d:a4:c7:e6:0f:b0:fd:97:c0:ab:ef:75:a0:
                    36:0f:3f:81:35:d1:15:46:8a:1d:79:a1:78:a9:ca:
                    d8:99:0e:a6:ae:9c:9f:9c:81:84:17:f3:d6:ce:fc:
                    20:e6:dc:ad:8b:61:69:bb:84:78:ff:c4:80:db:88:
                    88:60:bd:3f:08:ac:38:3e:e5:09:47:6a:ba:62:e8:
                    8d:26:ed:c0:18:77:15:56:99:b0:17:23:33:c0:1b:
                    84:66:55:13:97:66:3f:a8:2f:e0:a8:c7:d7:40:32:
                    fd:72:4e:a2:cf:8d:62:5f:90:04:a5:1e:a3:e5:e3:
                    15:76:58:29:25:2e:7b:6f:2d:eb:bf:11:a7:5f:40:
                    bd:91:87:12:37:31:da:3e:33:c3:6f:2e:de:a0:03:
                    7d:bb:65:6f:32:0e:6c:02:00:e5:4a:96:21:19:ef:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:DB:E2:19:FA:D2:0F:B4:FA:75:3F:54:65:A7:3F:D9:79:4A:2D
            X509v3 Authority Key Identifier:
                keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/R9jb4hn60g-0-nU_VGWnP9l5Si0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:b9c1::-2a0d:b9c2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:b9c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:6e:f3:16:82:62:bc:91:e8:6e:7e:14:bd:4f:56:7c:5e:
         87:e2:1c:48:e0:b5:59:0c:ec:04:79:d7:a4:b4:6f:ac:0c:27:
         0d:78:0e:5b:cd:a9:84:5f:04:b2:b8:c5:0e:f5:39:cb:08:12:
         a6:ae:44:2b:cf:9c:2c:fc:4a:5b:ea:23:06:a1:db:4a:5c:29:
         3f:dd:64:cd:50:fc:95:ae:2c:4b:55:92:fd:2f:be:91:6d:a4:
         c9:60:9e:c7:ae:a7:5a:00:5b:f2:f7:3d:2f:e4:50:f6:58:7c:
         e6:3f:ff:e0:3e:87:9c:56:e1:4f:d8:2a:77:5a:9f:0a:07:41:
         74:c9:de:d8:8d:92:f4:16:80:18:e5:85:d2:e2:eb:d6:b5:1c:
         0f:bf:4b:cd:24:6d:bf:51:e3:b0:30:a9:29:dc:2c:1d:58:c0:
         dc:93:fa:88:7c:52:5c:d7:eb:e5:bd:dc:fd:b9:ef:4f:c1:21:
         23:f9:cc:93:44:9d:e7:d0:54:c0:3c:13:15:1a:db:b7:65:91:
         4c:61:d1:63:94:18:23:ed:c1:82:6c:ca:f5:7f:f7:ba:41:d8:
         ee:d6:db:88:07:fc:f6:c5:ba:29:21:96:8c:c1:1e:ab:3e:4b:
         23:4f:ae:9a:7a:dd:79:a1:34:91:18:dc:1d:5b:84:3e:ae:e6:
         e2:4d:69:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZJ9SuHH6QgbZjgHgLBj1+uGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzUwYWI0Y2NmNzJlM2Q2MGMwOWY5NjQwMTlkNmMwMzRj
NTBhNmMwHhcNMjQxMDExMjAzNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2Q4ZGJlMjE5ZmFkMjBmYjRmYTc1M2Y1NDY1YTczZmQ5Nzk0YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rU+0Tldopr7IFUyl/LfsK44Z3PE
40ya/FZp18ANou79GKGzq+4MwoJ9rNIdDABgfIiCcSLLEVXOxUeAAN3/JWKIPT5G
zMB+YWIzEKA6QewQiDocVj05s332SI2kx+YPsP2XwKvvdaA2Dz+BNdEVRoodeaF4
qcrYmQ6mrpyfnIGEF/PWzvwg5tyti2Fpu4R4/8SA24iIYL0/CKw4PuUJR2q6YuiN
Ju3AGHcVVpmwFyMzwBuEZlUTl2Y/qC/gqMfXQDL9ck6iz41iX5AEpR6j5eMVdlgp
JS57by3rvxGnX0C9kYcSNzHaPjPDby7eoAN9u2VvMg5sAgDlSpYhGe+VgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEfY2+IZ+tIPtPp1P1Rlpz/ZeUotMB8GA1UdIwQY
MBaAFD7FCrTM9y49YMCflkAZ1sA0xQpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNVS3RNejNMajFnd0otV1FCbld3RFRGQ213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83OWVmNGYtZTM4ZS00NGRhLWE2NTct
MjE1OTM3NmQzYTY0LzEvUjlqYjRobjYwZy0wLW5VX1ZHV25QOWw1U2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83OWVmNGYtZTM4ZS00NGRhLWE2NTctMjE1OTM3NmQzYTY0
LzEvUHNVS3RNejNMajFnd0otV1FCbld3RFRGQ213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXMA4DBQAqDbnB
AwUAKg25wgMFACoNucUwDQYJKoZIhvcNAQELBQADggEBAJHDbvMWgmK8kehufhS9
T1Z8XofiHEjgtVkM7AR516S0b6wMJw14DlvNqYRfBLK4xQ71OcsIEqauRCvPnCz8
SlvqIwah20pcKT/dZM1Q/JWuLEtVkv0vvpFtpMlgnseup1oAW/L3PS/kUPZYfOY/
/+A+h5xW4U/YKndanwoHQXTJ3tiNkvQWgBjlhdLi69a1HA+/S80kbb9R47AwqSnc
LB1YwNyT+oh8UlzX6+W93P2570/BISP5zJNEnefQVMA8ExUa27dlkUxh0WOUGCPt
wYJsyvV/97pB2O7W24gH/PbFuikhlozBHqs+SyNPrpp63XmhNJEY3B1bhD6u5uJN
ad0=