Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/O0_xRoDjGjx53_ZktP5e8lhMqs8.roa
File:                     O0_xRoDjGjx53_ZktP5e8lhMqs8.roa (raw, json)
Hash identifier:          vNLb9Iu1qfkisEbQl+7EenZ4qgDivrI1GLSKw1DD8MY=
Subject key identifier:   3B:4F:F1:46:80:E3:1A:3C:79:DF:F6:64:B4:FE:5E:F2:58:4C:AA:CF
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       019037EE2D774E1F78E72438E67E3A0AF121
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/O0_xRoDjGjx53_ZktP5e8lhMqs8.roa
Signing time:             Thu 20 Jun 2024 23:14:34 +0000
ROA not before:           Thu 20 Jun 2024 23:14:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64286
IP address blocks:        2a10:3b01::/32 maxlen: 32
                          2a10:3b02::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 21:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:ee:2d:77:4e:1f:78:e7:24:38:e6:7e:3a:0a:f1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Jun 20 23:14:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3b4ff14680e31a3c79dff664b4fe5ef2584caacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:4b:3d:94:d2:4a:f0:8c:30:93:52:ab:8e:
                    e1:3b:08:62:8a:e2:5b:92:58:b8:34:c9:26:87:f6:
                    9f:fd:7f:0c:c4:39:2d:ea:95:e0:8a:7e:93:d0:d8:
                    b3:3a:28:27:ad:e0:f3:92:07:7f:97:36:e8:df:ad:
                    62:c2:cd:6d:c8:0d:bd:46:8f:fb:70:c2:6a:cd:cd:
                    05:df:a3:56:e3:f3:a3:ce:36:b2:f9:e9:c8:d4:4d:
                    f8:c5:5d:b6:01:8c:1c:fa:cf:b5:36:06:68:47:48:
                    9b:98:ce:e1:3a:55:82:9f:fa:80:ff:a1:ab:40:f0:
                    64:ea:5e:bb:5a:f7:d0:c5:be:7f:07:4d:6b:63:6a:
                    1b:0d:e3:70:ac:03:be:b9:b1:6d:34:fc:76:a4:b4:
                    af:e0:06:04:97:33:04:c9:ea:a0:19:db:29:0e:1e:
                    ee:7a:15:c3:e5:21:d9:0d:8b:43:9c:67:2b:d4:8e:
                    0d:11:6e:3e:5f:e6:de:90:06:dd:69:1d:8a:e2:6f:
                    3a:f8:59:36:07:ed:47:df:28:16:bf:90:4b:f3:33:
                    16:99:28:0e:09:47:96:77:bc:53:58:95:97:52:7f:
                    81:bf:26:8a:f8:ce:10:ed:f5:6f:e6:76:4d:63:bd:
                    8a:7e:75:2f:3c:bc:f6:1e:48:32:e8:67:7f:26:cd:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4F:F1:46:80:E3:1A:3C:79:DF:F6:64:B4:FE:5E:F2:58:4C:AA:CF
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/O0_xRoDjGjx53_ZktP5e8lhMqs8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:3b01::-2a10:3b02:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:a2:6c:dc:ca:9e:c6:2d:2a:69:46:6d:56:06:76:00:d4:
         51:64:78:2d:75:77:a8:10:bd:a4:03:30:7d:0e:29:fc:93:ea:
         4b:03:8b:c8:0c:43:06:5d:e5:d6:58:57:75:50:bc:00:6f:8e:
         00:a5:9a:69:4e:da:7f:56:ed:8a:c6:a6:87:92:a0:de:e8:ad:
         3e:27:c1:f6:4a:12:41:5f:9a:c8:f3:c5:e6:7b:01:78:f9:4f:
         9a:c7:60:84:1b:fe:31:a1:92:fa:a7:10:12:bc:46:69:af:d2:
         c2:d6:0f:ff:07:21:e2:7f:bc:c5:cc:1b:ea:9d:8b:e4:14:e5:
         e2:89:30:85:72:d5:4e:58:0c:a0:7f:65:28:ef:45:41:20:2e:
         74:e0:5b:f8:38:0b:8d:0b:c7:c9:1a:2a:45:d6:20:b0:00:7f:
         20:90:63:3d:f6:d6:61:a7:ee:06:ba:eb:44:3d:94:d0:9f:13:
         95:3b:ea:8c:1f:c4:ee:83:eb:4d:07:2b:a0:19:c1:e4:18:77:
         39:f5:99:1c:11:70:dc:ac:fb:f7:23:59:50:21:c7:29:bd:01:
         2b:12:78:b0:0c:4c:21:58:64:45:e0:fc:23:9d:18:57:bd:a5:
         c4:e9:43:da:db:72:10:78:a8:c2:1f:dd:b1:30:34:ac:6d:6d:
         99:17:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----