Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/uZH8lpQistsX8cSnr7BwnDL7cJA.roa
File:                     uZH8lpQistsX8cSnr7BwnDL7cJA.roa (raw, json)
Hash identifier:          wwSJHlcneGV1rofAG6T4ccfLTB+AXvFKFWKw077hXeI=
Subject key identifier:   B9:91:FC:96:94:22:B2:DB:17:F1:C4:A7:AF:B0:70:9C:32:FB:70:90
Certificate issuer:       /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial:       018CC94D6B6514303816439FF77043C7F758
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/uZH8lpQistsX8cSnr7BwnDL7cJA.roa
Signing time:             Tue 02 Jan 2024 08:32:23 +0000
ROA not before:           Tue 02 Jan 2024 08:32:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213023
IP address blocks:        2a0b:f380:a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:6b:65:14:30:38:16:43:9f:f7:70:43:c7:f7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
        Validity
            Not Before: Jan  2 08:32:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b991fc969422b2db17f1c4a7afb0709c32fb7090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:72:71:3e:af:60:9e:7e:7b:be:41:18:ee:
                    6b:be:0b:e8:96:3a:97:e7:e3:0e:1c:92:5e:43:88:
                    0c:bc:db:79:fe:fd:6a:fd:58:a7:9a:c0:20:aa:33:
                    2e:de:93:dc:4b:d3:8e:43:7f:2d:87:b3:8e:9c:e7:
                    49:04:5e:32:2a:e1:62:71:0f:66:94:32:31:cd:a1:
                    18:3a:86:78:8f:98:1a:0c:90:bd:4a:5c:30:f0:72:
                    f2:d7:e8:ee:65:85:e8:2e:85:c4:f8:63:18:64:70:
                    04:22:92:24:9b:c5:ac:4c:ac:77:51:24:38:bd:52:
                    cd:e8:d1:c4:10:2a:fd:05:cd:35:a2:72:c2:83:5d:
                    f0:55:fa:54:d5:ca:66:5a:76:0d:35:2e:96:08:19:
                    97:bd:36:f3:c6:c6:62:82:5e:93:14:c6:f8:fa:5d:
                    cc:4d:84:f0:64:6b:f2:4b:ce:01:ae:87:2e:31:70:
                    69:a7:83:5a:7d:d6:7a:8f:b7:d6:ae:fc:36:42:57:
                    60:8a:d8:e5:ea:66:7f:e9:73:9f:c9:63:c9:54:28:
                    f5:fa:52:66:c7:5f:4c:f6:fd:78:16:c7:ea:af:e5:
                    d0:b7:4e:c0:ca:3e:bf:2f:b1:a6:0d:f0:21:20:e3:
                    ac:f9:a8:b5:ed:25:50:fe:df:fd:8c:7a:b0:37:4f:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:91:FC:96:94:22:B2:DB:17:F1:C4:A7:AF:B0:70:9C:32:FB:70:90
            X509v3 Authority Key Identifier:
                keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/uZH8lpQistsX8cSnr7BwnDL7cJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:f380:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:cc:fd:8e:89:48:cc:51:0d:93:79:e5:d2:41:3f:f1:d9:a0:
         46:da:cb:d1:11:12:86:70:e0:3a:6b:0e:0e:ff:84:4b:b3:b4:
         76:69:66:2c:90:60:be:b4:3d:e6:e7:cc:52:eb:73:1c:f3:8f:
         e9:31:eb:9f:6b:20:6f:19:43:c7:7a:ac:46:f7:45:e8:f3:bc:
         ad:d1:84:7f:48:e0:32:ec:bf:d7:52:fb:c1:2a:39:9a:4c:21:
         11:83:cc:3f:fc:09:60:e0:55:32:e1:f1:85:81:17:de:ff:fa:
         03:75:c0:51:07:31:01:53:cb:ec:c9:82:a6:a3:c6:63:1c:22:
         7d:f9:5c:53:0e:d3:91:95:a4:78:dc:ab:7e:9f:e2:f3:18:04:
         e8:6a:b7:5e:2d:fb:b0:41:07:05:11:29:3f:be:a6:30:b1:51:
         72:d1:8d:04:34:4a:4a:bc:ce:4c:3e:3d:25:93:96:9c:48:ce:
         5b:18:a0:41:c9:70:b6:16:2a:db:7f:0d:b5:5b:37:7d:64:59:
         4d:62:e6:32:72:62:9d:5e:e3:6d:fc:0b:f7:bb:30:b4:1b:ca:
         8f:eb:66:c8:9c:88:4b:4d:26:1c:df:4a:2a:b2:27:fd:b7:42:
         59:7e:b2:9c:99:73:9e:35:f4:4e:aa:14:e1:d0:a3:e8:c3:65:
         1d:1b:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----