Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/E_DLWfVB9k9kyMDYDdgn3ZZ8O64.roa
File:                     E_DLWfVB9k9kyMDYDdgn3ZZ8O64.roa (raw, json)
Hash identifier:          HG1KEf4zIkhZ/mzpiIY0peNSYsOZ3g0/AWyZkn6GXkY=
Subject key identifier:   13:F0:CB:59:F5:41:F6:4F:64:C8:C0:D8:0D:D8:27:DD:96:7C:3B:AE
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       0190C55BA0150DD0B21500EFB7A11E2B02AE
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/E_DLWfVB9k9kyMDYDdgn3ZZ8O64.roa
Signing time:             Thu 18 Jul 2024 10:20:34 +0000
ROA not before:           Thu 18 Jul 2024 10:20:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44331
IP address blocks:        2a07:2486:fe0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 19:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c5:5b:a0:15:0d:d0:b2:15:00:ef:b7:a1:1e:2b:02:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Jul 18 10:20:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=13f0cb59f541f64f64c8c0d80dd827dd967c3bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:3b:00:87:4c:26:88:19:13:ec:80:9a:1c:
                    c0:45:0a:a9:8e:bf:79:d1:24:f0:bc:b3:2e:9e:aa:
                    ed:6e:38:3d:bf:31:9b:b4:af:19:cd:f0:81:ac:91:
                    36:1a:f1:ca:b3:9b:ef:85:ca:8b:78:ce:7f:cc:ca:
                    c0:f4:19:26:ee:6c:50:0f:bb:73:76:dc:e9:43:b0:
                    b3:4c:2a:66:35:57:56:18:48:0e:75:74:5c:ef:58:
                    90:db:9c:34:aa:5b:22:d5:09:d2:b8:8d:7b:83:28:
                    01:44:b9:80:9a:45:aa:0d:e3:86:c2:23:4c:11:39:
                    62:8e:a5:25:35:e6:7a:9c:e3:d0:77:8c:83:e3:f0:
                    df:79:6f:29:fc:5d:1a:da:38:09:b7:b9:49:d1:e2:
                    ff:2c:0a:25:98:af:e2:b6:09:b9:a1:de:71:4e:86:
                    66:13:d8:fa:c9:d5:13:61:cf:a5:90:5d:75:00:7a:
                    47:54:0a:83:6f:86:48:8a:a6:1b:59:2a:ca:81:4e:
                    ae:c6:f8:e6:b8:5d:f7:70:6c:d8:08:51:a2:b6:a0:
                    0e:b6:d7:f6:de:e8:c1:d8:27:fd:4d:03:e0:d2:04:
                    3d:16:e8:17:4f:ba:f4:6b:bf:09:58:15:69:f9:a0:
                    8e:49:97:a5:a0:a4:4a:14:a4:6c:45:1d:87:dd:32:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:CB:59:F5:41:F6:4F:64:C8:C0:D8:0D:D8:27:DD:96:7C:3B:AE
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/E_DLWfVB9k9kyMDYDdgn3ZZ8O64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:97:c0:31:8f:75:be:6c:0b:ce:16:2a:8a:00:d6:c4:f2:3f:
         4f:1d:6a:0a:9c:d9:58:b6:fc:37:08:99:f9:d9:87:64:81:d4:
         42:2d:5a:e4:f3:e1:b0:44:db:eb:2e:21:2a:1b:1b:97:42:69:
         14:dd:48:84:78:df:e0:e9:df:85:d8:aa:33:a7:fb:52:e8:30:
         12:2a:6b:8e:1f:d4:49:28:c6:c3:ac:8b:de:c7:27:ed:3c:21:
         15:04:2c:77:10:79:a6:3a:5e:a3:39:13:19:c8:0d:0c:f2:fb:
         f2:fc:52:ec:a4:21:b7:f5:50:d1:23:9d:29:cb:fd:08:62:08:
         68:e8:e3:2f:45:61:72:39:cb:4f:47:0d:ef:b9:10:e9:15:a0:
         ef:e5:da:3a:97:02:ee:25:56:5f:17:3b:60:9c:f1:46:fb:c7:
         e7:7f:7c:6c:05:49:73:e3:99:77:12:c3:62:66:4f:b8:fc:f3:
         be:16:23:0e:67:06:74:4d:85:37:18:77:f7:4d:d0:5b:7b:4b:
         36:2d:67:99:30:9c:99:52:9c:f8:be:0c:48:aa:7e:b4:88:2b:
         27:5d:0f:5d:f2:f2:7d:85:1d:cc:50:70:2c:09:15:a7:9e:20:
         76:52:c8:e2:bc:73:62:dd:35:f8:72:dc:f8:6d:a7:48:86:26:
         5f:25:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----