Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/jt9dXu2yjVM5sK4md_LntEEKs8o.roa
File:                     jt9dXu2yjVM5sK4md_LntEEKs8o.roa (raw, json)
Hash identifier:          vKGFywN3uQW/1WKlumfu5obVQHrYOYXm0jtpqEVpWbA=
Subject key identifier:   8E:DF:5D:5E:ED:B2:8D:53:39:B0:AE:26:77:F2:E7:B4:41:0A:B3:CA
Certificate issuer:       /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial:       01924CFAA965C48396AB2D35B2EE65E6E522
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/jt9dXu2yjVM5sK4md_LntEEKs8o.roa
Signing time:             Wed 02 Oct 2024 11:25:48 +0000
ROA not before:           Wed 02 Oct 2024 11:25:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214729
IP address blocks:        213.108.20.0/24 maxlen: 32
                          2a00:8740:ff10::/48 maxlen: 64

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 09:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:4c:fa:a9:65:c4:83:96:ab:2d:35:b2:ee:65:e6:e5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
        Validity
            Not Before: Oct  2 11:25:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8edf5d5eedb28d5339b0ae2677f2e7b4410ab3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:70:2c:57:54:00:a7:c7:20:c4:08:c0:bb:66:
                    1e:ab:9c:fb:9d:b5:b3:9c:61:78:86:98:58:2b:a1:
                    c1:6b:92:d3:fa:ec:a5:4c:7c:53:79:dc:7d:5b:8c:
                    fc:8f:78:ea:82:0e:bf:d5:fc:c5:88:0a:3f:00:33:
                    16:ff:f8:97:1d:3d:f8:94:f5:d5:e4:27:7f:b2:ae:
                    44:1d:c9:86:00:c6:cb:6d:83:b2:54:a0:14:73:08:
                    c2:42:90:18:a0:07:96:aa:ff:b7:d1:31:f3:0a:df:
                    f4:9d:ba:8b:f9:87:9e:b9:60:3a:9b:2c:27:4d:33:
                    a1:a5:48:e8:09:88:6f:fe:db:ae:8b:04:50:26:f4:
                    b4:9b:30:d7:01:a9:2a:a0:10:73:e3:1a:3c:d2:40:
                    f5:38:b1:d7:84:17:32:8a:2e:9e:93:3b:c4:c3:18:
                    1d:dd:55:b0:79:ff:d9:07:01:1c:2a:5d:8c:fd:2f:
                    94:43:c8:cd:62:c6:1d:b8:c6:ba:79:7b:1f:53:2d:
                    ef:76:9a:70:db:09:33:24:eb:49:8d:28:c0:26:3f:
                    09:57:3c:2f:17:f2:2b:35:22:43:68:af:f3:59:94:
                    77:75:d1:5f:3f:e0:e3:2c:0f:bd:57:7c:fd:5c:ec:
                    60:f7:18:60:52:3a:37:15:1b:6d:eb:34:f4:72:2b:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:5D:5E:ED:B2:8D:53:39:B0:AE:26:77:F2:E7:B4:41:0A:B3:CA
            X509v3 Authority Key Identifier:
                keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/jt9dXu2yjVM5sK4md_LntEEKs8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.108.20.0/24
                IPv6:
                  2a00:8740:ff10::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:50:ff:a2:57:ce:26:12:0d:6e:c9:74:6c:62:5d:6f:c3:31:
         31:05:fd:9d:a7:2e:b7:e4:82:ea:f1:3e:1f:81:41:de:e7:64:
         4b:7a:9a:ab:9c:31:b1:df:4f:8c:cf:0b:ca:50:1a:93:3a:5a:
         e9:8c:09:97:f6:d6:ea:4b:a7:f7:7d:68:61:6f:1e:cf:ec:49:
         0e:a4:46:6d:a0:27:dc:76:95:f1:c1:c9:3f:71:cf:14:e8:b6:
         de:69:f8:85:7a:22:65:7d:ae:9a:b5:9e:4f:a2:33:5f:c8:1f:
         1b:f6:cc:df:bc:cd:e7:34:21:15:1b:39:66:29:15:61:1c:ad:
         00:1f:5a:cb:26:7f:a8:d1:f2:80:ef:68:7e:2b:cd:5f:20:82:
         e9:db:88:05:18:a9:23:96:2f:e7:97:82:98:68:ec:c8:62:9e:
         3f:6f:43:45:50:91:e6:56:d3:f1:9c:ec:bf:bd:8e:ae:8d:e5:
         1a:7e:c2:78:43:bf:e4:8c:f7:cf:e3:18:a8:8d:0e:42:33:af:
         48:dc:b9:7e:2e:e4:10:75:10:ab:23:8e:cf:6a:10:72:35:7f:
         6a:00:19:32:f9:8c:5d:ff:ec:ec:27:31:3c:79:50:be:f1:92:
         bf:51:eb:fd:ed:70:80:f2:d8:21:81:96:6e:c0:c7:40:8d:6d:
         de:0b:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----