Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/kz80fyu48L5vyg1vYwjujtXRLzk.roa
File:                     kz80fyu48L5vyg1vYwjujtXRLzk.roa (raw, json)
Hash identifier:          SgJcAyNmVz11kd1tLRixxl/YpZAG13Nvjh1RAuxi/cU=
Subject key identifier:   93:3F:34:7F:2B:B8:F0:BE:6F:CA:0D:6F:63:08:EE:8E:D5:D1:2F:39
Certificate issuer:       /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial:       01908F72B8A02743119CA59FBB34812C969B
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/kz80fyu48L5vyg1vYwjujtXRLzk.roa
Signing time:             Sun 07 Jul 2024 23:06:18 +0000
ROA not before:           Sun 07 Jul 2024 23:06:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215282
IP address blocks:        2a13:ccc7::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 23:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:8f:72:b8:a0:27:43:11:9c:a5:9f:bb:34:81:2c:96:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
        Validity
            Not Before: Jul  7 23:06:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=933f347f2bb8f0be6fca0d6f6308ee8ed5d12f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:0d:dd:84:bf:06:23:56:fc:ce:2d:4d:7c:
                    f6:3b:63:4e:6e:76:ea:72:6e:46:49:d2:84:80:9d:
                    a9:43:b6:b5:4a:2a:92:6e:25:2c:23:5d:d1:a0:e1:
                    6c:25:03:27:c3:7e:5d:29:6b:78:40:74:eb:46:d2:
                    d9:f0:c0:9b:b8:93:cf:f2:6a:2c:5e:49:e7:39:af:
                    43:a4:20:52:0b:07:7e:83:74:8c:18:52:b1:d9:26:
                    40:5c:c8:bc:13:5e:87:cb:7f:a0:e4:64:39:af:49:
                    db:f9:89:19:9f:23:1a:3a:ff:f9:37:83:f6:bd:a5:
                    ef:ab:63:8b:b8:c7:9b:70:61:dc:69:a6:7c:81:cf:
                    93:ac:70:6a:8b:f6:0e:55:d6:6f:01:d2:72:d2:55:
                    12:77:9e:76:6b:a5:30:c5:16:bd:9f:f2:54:9c:16:
                    ed:37:82:12:b8:bd:59:66:07:c9:7c:7c:ab:8d:c4:
                    69:33:71:d4:19:cb:1c:f9:4b:9a:25:68:51:9a:a9:
                    97:1d:22:38:f2:12:7c:35:28:07:fc:10:62:00:cb:
                    a8:a1:56:67:ce:49:c1:91:e4:07:b5:65:7d:8a:99:
                    0a:e5:d7:0a:eb:68:76:e7:5f:4b:0d:fd:3d:45:b4:
                    7e:ff:bc:96:ea:8a:93:7c:14:38:0c:0c:43:5b:0e:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3F:34:7F:2B:B8:F0:BE:6F:CA:0D:6F:63:08:EE:8E:D5:D1:2F:39
            X509v3 Authority Key Identifier:
                keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/kz80fyu48L5vyg1vYwjujtXRLzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ccc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:bc:c3:e9:3d:51:c0:9d:25:a2:0c:5e:93:b8:ef:d2:a1:
         9f:28:76:0b:61:1b:97:04:ba:4e:f3:e8:9f:03:60:72:97:92:
         e9:1d:2d:8d:c1:e2:b9:29:3f:b2:bb:77:88:51:74:9e:0f:54:
         95:47:8f:4b:5f:6e:7d:53:5e:93:37:86:c1:9c:f2:01:6b:7d:
         38:4f:b4:65:79:6a:dc:70:22:3f:51:fa:b1:a6:b0:23:86:c3:
         61:59:dd:03:01:7b:81:b2:1e:52:97:69:87:de:29:9b:e1:ab:
         6f:14:99:c3:fc:c6:55:03:51:f1:86:8c:e0:8f:eb:d8:64:fe:
         85:e4:31:62:95:d6:71:0e:db:d3:a2:61:6b:39:fc:ca:b5:33:
         45:ff:56:3a:5c:2a:20:94:9f:81:18:0d:ba:e1:11:3b:d1:e6:
         53:2e:a6:98:8c:b0:12:c0:c5:55:36:19:ec:2a:b8:26:84:37:
         17:f4:de:df:b7:bf:e3:d5:1c:9f:ac:e7:c6:2c:0b:d0:7d:97:
         2e:d4:20:58:04:0c:0f:7b:a0:a0:8b:b9:ad:4d:9a:92:da:1e:
         75:a9:f4:14:ff:c3:b7:5b:5c:15:ca:d2:ef:48:2a:64:b7:4f:
         63:57:e7:e5:5e:a4:7a:ea:f7:b8:22:9a:62:9f:f1:66:53:26:
         c7:9e:8e:a6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZCPcrigJ0MRnKWfuzSBLJabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2
ZjVlM2QwHhcNMjQwNzA3MjMwNjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzNmMzQ3ZjJiYjhmMGJlNmZjYTBkNmY2MzA4ZWU4ZWQ1ZDEyZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc0N3YS/BiNW/M4tTXz2O2NObnbq
cm5GSdKEgJ2pQ7a1SiqSbiUsI13RoOFsJQMnw35dKWt4QHTrRtLZ8MCbuJPP8mos
XknnOa9DpCBSCwd+g3SMGFKx2SZAXMi8E16Hy3+g5GQ5r0nb+YkZnyMaOv/5N4P2
vaXvq2OLuMebcGHcaaZ8gc+TrHBqi/YOVdZvAdJy0lUSd552a6UwxRa9n/JUnBbt
N4ISuL1ZZgfJfHyrjcRpM3HUGcsc+UuaJWhRmqmXHSI48hJ8NSgH/BBiAMuooVZn
zknBkeQHtWV9ipkK5dcK62h2519LDf09RbR+/7yW6oqTfBQ4DAxDWw5tAQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJM/NH8ruPC+b8oNb2MI7o7V0S85MB8GA1UdIwQY
MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt
YzUxOTUxNjJlM2JlLzEva3o4MGZ5dTQ4TDV2eWcxdll3anVqdFhSTHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl
LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPMxzAN
BgkqhkiG9w0BAQsFAAOCAQEAC3W8w+k9UcCdJaIMXpO479Khnyh2C2EblwS6TvPo
nwNgcpeS6R0tjcHiuSk/srt3iFF0ng9UlUePS19ufVNekzeGwZzyAWt9OE+0ZXlq
3HAiP1H6saawI4bDYVndAwF7gbIeUpdph94pm+GrbxSZw/zGVQNR8YaM4I/r2GT+
heQxYpXWcQ7b06Jhazn8yrUzRf9WOlwqIJSfgRgNuuERO9HmUy6mmIywEsDFVTYZ
7Cq4JoQ3F/Te37e/49Ucn6znxiwL0H2XLtQgWAQMD3ugoIu5rU2aktoedan0FP/D
t1tcFcrS70gqZLdPY1fn5V6keur3uCKaYp/xZlMmx56Opg==
-----END CERTIFICATE-----