Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/cAjdz7Xu7ueH6R43vRBqBSNGC8M.roa
File:                     cAjdz7Xu7ueH6R43vRBqBSNGC8M.roa (raw, json)
Hash identifier:          h2M+86n5ASejK4D4yO2L+LedSyISFaiNiuFwuZXUV1s=
Subject key identifier:   70:08:DD:CF:B5:EE:EE:E7:87:E9:1E:37:BD:10:6A:05:23:46:0B:C3
Certificate issuer:       /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial:       018CC3B7195C2D05BDA97B3896C3EC0EAEAB
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/cAjdz7Xu7ueH6R43vRBqBSNGC8M.roa
Signing time:             Mon 01 Jan 2024 06:30:05 +0000
ROA not before:           Mon 01 Jan 2024 06:30:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207388
IP address blocks:        2a02:f5c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 21 May 2024 10:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:19:5c:2d:05:bd:a9:7b:38:96:c3:ec:0e:ae:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
        Validity
            Not Before: Jan  1 06:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7008ddcfb5eeeee787e91e37bd106a0523460bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:f4:a8:d8:8d:2f:07:89:11:74:1d:ea:ab:
                    72:31:bc:97:38:47:50:01:23:01:b1:11:3f:0c:47:
                    3d:65:36:f4:e5:02:67:de:21:93:78:99:e8:cc:02:
                    7e:ef:7b:c5:32:1e:65:df:55:72:53:d3:e6:37:0a:
                    46:ef:de:d0:6f:b7:6a:ab:c6:90:45:63:57:10:0b:
                    8e:9c:c1:d3:d9:d2:63:93:5a:19:2e:b1:24:66:05:
                    9d:e9:d2:ce:c4:a3:77:98:5e:4c:e0:0f:98:a5:1f:
                    9e:4c:60:c8:f8:ba:82:37:8a:bd:2d:a4:64:56:e6:
                    17:52:bb:26:71:86:79:87:d8:e9:b3:39:22:c2:c7:
                    e8:d9:1b:ed:ae:7d:de:37:7b:20:3a:4f:1a:f2:8d:
                    6c:50:f2:92:1f:b7:c3:d7:68:1a:24:fc:f1:b5:93:
                    10:63:bc:08:aa:90:ca:c1:5f:1e:e3:58:66:3c:c8:
                    f3:26:d1:1e:a6:4e:38:1f:a3:a2:cb:67:ce:3d:41:
                    2a:20:d4:44:01:3b:a4:eb:aa:c9:66:af:68:8f:91:
                    35:e5:99:b4:14:ef:23:50:b0:eb:4c:49:3d:41:1e:
                    69:9c:af:e3:65:24:7d:7e:09:6c:11:75:c1:bb:d6:
                    35:6d:d3:0b:bf:f0:9e:c1:2b:d5:49:e3:29:dc:55:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:08:DD:CF:B5:EE:EE:E7:87:E9:1E:37:BD:10:6A:05:23:46:0B:C3
            X509v3 Authority Key Identifier:
                keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/cAjdz7Xu7ueH6R43vRBqBSNGC8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:f5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:21:51:dc:e1:b6:c4:4d:f0:f1:eb:57:5d:ba:38:a7:88:
         45:a6:00:a3:ee:71:46:e3:23:7e:65:6d:f2:66:ed:b7:13:59:
         67:49:64:70:21:5f:ee:26:65:9b:5d:cd:f4:e1:4d:fb:2a:c9:
         db:34:e3:5f:a9:d9:06:de:3e:43:49:3d:e7:6f:f2:b7:7b:57:
         20:ca:5a:10:da:97:6b:7f:98:b4:07:bb:8e:ab:9b:bf:ad:80:
         7d:07:fa:2b:8f:b3:b9:fb:f9:a7:25:e2:fb:0d:c2:46:b6:8b:
         bc:6f:4e:e5:90:e0:ea:5a:d0:91:c6:8d:31:4a:94:5a:a6:c9:
         a7:ae:65:42:0d:eb:ec:ac:39:35:0a:9f:24:65:f4:75:6a:cf:
         59:41:a6:c8:9c:20:66:d9:1b:23:34:bb:68:5f:45:9c:8e:cc:
         e2:2d:95:30:16:c6:6a:6d:05:6c:35:25:07:40:88:71:3d:05:
         96:b9:fc:d3:cd:de:fa:e5:2f:41:86:90:d4:f2:cc:f8:e5:a2:
         0a:af:66:42:8b:99:68:72:73:28:4a:14:c7:45:13:d1:7d:9f:
         21:e6:bb:36:c6:45:b9:0b:e1:c1:41:dc:84:d9:23:49:17:fd:
         f9:01:f6:6a:4b:be:81:53:c3:65:4b:75:f3:76:58:52:a8:a0:
         d5:aa:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----