Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/SAHmS9tPHHPRridfosz8OsMyijQ.roa
File:                     SAHmS9tPHHPRridfosz8OsMyijQ.roa (raw, json)
Hash identifier:          y++I4S8+iZJxLtga/tHDvoKvlSdjU3qcTyXCYWJPRU4=
Subject key identifier:   48:01:E6:4B:DB:4F:1C:73:D1:AE:27:5F:A2:CC:FC:3A:C3:32:8A:34
Certificate issuer:       /CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7
Certificate serial:       01856DA63920154CC6E3F8D984400245F2C8
Authority key identifier: EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/SAHmS9tPHHPRridfosz8OsMyijQ.roa
Signing time:             Sun 01 Jan 2023 14:04:48 +0000
ROA not before:           Sun 01 Jan 2023 14:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213270
IP address blocks:        37.200.86.0/24 maxlen: 24
                          2a02:f980::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:a6:39:20:15:4c:c6:e3:f8:d9:84:40:02:45:f2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7
        Validity
            Not Before: Jan  1 14:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4801e64bdb4f1c73d1ae275fa2ccfc3ac3328a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:a6:8a:83:97:01:d9:ca:14:a6:f1:b1:70:
                    f0:3b:58:2f:8f:da:ce:87:48:f0:33:26:78:1f:06:
                    86:67:be:56:0a:3e:bd:b5:9b:15:cf:ce:7d:8b:61:
                    ad:8e:3b:0a:45:0a:b0:66:0d:b1:79:c4:8b:03:b2:
                    b8:69:84:44:b1:bd:15:53:fe:a1:96:92:56:66:3b:
                    a2:48:61:74:ea:2f:96:9e:c6:12:b4:eb:a4:6e:80:
                    ad:fa:dc:e0:8f:33:24:cf:f8:db:c6:fc:59:f1:65:
                    b5:2a:54:2a:21:7d:f4:1a:97:5c:ee:07:08:c6:0d:
                    ca:f4:77:da:8e:b9:70:ab:ce:94:9f:b6:22:40:4b:
                    a1:e5:bb:3c:cd:77:c3:8f:b0:9d:bd:0a:8b:ed:28:
                    89:ad:9d:c4:6c:b7:6c:46:c1:d5:b2:e9:7c:f8:dd:
                    40:8a:75:ec:81:76:29:e9:de:84:43:e7:35:c6:e7:
                    7c:4a:d4:40:31:d8:81:00:cf:d2:7c:81:82:20:1f:
                    ea:78:ad:17:3d:e5:c6:d4:c3:4f:f7:dd:4a:1e:73:
                    dc:5b:5b:1b:37:ce:a8:b1:a5:90:57:de:61:b4:b6:
                    10:12:b3:a6:a5:29:4d:3d:b1:13:12:88:ba:3c:49:
                    6c:a8:04:44:24:d6:8f:37:0b:ab:4b:70:bf:a9:17:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:E6:4B:DB:4F:1C:73:D1:AE:27:5F:A2:CC:FC:3A:C3:32:8A:34
            X509v3 Authority Key Identifier:
                keyid:EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/SAHmS9tPHHPRridfosz8OsMyijQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.200.86.0/24
                IPv6:
                  2a02:f980::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:77:c5:b0:30:c5:fd:cc:e7:0e:7f:ef:bd:65:bc:fc:66:4d:
         5d:e8:79:b1:c9:84:f5:2f:a1:87:98:9f:99:5e:10:3f:d4:db:
         03:b3:09:9e:42:9e:6a:81:81:b7:11:7d:0c:2b:0c:c2:a5:c5:
         33:4a:fe:15:98:53:19:e7:36:81:51:44:ec:c7:5a:12:8a:79:
         a6:1a:79:aa:63:ae:88:90:3d:13:64:65:f9:b5:d5:8a:17:a3:
         14:3d:72:eb:71:69:32:5e:5c:f8:fd:91:b6:5c:77:a3:c9:d2:
         2e:7f:f9:5a:53:56:bf:de:29:46:38:fe:d3:13:47:50:d3:4f:
         ae:ba:b4:23:3c:50:73:e9:7d:36:a4:04:9e:17:4d:b3:a8:9d:
         f4:ae:55:4e:21:46:6a:66:98:96:c8:10:a4:4d:88:f4:25:b2:
         36:9e:30:03:b8:e4:70:9d:05:80:36:09:c4:5f:ea:10:0c:58:
         f4:5f:97:b0:bc:26:7e:19:e6:8f:32:e4:f5:b7:39:bd:65:7b:
         ac:e5:3e:6d:ba:2b:7b:d1:0d:7f:0d:f1:a4:4b:2f:7d:3f:32:
         ff:39:cf:fb:f3:0d:ed:cc:d8:5f:96:7b:9a:16:39:1d:76:39:
         74:75:c7:89:75:8b:d0:b1:9b:e5:b4:ea:3d:3a:7d:2e:a1:32:
         84:5c:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----