Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bye5hnmmanFIRsaq7rpYp70PvuE.roa
File:                     bye5hnmmanFIRsaq7rpYp70PvuE.roa (raw, json)
Hash identifier:          etPN1OEqDB8Xu4dX/YVGfmewxYXzZ7EdSwj39LkXwic=
Subject key identifier:   6F:27:B9:86:79:A6:6A:71:48:46:C6:AA:EE:BA:58:A7:BD:0F:BE:E1
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       018CCA2A4C602D0A324161578126E8B04092
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bye5hnmmanFIRsaq7rpYp70PvuE.roa
Signing time:             Tue 02 Jan 2024 12:33:38 +0000
ROA not before:           Tue 02 Jan 2024 12:33:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48927
IP address blocks:        178.215.228.0/22 maxlen: 24
                          2a0d:5440::/29 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 10:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:4c:60:2d:0a:32:41:61:57:81:26:e8:b0:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: Jan  2 12:33:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6f27b98679a66a714846c6aaeeba58a7bd0fbee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:08:95:71:31:4f:3a:7a:2a:4d:a9:68:d0:
                    6a:ea:ad:60:29:db:4a:30:49:fe:24:51:29:37:7c:
                    a1:26:e2:d1:e7:d7:71:37:91:e2:e8:b9:7c:26:35:
                    0a:1c:21:e8:e3:bc:d6:b9:21:58:42:b9:72:d1:0f:
                    8a:9d:38:05:70:e7:12:7b:32:36:57:fa:f6:22:94:
                    55:57:00:d5:4e:4f:22:81:81:bf:83:64:26:bc:8c:
                    5f:e9:86:d7:86:32:a6:b0:9d:07:0f:4c:1b:12:4c:
                    90:d3:ba:1a:d1:0d:ec:96:53:eb:d0:2a:1a:e2:21:
                    51:ec:91:20:cc:b7:8f:ba:a5:14:e6:52:ac:91:00:
                    10:ca:43:63:53:40:cc:21:e4:9e:40:15:bb:b7:ca:
                    af:21:b3:6d:c9:9b:a5:8e:91:4a:c3:3f:90:53:b1:
                    00:a7:26:b1:40:ca:46:c2:ad:ad:ff:ab:72:60:59:
                    fc:0f:67:53:98:70:45:fb:3f:7e:83:9e:13:ff:10:
                    a4:b1:41:e9:5e:cf:75:17:6c:b8:81:24:e7:3c:54:
                    0c:99:d4:e1:36:d7:b2:1f:02:14:3e:69:af:a7:6f:
                    c6:6c:c0:3d:cb:c9:2c:fb:8e:20:36:42:bd:97:2f:
                    0e:0e:7e:86:fe:b0:55:95:ca:3c:38:cb:f2:99:23:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:27:B9:86:79:A6:6A:71:48:46:C6:AA:EE:BA:58:A7:BD:0F:BE:E1
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bye5hnmmanFIRsaq7rpYp70PvuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.215.228.0/22
                IPv6:
                  2a0d:5440::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:64:7c:51:d5:91:87:d5:b1:62:29:92:24:f1:8c:be:66:6a:
         a6:d5:c5:6b:c7:5e:b0:ec:a0:24:de:44:7d:50:2c:ed:f7:43:
         1e:38:c6:7b:95:2c:18:44:b3:29:f9:ed:74:20:32:f2:ab:44:
         7f:62:b5:e2:11:20:d6:47:19:0a:b2:3d:6c:6a:86:34:f1:8d:
         a9:3c:69:b9:e3:d9:75:e8:fc:d2:3e:14:12:39:21:3a:f7:4b:
         93:5a:ca:c1:79:f5:39:44:f6:35:48:01:f7:29:5d:00:d3:1a:
         40:64:7b:9b:23:7e:5b:58:42:40:e4:9d:c0:fd:41:cf:d6:f2:
         c5:9e:88:75:fc:6a:15:cb:c2:74:6b:42:ab:da:ba:69:ca:22:
         5e:44:0b:f4:96:a9:4f:08:29:a7:fb:26:ca:f8:84:00:a4:41:
         59:51:ac:fe:ef:77:b9:8e:a9:cc:5e:15:5e:45:51:72:9f:fa:
         99:a3:1b:d1:03:69:b8:10:35:7f:5e:9c:a2:c1:a0:a7:03:5a:
         4d:fe:2f:9b:1b:54:1d:db:f7:42:fb:b4:a8:ef:f4:81:b5:ef:
         6a:18:95:ec:34:c8:81:9b:e8:e6:75:06:1c:7f:6a:c2:09:02:
         b9:e5:80:24:dd:6f:28:4a:03:33:78:73:37:f3:d2:44:e5:ce:
         9e:c8:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----