Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa
File:                     VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa (raw, json)
Hash identifier:          AazLQcx0dWAzQCRhUVQScoXzNVp3I0Ht0T+u67Xrz5o=
Subject key identifier:   54:52:5B:0B:E4:DE:DE:56:F4:8D:8E:EA:60:5A:9E:55:5A:00:B8:93
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       018DE4CBA6D040183ABD490A5A4860B0DAA6
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa
Signing time:             Mon 26 Feb 2024 09:42:48 +0000
ROA not before:           Mon 26 Feb 2024 09:42:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211462
IP address blocks:        193.32.87.0/24 maxlen: 24
                          2a0d:8140::/48 maxlen: 48
                          2a0d:8140:2fff::/48 maxlen: 48
                          2a0d:8141::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 16:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e4:cb:a6:d0:40:18:3a:bd:49:0a:5a:48:60:b0:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Feb 26 09:42:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=54525b0be4dede56f48d8eea605a9e555a00b893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:af:02:75:09:a4:57:f5:19:1f:9e:d8:51:
                    d2:fe:9c:d7:9d:30:59:a8:73:a2:3f:be:15:7b:aa:
                    c4:b3:c4:12:fc:ed:ae:48:54:ef:49:83:2a:7d:5c:
                    30:b6:56:5c:79:37:e6:d6:65:51:0c:6c:d5:8a:73:
                    58:08:66:c3:2c:ec:07:60:11:9b:d2:63:3a:b1:52:
                    d7:24:6c:52:aa:4f:18:5f:55:d3:dd:c1:bb:47:87:
                    ce:24:fc:dc:9a:4c:0f:01:84:e7:27:4b:36:9c:f4:
                    24:be:2a:96:7e:02:a5:02:64:4c:58:c2:13:ae:9d:
                    8d:45:13:02:0d:59:52:29:69:f8:b8:75:42:fd:6c:
                    8c:10:94:30:1d:b4:ad:e2:93:bc:6f:a7:4f:ab:fb:
                    ce:f2:fd:29:e2:50:26:44:d9:0a:ec:69:a0:20:1d:
                    9a:f6:e0:3b:95:3c:84:2a:0f:5d:ba:fa:b2:5b:49:
                    47:68:ac:88:51:9c:ba:97:21:0a:9f:f0:c9:c3:18:
                    a7:6a:6c:77:cd:31:da:e2:db:2f:4c:01:6f:42:a3:
                    97:02:e4:4a:d3:f2:80:01:22:62:b3:60:34:67:56:
                    37:ee:f5:7e:ec:92:9f:fc:11:9a:28:38:6c:0c:de:
                    8d:90:df:ad:d2:f5:3e:be:03:e4:94:1c:14:79:62:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:5B:0B:E4:DE:DE:56:F4:8D:8E:EA:60:5A:9E:55:5A:00:B8:93
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.87.0/24
                IPv6:
                  2a0d:8140::/48
                  2a0d:8140:2fff::/48
                  2a0d:8141::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:30:b7:96:5e:23:cb:d1:65:29:79:fb:b9:fd:56:a3:5b:32:
         1f:1d:f3:0a:d3:e0:47:29:4e:54:0f:00:87:59:20:f2:ab:cd:
         7b:2d:c3:50:4e:8d:1f:7f:4f:35:10:be:01:ef:1a:82:5f:e2:
         f3:84:dc:3b:8b:37:a0:2d:9c:5d:28:37:c3:be:17:d4:ea:65:
         51:b8:ae:47:2a:70:02:92:68:8c:ab:f1:f7:2c:b2:81:d3:32:
         fb:26:ea:47:08:e1:83:29:d8:2a:eb:09:fe:94:31:b3:17:b1:
         f4:de:90:cb:ac:8a:13:b7:82:5e:87:5a:5d:68:f3:bf:e7:e6:
         a6:a0:2a:dc:ff:e7:3a:bf:7b:62:97:ee:3e:7e:5e:53:8f:c9:
         d3:02:be:c6:00:13:85:75:8b:97:f0:18:bb:59:d7:89:66:13:
         24:3f:be:20:b2:5d:65:35:a2:b8:25:89:87:82:a6:e9:9e:fe:
         cf:ca:88:0f:7d:00:c6:20:84:d3:24:46:b7:cb:bb:77:64:71:
         02:35:5f:a5:24:1d:51:8b:59:0e:dd:59:2a:59:d4:93:ca:f4:
         73:55:8f:b3:fe:41:8a:65:42:4e:7d:63:77:a0:a7:fc:d6:5b:
         3f:56:c6:0c:c3:73:f2:79:5c:54:c6:42:bd:4f:e1:16:f7:55:
         a3:05:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----