Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Ishvem7V0mhqBc1utXpzkALvBCo.roa
File:                     Ishvem7V0mhqBc1utXpzkALvBCo.roa (raw, json)
Hash identifier:          vHlSRr3xk4YRNrGqOScEhAj9r4bS8z8Mkf3c1YiKGmY=
Subject key identifier:   22:C8:6F:7A:6E:D5:D2:68:6A:05:CD:6E:B5:7A:73:90:02:EF:04:2A
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       019237B6F0442FFB972B0E3D71D8C1769078
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Ishvem7V0mhqBc1utXpzkALvBCo.roa
Signing time:             Sat 28 Sep 2024 08:19:48 +0000
ROA not before:           Sat 28 Sep 2024 08:19:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35196
IP address blocks:        2a0e:4bc7::/32 maxlen: 32
                          2a0e:8080::/32 maxlen: 32
                          2a0e:ccc5::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 14:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:b6:f0:44:2f:fb:97:2b:0e:3d:71:d8:c1:76:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Sep 28 08:19:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=22c86f7a6ed5d2686a05cd6eb57a739002ef042a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:13:a9:b9:64:0b:7c:ed:6f:3f:b7:59:f8:
                    57:3e:8c:63:d9:41:f4:74:9b:d7:84:f0:c5:12:8f:
                    71:36:5e:a6:0f:d3:74:dd:b4:49:a2:83:32:1c:87:
                    c6:71:d1:7e:8e:b3:2b:f2:a6:f4:50:21:06:9c:dd:
                    51:fc:3c:8a:fd:0a:d2:d6:b5:58:f9:7f:c6:64:b6:
                    81:83:af:bd:26:8a:99:82:ab:43:ca:bf:05:88:57:
                    6d:45:56:21:d2:4d:e5:a8:73:6b:1b:58:8f:63:b6:
                    c1:1c:05:84:5c:2a:7e:b5:e5:39:a7:c4:e1:92:4e:
                    1c:d8:e3:40:f7:c7:e2:6a:1b:b3:2d:5a:17:52:90:
                    b7:b6:d5:a4:db:5d:13:f4:fe:8c:e0:ba:e9:5e:47:
                    a0:fd:e8:25:56:68:e4:43:b9:4e:1c:0c:8e:bb:ec:
                    bd:5f:60:96:19:11:3d:ba:fd:ca:7c:7a:fd:1e:9a:
                    c5:7c:5c:0b:3f:8e:f6:5a:51:ca:4c:55:12:ae:c9:
                    5b:b0:b2:2e:6e:72:6c:49:4d:62:90:e0:4b:88:16:
                    64:6a:d6:e9:05:d5:c2:f8:56:85:bb:c4:38:be:4b:
                    88:ff:0a:ca:9b:eb:52:eb:4f:25:83:d4:7e:8f:21:
                    10:06:fd:d2:4b:a8:7c:b5:bc:1a:4c:a1:58:34:0d:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:6F:7A:6E:D5:D2:68:6A:05:CD:6E:B5:7A:73:90:02:EF:04:2A
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Ishvem7V0mhqBc1utXpzkALvBCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4bc7::/32
                  2a0e:8080::/32
                  2a0e:ccc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:ae:3d:94:88:44:44:47:6f:e9:6b:bd:24:cb:ca:90:06:2a:
         c4:e2:60:7c:18:0d:6d:94:a7:43:fb:85:d4:0b:17:25:14:b4:
         05:8c:9b:56:51:d5:b4:51:e0:ab:05:b6:cc:28:ef:9f:ae:ef:
         60:f0:ce:00:37:64:16:63:6e:18:56:4d:b3:74:79:c3:0a:ef:
         9a:d8:74:3d:f6:80:fd:0e:bd:01:84:fd:97:dc:8d:7a:78:6f:
         fe:50:8b:71:91:d0:ab:e7:1b:5a:3c:04:83:f2:f0:2e:a3:47:
         84:8b:7e:e2:f9:a0:e5:ff:fe:c9:fc:45:05:0c:2e:e9:e2:92:
         ed:b3:58:7f:d4:6c:05:a3:e4:92:57:29:84:9b:35:4d:2d:aa:
         e6:4f:29:39:12:4b:a8:08:5d:f7:89:37:be:1e:82:04:18:64:
         3a:c6:c9:44:d7:aa:7c:06:87:43:75:2b:0a:d5:a2:f1:de:a4:
         bd:9a:b2:f6:9c:da:39:91:df:99:b5:18:29:1c:07:50:08:9e:
         69:bb:0b:c4:df:8e:d0:9b:15:2d:3b:0b:5e:07:bc:97:9c:cd:
         09:11:d3:52:12:d2:f7:15:81:88:f9:54:ea:51:a6:ed:83:c8:
         7a:99:43:ad:e3:b9:68:0f:fc:86:ca:e8:10:96:e9:71:03:77:
         88:63:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----