Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_5Z6V_wNhjhPaxtJ9wVvvFgFHmw.roa
File:                     _5Z6V_wNhjhPaxtJ9wVvvFgFHmw.roa (raw, json)
Hash identifier:          MSzfktMs5pN7ncJtDFk0bzwXnmVnlbljKcs8lJpgF14=
Subject key identifier:   FF:96:7A:57:FC:0D:86:38:4F:6B:1B:49:F7:05:6F:BC:58:05:1E:6C
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       0192FDA32991A03A1E3D8337FA6A2EB733FB
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_5Z6V_wNhjhPaxtJ9wVvvFgFHmw.roa
Signing time:             Tue 05 Nov 2024 18:43:01 +0000
ROA not before:           Tue 05 Nov 2024 18:43:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0e:4bc7::/32 maxlen: 32
                          2a0e:5385::/32 maxlen: 32
                          2a0e:5387::/32 maxlen: 32
                          2a0e:5900::/32 maxlen: 32
                          2a0e:5901::/32 maxlen: 32
                          2a0e:5906::/32 maxlen: 32
                          2a0e:8080::/32 maxlen: 32
                          2a0e:8082::/32 maxlen: 32
                          2a0e:ccc0::/32 maxlen: 32
                          2a0e:ccc5::/32 maxlen: 32
                          2a0f:6fc1::/32 maxlen: 32
                          2a0f:6fc7::/32 maxlen: 32
                          2a0f:b4c1::/32 maxlen: 32
                          2a0f:b4c6::/32 maxlen: 32
                          2a0f:c081::/32 maxlen: 32
                          2a0f:c087::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 10:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:fd:a3:29:91:a0:3a:1e:3d:83:37:fa:6a:2e:b7:33:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Nov  5 18:43:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ff967a57fc0d86384f6b1b49f7056fbc58051e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:27:a5:d9:9f:94:6a:72:77:55:f5:ba:ad:
                    d4:1d:a5:75:fe:9f:cb:6d:82:af:3f:a4:5e:f3:ca:
                    ad:75:05:fe:46:57:42:b9:73:55:65:b8:2b:92:90:
                    c1:ce:e3:8c:bd:3f:24:c4:90:75:04:43:4c:67:18:
                    97:70:51:2b:94:e4:2e:5f:f7:8b:e3:2d:50:aa:b7:
                    ff:56:7d:3e:3e:58:e5:45:e2:90:d8:7c:5c:aa:fe:
                    7b:17:04:b9:c4:7a:f7:d0:b2:3b:4e:36:dd:c3:2c:
                    bd:a9:fe:3b:24:40:81:91:00:27:76:47:0c:5b:45:
                    a5:a2:29:04:e9:3f:8a:53:71:bd:83:fa:dc:f0:ce:
                    61:77:a0:2e:03:4a:e2:93:29:f2:a6:f0:3d:8b:73:
                    cc:23:b7:05:35:23:85:01:1d:5f:9b:eb:94:9c:e2:
                    9f:19:09:e2:dc:e9:c8:5e:c7:e0:5a:21:06:bd:38:
                    c0:e4:9c:5b:76:68:aa:bb:83:00:51:21:ed:35:d1:
                    5d:cd:0f:8a:32:bb:dc:40:a6:90:f4:30:72:7a:12:
                    49:6c:50:b7:a1:26:32:43:c0:3a:9f:42:ac:6b:76:
                    93:00:f9:96:64:1d:27:1e:7a:a7:ea:7c:fa:2b:dd:
                    e2:3f:f1:a2:64:11:28:4e:e7:fc:cd:88:9b:06:4d:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:7A:57:FC:0D:86:38:4F:6B:1B:49:F7:05:6F:BC:58:05:1E:6C
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_5Z6V_wNhjhPaxtJ9wVvvFgFHmw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4bc7::/32
                  2a0e:5385::/32
                  2a0e:5387::/32
                  2a0e:5900::/31
                  2a0e:5906::/32
                  2a0e:8080::/32
                  2a0e:8082::/32
                  2a0e:ccc0::/32
                  2a0e:ccc5::/32
                  2a0f:6fc1::/32
                  2a0f:6fc7::/32
                  2a0f:b4c1::/32
                  2a0f:b4c6::/32
                  2a0f:c081::/32
                  2a0f:c087::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:3b:9c:f9:b3:0b:59:7c:03:4c:b3:d3:f4:4b:ac:2c:ca:60:
         c1:18:8f:dd:95:c8:59:29:89:f5:7e:bf:9a:d4:3f:22:f7:1e:
         66:21:5f:40:96:d4:aa:d9:df:3d:1a:0c:d1:10:a8:c8:77:02:
         de:22:77:84:90:17:86:80:ea:3e:38:7b:75:a5:88:47:0f:2e:
         7b:87:60:20:64:c8:d0:1b:79:0b:c1:73:28:b0:85:2f:7f:e3:
         99:51:83:f0:f2:77:d1:84:5d:02:17:5f:f6:a5:36:bb:c1:16:
         df:09:b6:7c:5c:44:01:1b:a6:13:4a:da:ba:fe:b6:0d:45:12:
         de:9f:cc:bb:4e:44:d0:d0:a5:65:a4:9e:f3:c1:5b:0a:55:e6:
         a5:2e:66:4a:a9:68:d5:14:2b:4b:61:60:f6:10:53:80:01:d4:
         66:d7:03:d5:a4:f9:a9:65:87:54:a6:1f:62:29:e0:6f:b9:61:
         e6:30:6e:1a:83:10:48:94:63:cf:b0:35:67:ea:86:7b:28:1d:
         da:85:c1:ac:5b:b3:4e:77:d7:f0:16:34:87:0f:31:64:9c:e6:
         bb:96:d0:49:3f:3e:37:0e:f8:12:82:18:0c:7d:5b:31:9d:5c:
         50:44:19:70:5a:5f:7e:26:04:a6:20:ee:71:b1:c3:a8:c7:c9:
         67:ff:46:cd
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAZL9oymRoDoePYM3+moutzP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjQxMTA1MTg0MzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjk2N2E1N2ZjMGQ4NjM4NGY2YjFiNDlmNzA1NmZiYzU4MDUxZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QonpdmflGpyd1X1uq3UHaV1/p/L
bYKvP6Re88qtdQX+RldCuXNVZbgrkpDBzuOMvT8kxJB1BENMZxiXcFErlOQuX/eL
4y1Qqrf/Vn0+PljlReKQ2Hxcqv57FwS5xHr30LI7Tjbdwyy9qf47JECBkQAndkcM
W0WloikE6T+KU3G9g/rc8M5hd6AuA0rikynypvA9i3PMI7cFNSOFAR1fm+uUnOKf
GQni3OnIXsfgWiEGvTjA5Jxbdmiqu4MAUSHtNdFdzQ+KMrvcQKaQ9DByehJJbFC3
oSYyQ8A6n0Ksa3aTAPmWZB0nHnqn6nz6K93iP/GiZBEoTuf8zYibBk05MQIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFP+Welf8DYY4T2sbSfcFb7xYBR5sMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvXzVaNlZfd05oamhQYXh0Sjl3VnZ2RmdGSG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAIwaQMFACoOS8cD
BQAqDlOFAwUAKg5ThwMFASoOWQADBQAqDlkGAwUAKg6AgAMFACoOgIIDBQAqDszA
AwUAKg7MxQMFACoPb8EDBQAqD2/HAwUAKg+0wQMFACoPtMYDBQAqD8CBAwUAKg/A
hzANBgkqhkiG9w0BAQsFAAOCAQEAjzuc+bMLWXwDTLPT9EusLMpgwRiP3ZXIWSmJ
9X6/mtQ/IvceZiFfQJbUqtnfPRoM0RCoyHcC3iJ3hJAXhoDqPjh7daWIRw8ue4dg
IGTI0Bt5C8FzKLCFL3/jmVGD8PJ30YRdAhdf9qU2u8EW3wm2fFxEARumE0rauv62
DUUS3p/Mu05E0NClZaSe88FbClXmpS5mSqlo1RQrS2Fg9hBTgAHUZtcD1aT5qWWH
VKYfYingb7lh5jBuGoMQSJRjz7A1Z+qGeygd2oXBrFuzTnfX8BY0hw8xZJzmu5bQ
ST8+Nw74EoIYDH1bMZ1cUEQZcFpffiYEpiDucbHDqMfJZ/9GzQ==
-----END CERTIFICATE-----