Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/jP5lz8jTOUQQJLSqlyozChaojDQ.roa
File:                     jP5lz8jTOUQQJLSqlyozChaojDQ.roa (raw, json)
Hash identifier:          4RZGX0PEN+7NQmMsPmjDVnSHS5ZCay14VL0vlfZTgoM=
Subject key identifier:   8C:FE:65:CF:C8:D3:39:44:10:24:B4:AA:97:2A:33:0A:16:A8:8C:34
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       018D649EF88B09E719FD932A15EAF9474DE4
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/jP5lz8jTOUQQJLSqlyozChaojDQ.roa
Signing time:             Thu 01 Feb 2024 12:22:36 +0000
ROA not before:           Thu 01 Feb 2024 12:22:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44477
IP address blocks:        2a0e:4bc6::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 10:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:64:9e:f8:8b:09:e7:19:fd:93:2a:15:ea:f9:47:4d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Feb  1 12:22:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8cfe65cfc8d339441024b4aa972a330a16a88c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:36:c3:ba:ba:bf:d5:d3:f2:e0:ed:b6:a2:
                    eb:20:61:b4:39:6d:1c:7a:93:e9:8a:c2:a7:e0:27:
                    9d:f1:aa:aa:a1:13:cb:3c:99:79:d5:ef:bf:2d:c0:
                    8b:38:b1:2e:ca:f6:24:f0:ec:80:de:36:b6:01:cc:
                    75:fa:fe:15:7c:36:29:f5:d6:21:bc:93:cd:6f:83:
                    51:89:91:10:b2:de:62:d0:08:fb:a4:17:60:12:6b:
                    3e:fd:04:42:9d:a7:08:c3:6c:46:ab:5c:2e:e5:5f:
                    d3:d0:02:32:1e:4d:d9:45:8d:bd:4f:f2:d4:03:0d:
                    cc:34:51:77:1c:97:75:0f:73:49:02:59:55:77:3b:
                    9b:91:a1:0a:fc:8b:da:c2:ac:38:36:fa:97:be:fd:
                    85:a6:91:47:4e:ed:26:f0:95:cf:f9:62:46:e6:58:
                    fd:eb:bf:d8:ab:2d:80:89:89:e2:77:72:5a:a7:ca:
                    01:2e:1e:13:7f:3e:c8:cb:39:0d:73:1a:3d:09:cd:
                    9a:6e:1e:76:b0:79:95:4c:fc:5d:17:e3:08:1a:5f:
                    b7:cb:b5:93:11:45:19:50:d9:33:79:49:49:40:38:
                    78:67:72:2c:1a:5e:7e:68:0f:bd:a1:a5:91:a4:39:
                    57:ca:c1:1d:0d:ff:77:c9:4e:cf:8b:9b:0f:e4:a4:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FE:65:CF:C8:D3:39:44:10:24:B4:AA:97:2A:33:0A:16:A8:8C:34
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/jP5lz8jTOUQQJLSqlyozChaojDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4bc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:03:0c:77:e1:3a:c7:03:db:34:82:fe:44:ef:e2:31:53:a5:
         66:7d:87:e4:cd:40:45:5c:25:a9:7f:13:bc:71:e6:76:c2:6a:
         23:5a:94:3d:13:42:ce:b9:de:28:88:e1:f3:1d:93:e2:c3:83:
         7e:62:5c:81:49:f4:dd:51:1b:76:41:f1:ec:6e:19:b4:7b:42:
         8b:a2:19:0c:70:00:c9:18:04:79:66:e6:e4:79:3c:e3:15:eb:
         67:b7:11:28:c4:3a:22:e8:72:2e:3d:13:6a:87:21:95:67:13:
         e5:bd:1b:33:05:a6:da:8f:4d:93:0b:43:15:2d:55:3d:82:5c:
         3a:6c:e0:dd:c9:a6:49:7f:65:b5:5b:3e:5f:37:5c:2c:7b:c9:
         f6:27:05:70:af:b6:8d:e0:d4:04:c5:f1:fa:51:c8:5d:f7:bc:
         cd:29:da:ee:c4:f0:52:6a:73:a7:0d:d3:f6:ef:a3:1b:94:c3:
         84:0c:2b:3f:06:60:cb:92:1d:79:4d:de:be:02:7e:a9:44:e0:
         49:86:d4:63:10:b7:0b:33:67:fe:5e:f9:6c:c3:9b:3a:73:27:
         c8:ec:21:f3:f9:ff:70:cd:88:92:8d:3d:82:ed:ff:18:e1:9d:
         fc:94:16:25:8d:d0:10:18:45:6a:e6:94:a7:c7:aa:22:24:f2:
         30:9a:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----