Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/qSwOfvLebaqnO8_IZ2ZCnbqknrc.roa
File:                     qSwOfvLebaqnO8_IZ2ZCnbqknrc.roa (raw, json)
Hash identifier:          fSg+G6pvNsuP4Dp2+XVWzJkrwh6h2W8ydfGYrJkJflo=
Subject key identifier:   A9:2C:0E:7E:F2:DE:6D:AA:A7:3B:CF:C8:67:66:42:9D:BA:A4:9E:B7
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       01921F0E5FEBD9A31670218C4FCC7DF7E1E5
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/qSwOfvLebaqnO8_IZ2ZCnbqknrc.roa
Signing time:             Mon 23 Sep 2024 13:24:48 +0000
ROA not before:           Mon 23 Sep 2024 13:24:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a0e:5382::/32 maxlen: 32
                          2a0e:8080::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 08:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:1f:0e:5f:eb:d9:a3:16:70:21:8c:4f:cc:7d:f7:e1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Sep 23 13:24:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a92c0e7ef2de6daaa73bcfc86766429dbaa49eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:ab:6a:61:58:5f:b4:a5:ac:2b:4a:65:f6:
                    44:32:b5:c6:f5:45:55:e9:48:1b:ce:16:de:42:5c:
                    ba:c4:94:3d:5c:11:d7:38:ac:f1:68:0c:00:26:e8:
                    ad:12:be:06:85:25:51:00:d8:1b:99:d6:c4:c7:33:
                    3c:b3:90:26:26:2b:67:e5:65:c3:df:c6:b3:94:88:
                    20:ab:35:61:e5:15:90:1b:2a:9d:0b:2f:dd:9a:77:
                    3f:2d:f8:ea:63:1c:ad:65:ce:9f:22:51:7a:8e:a7:
                    bd:92:40:0b:03:c6:b7:53:62:cd:ea:77:90:df:73:
                    62:7a:22:30:79:8d:46:7a:e1:3f:6e:cd:07:25:34:
                    55:05:8a:08:f6:2d:e0:4b:1a:fd:42:8c:c2:38:93:
                    c5:60:aa:63:ea:8c:da:ab:bb:2b:64:c0:13:98:65:
                    49:4a:f2:e6:2e:8b:d4:dd:6b:d9:94:b1:14:a5:db:
                    c0:44:26:16:73:9f:d1:fd:68:b2:b7:55:41:32:4e:
                    66:b6:05:29:42:d6:5e:57:b2:04:99:c8:46:1e:0b:
                    35:ae:33:5f:f8:67:d5:78:94:b1:10:96:92:e5:80:
                    6e:16:85:cf:4a:e5:3e:ec:58:60:3e:18:00:a4:e6:
                    55:7e:3e:55:f5:e5:2e:ef:f2:15:29:a3:1f:c3:92:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2C:0E:7E:F2:DE:6D:AA:A7:3B:CF:C8:67:66:42:9D:BA:A4:9E:B7
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/qSwOfvLebaqnO8_IZ2ZCnbqknrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:5382::/32
                  2a0e:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:0e:e9:c9:90:d5:6c:3d:8b:d6:99:80:b3:d7:6d:31:fa:
         c2:33:21:ef:82:bf:03:81:c5:f7:ef:ca:13:54:55:dc:3b:2f:
         e6:af:3c:71:06:8c:35:23:cb:80:24:7f:e4:db:11:92:56:76:
         04:13:d4:59:2b:31:76:73:aa:9b:9a:15:68:9e:73:38:81:54:
         94:6d:26:b1:28:6e:71:33:7d:3c:2b:b1:5d:06:35:60:58:fa:
         2a:55:b9:08:e8:ac:99:10:3e:9a:59:ce:fb:c3:52:c4:5a:92:
         f3:0b:87:54:1b:06:e8:d2:64:68:4b:c7:85:cc:6f:a8:8d:ba:
         73:31:19:31:df:05:93:21:dd:e5:eb:e6:77:32:ea:91:d0:08:
         1c:62:cd:ba:43:51:b4:0a:a7:4c:e4:58:93:ea:d1:d6:a3:39:
         dd:e9:8d:70:be:21:03:0d:63:87:f3:45:f5:46:29:9c:c9:aa:
         80:24:e2:08:b9:12:b2:3b:99:e7:aa:16:22:37:11:10:44:65:
         76:2b:08:4a:4b:c5:93:ff:15:d1:45:4f:c9:c6:7f:5b:22:c7:
         82:7c:2a:bb:09:b7:ef:e5:85:a8:10:bb:f8:d9:25:cf:35:b9:
         94:7f:97:43:58:83:18:2b:27:23:b1:5d:f7:95:5d:98:33:72:
         d7:15:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----