Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/chhe6RpcSaVDbz2ZmFmkdT3Xc0c.roa
File:                     chhe6RpcSaVDbz2ZmFmkdT3Xc0c.roa (raw, json)
Hash identifier:          LR/7vEpfbtXyh+9THmWlL3XvZdI99MiEDck0+c1GZW4=
Subject key identifier:   72:18:5E:E9:1A:5C:49:A5:43:6F:3D:99:98:59:A4:75:3D:D7:73:47
Certificate issuer:       /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial:       018CC3495F760E4C49CB47B8C819D8DDBF2C
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/chhe6RpcSaVDbz2ZmFmkdT3Xc0c.roa
Signing time:             Mon 01 Jan 2024 04:30:14 +0000
ROA not before:           Mon 01 Jan 2024 04:30:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     397881
IP address blocks:        2a0f:300::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 16:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:5f:76:0e:4c:49:cb:47:b8:c8:19:d8:dd:bf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
        Validity
            Not Before: Jan  1 04:30:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=72185ee91a5c49a5436f3d999859a4753dd77347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:73:a6:60:59:57:c5:13:4d:db:c3:32:3e:
                    f4:a1:61:62:52:e9:d9:c8:af:6f:34:33:ae:c3:b1:
                    35:36:cd:ee:fd:06:10:46:54:2e:bf:0f:6c:71:ed:
                    99:94:2a:9a:87:31:fc:87:e5:33:26:4f:41:72:4c:
                    59:e7:0a:99:28:2d:65:0d:58:d2:bc:f9:df:f9:8e:
                    5b:26:6c:13:e6:50:72:f9:55:0c:36:e4:54:e2:80:
                    4b:f0:2d:f5:d1:d2:34:41:88:bc:30:17:8d:fb:62:
                    fc:af:08:3f:ca:c5:97:49:db:09:0d:32:9f:9a:2d:
                    d1:a6:b5:28:6f:96:b0:3b:4a:40:06:4c:c5:0b:51:
                    aa:c2:ad:bc:ba:2d:ef:3b:32:63:b8:64:77:2b:64:
                    6d:18:a6:1c:fe:32:f6:a0:54:d7:04:3b:4b:80:87:
                    35:f5:3e:a9:47:fc:6b:eb:b6:a6:f9:a1:fa:91:ba:
                    42:12:7f:ed:92:5d:f8:bd:29:f2:c8:3a:64:17:65:
                    c0:5e:16:4e:03:82:64:d0:40:1f:4f:1a:5f:19:31:
                    e3:a0:9e:e4:d2:93:5f:f8:1f:ea:82:0b:44:2c:4f:
                    bf:c7:f8:4d:5d:77:9f:7b:33:ca:04:45:e3:68:aa:
                    7f:6f:1d:46:f1:b9:62:48:df:1d:ba:7a:f0:5e:69:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:18:5E:E9:1A:5C:49:A5:43:6F:3D:99:98:59:A4:75:3D:D7:73:47
            X509v3 Authority Key Identifier:
                keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/chhe6RpcSaVDbz2ZmFmkdT3Xc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:09:f9:f3:84:22:59:62:e0:7d:87:2b:a0:a8:4a:73:fe:3a:
         0e:0a:a2:c8:da:17:76:91:a6:f7:a5:55:12:71:de:0b:37:cd:
         9a:c2:b9:34:0b:6b:48:d0:67:82:4a:68:d9:55:26:e8:fd:bc:
         99:be:e9:af:73:7d:b1:6f:8b:d6:ce:6b:9c:4f:db:2d:7d:36:
         3f:5b:c8:a0:4c:97:0f:0b:e4:da:62:b2:61:b5:3e:6b:dc:50:
         c4:a6:e6:23:d4:eb:26:c9:74:44:ab:18:77:7c:77:91:c2:2f:
         0f:01:cf:cf:0f:d3:e3:bb:65:de:94:c9:f5:88:13:a2:df:0a:
         a7:e7:c1:ef:58:5b:99:e5:d2:91:b6:9e:be:87:b1:6f:29:45:
         71:9d:76:6d:35:49:a8:df:c1:a0:ae:06:a5:7d:c3:53:ff:7d:
         b1:39:89:08:3d:1a:a2:6d:38:c8:1a:f4:bf:42:69:1d:d6:43:
         87:88:b9:a3:ca:41:85:bb:8a:ef:0e:ed:ee:bd:9d:9b:4c:7d:
         70:a3:e5:2b:c1:fa:57:9c:0c:b7:b4:0d:1c:97:f8:2f:33:e1:
         be:7e:b3:72:46:1c:90:90:83:e4:c8:71:9e:8f:30:44:3c:a0:
         66:f3:96:e4:f7:9f:dd:a6:6c:70:7d:69:2d:15:81:c5:b6:07:
         ce:57:fa:2c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDSV92DkxJy0e4yBnY3b8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmVjYzRiYThhNGQ1MjQ5OGEwZDI5ODNhNjhiNjEzODNh
YTdmZDcwHhcNMjQwMTAxMDQzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjE4NWVlOTFhNWM0OWE1NDM2ZjNkOTk5ODU5YTQ3NTNkZDc3MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgFzpmBZV8UTTdvDMj70oWFiUunZ
yK9vNDOuw7E1Ns3u/QYQRlQuvw9sce2ZlCqahzH8h+UzJk9BckxZ5wqZKC1lDVjS
vPnf+Y5bJmwT5lBy+VUMNuRU4oBL8C310dI0QYi8MBeN+2L8rwg/ysWXSdsJDTKf
mi3RprUob5awO0pABkzFC1Gqwq28ui3vOzJjuGR3K2RtGKYc/jL2oFTXBDtLgIc1
9T6pR/xr67am+aH6kbpCEn/tkl34vSnyyDpkF2XAXhZOA4Jk0EAfTxpfGTHjoJ7k
0pNf+B/qggtELE+/x/hNXXefezPKBEXjaKp/bx1G8bliSN8dunrwXmkrJwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHIYXukaXEmlQ289mZhZpHU913NHMB8GA1UdIwQY
MBaAFGK+zEuopNUkmKDSmDpothODqn/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXI3TVM2aWsxU1NZb05LWU9taTJFNE9xZjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YzQ5M2ItNDE3Yi00YWY2LTlmNDMt
MmZmMTRjMjE4NzE5LzEvY2hoZTZScGNTYVZEYnoyWm1GbWtkVDNYYzBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85YzQ5M2ItNDE3Yi00YWY2LTlmNDMtMmZmMTRjMjE4NzE5
LzEvWXI3TVM2aWsxU1NZb05LWU9taTJFNE9xZjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg8DADAN
BgkqhkiG9w0BAQsFAAOCAQEAEQn584QiWWLgfYcroKhKc/46DgqiyNoXdpGm96VV
EnHeCzfNmsK5NAtrSNBngkpo2VUm6P28mb7pr3N9sW+L1s5rnE/bLX02P1vIoEyX
Dwvk2mKyYbU+a9xQxKbmI9TrJsl0RKsYd3x3kcIvDwHPzw/T47tl3pTJ9YgTot8K
p+fB71hbmeXSkbaevoexbylFcZ12bTVJqN/BoK4GpX3DU/99sTmJCD0aom04yBr0
v0JpHdZDh4i5o8pBhbuK7w7t7r2dm0x9cKPlK8H6V5wMt7QNHJf4LzPhvn6zckYc
kJCD5Mhxno8wRDygZvOW5Pef3aZscH1pLRWBxbYHzlf6LA==
-----END CERTIFICATE-----