Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/aqG8T66f-WpILYl7Huimafb7c4Y.roa
File:                     aqG8T66f-WpILYl7Huimafb7c4Y.roa (raw, json)
Hash identifier:          J6NkCcGIqYdLbtwKB9toyH2qN+/7YCkliwmwUvGb6pU=
Subject key identifier:   6A:A1:BC:4F:AE:9F:F9:6A:48:2D:89:7B:1E:E8:A6:69:F6:FB:73:86
Certificate issuer:       /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial:       01917091661A44F89CA23A09C1614E904995
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/aqG8T66f-WpILYl7Huimafb7c4Y.roa
Signing time:             Tue 20 Aug 2024 16:14:22 +0000
ROA not before:           Tue 20 Aug 2024 16:14:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60504
IP address blocks:        2a13:82c0::/32 maxlen: 32
                          2a13:82c1::/32 maxlen: 32
                          2a13:82c2::/32 maxlen: 32
                          2a13:82c3::/32 maxlen: 32
                          2a13:82c4:1::/48 maxlen: 48
                          2a13:82c4:2::/48 maxlen: 48
                          2a13:82c4:3::/48 maxlen: 48
                          2a13:82c4:f900::/40 maxlen: 48
                          2a13:82c4:fa00::/40 maxlen: 40
                          2a13:82c4:fb00::/40 maxlen: 40
                          2a13:82c7::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 16:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:70:91:66:1a:44:f8:9c:a2:3a:09:c1:61:4e:90:49:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
        Validity
            Not Before: Aug 20 16:14:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6aa1bc4fae9ff96a482d897b1ee8a669f6fb7386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:92:f4:6f:1c:6c:94:50:33:89:ec:83:7a:
                    db:0e:0d:8a:83:1e:ae:59:92:40:07:67:39:40:1a:
                    37:32:03:8f:9d:24:90:cf:19:0c:f6:97:32:fe:0a:
                    1c:30:cb:b3:89:c6:61:e7:9c:d8:82:14:c8:99:1c:
                    34:64:5e:a5:36:23:19:84:4e:da:3f:ea:c5:4b:4c:
                    30:aa:eb:64:bb:9f:d4:21:e8:c8:e1:a4:83:90:a9:
                    cd:03:a0:06:57:53:e5:fa:b7:1d:19:15:af:44:9c:
                    3a:fb:64:4e:de:08:ba:de:7e:f9:24:39:3a:1f:d4:
                    28:c8:79:68:56:7a:61:e5:53:02:b3:39:cf:1c:d5:
                    58:d4:81:9f:e9:76:2f:82:d0:1a:86:e6:12:b0:2f:
                    68:5a:56:9c:f6:b9:52:5d:dc:3c:43:62:d0:16:25:
                    66:f1:39:89:2d:bd:46:79:2d:bc:1f:02:20:e3:04:
                    74:d3:aa:f9:65:38:f5:db:e1:fb:0a:a3:c7:6d:ae:
                    14:05:e9:a2:fe:53:61:ad:64:4d:e4:39:73:ad:25:
                    52:d7:dd:10:aa:d1:6d:b3:4b:1d:a6:a0:b8:a3:0f:
                    5c:71:6c:27:63:5e:66:4e:d2:9f:bd:2a:89:e8:80:
                    77:15:ce:df:b5:ae:6f:2d:0a:d2:24:49:15:49:1d:
                    c0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A1:BC:4F:AE:9F:F9:6A:48:2D:89:7B:1E:E8:A6:69:F6:FB:73:86
            X509v3 Authority Key Identifier:
                keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/aqG8T66f-WpILYl7Huimafb7c4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:82c0::/30
                  2a13:82c4:1::-2a13:82c4:3:ffff:ffff:ffff:ffff:ffff
                  2a13:82c4:f900::-2a13:82c4:fbff:ffff:ffff:ffff:ffff:ffff
                  2a13:82c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:2d:3d:18:33:ab:7d:b6:35:47:6b:2f:0d:86:47:8c:4b:
         fd:3e:61:9b:89:33:37:5e:1f:d8:a9:9d:b1:36:c8:d2:40:e9:
         63:76:de:8a:be:27:75:ba:26:de:d4:1d:4e:81:d5:26:06:69:
         57:8e:65:29:c9:8d:b1:02:47:1b:cb:31:cf:2a:c5:0e:e7:06:
         f6:54:d9:6d:4f:1a:53:4b:44:4f:33:f3:18:9f:8c:c6:a4:ea:
         cd:d0:ad:0f:e1:a6:62:1a:8a:74:00:20:69:5a:9e:d4:a5:30:
         48:69:62:5b:81:19:ff:d7:88:12:6f:c1:f5:2e:ee:4e:9f:0b:
         94:a7:ef:d7:25:97:e7:d0:84:2f:97:33:cb:e2:10:b3:be:9a:
         64:dc:91:7b:1b:4a:c3:54:a9:85:78:db:4c:65:95:87:65:7e:
         4b:60:8f:54:48:c2:f5:60:79:8a:1e:da:ba:67:9f:63:58:39:
         30:7f:08:9a:86:a7:70:f9:9b:44:f3:6c:e5:a8:68:9a:18:30:
         eb:14:97:cf:e5:44:58:39:39:44:0f:92:db:2f:81:c5:0b:66:
         0f:3e:af:2d:60:0c:c6:2a:52:a8:18:ae:7d:f4:b5:3e:de:99:
         82:7c:52:7d:34:f7:59:a4:94:77:a0:58:f7:c9:51:8f:2e:d6:
         a0:f5:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----