Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MEdo3dDjbJDKMAeZQ-aOYnlk03Q.roa
File:                     MEdo3dDjbJDKMAeZQ-aOYnlk03Q.roa (raw, json)
Hash identifier:          wyi7ktFbYER8IaRTXH1Lb6H14AOUlRveJKsn0hGQ2/g=
Subject key identifier:   30:47:68:DD:D0:E3:6C:90:CA:30:07:99:43:E6:8E:62:79:64:D3:74
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       018DB335767D8890D2C6935B42E4E2B4AB87
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MEdo3dDjbJDKMAeZQ-aOYnlk03Q.roa
Signing time:             Fri 16 Feb 2024 18:37:21 +0000
ROA not before:           Fri 16 Feb 2024 18:37:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2a12:bec4:1040::/48 maxlen: 48
                          2a12:bec4:1041::/48 maxlen: 48
                          2a12:bec4:1042::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 14:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b3:35:76:7d:88:90:d2:c6:93:5b:42:e4:e2:b4:ab:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Feb 16 18:37:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=304768ddd0e36c90ca30079943e68e627964d374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:33:c7:d1:42:ef:78:08:6b:8a:4b:85:6b:
                    e7:6c:18:3d:de:12:61:52:b0:e4:e9:3b:51:3f:89:
                    e0:f0:48:7b:e3:6d:88:66:17:d9:75:f0:af:87:a1:
                    53:36:77:5d:19:e2:40:f8:17:2b:ce:6d:3c:bb:f4:
                    73:0a:db:b4:a3:57:d9:29:0c:f5:58:94:f4:9e:f7:
                    97:7f:f7:d4:93:3d:29:84:49:1d:9b:8f:c7:87:81:
                    dc:97:2f:5c:ab:aa:82:bb:a2:67:1e:00:7a:95:ec:
                    bd:7f:4e:ee:91:fe:12:30:6f:62:0d:54:ce:56:7f:
                    ab:a2:51:51:38:e5:da:27:f0:d6:71:14:2c:44:9c:
                    b7:b7:1f:3f:ef:ad:02:75:aa:ad:d4:5f:fb:d2:9e:
                    80:4b:33:d3:e2:ea:55:0c:03:b1:95:16:72:af:81:
                    15:ae:91:26:e3:9c:f4:08:2a:a5:a5:76:bc:87:1b:
                    ff:a3:6b:6d:02:a9:01:0c:cd:89:5c:29:5b:cc:f0:
                    83:41:9b:11:5b:63:62:fb:a7:4b:51:04:9f:b6:ba:
                    27:e9:44:e2:ad:10:80:93:80:ef:f0:e4:b9:3b:c0:
                    d0:63:bb:84:90:56:d3:8a:2b:31:0d:7d:cb:d7:f6:
                    6c:d7:9f:c2:9c:a9:18:80:1b:26:84:7c:0b:29:6f:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:68:DD:D0:E3:6C:90:CA:30:07:99:43:E6:8E:62:79:64:D3:74
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MEdo3dDjbJDKMAeZQ-aOYnlk03Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec4:1040::-2a12:bec4:1042:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:a0:9b:23:4b:db:3a:1c:09:38:8f:3a:bf:fc:93:64:f2:
         68:57:f6:4e:e4:b8:c8:6f:fa:e0:ab:b3:81:72:61:86:6b:f4:
         ab:4f:fa:50:71:78:da:69:a7:f0:bb:d1:b9:b0:5d:3a:2f:f7:
         58:b8:7d:3c:cb:5a:c6:10:04:3f:35:37:05:48:c1:ac:44:17:
         6c:62:7e:3f:b7:f6:77:e1:8c:0a:39:3b:7c:b7:bc:23:b0:2e:
         90:7d:ed:97:24:f8:76:c3:d7:ce:66:0b:43:87:13:09:8f:fc:
         61:b2:2b:eb:46:1c:60:90:16:a7:ca:bc:8e:16:f5:4c:25:d6:
         a4:1b:15:70:0e:49:8f:9e:72:9e:4d:9a:8b:e1:79:c2:1c:8d:
         da:19:84:a2:51:3a:e4:4c:be:df:1b:f8:61:8f:38:f0:d6:4a:
         73:e5:1c:a6:41:62:b1:dd:52:a7:65:9f:4c:19:39:35:09:f5:
         8f:71:73:0a:5b:c0:97:ea:d0:48:00:65:8b:3f:95:40:ce:c5:
         7d:fc:ba:c7:99:d8:0f:5b:c5:72:a0:b8:97:a5:07:f6:0c:80:
         2a:48:3c:7c:9b:ef:44:ac:7b:bd:f5:40:35:d0:24:24:a2:a1:
         1b:89:2a:d2:c5:e1:2d:32:06:7f:cf:13:53:b6:4f:e7:a5:d6:
         db:f5:46:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----