Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/njS6KsytVvsHEmzWuS97v_VP_7w.roa
File:                     njS6KsytVvsHEmzWuS97v_VP_7w.roa (raw, json)
Hash identifier:          sxgi9eakox3EbyNceepzqFH+2N9HIFAClBTRlhMMkVY=
Subject key identifier:   9E:34:BA:2A:CC:AD:56:FB:07:12:6C:D6:B9:2F:7B:BF:F5:4F:FF:BC
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       018DC1C83D8DD9B4CFA1EFAF6C596636AF5E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/njS6KsytVvsHEmzWuS97v_VP_7w.roa
Signing time:             Mon 19 Feb 2024 14:32:22 +0000
ROA not before:           Mon 19 Feb 2024 14:32:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215472
IP address blocks:        2a12:bec4:1040::/48 maxlen: 48
                          2a12:bec4:1041::/48 maxlen: 48
                          2a12:bec4:1042::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 18:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c1:c8:3d:8d:d9:b4:cf:a1:ef:af:6c:59:66:36:af:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Feb 19 14:32:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9e34ba2accad56fb07126cd6b92f7bbff54fffbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:44:07:27:98:25:bd:7f:ac:8b:56:20:8e:
                    d1:93:27:78:a0:fb:a5:5a:0a:ee:9d:29:7d:dd:73:
                    75:b9:18:95:ad:2d:5c:19:50:b3:b1:c3:1c:5c:43:
                    a0:e1:ef:81:a5:2a:2b:79:98:06:5d:be:1e:22:fa:
                    26:21:e7:d2:61:ab:7f:f8:a5:de:91:20:9d:c1:b9:
                    ec:26:b9:5d:d0:86:eb:4d:6d:fb:e6:79:06:88:64:
                    79:89:27:96:e5:44:e8:9b:07:20:65:2d:55:a7:ef:
                    50:eb:0b:90:e2:3c:18:bd:99:c5:99:ff:31:b9:4a:
                    23:48:fe:dc:6e:15:b4:21:68:61:29:ae:42:e5:e4:
                    bf:f9:69:2d:04:a7:23:d4:f5:96:f8:93:6f:b6:38:
                    ac:f7:c7:87:ab:97:d8:5a:e6:33:3d:4b:f6:57:eb:
                    a1:15:e0:b8:3b:ae:d9:e0:d6:c1:00:63:b7:85:a7:
                    bd:dd:47:62:63:7b:38:0f:6a:ea:03:1b:99:a2:74:
                    f8:4f:18:54:6e:39:2c:fb:fe:dc:ed:3e:fa:63:8e:
                    d4:34:04:57:0f:1f:0f:c6:29:bc:03:be:4e:d9:56:
                    05:2c:73:2d:f2:d9:19:81:58:7e:05:23:03:6a:23:
                    b8:ac:46:86:7b:55:cd:e7:0c:27:79:e8:a8:e9:c5:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:BA:2A:CC:AD:56:FB:07:12:6C:D6:B9:2F:7B:BF:F5:4F:FF:BC
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/njS6KsytVvsHEmzWuS97v_VP_7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec4:1040::-2a12:bec4:1042:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9d:ca:3f:58:ce:3a:c6:94:db:ed:33:0e:f7:ec:0b:0d:e2:58:
         02:dd:f8:6e:d1:88:aa:bc:57:67:60:33:21:ba:cc:e0:6c:f4:
         39:3a:97:f0:4e:4b:2a:7b:88:68:e1:c1:91:9c:cc:30:b8:06:
         d3:0b:46:e1:d7:e6:1c:62:19:db:00:d3:07:54:b5:a7:88:15:
         c1:1b:01:5e:a4:49:7e:cb:28:e5:3c:38:c8:d3:bf:8b:41:94:
         8e:75:e0:03:8d:93:54:7c:e5:b0:8a:8f:78:d1:c1:6f:74:b7:
         98:2b:9a:6a:30:85:d2:ac:ba:4a:21:e7:d9:84:d4:9a:1b:20:
         cc:a6:cc:50:dc:01:b9:5f:23:f4:a9:e5:93:32:de:c6:69:d6:
         ae:3b:1f:9a:ca:94:bd:17:d4:c9:fb:cb:28:c7:ae:9f:af:04:
         63:95:fd:0c:d4:94:6d:f9:02:55:7e:bf:a0:ae:f8:a6:01:dc:
         18:b6:56:57:fd:d6:5f:e5:e1:90:d2:f4:34:90:99:c2:9d:d5:
         4b:5d:12:10:e2:de:2e:a1:02:74:97:2e:88:0d:bd:dd:5d:ae:
         92:db:59:ab:b5:84:dd:b0:1a:d3:c8:59:2a:39:42:c2:41:e4:
         6a:bd:dd:99:1f:8e:b7:a8:5a:c3:c3:c3:4a:97:bc:f0:b3:a3:
         01:16:40:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----