Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6OqemOL8h2OiFlCJWvj6BTl-TSs.roa
File:                     6OqemOL8h2OiFlCJWvj6BTl-TSs.roa (raw, json)
Hash identifier:          Eq3d+AqBuQ6WyzslGM1b2kORiO0t+2p5AccaDMiLwAs=
Subject key identifier:   E8:EA:9E:98:E2:FC:87:63:A2:16:50:89:5A:F8:FA:05:39:7E:4D:2B
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0191912C4338A9E5055CE53D5C3E451A7B9E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6OqemOL8h2OiFlCJWvj6BTl-TSs.roa
Signing time:             Tue 27 Aug 2024 00:11:22 +0000
ROA not before:           Tue 27 Aug 2024 00:11:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 01:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:91:2c:43:38:a9:e5:05:5c:e5:3d:5c:3e:45:1a:7b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 27 00:11:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8ea9e98e2fc8763a21650895af8fa05397e4d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:7b:10:24:cf:ec:ac:93:b2:f4:ed:42:ec:
                    2b:44:b3:ef:b0:e4:1b:16:84:c1:4c:7c:e3:4c:1d:
                    b4:3b:07:2a:d4:0a:ce:43:02:e2:b6:5f:df:20:3d:
                    f8:1d:4b:03:30:2b:a7:e5:c7:5e:66:a3:81:01:24:
                    5d:20:db:1f:e0:b3:49:35:6c:81:ac:bf:d4:70:83:
                    9f:f5:6f:5b:ce:2c:24:6a:78:6c:6f:5f:58:a7:eb:
                    f3:d1:37:e9:9f:5f:a5:09:29:a7:da:b2:19:35:7f:
                    3f:0b:b0:ef:48:51:2d:64:d9:63:f5:76:f6:fc:7b:
                    7e:7f:6c:36:f0:20:ea:59:11:00:4c:21:53:64:17:
                    51:52:7d:12:b1:a7:00:73:67:e8:dd:79:86:1b:7e:
                    3e:2e:07:e3:4a:24:d1:54:f3:d4:7e:56:e7:6f:43:
                    33:58:f4:97:2f:77:5e:7b:0a:0a:bf:9b:96:03:b1:
                    26:e9:34:e9:4f:1f:a1:5a:5f:e5:b9:93:da:28:0f:
                    bf:59:d7:6e:61:31:90:05:c3:15:19:fe:73:aa:dc:
                    28:f3:bd:eb:14:91:8b:3b:19:6c:59:9f:57:49:bd:
                    fc:26:e7:38:2b:c8:fa:ea:87:17:ee:3e:2d:65:92:
                    c3:80:43:90:8d:9d:a9:75:6e:43:d8:f2:42:c2:de:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EA:9E:98:E2:FC:87:63:A2:16:50:89:5A:F8:FA:05:39:7E:4D:2B
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6OqemOL8h2OiFlCJWvj6BTl-TSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:9f:37:3e:2f:4e:01:ff:d9:32:d7:fd:f8:26:5d:0b:8f:
         9a:11:a0:1e:08:bb:25:07:71:b4:4d:8f:38:59:96:8b:50:8d:
         28:01:8e:30:af:42:65:6d:26:e7:c0:f6:1d:56:42:fb:d9:46:
         69:72:02:a9:64:22:b2:4f:7b:30:fe:ec:5f:ab:b7:50:9a:8c:
         ff:ec:d2:b1:d4:5a:c6:a6:7e:3c:ec:fe:9a:e6:e4:fd:40:50:
         ea:64:d2:70:5b:a9:e0:b2:41:fb:bf:bd:1d:9c:f5:d0:4b:f7:
         2a:b5:67:71:06:e2:36:ce:d5:8e:91:cb:c8:21:69:3e:6a:5a:
         70:6e:1e:33:b5:e8:61:02:c8:7f:04:ea:fb:16:30:0e:8d:e4:
         f4:63:18:fa:7f:d3:92:92:c3:ff:95:7a:f0:d3:93:1e:ea:b6:
         92:5f:e1:d5:47:b1:4d:f9:f6:f8:eb:b7:51:c6:3f:9e:5c:b5:
         7d:d9:d7:9a:76:e0:0f:87:2d:d7:c0:15:a4:1f:37:5d:6e:f7:
         58:cd:b9:3a:f7:ad:4d:b5:59:b8:ae:9a:b8:49:f8:8d:36:be:
         fa:18:4a:3d:a5:43:f7:d5:99:bd:e6:d9:93:56:ef:f3:b3:f0:
         31:b7:0f:dc:c2:19:9d:47:dd:99:b6:ac:2a:93:ba:fb:a7:9a:
         90:87:ae:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----