Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6ePGaB8tkoDXn6q0o_81L6H3NFk.roa
File:                     6ePGaB8tkoDXn6q0o_81L6H3NFk.roa (raw, json)
Hash identifier:          bK0L+PbNp/duq+CVSoucTZGKkdkA0yTqX98iOO88sV8=
Subject key identifier:   E9:E3:C6:68:1F:2D:92:80:D7:9F:AA:B4:A3:FF:35:2F:A1:F7:34:59
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0191A77D269F376353E1BB3B6EDDD06DD881
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6ePGaB8tkoDXn6q0o_81L6H3NFk.roa
Signing time:             Sat 31 Aug 2024 08:11:22 +0000
ROA not before:           Sat 31 Aug 2024 08:11:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 09:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:a7:7d:26:9f:37:63:53:e1:bb:3b:6e:dd:d0:6d:d8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 31 08:11:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9e3c6681f2d9280d79faab4a3ff352fa1f73459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:4b:e1:2f:c3:48:92:1b:c0:2b:06:86:0b:
                    97:1c:74:84:91:54:f3:86:29:3e:0d:85:f6:e5:65:
                    35:52:e6:9d:ff:1d:a8:62:11:01:8b:92:fe:bf:01:
                    47:b8:34:65:8c:d1:c9:d0:2e:84:7b:a2:96:49:10:
                    6a:ed:87:f9:56:4e:ff:e9:1c:49:f8:5f:e7:1c:fa:
                    ba:85:0a:42:8a:eb:a4:e9:0e:de:c9:64:d3:f1:58:
                    ad:c2:00:d8:8a:b8:05:9d:dd:12:91:9f:6c:cb:f6:
                    6f:78:2d:b9:c3:ff:4c:39:44:1e:42:12:f9:02:bb:
                    0c:91:c8:a3:cc:33:55:38:87:a5:fa:87:88:1b:54:
                    06:1f:e0:7e:e8:26:84:c8:4c:66:d5:d5:d4:b5:38:
                    b7:48:2d:76:a7:93:74:14:56:ee:bf:ec:02:4c:3a:
                    37:e9:8d:6a:e4:db:28:2b:2d:98:d0:4f:5c:cb:7a:
                    80:29:d5:7d:2b:d7:e0:59:33:ed:4c:d3:16:58:d9:
                    1d:91:be:74:6d:bc:50:0a:6e:6f:27:14:37:4c:28:
                    72:5e:b2:de:8e:65:81:55:35:f9:64:02:c1:64:9e:
                    a1:73:22:e4:e7:0b:66:76:87:bc:80:d7:0c:28:35:
                    88:38:c7:b9:87:c9:7a:b4:bb:cf:7e:ed:46:b2:36:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E3:C6:68:1F:2D:92:80:D7:9F:AA:B4:A3:FF:35:2F:A1:F7:34:59
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6ePGaB8tkoDXn6q0o_81L6H3NFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         07:69:0e:87:1a:f7:e3:f9:ed:44:1d:c8:f0:32:da:be:b1:1a:
         ad:ac:5d:41:8c:ae:c7:0e:29:6b:4f:6e:53:3c:c0:fb:07:8e:
         73:10:95:82:6f:48:59:45:98:ee:b7:5e:51:ab:e6:d4:ae:ce:
         bb:b3:44:88:7e:4b:7b:c6:f7:2d:ed:9e:be:2f:be:69:f9:dc:
         f9:ee:70:da:2b:d2:09:23:9c:b7:a8:7e:48:de:2d:f3:fc:be:
         23:72:f4:b3:6e:12:c7:b9:dc:61:f3:56:05:2b:d1:a3:94:60:
         1a:32:f1:4e:fa:04:e4:a2:f9:34:c2:72:a9:bd:17:93:0e:92:
         a2:ab:8f:b4:2d:6f:98:50:95:bc:6a:e7:32:94:ba:06:e5:6b:
         bb:65:6e:b3:07:ba:e7:bd:16:c3:de:14:3c:bc:8a:9f:79:84:
         b1:5e:2e:41:d7:9c:6a:5d:d7:ae:7d:e3:60:9d:a9:a5:6d:e5:
         e3:5a:9d:01:20:e0:c9:4b:3f:19:3a:3e:3b:80:92:b0:4a:5f:
         47:b8:2c:5e:eb:1d:38:c8:18:b9:69:d9:4e:b6:30:5d:2b:4b:
         ca:85:2f:ef:19:6e:2c:5e:05:ea:74:43:3f:87:21:ce:d9:b7:
         a9:7d:51:bc:0a:20:ca:f1:81:0b:f5:10:86:6c:c2:1e:7a:01:
         74:7f:13:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----