Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jBWwtmxfSxrbx5_0c_ja7mkk6s8.roa
File:                     jBWwtmxfSxrbx5_0c_ja7mkk6s8.roa (raw, json)
Hash identifier:          3xi50qKjpSRI7Fjnv8DC90xBJABpVCySFs8XukirJnA=
Subject key identifier:   8C:15:B0:B6:6C:5F:4B:1A:DB:C7:9F:F4:73:F8:DA:EE:69:24:EA:CF
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019120F3A778A209CC8DD7D70FECE3588561
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jBWwtmxfSxrbx5_0c_ja7mkk6s8.roa
Signing time:             Mon 05 Aug 2024 05:12:04 +0000
ROA not before:           Mon 05 Aug 2024 05:12:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 06:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:20:f3:a7:78:a2:09:cc:8d:d7:d7:0f:ec:e3:58:85:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug  5 05:12:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8c15b0b66c5f4b1adbc79ff473f8daee6924eacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:e0:e0:2c:d2:ca:4b:38:10:50:c7:8f:c4:
                    27:56:70:88:3e:45:7b:0c:32:69:6f:a0:84:79:68:
                    83:11:39:2a:94:ce:6c:af:a5:71:aa:38:38:fa:c3:
                    fd:76:37:c7:b2:e5:f3:e3:d2:21:84:e0:0e:f8:2e:
                    2d:fa:9e:9d:6a:76:ce:18:fd:06:77:b2:ea:c6:48:
                    6e:ca:35:9c:43:b5:f5:4a:3f:62:a3:40:61:30:35:
                    af:f9:3c:84:8b:f2:de:75:0c:e0:bd:26:b0:c1:6e:
                    c5:59:5e:20:7b:74:d0:7a:93:be:1e:2c:2f:4f:36:
                    36:fc:ff:7f:cf:21:d1:57:bf:67:91:67:39:e2:a7:
                    1f:1a:08:ca:2d:1d:c3:30:c0:85:7c:55:4b:ee:b1:
                    e0:27:d2:fe:5b:ea:c6:c9:69:b0:4a:52:72:b6:c7:
                    0c:3c:d6:78:ab:c1:0f:8f:58:95:05:75:78:44:37:
                    42:8a:3f:28:60:b4:58:6d:0c:68:d4:49:e9:d3:e9:
                    04:bf:d1:fa:83:54:97:a1:08:49:f6:c7:9a:84:2a:
                    82:89:73:7d:78:de:40:54:f7:07:cb:79:d3:08:ce:
                    b1:40:07:67:f9:fc:2c:07:07:6c:04:89:e9:17:6f:
                    b4:b7:1a:10:16:09:ae:bd:e9:c8:bb:ea:f1:12:d0:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:B0:B6:6C:5F:4B:1A:DB:C7:9F:F4:73:F8:DA:EE:69:24:EA:CF
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jBWwtmxfSxrbx5_0c_ja7mkk6s8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         19:95:49:91:c5:ef:14:23:e9:31:62:c2:94:22:b5:20:0f:51:
         dc:2e:d5:bf:72:d6:fa:9e:13:cf:2c:15:8f:72:3f:87:45:60:
         c3:5b:4c:3c:ec:ca:86:38:b6:fd:4c:79:3d:e0:69:c8:8c:e1:
         4e:41:e9:ad:cb:45:c2:ea:0f:85:3a:7a:e5:3b:17:87:e8:36:
         9f:3f:57:7d:c8:be:d9:50:e3:90:b5:13:1a:f1:4b:77:65:11:
         2d:3b:08:68:a5:bb:b7:0e:20:83:14:b2:c9:43:04:89:8f:9c:
         08:09:02:af:9a:1b:04:d4:28:de:6e:8f:5d:68:c1:bb:97:38:
         db:09:4f:c0:5e:f8:e6:fe:09:6c:95:ba:e7:ca:45:a4:67:74:
         60:0e:61:57:b0:d2:70:f4:51:3d:68:c9:18:be:f1:9f:0a:37:
         ba:a6:40:15:e5:42:c5:71:bf:c0:f6:54:30:27:24:c1:9d:03:
         f6:db:8c:6a:18:ff:fc:3b:1c:2e:fd:13:ac:54:c8:9f:e6:86:
         5f:78:52:37:a1:e4:7c:c8:e3:36:7f:0a:25:22:c4:d7:c5:d0:
         06:0e:7d:5d:18:56:0b:e0:05:c6:a3:f6:b2:4b:a6:b4:69:16:
         4c:30:92:d4:27:2d:e5:5a:7f:b0:9f:1a:bc:67:88:0e:2f:ee:
         f8:0f:94:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----