Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/qYQa0jl0dXP-Zgkp_k0rYiOdoQ4.roa
File:                     qYQa0jl0dXP-Zgkp_k0rYiOdoQ4.roa (raw, json)
Hash identifier:          j5EgQxV+Ayxi2aMwybcYOE8r0j0t2bqysgwGF7JR/G4=
Subject key identifier:   A9:84:1A:D2:39:74:75:73:FE:66:09:29:FE:4D:2B:62:23:9D:A1:0E
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       018CC2DAF22D812CA3476EA54E7FE3D7E36E
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/qYQa0jl0dXP-Zgkp_k0rYiOdoQ4.roa
Signing time:             Mon 01 Jan 2024 02:29:37 +0000
ROA not before:           Mon 01 Jan 2024 02:29:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213110
IP address blocks:        2a0f:b104::/48 maxlen: 48
                          2a0f:b105::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 10:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:f2:2d:81:2c:a3:47:6e:a5:4e:7f:e3:d7:e3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jan  1 02:29:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a9841ad239747573fe660929fe4d2b62239da10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:5c:3b:06:5a:3a:4f:ad:db:96:15:52:e8:
                    a5:52:c5:6b:94:42:4d:7c:ed:c9:ef:84:cf:71:f0:
                    36:78:47:a1:29:cc:d3:d5:f3:31:36:04:4f:f6:06:
                    7a:1a:e3:57:11:8a:78:5a:66:0d:3d:5d:ab:e3:84:
                    76:81:66:a5:cd:29:62:e5:2b:2a:53:76:11:cb:59:
                    11:d3:81:45:09:a2:2b:da:1c:b5:6d:9e:83:81:84:
                    c8:9b:69:5e:8c:24:93:bd:05:7e:69:10:73:05:6d:
                    dd:f1:39:9b:fe:d8:ec:45:84:db:52:a7:e0:34:88:
                    7e:82:93:ad:87:ca:0a:69:67:89:80:b1:69:4f:c0:
                    58:cd:0e:60:5f:5d:b9:4b:98:39:2a:69:a8:fd:88:
                    3f:71:6a:da:db:cb:57:1d:ad:5f:72:c3:9f:0f:ca:
                    54:0d:92:6d:4b:80:73:63:97:5b:25:36:2b:f5:f2:
                    f5:64:2c:d8:6b:f0:b7:8a:c5:82:1e:2f:cf:ff:77:
                    98:81:f6:4c:ac:90:69:bf:4a:b6:c0:c9:cd:dd:80:
                    89:e1:e4:66:7c:9c:f5:2d:44:7d:fe:c7:db:aa:da:
                    23:1a:7f:65:3f:0c:40:25:72:b0:99:be:66:b6:0e:
                    a2:8c:5e:e4:04:38:91:50:2a:ae:eb:6a:04:9a:9c:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:84:1A:D2:39:74:75:73:FE:66:09:29:FE:4D:2B:62:23:9D:A1:0E
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/qYQa0jl0dXP-Zgkp_k0rYiOdoQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b104::/48
                  2a0f:b105::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:14:46:41:2a:65:c8:f3:8d:89:e9:bd:ac:7f:99:23:8b:0a:
         81:95:e7:21:a7:59:de:1c:8d:ae:de:0a:bb:1a:78:46:26:79:
         ae:73:62:da:b7:d3:9c:fc:01:c3:91:b2:db:63:eb:92:00:30:
         ff:f6:ea:bd:74:be:e9:cd:02:55:54:ac:34:9d:9e:dd:74:98:
         84:cf:5d:44:a3:a9:c8:d4:ba:43:ae:15:1f:b9:f8:cf:cd:32:
         38:87:d6:7c:0d:d5:cc:48:3d:f8:e5:f9:f0:e9:98:33:ec:13:
         67:ee:18:d3:37:d3:1b:40:7d:b7:fb:99:68:b0:37:d2:53:fb:
         ae:70:cc:0f:95:4e:8e:d1:91:49:50:7f:da:47:20:45:f8:c2:
         e0:8f:29:ad:74:54:6b:50:73:fa:b7:1c:63:18:6c:0e:cf:05:
         69:b6:9c:59:b3:84:1d:80:8e:37:b7:ce:59:ad:cd:f7:8c:4f:
         8e:9a:88:87:34:bc:f0:59:25:d6:bf:fd:a1:fa:d7:e0:6f:bf:
         ab:17:40:9e:5d:68:af:38:2b:18:b4:2d:9c:a0:e5:94:9a:f3:
         e3:6e:fa:a7:d5:d0:47:de:9c:37:2d:31:e8:70:2a:d1:7d:07:
         53:e1:d6:c5:59:a7:2e:5f:4c:7f:0e:d9:cd:e9:f3:d6:49:5b:
         a8:3c:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----