Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa
File:                     ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa (raw, json)
Hash identifier:          3qjcQR+2TM3cWaZerUc2oD0Q10tPuD67drO/5C4AmRg=
Subject key identifier:   96:3A:76:1B:6C:33:6C:C2:DB:4E:4C:60:BC:E1:E7:03:2E:40:B4:36
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       018CFDE56E220F97A43F6E7DB17EDC3DCA09
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa
Signing time:             Fri 12 Jan 2024 13:38:40 +0000
ROA not before:           Fri 12 Jan 2024 13:38:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9215
IP address blocks:        77.92.139.160/27 maxlen: 27

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 16:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fd:e5:6e:22:0f:97:a4:3f:6e:7d:b1:7e:dc:3d:ca:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Jan 12 13:38:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=963a761b6c336cc2db4e4c60bce1e7032e40b436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:b8:97:ee:f7:a1:35:22:73:a2:8b:78:67:
                    d3:05:9f:e7:70:42:b0:0b:7a:09:3a:cf:67:60:8d:
                    2b:13:bd:0b:4b:39:ac:aa:73:9b:48:73:e1:95:42:
                    66:88:78:18:d7:72:5e:8e:5f:b5:c5:69:76:c0:6f:
                    10:d9:2e:5f:6c:65:d6:3b:a8:b3:4d:52:e7:b6:74:
                    5d:ca:f3:99:32:14:27:e7:66:99:6c:81:54:30:0a:
                    de:fd:72:67:61:f4:9f:b5:34:5a:28:0d:bd:f1:d6:
                    2e:1c:4c:73:76:db:49:71:dd:bf:c5:cc:c1:d5:0f:
                    20:cf:e5:86:f0:62:41:a6:ee:b8:5d:33:2a:b2:42:
                    18:8c:d0:17:f6:73:f0:aa:a4:a3:0b:8c:5f:23:23:
                    68:53:d1:ea:80:ef:12:90:c5:ac:61:6a:c1:c8:6a:
                    81:8c:ad:a6:fa:5b:53:1c:55:06:35:78:58:ab:b0:
                    71:1c:33:77:53:cd:95:c9:e9:97:62:47:84:80:1d:
                    32:1d:71:d2:5a:ba:09:ef:a3:d7:23:31:dc:75:c6:
                    2a:c5:56:06:2b:51:35:24:22:79:b7:53:9b:c1:6a:
                    5f:52:1d:40:56:61:4a:00:73:94:c8:36:96:44:58:
                    27:fe:db:2f:6f:9b:66:d9:41:69:c6:c4:f7:fe:1b:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:76:1B:6C:33:6C:C2:DB:4E:4C:60:BC:E1:E7:03:2E:40:B4:36
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/ljp2G2wzbMLbTkxgvOHnAy5AtDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.92.139.160/27

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:2f:dc:79:db:b5:84:1c:09:dc:b4:e0:6b:39:79:af:99:
         b4:b3:a7:c3:34:86:0a:1a:79:d3:58:8b:d8:c8:20:f6:38:9e:
         18:22:e0:e7:26:33:ba:9d:71:3f:a5:21:9f:97:29:f0:5e:8f:
         ca:ea:9b:3c:3e:60:be:aa:3a:80:24:67:a3:3c:07:19:12:a8:
         10:c0:1e:dc:f0:ad:fd:c0:2c:08:38:37:ca:be:85:77:dd:a4:
         14:9f:c5:3f:e8:92:39:98:dc:97:b0:5f:bd:41:40:c4:a1:d5:
         64:21:e5:70:dd:d8:21:49:de:76:9a:4b:f6:88:f2:80:86:06:
         76:e0:b7:e4:79:f9:d9:e2:54:75:a1:76:6a:8e:8c:f5:ec:c0:
         e6:b3:f3:6b:0e:63:1e:cb:93:5e:ef:f2:80:e5:1d:38:d0:de:
         e8:1a:3f:30:0e:10:c8:23:d3:3d:ee:90:1c:a4:1f:12:59:50:
         2b:e7:6a:60:9f:53:ce:45:a8:50:4e:6c:e6:09:f4:7c:42:26:
         82:5b:37:e1:5d:ca:0d:f1:8c:c7:5d:25:2c:ae:1e:22:38:5d:
         3e:6f:21:06:0d:6d:4d:ad:6b:81:29:8b:38:1c:2e:f3:c9:76:
         db:c7:b6:60:d1:d2:15:dd:03:9d:ff:58:bb:a5:2d:67:6b:d9:
         e3:0a:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----