Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Lbka_iH80VKlFpqrCh_Y7zsiFfg.roa
File:                     Lbka_iH80VKlFpqrCh_Y7zsiFfg.roa (raw, json)
Hash identifier:          aGrzKgVI2PocMvfkhmAQUTJG/11KCgdP7LB7EVPt59Q=
Subject key identifier:   2D:B9:1A:FE:21:FC:D1:52:A5:16:9A:AB:0A:1F:D8:EF:3B:22:15:F8
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018CC86F9D9549E837A514599A397397B3C3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Lbka_iH80VKlFpqrCh_Y7zsiFfg.roa
Signing time:             Tue 02 Jan 2024 04:30:07 +0000
ROA not before:           Tue 02 Jan 2024 04:30:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3320
IP address blocks:        45.84.214.0/24 maxlen: 24
                          2a0f:15c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 19:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:9d:95:49:e8:37:a5:14:59:9a:39:73:97:b3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  2 04:30:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2db91afe21fcd152a5169aab0a1fd8ef3b2215f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:43:da:2b:50:f2:5b:ae:62:8c:7d:bd:0c:
                    a1:38:93:f7:a1:94:55:73:d9:4d:d5:70:92:c8:e1:
                    38:3c:81:3c:46:ae:b7:41:2f:b2:f5:24:32:c0:b7:
                    ed:d9:fb:8f:56:41:35:c9:b6:09:0f:4c:00:0b:8c:
                    28:38:38:ad:71:8a:3b:6b:31:f7:f8:2c:f8:e7:62:
                    42:d6:73:9c:5a:fa:6c:ea:3f:7c:96:06:12:76:5e:
                    c9:42:d9:83:58:52:16:04:59:64:75:d3:26:2d:15:
                    2f:3e:c6:24:65:40:77:54:4d:0b:6c:b3:f2:5b:33:
                    73:a2:3e:01:7e:6d:ee:13:0c:b9:0c:a5:56:8e:a6:
                    bb:52:24:21:88:23:96:a2:c8:2e:44:73:db:8a:17:
                    7f:83:20:2b:cc:fe:9f:f0:47:47:7d:81:59:2c:55:
                    24:ea:47:02:a9:57:8b:75:5b:17:d3:0d:df:9a:16:
                    90:8d:dd:e2:ed:17:17:a0:5d:4b:68:4c:ca:90:f0:
                    ea:14:61:8f:24:11:61:c2:56:ec:03:e2:8a:65:23:
                    7c:d5:be:80:88:c1:ac:e1:6d:71:cf:26:95:16:02:
                    f2:cc:78:76:c1:c5:94:4c:6c:2a:3d:64:3c:ee:1a:
                    05:4a:97:d7:a6:d5:f5:f2:14:0f:aa:b5:0b:aa:ac:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:1A:FE:21:FC:D1:52:A5:16:9A:AB:0A:1F:D8:EF:3B:22:15:F8
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Lbka_iH80VKlFpqrCh_Y7zsiFfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.214.0/24
                IPv6:
                  2a0f:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:cb:3a:07:46:86:14:0d:df:ff:a9:f7:20:b1:30:be:ec:
         cc:9d:7c:6d:f1:3b:d5:ed:b8:35:2e:58:23:c6:68:c0:2e:ab:
         8f:97:ec:1b:8c:40:d6:b5:4f:1b:87:ca:57:69:54:5d:cd:97:
         6f:20:ed:dd:66:83:56:a5:b1:dc:f9:46:b3:a3:03:dd:53:f0:
         85:d2:35:b9:fd:51:00:29:e0:3e:5f:90:9d:7d:22:f1:86:fb:
         4e:de:44:85:81:24:ca:d0:bb:55:5f:c0:e3:45:43:ea:ca:ef:
         85:d9:09:4e:00:a9:05:b3:1b:88:78:a6:96:11:96:70:5e:fd:
         71:8d:f2:6c:6d:4c:7c:7b:54:0b:5b:c7:42:39:25:17:94:f2:
         81:54:23:fc:a0:25:fc:0d:dd:17:d9:e3:22:51:b2:c7:59:ec:
         c0:96:6d:0b:2e:db:de:54:27:0d:f1:e1:01:06:18:d9:57:af:
         fd:e3:1f:f7:c8:73:1c:ae:a1:7a:21:6e:52:03:d0:80:15:25:
         08:69:6c:47:b1:b4:59:68:da:96:1d:f5:46:00:ca:e0:19:ef:
         0e:c8:66:ec:9c:66:c3:97:05:59:38:47:19:67:d7:0e:3a:f4:
         b3:31:7d:01:18:ac:d6:fc:51:f5:e0:42:25:99:f0:5e:07:c1:
         a5:61:9b:41
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIb52VSeg3pRRZmjlzl7PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGI5MWFmZTIxZmNkMTUyYTUxNjlhYWIwYTFmZDhlZjNiMjIxNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqJD2itQ8luuYox9vQyhOJP3oZRV
c9lN1XCSyOE4PIE8Rq63QS+y9SQywLft2fuPVkE1ybYJD0wAC4woODitcYo7azH3
+Cz452JC1nOcWvps6j98lgYSdl7JQtmDWFIWBFlkddMmLRUvPsYkZUB3VE0LbLPy
WzNzoj4Bfm3uEwy5DKVWjqa7UiQhiCOWosguRHPbihd/gyArzP6f8EdHfYFZLFUk
6kcCqVeLdVsX0w3fmhaQjd3i7RcXoF1LaEzKkPDqFGGPJBFhwlbsA+KKZSN81b6A
iMGs4W1xzyaVFgLyzHh2wcWUTGwqPWQ87hoFSpfXptX18hQPqrULqqzXhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFC25Gv4h/NFSpRaaqwof2O87IhX4MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvTGJrYV9pSDgwVktsRnBxckNoX1k3enNpRmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVTWMA0E
AgACMAcDBQAqDxXAMA0GCSqGSIb3DQEBCwUAA4IBAQANKcs6B0aGFA3f/6n3ILEw
vuzMnXxt8TvV7bg1LlgjxmjALquPl+wbjEDWtU8bh8pXaVRdzZdvIO3dZoNWpbHc
+UazowPdU/CF0jW5/VEAKeA+X5CdfSLxhvtO3kSFgSTK0LtVX8DjRUPqyu+F2QlO
AKkFsxuIeKaWEZZwXv1xjfJsbUx8e1QLW8dCOSUXlPKBVCP8oCX8Dd0X2eMiUbLH
WezAlm0LLtveVCcN8eEBBhjZV6/94x/3yHMcrqF6IW5SA9CAFSUIaWxHsbRZaNqW
HfVGAMrgGe8OyGbsnGbDlwVZOEcZZ9cOOvSzMX0BGKzW/FH14EIlmfBeB8GlYZtB
-----END CERTIFICATE-----