Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_J6aHHuFMdl9F7CtU3-GSy6saBY.roa
File:                     _J6aHHuFMdl9F7CtU3-GSy6saBY.roa (raw, json)
Hash identifier:          SmR9bJn2HeoQsoChaYJgTa6ZilXfYQmJSRaQAjZd5W4=
Subject key identifier:   FC:9E:9A:1C:7B:85:31:D9:7D:17:B0:AD:53:7F:86:4B:2E:AC:68:16
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018D34D9E5A34248CAB61014A74585AB04A3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_J6aHHuFMdl9F7CtU3-GSy6saBY.roa
Signing time:             Tue 23 Jan 2024 05:45:11 +0000
ROA not before:           Tue 23 Jan 2024 05:45:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206150
IP address blocks:        45.130.140.0/24 maxlen: 24
                          2a07:e342::/32 maxlen: 48
                          2a0f:f40::/32 maxlen: 48
                          2a0f:f41::/32 maxlen: 32
                          2a0f:f43::/32 maxlen: 48
                          2a0f:f44::/32 maxlen: 48
                          2a0f:f45::/32 maxlen: 48
                          2a0f:f46::/32 maxlen: 48
                          2a0f:f47::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 11:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:34:d9:e5:a3:42:48:ca:b6:10:14:a7:45:85:ab:04:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan 23 05:45:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc9e9a1c7b8531d97d17b0ad537f864b2eac6816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:7c:75:25:d6:27:f2:38:76:da:7f:1d:6f:
                    eb:9c:31:03:e8:2f:f0:83:4e:01:41:d9:d6:59:3c:
                    87:b6:1e:2d:62:02:ec:29:07:f7:33:40:03:ab:ea:
                    86:63:cf:eb:68:a7:91:ff:77:c4:ae:6c:55:51:37:
                    3d:22:25:9c:35:e3:46:0d:86:57:5d:03:ae:25:6d:
                    bc:f4:68:c1:84:48:e0:c7:aa:18:71:c8:1c:ba:4c:
                    6d:5a:4b:51:10:01:4b:d7:be:c7:dc:d1:90:28:b5:
                    7a:73:47:67:2d:6f:99:2f:ba:c2:cf:a4:9b:33:32:
                    2f:3c:94:b9:0e:2f:8b:bb:ce:a5:7a:5f:82:5e:73:
                    86:a8:6a:d0:c1:79:89:0b:43:a1:72:9a:12:4e:ea:
                    81:af:17:4d:99:53:1b:43:21:cf:c5:b9:02:96:fe:
                    5e:77:cd:b3:28:5a:c3:dd:d8:a5:c9:db:fc:2b:0b:
                    e3:7f:7f:b9:46:51:c0:51:d9:f0:51:1f:2b:28:18:
                    62:c7:63:1a:bb:36:1a:e0:d4:fc:00:f8:e7:39:87:
                    29:63:da:03:a3:21:88:88:a5:15:b7:e2:63:32:82:
                    4a:4e:c1:52:57:94:c8:44:d3:04:ac:fe:f8:8a:c0:
                    9c:08:74:87:1e:66:85:2f:08:19:2d:64:68:aa:65:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9E:9A:1C:7B:85:31:D9:7D:17:B0:AD:53:7F:86:4B:2E:AC:68:16
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_J6aHHuFMdl9F7CtU3-GSy6saBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.140.0/24
                IPv6:
                  2a07:e342::/32
                  2a0f:f40::/31
                  2a0f:f43::-2a0f:f47:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:e2:aa:ac:a5:c8:8c:79:f1:18:6c:c2:a3:e3:87:06:af:
         02:dc:34:e3:7e:37:96:0d:5a:75:38:32:c9:53:39:3f:d3:f8:
         33:6e:d8:8f:25:a2:c5:94:ae:41:71:10:a9:36:c7:25:6f:c2:
         9c:96:bb:ac:09:41:c1:30:7e:13:4a:0b:c8:ae:71:2b:d8:14:
         4f:ef:f9:f9:42:79:45:b5:31:8f:a1:68:f6:51:ed:e6:3a:3d:
         a8:d8:96:e2:26:95:ad:4f:57:3d:76:cc:d0:d6:a3:e3:87:0b:
         b0:1d:af:38:f3:10:92:6c:81:2e:5e:c4:b3:bc:86:76:f6:8c:
         b3:f4:72:3f:42:b5:46:87:fc:0f:ea:68:3d:59:bf:93:ad:67:
         d0:21:c7:a2:01:d1:4e:9a:3f:ac:3a:65:36:34:26:d3:40:44:
         7e:ed:d9:1c:de:d1:68:be:7e:c9:7e:be:4d:5f:5c:e7:11:91:
         31:e4:69:71:d0:69:c6:ee:f9:7f:e4:58:5d:e0:2c:78:db:01:
         0e:35:94:0e:70:88:d7:98:53:02:50:2e:50:78:e1:a7:64:e3:
         94:da:b1:08:94:56:08:9b:20:06:0a:84:cb:3c:e3:c1:4c:dd:
         42:09:d5:78:e5:af:c9:bc:fc:33:7f:6d:e1:21:93:67:c4:1b:
         8d:40:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----