Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa
File:                     qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa (raw, json)
Hash identifier:          fn8a9IKwy1ZxNqeUMUdre0CE8WqFSZS6bcEEWSYJ00U=
Subject key identifier:   A9:D4:D8:5F:3C:BE:3E:89:39:04:EF:96:0A:BB:69:06:7E:6E:C7:31
Certificate issuer:       /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial:       018CCA2A467DEE736BCC3A3CA243CCE7F33B
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa
Signing time:             Tue 02 Jan 2024 12:33:37 +0000
ROA not before:           Tue 02 Jan 2024 12:33:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15576
IP address blocks:        185.187.120.0/22 maxlen: 22
                          2a0b:9e80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 14:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:46:7d:ee:73:6b:cc:3a:3c:a2:43:cc:e7:f3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
        Validity
            Not Before: Jan  2 12:33:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a9d4d85f3cbe3e893904ef960abb69067e6ec731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:12:96:80:f4:65:d6:f5:e2:6e:9b:96:db:96:
                    a7:4c:a5:85:3a:69:de:c9:bf:c6:c0:7c:08:a1:b1:
                    c1:97:b1:5d:df:df:67:33:8f:e0:87:b7:bc:0a:c7:
                    ce:92:ce:3e:fe:99:fc:83:30:8a:22:7e:9f:6e:2b:
                    9b:fd:ce:1c:59:11:e9:2b:ff:a3:3b:5f:86:31:42:
                    cd:bf:ad:c1:24:07:4d:7a:4e:85:27:8b:77:a4:70:
                    51:b5:88:8f:c1:cd:f4:66:48:ed:26:75:fd:86:eb:
                    19:74:3e:39:d4:63:01:0a:78:39:f6:e2:14:16:c9:
                    73:28:6c:d1:76:06:dd:65:eb:26:23:1e:15:ec:0c:
                    6b:4e:72:9b:e7:37:fd:24:2a:46:f8:74:10:de:50:
                    6e:f4:6e:e1:73:3f:69:00:57:b7:7e:4d:fa:2d:fd:
                    cc:c1:b3:55:af:fd:8c:e5:b4:f4:66:14:91:a7:f2:
                    ae:54:21:45:ca:fd:48:fb:65:ab:0f:40:af:f6:40:
                    ed:e9:fe:d9:46:dc:ab:5d:cc:9a:88:f8:9c:72:2c:
                    0b:63:95:fc:9a:c4:c5:c4:16:64:bf:26:99:80:af:
                    6a:05:6d:03:88:5b:ce:18:4c:a9:6d:62:a3:04:bf:
                    4d:2b:2b:ad:e5:b8:08:3d:58:64:1b:2f:89:74:56:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:D8:5F:3C:BE:3E:89:39:04:EF:96:0A:BB:69:06:7E:6E:C7:31
            X509v3 Authority Key Identifier:
                keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.120.0/22
                IPv6:
                  2a0b:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:04:79:1a:76:cd:97:93:b8:5c:92:86:4f:ca:71:f8:3e:c2:
         06:a3:a0:8f:c4:1d:49:46:9c:6f:93:e3:3d:89:42:71:13:1f:
         32:e3:dd:ef:a0:61:bb:24:ac:85:b6:14:ae:23:7f:81:13:d2:
         05:c9:52:21:b0:0a:63:5f:36:4f:9b:e9:33:98:1b:ef:ff:ad:
         69:7e:ff:94:fc:28:fd:4b:ee:bb:16:c6:36:08:8a:65:63:cd:
         8e:56:59:56:18:bb:0d:4c:3c:e3:16:21:3d:1d:0b:6a:7f:0b:
         03:72:12:f3:22:71:fe:43:1e:72:99:9c:6a:1b:8b:11:4c:10:
         1b:7a:66:64:59:b9:fa:0c:12:b9:c0:bd:1e:46:ea:59:d8:0d:
         61:88:cc:12:79:af:c2:e0:24:26:7a:0d:cd:81:01:00:d0:f8:
         67:dd:0b:a4:f1:91:ce:d3:9d:c8:20:e4:e8:65:15:d6:65:76:
         f7:78:57:ee:f7:39:b3:21:c6:5f:b8:6d:01:5e:b6:03:dd:f4:
         b6:d7:10:cd:04:46:f9:81:9a:1d:e5:8f:81:54:69:0e:44:fe:
         f1:66:ea:be:98:24:c6:8e:60:6e:a9:57:b8:6b:48:78:99:88:
         c8:77:6a:0e:99:30:e2:f3:af:1a:bc:59:19:e5:71:1b:2c:8e:
         05:3b:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----