Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hrub2CApgTyHnOieKR3grkVVubo.roa
File:                     hrub2CApgTyHnOieKR3grkVVubo.roa (raw, json)
Hash identifier:          vm1EpaxtFNs4Pq/YdWpcwGFydNWjBBNg/0MJkQP92UM=
Subject key identifier:   86:BB:9B:D8:20:29:81:3C:87:9C:E8:9E:29:1D:E0:AE:45:55:B9:BA
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       018CC2DB0C2E99AA97CCBDEC3940B23CC4FD
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hrub2CApgTyHnOieKR3grkVVubo.roa
Signing time:             Mon 01 Jan 2024 02:29:44 +0000
ROA not before:           Mon 01 Jan 2024 02:29:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212591
IP address blocks:        2a0f:5707:aad1::/48 maxlen: 48
                          2a0f:5707:aad0::/46 maxlen: 46
                          2a0f:5707:aad0::/44 maxlen: 48
                          2a0f:5707:aad0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 06:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:0c:2e:99:aa:97:cc:bd:ec:39:40:b2:3c:c4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 02:29:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=86bb9bd82029813c879ce89e291de0ae4555b9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:ba:b8:26:be:60:38:6c:48:af:c7:7a:03:
                    60:96:ae:5d:09:9e:c1:95:98:73:cd:39:40:d0:7a:
                    e5:7a:0d:ba:66:a7:57:cf:b3:e7:80:8f:fe:9d:23:
                    a6:e9:a3:62:c9:7f:f2:e9:39:cf:0c:4f:20:9f:6d:
                    32:77:b4:ba:45:b2:a8:31:91:15:3f:7f:c6:48:57:
                    e7:5e:57:62:d4:45:6b:c9:56:42:7c:6f:33:bf:41:
                    71:ac:dd:0a:bd:22:01:76:5e:4b:1f:15:21:fc:0f:
                    f7:e6:e8:8b:f6:f6:62:a3:b3:ae:e2:e3:ba:43:20:
                    87:07:78:b9:60:7a:44:98:d6:70:e5:6f:a5:bd:77:
                    cc:1a:99:05:bf:d9:b5:0e:6b:ff:47:7b:28:e2:1f:
                    22:c9:a7:69:cf:30:91:ce:bd:fc:04:63:d1:52:3b:
                    c0:14:ac:ca:43:69:e6:39:26:7a:23:91:bf:59:19:
                    e7:1b:f6:1c:c1:23:79:43:aa:83:9d:f9:51:36:8a:
                    72:3d:24:84:f9:e2:38:8b:fc:a6:4f:3a:7d:2e:a3:
                    55:ae:d9:04:ca:15:9e:68:2e:7f:62:26:67:fb:48:
                    e8:29:d5:77:4a:95:24:f8:0d:00:c3:e3:2c:bf:d1:
                    eb:42:68:db:30:a7:90:2b:0f:7e:d6:7f:32:8f:db:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:9B:D8:20:29:81:3C:87:9C:E8:9E:29:1D:E0:AE:45:55:B9:BA
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hrub2CApgTyHnOieKR3grkVVubo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:aad0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:39:13:59:b0:65:44:8b:2e:b7:45:25:f6:74:5e:76:3e:
         4f:8e:5c:9a:7d:f2:e9:91:79:56:c2:44:20:d4:1d:fd:93:07:
         c1:28:44:fc:eb:b0:de:a0:b8:09:1e:d1:f9:12:2c:34:ca:70:
         da:eb:1d:73:d8:ca:69:7b:84:e8:a7:79:be:ee:ed:78:2f:14:
         96:5a:b4:59:ac:21:b3:9e:e4:bf:93:4b:fa:55:62:3a:ac:c5:
         7b:fc:7c:9a:af:52:86:61:40:4c:19:63:45:9a:a3:1c:06:ed:
         0b:21:8d:85:ad:61:e7:ea:93:90:82:e3:51:04:ef:e5:aa:b4:
         dc:fb:31:fa:07:60:e1:37:4b:c0:8d:57:6c:d9:b6:5e:6c:fd:
         ab:e8:eb:87:ed:3a:f7:6c:56:d2:e6:73:89:89:c9:d9:c1:d9:
         2e:90:3a:6e:24:2a:87:b9:0d:51:df:03:21:33:ee:4a:20:38:
         b7:46:cd:ee:b6:e9:df:8f:d9:07:3c:a2:6c:6b:cd:c5:52:10:
         bc:f3:7a:ba:06:42:82:ba:0f:5e:0f:e6:e8:a9:9a:e7:de:ea:
         4e:91:c9:45:62:1a:b9:f6:00:47:a3:c4:ad:59:95:53:6f:7e:
         34:ed:7c:2a:51:a1:08:c2:ba:77:8b:cb:48:f6:e6:e6:c8:02:
         46:b1:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----