Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HTz5MOXaqymgmpqqeTqQcbF5xj0.roa
File:                     HTz5MOXaqymgmpqqeTqQcbF5xj0.roa (raw, json)
Hash identifier:          Bp0kp01lbjy420UH0Oxy+m9+Wc3dYjKjHIW7RKUAjk4=
Subject key identifier:   1D:3C:F9:30:E5:DA:AB:29:A0:9A:9A:AA:79:3A:90:71:B1:79:C6:3D
Certificate issuer:       /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial:       018CC94E719B8AF45EB927B5881E1B8680C7
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HTz5MOXaqymgmpqqeTqQcbF5xj0.roa
Signing time:             Tue 02 Jan 2024 08:33:30 +0000
ROA not before:           Tue 02 Jan 2024 08:33:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57050
IP address blocks:        2a03:9c00:c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 19:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:71:9b:8a:f4:5e:b9:27:b5:88:1e:1b:86:80:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
        Validity
            Not Before: Jan  2 08:33:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1d3cf930e5daab29a09a9aaa793a9071b179c63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:e4:48:7d:a9:d8:46:29:af:5d:ae:b1:18:
                    1a:85:80:d6:a7:23:bb:31:5e:9e:8a:9a:2e:bb:ee:
                    72:67:4a:9a:a4:e0:4f:d6:21:12:f1:e6:a1:ba:18:
                    e1:b1:fe:72:e6:41:bb:a0:e7:63:61:ff:1c:a5:c5:
                    52:e1:0d:25:8b:e2:23:29:11:08:17:c5:34:f7:b9:
                    18:fe:2c:3d:cf:72:4e:2e:34:a7:cc:84:2d:b1:85:
                    ed:55:3a:b1:91:f9:46:38:36:d6:e9:fe:eb:99:d6:
                    aa:02:67:26:ba:1d:72:72:13:a6:f8:6c:94:56:74:
                    5e:32:db:c7:2e:8f:3c:04:62:cc:b4:41:0c:61:6a:
                    b8:db:3a:2a:a0:e0:a9:ae:50:dd:3a:b8:50:68:ae:
                    c6:63:dd:53:81:d1:93:c1:d9:cc:e4:97:52:b9:0c:
                    a6:b9:79:96:d4:5e:8c:d5:79:09:39:30:89:4b:8c:
                    92:71:9b:89:0c:91:3a:bb:a5:8b:73:7e:28:b7:f0:
                    f7:76:04:29:d0:23:df:c5:b1:a5:6f:f9:95:6f:5a:
                    27:95:36:72:72:90:bd:5a:61:de:79:4d:f0:43:59:
                    5c:67:6f:f2:35:52:ec:9a:6f:0e:34:01:2a:eb:ff:
                    ae:a0:f7:ad:9f:90:54:83:78:ed:9c:33:5f:73:c3:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:F9:30:E5:DA:AB:29:A0:9A:9A:AA:79:3A:90:71:B1:79:C6:3D
            X509v3 Authority Key Identifier:
                keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HTz5MOXaqymgmpqqeTqQcbF5xj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:9c00:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:56:b1:5d:77:95:a0:0f:95:91:ac:10:99:55:57:6a:e9:
         bf:f8:5a:51:a9:3a:f6:a2:6e:cb:07:b7:51:96:3a:97:0b:0b:
         38:91:b8:fa:5a:42:f2:da:72:51:7e:a8:8c:36:bc:ea:ca:5c:
         a8:46:0e:9e:17:29:66:e1:97:4b:50:5a:b1:af:75:b8:e0:50:
         59:89:83:9e:4e:94:d7:14:d7:ba:11:b8:35:98:23:7d:fa:17:
         b6:0d:e2:19:ee:94:40:7f:69:2d:92:6c:b9:ab:e2:a0:3b:84:
         ec:7c:b9:72:c3:0f:b0:58:9d:21:6f:71:3c:ea:1c:fc:b6:a8:
         ea:ee:50:72:60:40:72:2a:47:18:6f:e5:d0:0a:49:7c:3f:eb:
         3a:4c:37:b0:80:b6:aa:e6:16:16:16:15:2c:2a:59:98:c2:c7:
         61:95:e2:f2:38:25:2f:c8:59:e9:02:79:ae:03:26:ab:92:82:
         31:dd:53:db:24:ca:4c:c0:65:b8:ac:32:51:b4:1f:27:e3:a5:
         db:92:24:e9:38:a5:e1:2a:33:0f:93:d7:ad:49:76:bc:2b:01:
         2c:ac:a1:e4:b3:3c:9d:3c:51:33:9f:5b:5c:21:cd:2c:bb:5c:
         51:81:16:5b:d3:18:3b:dd:32:32:2b:69:00:78:68:6e:ee:5e:
         1d:91:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----