Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/6zo_CL665UENEz6uvMjqFRviEbw.roa
File:                     6zo_CL665UENEz6uvMjqFRviEbw.roa (raw, json)
Hash identifier:          99W6kMhdGcKSycajwnpm7BJvwghni/FyNeh8KH3GbXc=
Subject key identifier:   EB:3A:3F:08:BE:BA:E5:41:0D:13:3E:AE:BC:C8:EA:15:1B:E2:11:BC
Certificate issuer:       /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial:       018E416ADABA873D3095E007EFB356420092
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/6zo_CL665UENEz6uvMjqFRviEbw.roa
Signing time:             Fri 15 Mar 2024 09:21:45 +0000
ROA not before:           Fri 15 Mar 2024 09:21:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     24953
IP address blocks:        2a10:fd00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 12:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:41:6a:da:ba:87:3d:30:95:e0:07:ef:b3:56:42:00:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
        Validity
            Not Before: Mar 15 09:21:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb3a3f08bebae5410d133eaebcc8ea151be211bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:b4:33:fb:00:94:55:5f:c8:36:bc:2e:e8:
                    d0:c8:5c:11:55:00:e6:26:6c:d7:54:56:d5:22:98:
                    05:f4:e0:c7:36:d1:81:78:3e:ee:41:06:84:6c:fa:
                    66:cd:1f:7b:2b:70:46:21:b1:df:b2:b5:6f:96:7e:
                    da:dc:4a:c6:be:47:10:5f:86:15:d6:42:65:08:1a:
                    b6:30:66:69:30:1c:19:03:75:4d:54:3f:47:49:d2:
                    e0:2f:5c:83:ad:95:ea:04:dc:68:b6:42:6b:3e:2c:
                    96:2c:ef:49:02:74:39:45:4a:5d:89:a9:2f:25:2c:
                    4c:46:ef:13:84:ca:3e:a1:d9:2b:4a:b6:0b:b2:01:
                    ac:bd:f9:12:2e:30:08:af:5a:63:e9:ed:9c:72:f3:
                    5d:9d:5a:84:a2:6b:bc:3f:61:35:d1:b9:b1:bd:d0:
                    2c:f2:dd:67:85:51:60:d9:1c:55:7f:86:62:91:4b:
                    ea:a3:4b:ff:a3:3c:65:c2:04:59:f6:57:d9:5d:ba:
                    4e:5f:68:d9:71:4b:1c:79:ae:71:5a:c8:9a:e2:67:
                    d0:49:52:62:f7:42:c2:2d:d2:cf:af:56:b6:56:b1:
                    42:41:71:3c:ed:39:20:62:9d:fe:3e:fb:10:da:fc:
                    70:ce:5b:3f:72:14:12:85:ab:06:3a:ff:8a:a2:0e:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3A:3F:08:BE:BA:E5:41:0D:13:3E:AE:BC:C8:EA:15:1B:E2:11:BC
            X509v3 Authority Key Identifier:
                keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/6zo_CL665UENEz6uvMjqFRviEbw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:b0:57:e7:b6:a1:48:9a:0f:c3:01:87:db:ea:c9:0c:cb:2a:
         2e:0e:34:df:77:df:99:c1:e0:f2:71:e6:0d:99:7f:2f:c2:93:
         67:57:5b:19:41:d8:6d:f2:dc:9c:b4:20:e5:08:c7:f6:66:aa:
         2b:bb:05:43:82:f8:7b:4e:2d:97:3e:8a:3f:5a:28:30:2d:04:
         57:e0:f5:00:cb:b2:5b:2e:17:c2:cb:dd:aa:ed:6f:2d:a6:8a:
         2c:16:3f:5d:bc:03:04:de:49:fd:ef:8d:6d:11:d0:d5:9d:fc:
         05:92:a4:22:c5:bd:4a:65:63:bc:4b:bd:5f:b6:9e:31:a8:ca:
         16:8e:65:32:27:19:ab:ea:46:84:a2:c6:ad:57:cb:88:78:0b:
         bc:1e:9b:01:fc:9e:61:69:ff:82:e1:38:6f:24:e3:54:0c:85:
         e7:d2:02:99:8d:be:9f:1f:a0:44:4d:65:71:eb:75:f4:92:9e:
         e4:27:4d:00:f5:99:9c:06:21:92:ed:e7:7b:97:3c:1f:a7:41:
         79:1b:e5:46:fc:d0:5a:68:54:83:2c:33:d3:5a:98:10:d9:db:
         af:c8:7d:a0:17:02:24:72:01:2b:d3:17:a7:f1:fd:89:ad:0c:
         74:c8:5d:42:01:2b:59:9b:0c:fa:5b:e0:9c:9c:0b:75:54:3f:
         04:eb:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----