Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/f4ndCCjmFat-sqbiQNjuSIKShsc.roa
File:                     f4ndCCjmFat-sqbiQNjuSIKShsc.roa (raw, json)
Hash identifier:          tzZAAvp7roiOdGxbQ7KgM69Mng6SQU0DNYSWM6Y6n2A=
Subject key identifier:   7F:89:DD:08:28:E6:15:AB:7E:B2:A6:E2:40:D8:EE:48:82:92:86:C7
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       01864CB53B61904039AE6EF902280D34B6F4
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/f4ndCCjmFat-sqbiQNjuSIKShsc.roa
Signing time:             Mon 13 Feb 2023 21:36:30 +0000
ROA not before:           Mon 13 Feb 2023 21:36:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51586
IP address blocks:        212.18.101.0/24 maxlen: 24
                          2a12:5c00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4c:b5:3b:61:90:40:39:ae:6e:f9:02:28:0d:34:b6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Feb 13 21:36:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f89dd0828e615ab7eb2a6e240d8ee48829286c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c8:b8:af:82:91:f7:c9:c4:fd:df:95:46:2c:
                    ab:80:87:5c:47:5e:2c:b6:7e:89:23:3c:75:97:39:
                    ba:d7:e2:2c:b0:06:25:90:31:ce:cd:5a:6a:fb:06:
                    fd:87:12:fa:99:2c:13:6b:86:ae:08:0f:c6:f9:7c:
                    94:1f:46:19:14:4f:3a:5c:bf:38:ef:42:03:58:6c:
                    c9:a3:35:4e:16:1f:f8:f4:1e:19:7a:b4:7f:23:0e:
                    cf:32:04:d9:15:dc:06:2a:17:ca:02:69:ba:93:24:
                    02:8b:93:66:5e:fe:7b:bb:12:12:d6:53:8a:00:de:
                    5f:6a:34:7f:5f:bd:e6:19:7c:0c:05:a3:f6:f6:c2:
                    ac:c3:5b:6a:10:5e:da:57:35:1f:a0:38:25:ba:64:
                    17:21:8f:47:9d:f3:67:51:69:dd:94:37:5e:8d:88:
                    da:f9:45:82:91:5a:ea:93:de:cd:c9:80:f1:ad:bf:
                    14:09:6b:92:cd:e9:82:3c:2a:7f:9c:64:5c:bb:9b:
                    57:90:d6:f5:ea:ba:c8:25:3d:3e:59:e4:64:56:ad:
                    03:02:5b:04:13:a9:f9:ca:66:ad:da:bb:f5:20:d4:
                    04:e7:90:0d:8a:57:3e:25:2f:34:ad:52:ea:6c:4c:
                    1f:d6:be:04:2f:d6:0a:d9:23:76:7c:38:7e:52:3d:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:89:DD:08:28:E6:15:AB:7E:B2:A6:E2:40:D8:EE:48:82:92:86:C7
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/f4ndCCjmFat-sqbiQNjuSIKShsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.101.0/24
                IPv6:
                  2a12:5c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:9f:ed:7e:79:8b:28:a3:92:3e:5d:b9:6d:51:90:38:c7:
         64:a2:79:2f:02:02:ec:fc:61:d4:71:e0:44:16:47:d5:60:de:
         8d:a5:55:8d:2b:7a:fa:71:cc:aa:d2:c8:3f:5d:17:a0:5e:4a:
         ac:f1:ea:2b:9f:8c:a1:9c:73:2d:d8:dc:23:e0:97:de:07:8b:
         05:32:23:28:c8:00:46:a6:f0:44:f8:b7:93:01:b5:92:50:9f:
         fc:0d:42:7e:53:29:82:0f:89:dc:7f:95:30:53:93:6c:6d:ab:
         17:c2:d7:f2:ba:e1:3d:55:cd:9b:d6:ac:bc:f9:7a:c5:8e:d6:
         6d:ad:e6:ff:ab:aa:1e:00:ea:9a:00:87:9a:48:24:bd:9f:60:
         52:d9:76:04:f7:40:3d:ff:36:50:a5:2f:fe:61:c9:6a:a4:d4:
         60:3d:6c:86:35:91:bd:ae:78:8e:6d:c8:f8:1d:f7:35:df:71:
         6d:a2:47:4a:90:df:0d:db:a4:ca:86:dd:2c:a2:79:1a:f8:9b:
         3b:12:20:7e:39:75:f6:82:bd:4a:42:67:e3:e4:71:21:f4:22:
         dc:84:5d:f3:dc:f9:3f:bf:00:28:ab:87:03:02:8f:38:3e:e1:
         62:7e:fb:64:9f:fc:db:09:18:3c:f4:a3:2d:93:c3:58:f6:fa:
         52:f0:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----