Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/P1UJxELoRadjPbtE-1U58v6K6co.roa
File:                     P1UJxELoRadjPbtE-1U58v6K6co.roa (raw, json)
Hash identifier:          Zz/YrSfO2FmgTkgyMwF/7/ajISBYSUnD2xs0tEdw2N0=
Subject key identifier:   3F:55:09:C4:42:E8:45:A7:63:3D:BB:44:FB:55:39:F2:FE:8A:E9:CA
Certificate issuer:       /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial:       018D07FD0CFFD110BFDD3220697B4CF621B4
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/P1UJxELoRadjPbtE-1U58v6K6co.roa
Signing time:             Sun 14 Jan 2024 12:40:40 +0000
ROA not before:           Sun 14 Jan 2024 12:40:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201409
IP address blocks:        78.41.139.0/24 maxlen: 24
                          2a13:29c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 05:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:07:fd:0c:ff:d1:10:bf:dd:32:20:69:7b:4c:f6:21:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
        Validity
            Not Before: Jan 14 12:40:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3f5509c442e845a7633dbb44fb5539f2fe8ae9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:d8:19:8d:0a:33:74:7f:e9:4b:c6:cb:56:
                    c9:92:67:bb:f5:22:ca:69:47:9b:cd:9c:0d:49:df:
                    3f:80:95:25:f9:bd:ba:23:a8:96:b0:2d:6b:fb:4c:
                    68:e4:5a:22:47:1c:46:ca:e9:d4:d5:bc:12:c1:f7:
                    c8:83:c3:4c:45:d6:6b:d3:a3:26:4d:c3:ee:f6:96:
                    b4:63:d7:48:09:98:1c:33:5e:80:71:76:4e:28:70:
                    68:7a:8c:8d:36:bf:bb:bf:e1:07:e2:cd:24:d1:94:
                    e2:df:eb:02:fe:47:b1:68:5c:ab:94:76:7e:2e:cd:
                    82:e2:04:f9:f4:cf:f2:c3:73:52:71:6a:56:f9:ae:
                    c6:09:7e:06:97:aa:eb:da:88:12:ba:c8:86:e4:d7:
                    bc:7d:db:74:c1:1d:e4:fc:49:ea:01:e8:86:33:8c:
                    a2:4b:5e:c7:5e:26:5e:4b:5e:b2:fa:b4:02:ad:d9:
                    43:3f:48:fe:b0:82:71:b9:11:44:4a:f2:28:b0:5d:
                    da:79:ab:4e:77:ef:33:ed:3b:0f:98:27:2b:94:57:
                    7b:4a:48:90:90:2b:b2:1b:d0:db:76:2e:ac:36:82:
                    5d:46:32:ed:a2:1a:84:5c:54:34:19:d3:d5:28:f9:
                    3e:52:fb:28:6a:0b:f0:b1:0c:0b:20:38:a5:9f:dc:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:55:09:C4:42:E8:45:A7:63:3D:BB:44:FB:55:39:F2:FE:8A:E9:CA
            X509v3 Authority Key Identifier:
                keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/P1UJxELoRadjPbtE-1U58v6K6co.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.41.139.0/24
                IPv6:
                  2a13:29c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:48:39:3b:56:be:eb:cb:a5:1a:64:fb:b7:b4:21:61:3a:10:
         ef:6b:b1:68:f9:59:69:20:7a:12:8d:96:a9:8d:f4:ee:2b:ec:
         90:6e:99:59:e4:aa:98:28:c3:1d:4a:3f:37:d4:a2:31:aa:9f:
         ae:36:24:43:68:db:07:d4:a4:7d:fc:00:bc:44:22:57:9e:16:
         40:2b:07:e4:4d:04:63:59:9f:7e:a6:c7:4f:de:4e:ec:50:57:
         59:6a:97:f9:82:61:fe:15:90:51:34:d6:5d:01:b4:5f:06:ad:
         60:d1:05:cc:48:72:4d:13:ea:1a:a3:f0:dc:0b:e9:d8:ca:26:
         29:f9:ae:26:45:f0:36:79:0a:0e:6e:c6:90:43:a5:c3:52:78:
         b8:6e:2c:02:26:7f:6c:78:0d:b1:56:2a:cb:32:e4:da:df:e4:
         cf:80:28:47:47:64:31:0a:66:c4:39:f6:fd:d0:c8:d2:d3:83:
         f6:29:ea:d9:51:05:dc:00:5e:01:56:d7:7f:46:f2:d1:1e:a5:
         00:fd:b0:7f:d8:a0:e7:ad:cd:fe:f2:5e:81:9a:32:ad:da:56:
         3b:ea:c3:cb:62:bd:2c:6e:ce:3c:be:4b:bd:7e:4d:44:05:33:
         2e:36:de:f0:fe:c7:c9:82:23:a9:cc:3e:7b:f8:73:8d:60:70:
         1c:99:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----