Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/xlZ_gf78TItNs_a1w4uYf4-GBRE.roa
File:                     xlZ_gf78TItNs_a1w4uYf4-GBRE.roa (raw, json)
Hash identifier:          v0eF9svW2VRH3JhbtgtEx6F0dIK3588sbbBBV5m2Dos=
Subject key identifier:   C6:56:7F:81:FE:FC:4C:8B:4D:B3:F6:B5:C3:8B:98:7F:8F:86:05:11
Certificate issuer:       /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial:       018D0DCE9D3F56F1CFFE0D5FF8E511536ED2
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/xlZ_gf78TItNs_a1w4uYf4-GBRE.roa
Signing time:             Mon 15 Jan 2024 15:47:40 +0000
ROA not before:           Mon 15 Jan 2024 15:47:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15924
IP address blocks:        46.235.15.0/24 maxlen: 32
                          2a14:2b80::/29 maxlen: 128
                          2a14:6580::/29 maxlen: 128
                          2a14:7080::/29 maxlen: 128
                          2a14:5c80::/29 maxlen: 128

Validation:               Failed, certificate revoked on Wed 17 Jan 2024 10:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0d:ce:9d:3f:56:f1:cf:fe:0d:5f:f8:e5:11:53:6e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
        Validity
            Not Before: Jan 15 15:47:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c6567f81fefc4c8b4db3f6b5c38b987f8f860511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:eb:94:ef:66:80:88:50:4f:56:b2:62:e5:
                    0b:15:f4:38:69:be:8a:11:65:b1:31:64:b7:8c:bc:
                    e8:8a:57:75:7f:fa:97:0b:ee:c4:d1:81:34:49:f5:
                    d4:ed:23:72:d9:92:0c:62:76:7d:37:ed:91:d1:31:
                    3f:2d:37:e8:5f:fd:b8:61:ae:04:49:20:05:85:4d:
                    53:ff:db:93:82:a4:92:83:9a:26:c4:2f:7c:60:42:
                    21:e8:4f:04:77:0f:56:bb:3e:55:9a:69:fb:eb:3b:
                    6f:1b:0e:4a:f7:4c:65:9f:a6:35:9f:01:07:ba:f7:
                    1d:45:ed:a9:e3:67:3e:09:d7:c3:80:1b:59:fb:55:
                    6f:fd:3e:72:7e:19:5d:6d:4d:e8:0b:fa:00:57:57:
                    7e:28:53:59:c2:8e:a9:56:11:66:fe:7f:20:23:32:
                    8b:fd:b2:7e:ae:e8:e5:c0:6e:4c:cf:ff:c9:2b:ea:
                    bf:60:3c:aa:56:3d:68:f5:c9:bd:87:b9:23:ac:e3:
                    e1:da:d5:37:5f:de:2b:cb:a7:fd:92:7c:d9:89:3c:
                    63:3e:96:ec:51:49:0f:e1:fe:f8:56:69:ff:42:a6:
                    90:aa:ba:21:79:6c:aa:ac:25:89:77:52:a4:69:f9:
                    5b:05:3f:96:ae:ed:0f:7b:16:7f:76:23:27:e7:ee:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:56:7F:81:FE:FC:4C:8B:4D:B3:F6:B5:C3:8B:98:7F:8F:86:05:11
            X509v3 Authority Key Identifier:
                keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/xlZ_gf78TItNs_a1w4uYf4-GBRE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.15.0/24
                IPv6:
                  2a14:2b80::/29
                  2a14:5c80::/29
                  2a14:6580::/29
                  2a14:7080::/29

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:ba:65:05:b8:90:10:0c:fb:16:88:29:da:49:69:48:3f:
         1f:89:33:ae:e3:2f:88:57:74:d9:fe:39:b4:5d:ee:71:24:9d:
         19:d6:f9:b7:d1:ee:94:50:4c:cc:16:f0:24:73:10:4e:19:04:
         37:7d:36:a6:2c:24:f9:fc:af:6c:3b:2c:1e:55:79:66:21:47:
         ad:a5:b2:2b:02:c1:70:45:3a:6d:0f:be:3c:3d:86:fe:97:5e:
         48:da:a3:84:6f:9a:e6:63:f8:6a:81:19:3d:11:d8:82:08:55:
         a8:f5:3f:77:01:be:7b:18:57:93:ab:1f:71:78:d7:cd:fa:2a:
         f8:b0:79:b7:56:d9:ee:4d:7e:86:e0:37:a9:3c:85:94:35:56:
         d3:70:96:9d:fa:63:ea:d1:64:1a:6f:1d:6f:04:68:fe:b0:d6:
         52:84:17:e1:b5:23:89:95:62:ff:2e:08:5c:7d:96:8f:f1:47:
         cb:cc:64:9e:b8:57:b2:c0:f2:db:f6:55:0d:c9:08:47:08:05:
         72:7b:8d:93:ce:f4:3f:41:cb:47:bd:d3:08:06:99:d8:3e:24:
         71:70:56:c5:cd:a1:3c:59:72:84:8e:0e:e9:e8:07:84:9b:67:
         58:6d:03:15:3a:ab:36:cc:50:7b:52:ca:95:36:93:ff:4f:06:
         81:68:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----