Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/qXy1RQ2jNN80Hnd76YwLAYbNk8o.roa
File:                     qXy1RQ2jNN80Hnd76YwLAYbNk8o.roa (raw, json)
Hash identifier:          XjUtlaE+oqD/iRJJCVHQXHmDBjPYda3GpTup4obPU/Y=
Subject key identifier:   A9:7C:B5:45:0D:A3:34:DF:34:1E:77:7B:E9:8C:0B:01:86:CD:93:CA
Certificate issuer:       /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial:       01930C6849A38C1B3F562FD4182B2A0C4BE9
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/qXy1RQ2jNN80Hnd76YwLAYbNk8o.roa
Signing time:             Fri 08 Nov 2024 15:33:01 +0000
ROA not before:           Fri 08 Nov 2024 15:33:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214998
IP address blocks:        2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 17:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:0c:68:49:a3:8c:1b:3f:56:2f:d4:18:2b:2a:0c:4b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
        Validity
            Not Before: Nov  8 15:33:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a97cb5450da334df341e777be98c0b0186cd93ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:ea:6f:e0:66:bf:a6:b2:b5:e2:29:ce:d3:
                    64:c4:48:f0:a2:1b:e6:22:99:d7:ab:c8:4b:e9:64:
                    3d:27:00:ed:0a:00:76:dd:20:29:32:0b:07:55:c3:
                    31:3d:4d:43:50:52:20:a8:50:e8:20:b8:d9:70:cd:
                    d1:c9:45:33:9d:e0:8a:50:28:ee:39:62:cf:7f:05:
                    9b:b0:71:f2:41:24:65:dc:2f:6e:dc:d6:d3:9d:fb:
                    08:0c:5a:af:af:d1:72:17:fc:c2:38:0e:f6:31:e0:
                    83:82:f0:12:70:13:c8:53:3b:48:5e:94:c6:a4:84:
                    d4:08:f3:57:d0:a8:d8:d3:e8:80:00:7a:f3:ca:54:
                    6b:73:09:68:2d:70:b3:f5:3a:22:59:54:5f:57:c2:
                    f3:75:6f:c6:b3:57:49:09:43:39:5c:a9:44:5c:14:
                    50:11:42:64:64:d4:36:54:be:2f:6c:9f:da:ef:9f:
                    a5:58:b6:04:f5:73:6b:8d:43:49:de:92:47:2d:74:
                    34:9e:e6:85:98:51:04:b7:83:a0:7d:b9:1f:13:68:
                    76:ec:ab:1b:5d:6f:84:b3:9b:bf:01:96:26:90:27:
                    dd:e7:79:a9:6b:06:da:18:1e:e9:e0:b0:19:91:70:
                    1c:1f:9d:f7:eb:21:74:a1:0d:88:c0:97:de:9d:d3:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:B5:45:0D:A3:34:DF:34:1E:77:7B:E9:8C:0B:01:86:CD:93:CA
            X509v3 Authority Key Identifier:
                keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/qXy1RQ2jNN80Hnd76YwLAYbNk8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:1c:2a:91:df:08:5d:32:a8:2e:ec:1f:bd:60:8a:69:06:
         c2:e3:92:f0:bb:4b:2a:f4:2f:c4:30:6e:e4:ce:42:a5:25:4e:
         51:95:65:63:ba:b7:20:f5:f6:e3:7f:ce:57:3f:f1:1d:9c:1b:
         f0:b6:50:c3:c8:0d:d2:55:1c:32:4c:a0:6a:9f:e1:29:c4:d1:
         30:af:76:9e:dd:fc:6d:ef:df:16:a5:f8:2d:9e:7e:b1:08:a7:
         98:f6:2b:5f:94:ca:6b:97:cf:d6:eb:3a:bb:54:f8:88:fa:6c:
         8d:f3:9a:49:c3:c8:c9:18:76:c5:b1:d6:41:63:d1:69:a0:a9:
         65:d1:48:cc:82:e1:ce:66:c4:9f:68:20:08:19:33:88:f5:7e:
         44:d5:f4:af:e0:f9:32:1b:f3:d4:23:db:12:d2:1b:3a:ba:3c:
         a4:bd:6d:fe:4e:b6:83:17:2b:3e:cc:c8:d6:64:9d:37:48:c7:
         65:ac:44:32:ff:42:8c:63:e4:02:31:00:6c:51:21:95:89:0c:
         ad:c5:eb:95:cc:00:33:ee:dc:77:32:3e:0e:c9:17:6d:27:a0:
         0f:83:0d:c3:ad:1b:54:7f:f6:b0:d9:a0:46:fc:06:27:7d:e9:
         97:48:a7:1e:08:74:0b:53:2c:6f:76:f9:6c:c2:58:f2:4a:36:
         b7:0f:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----