Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/9KbsrgCKUXweCbFIt_esgRlohSo.roa
File:                     9KbsrgCKUXweCbFIt_esgRlohSo.roa (raw, json)
Hash identifier:          muuVl/KFbT5p0b9l3d+cDITcwDQhlxO31QimBkO+Sss=
Subject key identifier:   F4:A6:EC:AE:00:8A:51:7C:1E:09:B1:48:B7:F7:AC:81:19:68:85:2A
Certificate issuer:       /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial:       018DF5801501C50E75F7AC3F319FCBEF7B04
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/9KbsrgCKUXweCbFIt_esgRlohSo.roa
Signing time:             Thu 29 Feb 2024 15:33:48 +0000
ROA not before:           Thu 29 Feb 2024 15:33:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215404
IP address blocks:        2a14:dc0:100::/40 maxlen: 48
                          2a14:dc0:1337::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 16:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f5:80:15:01:c5:0e:75:f7:ac:3f:31:9f:cb:ef:7b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
        Validity
            Not Before: Feb 29 15:33:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f4a6ecae008a517c1e09b148b7f7ac811968852a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:a5:cc:d0:eb:97:d9:d6:9c:64:65:43:17:
                    6a:bc:24:9b:18:ec:52:b9:b7:96:59:56:03:64:5b:
                    0e:f9:8a:84:e8:ef:a0:01:ce:41:44:ad:6c:6f:1d:
                    72:80:31:bd:6b:02:d9:cd:e6:c0:b8:89:b5:79:b2:
                    4f:36:40:1e:b2:df:8e:42:49:46:dd:ef:30:6c:e6:
                    36:98:5b:e2:ca:56:f8:10:e4:c5:43:36:25:59:f2:
                    51:02:af:a6:ac:79:a0:b8:1e:bc:05:f1:6e:18:19:
                    a7:59:89:53:b9:7e:b6:f5:cd:f0:36:27:7d:f3:38:
                    71:01:35:27:8a:c8:6c:c7:31:1b:01:b1:f0:81:d7:
                    5a:33:90:c6:f1:39:78:a4:b1:a9:ee:d5:d1:13:9a:
                    69:da:40:9f:1e:47:c1:94:19:22:ad:dd:f5:21:1e:
                    e2:94:8c:ca:da:6b:77:6f:0a:83:ed:c5:31:b9:09:
                    4c:68:d1:c2:47:0d:5d:c6:37:9d:e9:5e:7a:3f:b4:
                    fd:c6:ea:f9:51:5f:df:ea:6f:b0:e7:3b:90:59:32:
                    60:b2:ed:05:af:5b:4d:27:10:aa:64:0a:81:53:b0:
                    75:6a:5c:0d:21:93:6f:63:62:7b:08:33:e9:92:41:
                    1e:de:35:52:ac:9f:97:01:74:2d:dd:a8:1c:73:46:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:EC:AE:00:8A:51:7C:1E:09:B1:48:B7:F7:AC:81:19:68:85:2A
            X509v3 Authority Key Identifier:
                keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/9KbsrgCKUXweCbFIt_esgRlohSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:dc0:100::/40
                  2a14:dc0:1337::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:18:84:58:f5:7c:2e:c0:1a:18:2b:cc:fd:6f:4f:aa:4e:
         ee:e6:32:47:10:fa:f2:1d:44:03:d6:e6:dc:b1:27:e9:11:8d:
         35:c1:3e:6b:55:d0:97:b0:09:f0:9e:75:ac:5f:20:11:39:46:
         af:bf:ee:10:74:91:ce:9c:c4:8f:0c:b5:f7:2c:a9:a6:a0:87:
         2b:07:cb:55:a4:3c:dd:c7:0b:dd:d2:f3:22:97:81:e2:eb:de:
         89:23:19:3a:d3:7d:0b:07:2c:e4:da:6d:9f:6c:41:58:30:8a:
         54:40:82:13:ec:ad:9f:cb:56:57:36:0a:46:35:5e:9d:0f:5e:
         ba:47:21:c0:52:57:f0:9e:d2:e4:c2:57:34:27:08:c5:17:9b:
         6e:1e:36:e4:b6:92:00:1d:8e:05:9a:89:b9:84:4b:83:d5:0f:
         cd:80:9f:df:2a:75:8c:c2:88:45:ee:68:9b:49:bf:09:47:eb:
         bc:b0:38:67:72:21:a9:b6:66:c2:72:9f:fd:1c:68:0c:e2:95:
         c2:9b:81:50:a6:de:7d:28:50:a3:98:b5:a7:4c:eb:4c:3d:5a:
         a4:3f:cc:44:90:0b:c9:d7:b7:25:e2:56:e1:24:3a:07:09:3d:
         c4:09:53:49:36:48:38:88:1e:e4:81:0d:9f:a1:c1:bf:e4:a2:
         55:cb:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----