Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/8GwHNIfxPnl52IJ5A4MPNywApUE.roa
File:                     8GwHNIfxPnl52IJ5A4MPNywApUE.roa (raw, json)
Hash identifier:          qF7hE/7Z2pY1Um1VrBVQst/azVAQd9N7/ekk8SzXPzQ=
Subject key identifier:   F0:6C:07:34:87:F1:3E:79:79:D8:82:79:03:83:0F:37:2C:00:A5:41
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       018E7B6CB30B6517DCEBD034523F2EADC10F
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/8GwHNIfxPnl52IJ5A4MPNywApUE.roa
Signing time:             Tue 26 Mar 2024 15:41:44 +0000
ROA not before:           Tue 26 Mar 2024 15:41:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204010
IP address blocks:        2a05:907:2001::/48 maxlen: 48
                          2a05:907:2002::/48 maxlen: 48
                          2a05:907:2003::/48 maxlen: 48
                          2a05:907:2004::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 30 Mar 2024 08:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7b:6c:b3:0b:65:17:dc:eb:d0:34:52:3f:2e:ad:c1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Mar 26 15:41:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f06c073487f13e7979d8827903830f372c00a541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:3a:71:fb:7c:17:b5:69:82:37:fa:d4:4a:
                    9d:22:bf:07:62:56:a3:6a:34:9b:ee:75:5e:1a:30:
                    2a:9c:e5:32:05:a2:47:55:91:4d:09:b0:c4:75:01:
                    41:ea:30:f1:c6:8b:63:22:80:7d:32:65:5d:a9:38:
                    99:a2:4b:c6:fb:a8:44:df:46:0e:3f:7e:b2:fd:1f:
                    eb:12:b1:9b:3e:06:3a:d5:80:e9:b0:4b:1b:58:ea:
                    c1:b7:32:b6:48:69:8b:68:54:00:ed:19:85:6e:6b:
                    83:55:af:81:94:dc:a9:d5:ca:e2:8a:11:69:3a:18:
                    ff:c0:ef:cb:00:a1:99:10:75:4a:37:13:fb:bf:e1:
                    9e:81:5c:75:e4:5e:b7:bb:1f:19:d2:56:27:a1:8b:
                    c3:8b:9a:95:63:0a:b1:38:f7:3f:9e:ba:14:ac:35:
                    db:f6:a6:e2:13:be:0d:f2:aa:49:3b:8f:5c:81:d2:
                    ad:f7:c0:31:88:d2:03:d5:5f:cf:fa:d4:37:c3:ce:
                    e6:b9:cc:f0:40:1e:65:7e:90:52:b2:ba:66:07:80:
                    d4:93:81:cd:f2:8f:87:8e:3d:0c:1b:c7:15:e5:42:
                    3a:23:90:25:6c:03:48:2b:5e:b0:d9:33:94:53:31:
                    b2:b4:3b:8d:45:87:c2:b8:6f:a2:95:36:53:46:93:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:07:34:87:F1:3E:79:79:D8:82:79:03:83:0F:37:2C:00:A5:41
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/8GwHNIfxPnl52IJ5A4MPNywApUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:907:2001::-2a05:907:2004:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:32:e9:fd:8f:24:56:71:32:9b:36:e1:2c:8d:c6:42:a0:
         2d:b7:d1:ba:9f:ab:39:0c:82:d1:99:30:82:bd:9b:ab:2c:48:
         7b:0e:ef:9f:f6:e2:e8:5b:3a:4b:e9:70:7f:64:96:63:80:2a:
         6a:ee:09:ad:27:a5:3e:a0:74:b7:c6:a8:fc:06:98:7e:e6:4b:
         e2:b6:7f:f9:36:b4:3f:ca:2c:61:cf:fb:58:1f:74:a2:98:03:
         6d:f8:2e:c6:ae:bb:4e:11:b3:5a:91:02:aa:13:bb:26:20:6f:
         43:b7:84:70:8b:b1:a7:2a:b9:23:f1:a7:8c:99:a0:42:cf:99:
         fa:01:26:2e:7c:dd:d4:22:11:72:dc:0d:8e:65:9b:88:11:cb:
         7b:60:64:d3:28:61:c6:9a:39:9d:80:b2:25:d2:48:71:26:53:
         72:53:18:2a:37:f2:00:16:36:17:89:d0:71:af:39:89:2a:3e:
         49:21:d2:b1:80:da:ec:7c:93:c7:9f:bf:59:31:57:23:ff:98:
         9d:e5:59:50:38:b4:8a:25:b9:b2:2a:9a:b8:11:58:28:7f:0d:
         8e:11:bf:8a:16:80:3e:73:4c:ed:41:70:05:45:fc:c1:b8:d1:
         09:29:7d:c5:95:1f:db:05:49:cf:14:96:c7:04:33:a4:09:43:
         37:f5:40:9a
-----BEGIN CERTIFICATE-----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=