Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/3LrZvHKtp6p4mSnPUQaaLLEjObE.roa
File:                     3LrZvHKtp6p4mSnPUQaaLLEjObE.roa (raw, json)
Hash identifier:          IBuNYVUARttSdv+lT5DoF528+jkewtRY5TJ+TfOUuBs=
Subject key identifier:   DC:BA:D9:BC:72:AD:A7:AA:78:99:29:CF:51:06:9A:2C:B1:23:39:B1
Certificate issuer:       /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial:       01929C194DFA40115DDF50857A683771F0B7
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/3LrZvHKtp6p4mSnPUQaaLLEjObE.roa
Signing time:             Thu 17 Oct 2024 20:09:16 +0000
ROA not before:           Thu 17 Oct 2024 20:09:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a0c:7b81::/32 maxlen: 32
                          2a0c:7b85::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 10:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9c:19:4d:fa:40:11:5d:df:50:85:7a:68:37:71:f0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
        Validity
            Not Before: Oct 17 20:09:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dcbad9bc72ada7aa789929cf51069a2cb12339b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:54:c5:e3:5d:3d:23:37:ba:88:c1:37:39:
                    09:d5:5b:6a:2c:dc:61:e0:a6:fa:45:89:00:ea:11:
                    d9:13:f3:df:fe:1c:8a:24:0e:06:5a:c3:69:82:1f:
                    fa:cf:05:6a:39:8d:ea:cc:3e:4c:db:45:77:27:95:
                    ab:eb:2f:59:95:5e:53:02:98:10:82:06:a8:ba:06:
                    a0:bb:47:f4:3d:80:c1:0c:76:2c:8a:36:cb:89:d4:
                    59:34:7b:2f:63:36:88:08:db:7e:bc:d6:e6:f0:29:
                    d3:8e:d0:eb:37:f3:88:e1:bd:d9:de:e4:31:f4:05:
                    8f:8b:7d:8f:9a:d6:19:f4:59:8c:f5:af:cb:e3:7b:
                    1f:67:f1:17:fc:2b:d6:90:36:83:30:5b:e3:c4:04:
                    d3:a7:96:51:09:ea:ea:53:d8:66:6b:08:fc:bc:e5:
                    dc:97:58:84:a3:4c:cd:4b:a9:54:3f:f2:d9:72:ff:
                    d1:f8:b9:7c:fa:04:7d:d3:45:2d:08:cc:79:7f:31:
                    d7:84:06:23:a5:3f:ce:87:a1:51:c0:76:84:c3:80:
                    f6:bb:0e:df:c3:ec:d2:e1:50:2d:a7:30:48:d6:f6:
                    33:ca:84:79:8a:14:78:e3:a8:62:e5:b2:32:0f:19:
                    d9:2b:63:2a:99:83:4f:da:2d:7d:dc:6a:79:ea:af:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BA:D9:BC:72:AD:A7:AA:78:99:29:CF:51:06:9A:2C:B1:23:39:B1
            X509v3 Authority Key Identifier:
                keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/3LrZvHKtp6p4mSnPUQaaLLEjObE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:7b81::/32
                  2a0c:7b85::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:6c:10:80:2c:64:69:a6:ee:de:b6:99:4d:cc:68:f5:4a:d3:
         e1:48:3d:9f:df:0f:a6:60:99:03:20:35:9c:fb:40:e2:3b:62:
         9b:89:75:05:e1:9b:aa:3a:52:55:58:ba:7c:a0:a4:44:ca:32:
         87:8a:91:b0:85:8b:bc:cf:a1:7c:f9:37:b2:93:54:ef:ba:82:
         13:0d:35:46:e0:a6:37:65:1a:bb:f3:77:b1:ee:6e:e8:6f:89:
         5d:7e:20:c1:fa:93:3b:1f:e3:fa:a9:eb:f7:fd:70:b4:ef:60:
         14:97:88:98:f4:aa:c0:dd:a7:89:1b:2a:f4:d1:57:95:81:6d:
         e2:25:31:8f:3a:44:80:95:f1:02:be:a5:e1:92:d6:78:39:2b:
         46:7a:e1:df:11:4d:43:54:26:93:e9:06:9f:e4:af:1f:8f:b9:
         6b:4b:69:47:89:88:16:b3:26:6b:04:6c:f9:dc:31:9e:59:d1:
         fd:69:65:13:9d:88:62:d1:06:98:ba:79:ac:71:95:1d:93:2e:
         a1:95:83:39:85:64:8c:6b:ee:9b:6a:9d:95:9b:36:17:6a:9f:
         a5:da:d8:6d:c2:af:07:ae:3f:19:12:04:b2:ea:ed:61:34:b4:
         41:29:48:58:91:bd:a9:a3:9e:e1:6c:1f:7e:69:50:7d:83:e7:
         02:2e:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----