Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-RqikEI03QYmWf_OYTiv3JwbqtA.roa
File:                     1-RqikEI03QYmWf_OYTiv3JwbqtA.roa (raw, json)
Hash identifier:          RT52Q8Ox2sLf8ZefQ5L0HZ2+RmnFRfw8fMxJEY7QuOE=
Subject key identifier:   F9:1A:A2:90:42:34:DD:06:26:59:FF:CE:61:38:AF:DC:9C:1B:AA:D0
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01959E89DE98799D09748221294F92481FEE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-RqikEI03QYmWf_OYTiv3JwbqtA.roa
Signing time:             Sun 16 Mar 2025 10:39:50 +0000
ROA not before:           Sun 16 Mar 2025 10:39:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212477
IP address blocks:        2a0f:14c0::/29 maxlen: 29
                          2a0f:2300::/29 maxlen: 29
                          2a0f:e140::/29 maxlen: 29
                          2a0f:e5c0::/29 maxlen: 29
                          2a0f:e640::/29 maxlen: 29
                          2a13:2bc0::/29 maxlen: 29
                          2a13:2e40::/29 maxlen: 29
                          2a13:3080::/29 maxlen: 29
                          2a13:4900::/29 maxlen: 29
                          2a13:d100::/29 maxlen: 29
                          2a13:fa00::/29 maxlen: 29
                          2a13:fd00::/29 maxlen: 29
Validation:               Failed, certificate revoked on Sun 16 Mar 2025 10:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:9e:89:de:98:79:9d:09:74:82:21:29:4f:92:48:1f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Mar 16 10:39:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f91aa2904234dd062659ffce6138afdc9c1baad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:d4:b9:b2:13:f9:7c:4e:e4:00:1f:ad:a3:
                    93:a9:e2:ae:40:48:4a:98:c4:9b:63:07:c1:10:4c:
                    87:fe:50:fb:01:57:5c:d5:be:69:5a:f5:8a:5b:d3:
                    5f:37:f5:a5:5e:9a:22:ae:8c:e2:ff:9a:ac:ca:6d:
                    ae:68:41:55:05:e1:d6:de:06:37:2f:d0:96:2c:f2:
                    c3:dc:cf:2a:4c:cf:b3:40:08:9e:cc:6f:c9:77:53:
                    ad:7a:18:77:8a:4b:5a:20:37:6b:e8:98:18:22:52:
                    8f:88:e1:3f:bc:d3:a3:48:67:df:01:cc:f4:7c:38:
                    3b:fd:d5:74:aa:24:72:07:65:4d:c0:b1:cc:af:a8:
                    e6:1c:02:a2:97:d3:09:e8:f0:81:62:94:05:db:a0:
                    b6:ba:22:a9:b9:4a:4c:41:47:03:0f:18:92:59:4b:
                    d5:89:9b:df:09:ed:f4:e3:c1:15:74:4f:a0:dc:4c:
                    aa:e6:38:9d:cc:7d:63:24:05:56:33:63:c6:1f:ba:
                    b3:e0:e5:bd:b0:2c:c8:10:ee:27:a5:1c:47:08:43:
                    66:54:bb:b7:46:6c:8d:48:46:5a:52:dd:70:d2:5c:
                    da:5a:c2:1a:0a:c4:06:99:45:8b:b3:80:31:be:c4:
                    41:a9:ac:7f:1a:fc:37:e9:b5:dd:91:10:aa:68:91:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:A2:90:42:34:DD:06:26:59:FF:CE:61:38:AF:DC:9C:1B:AA:D0
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-RqikEI03QYmWf_OYTiv3JwbqtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:14c0::/29
                  2a0f:2300::/29
                  2a0f:e140::/29
                  2a0f:e5c0::/29
                  2a0f:e640::/29
                  2a13:2bc0::/29
                  2a13:2e40::/29
                  2a13:3080::/29
                  2a13:4900::/29
                  2a13:d100::/29
                  2a13:fa00::/29
                  2a13:fd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:7e:c4:be:c6:d2:09:18:93:bd:d0:3f:b2:3a:a1:06:8f:
         72:4a:4f:d9:1b:13:3a:7b:aa:7a:ce:74:63:3d:3c:fa:84:6e:
         cf:4c:df:78:48:4f:3c:0b:41:0b:33:17:91:fd:00:1d:0e:65:
         74:ba:16:d3:48:34:73:97:cf:b0:8d:23:28:88:4c:82:aa:43:
         e0:56:fc:a1:93:d9:c2:0f:bd:ee:ac:af:0d:9e:9a:b5:73:84:
         d4:f3:9f:41:f0:74:64:d2:ff:ed:44:1e:a8:6b:a4:84:8a:77:
         7f:fd:41:87:95:7a:4d:fb:0c:9e:4e:51:8a:40:d6:6d:3f:fb:
         00:97:aa:5a:cf:39:ff:1a:ec:91:e8:cd:e3:cf:18:00:8d:58:
         2b:1f:3b:5f:4c:d5:c6:df:56:bc:6f:eb:80:b5:46:fc:50:4e:
         65:05:00:3e:5e:32:ee:f1:a1:e0:1d:86:fc:0b:16:42:fb:9a:
         c2:ad:30:2b:f2:ca:71:ba:b2:97:22:88:91:e5:65:ac:8d:7d:
         c4:f8:ed:25:35:0a:72:88:7e:7b:c3:da:9b:52:8a:1b:78:b4:
         f7:df:19:e4:69:e6:23:3d:7b:04:d1:30:a2:96:d9:d2:40:6b:
         33:c2:f1:7d:9a:c3:80:85:8a:0e:5c:a8:ab:05:0e:e6:cd:22:
         5a:93:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----