Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7dMNBARiZnlpm3ZAWLuuX9_dwus.roa
File:                     7dMNBARiZnlpm3ZAWLuuX9_dwus.roa (raw, json)
Hash identifier:          S/hFY+5W9pIPVkQxSkP3X0/UYRBgxku9NxFtaHVeSV0=
Subject key identifier:   ED:D3:0D:04:04:62:66:79:69:9B:76:40:58:BB:AE:5F:DF:DD:C2:EB
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01909E3901C5B201393C07487DA01D294D6A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7dMNBARiZnlpm3ZAWLuuX9_dwus.roa
Signing time:             Wed 10 Jul 2024 19:57:34 +0000
ROA not before:           Wed 10 Jul 2024 19:57:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214800
IP address blocks:        2a0f:3d84::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 11:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9e:39:01:c5:b2:01:39:3c:07:48:7d:a0:1d:29:4d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jul 10 19:57:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=edd30d0404626679699b764058bbae5fdfddc2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:da:31:cc:4a:56:86:0c:19:28:99:00:4b:
                    3b:d5:47:50:ee:f3:d6:e7:05:d6:39:be:b5:53:31:
                    41:3c:72:58:48:d6:7a:8a:63:97:b8:d9:2c:a0:23:
                    e9:b0:3b:ea:bb:52:bd:01:b3:95:9d:19:e8:7c:31:
                    3c:9e:ba:ba:e5:e1:fc:f3:fe:8b:e9:f6:5f:94:0a:
                    38:3a:02:fa:5b:9a:8c:6f:71:d7:ad:c8:21:a9:3d:
                    81:fb:ba:fa:90:c6:9b:23:9a:0c:bd:71:4e:33:2c:
                    31:ec:f0:33:50:36:ed:2c:4f:d7:8b:2e:f2:70:8e:
                    ce:ba:8c:b0:3f:77:d5:25:03:cf:49:b1:de:fd:47:
                    f9:71:fb:b6:19:6d:ce:5b:f6:f6:23:9b:69:0c:2d:
                    5f:62:d4:7c:84:65:46:73:ce:e2:32:43:5d:e5:d1:
                    2c:60:bb:73:b1:74:e6:a0:8f:cd:75:54:c7:46:bc:
                    e6:7b:30:60:2e:91:84:b4:61:0d:d5:86:f9:42:7e:
                    50:81:9c:a5:51:af:3a:18:19:60:22:c4:6e:8c:c9:
                    a4:3b:0f:56:9c:f6:f6:25:25:d8:9c:d0:d7:67:25:
                    b9:91:ee:7f:41:33:fc:9c:3e:ea:b6:89:34:db:65:
                    a3:ef:d6:06:a6:c7:5e:10:ba:d0:83:33:e6:1f:a9:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D3:0D:04:04:62:66:79:69:9B:76:40:58:BB:AE:5F:DF:DD:C2:EB
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7dMNBARiZnlpm3ZAWLuuX9_dwus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:3d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:8d:6c:fa:21:f3:bc:dd:cd:93:b5:9a:59:0a:f0:8c:a4:
         1a:17:74:2c:96:08:ea:ce:7e:9c:09:79:20:9b:f5:5a:de:2d:
         ee:21:5c:f2:d8:42:54:c7:17:fe:16:41:ee:ee:07:82:2f:6f:
         48:6a:0a:8e:b3:d8:2f:fb:f4:e1:6a:67:ad:17:61:a1:f0:99:
         2b:8c:23:5c:4d:02:85:04:94:92:05:5d:e6:bb:98:c5:5f:5a:
         7e:2e:21:83:b6:c2:a9:49:4c:a8:54:5b:ba:d0:8a:84:a4:22:
         c0:36:86:b5:86:81:91:b2:ef:b6:f2:f0:f4:4f:3e:f9:7f:83:
         80:0b:aa:63:ec:8f:04:ef:b0:88:88:9c:db:ab:81:11:42:bb:
         19:e3:fd:dd:9c:60:10:23:bf:37:5a:be:bc:00:22:e5:af:9c:
         8e:3f:80:33:a8:d3:ad:9f:b9:52:70:ab:6b:6f:0a:78:d2:a4:
         b6:c6:83:4b:d2:38:53:92:29:9f:f2:d7:21:10:6e:9a:79:83:
         7d:06:9b:06:c5:70:54:c1:30:64:d8:70:c2:8b:a1:44:e6:5f:
         ff:ec:e2:03:4e:9f:0a:d9:fa:32:4f:71:8e:8a:46:c3:6e:bf:
         63:45:09:9a:6d:a8:2b:d2:eb:41:2a:1f:3a:63:6e:5f:ef:dd:
         26:ed:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----