Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PEXN_omw3ItnkEVblfTKh9Vgnk4.roa
File:                     PEXN_omw3ItnkEVblfTKh9Vgnk4.roa (raw, json)
Hash identifier:          L6YMzoe822I78qMiQhk+Rc1Fu9jWKaHeVi+95E7/OJM=
Subject key identifier:   3C:45:CD:FE:89:B0:DC:8B:67:90:45:5B:95:F4:CA:87:D5:60:9E:4E
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0193DF259B2A3B092DEC8C70BEC5700D202A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PEXN_omw3ItnkEVblfTKh9Vgnk4.roa
Signing time:             Thu 19 Dec 2024 13:40:03 +0000
ROA not before:           Thu 19 Dec 2024 13:40:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        103.114.40.0/24 maxlen: 24
                          2a0e:1a84::/32 maxlen: 32
                          2a0e:f600:5f::/48 maxlen: 48
                          2a0f:1e80:100::/48 maxlen: 48
                          2a0f:1e80:1986::/48 maxlen: 48
                          2a0f:3d80:bac::/48 maxlen: 48
                          2a0f:7d00:1::/48 maxlen: 48
                          2a0f:bc00:a1c4::/48 maxlen: 48
                          2a0f:e6c6:5532::/48 maxlen: 48
                          2a13:2b40::/29 maxlen: 32
                          2a13:e102:10::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 27 Dec 2024 12:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:df:25:9b:2a:3b:09:2d:ec:8c:70:be:c5:70:0d:20:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec 19 13:40:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3c45cdfe89b0dc8b6790455b95f4ca87d5609e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:7c:3e:66:72:66:5f:7d:a4:74:fe:49:78:
                    48:c4:79:d4:e5:36:e6:3e:e0:cf:5c:5a:ad:60:29:
                    99:13:17:0d:02:a4:92:9a:68:fc:02:a8:da:d7:1e:
                    d1:c3:57:41:07:df:ec:ee:9b:a9:3b:ac:24:28:3e:
                    d8:0f:ff:77:c2:f6:6a:11:54:9c:77:5c:36:ad:94:
                    5f:92:fc:15:52:e5:e3:93:c5:5d:69:d1:f8:8c:ba:
                    0d:08:48:d6:a9:8a:16:07:5c:f4:fb:23:90:4a:67:
                    25:05:fc:f6:21:c2:3b:26:41:e7:a0:d9:67:a3:65:
                    77:c4:29:24:08:5c:ec:fb:86:8a:74:88:03:0e:2c:
                    5e:71:18:61:26:20:44:e9:bb:87:48:3c:f0:ad:e8:
                    24:04:f9:1c:0e:3d:ae:26:b2:a4:5f:42:ff:d8:96:
                    69:5d:fd:22:04:a7:22:ce:6c:34:d2:0a:29:ac:23:
                    52:70:9c:0b:59:fe:fb:5b:68:10:69:35:28:bd:10:
                    13:1d:1d:8e:21:33:b4:bc:2c:f9:d2:53:76:c8:ad:
                    5f:b1:81:fa:a2:26:a5:f9:89:ff:16:24:24:cb:6f:
                    96:ce:b6:35:6c:c0:c4:91:ee:28:f8:ec:bb:fe:7c:
                    7b:31:f7:a4:52:f6:41:50:d1:3c:4f:f9:2b:42:08:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:45:CD:FE:89:B0:DC:8B:67:90:45:5B:95:F4:CA:87:D5:60:9E:4E
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PEXN_omw3ItnkEVblfTKh9Vgnk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.40.0/24
                IPv6:
                  2a0e:1a84::/32
                  2a0e:f600:5f::/48
                  2a0f:1e80:100::/48
                  2a0f:1e80:1986::/48
                  2a0f:3d80:bac::/48
                  2a0f:7d00:1::/48
                  2a0f:bc00:a1c4::/48
                  2a0f:e6c6:5532::/48
                  2a13:2b40::/29
                  2a13:e102:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:28:8d:5c:57:10:f4:11:95:3e:82:6b:6a:32:80:cf:e7:24:
         d9:ea:df:5f:ce:5d:32:63:a8:cf:3b:f1:f5:e4:97:42:3f:4d:
         91:32:1b:29:54:d2:e5:58:3b:53:bb:b8:1d:ee:1e:32:b9:15:
         84:23:30:c2:62:cb:cf:8a:7f:37:b0:6c:4e:ed:25:4a:6c:13:
         67:90:fb:cf:eb:39:67:0f:63:00:1f:3f:19:e3:38:a6:e8:1a:
         9d:c7:62:f6:85:88:11:fd:53:34:eb:f1:d7:73:c5:72:64:c3:
         47:44:98:e1:6a:26:fe:fd:e7:88:81:59:91:4a:03:6b:fa:7c:
         bf:60:84:9c:2b:f9:0a:b9:b3:e5:7d:0c:3e:af:97:ce:f4:5b:
         7a:21:93:d7:63:65:e0:cd:6f:8d:b9:3f:e3:d0:01:1e:ae:3d:
         1b:fe:f0:ad:82:13:1c:7d:d1:62:2b:60:33:2d:66:e2:ac:78:
         79:71:e6:bf:5a:c6:7a:58:01:44:55:8f:5f:20:d5:ae:2c:ef:
         00:de:40:09:fd:b4:8e:4c:c0:30:eb:be:87:92:59:f3:90:67:
         6e:fc:54:11:bd:ab:e1:0a:97:d2:7c:8f:07:ca:20:17:9a:6d:
         ce:26:27:78:85:86:e7:83:5c:78:77:16:e3:15:e3:29:7a:54:
         df:7c:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----