Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_RYquRmi6O1k5m-ySufWxYcJ1II.roa
File:                     _RYquRmi6O1k5m-ySufWxYcJ1II.roa (raw, json)
Hash identifier:          WDX5w/VV8/ArYE0327ALHEZ6Qz6v5AlKpN8vnkIUmxo=
Subject key identifier:   FD:16:2A:B9:19:A2:E8:ED:64:E6:6F:B2:4A:E7:D6:C5:87:09:D4:82
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01959E8D2B2BE7345CF47AA7CAE79C7EFEB3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_RYquRmi6O1k5m-ySufWxYcJ1II.roa
Signing time:             Sun 16 Mar 2025 10:43:26 +0000
ROA not before:           Sun 16 Mar 2025 10:43:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212477
IP address blocks:        2a0f:14c0::/29 maxlen: 29
                          2a0f:1840::/29 maxlen: 29
                          2a0f:2300::/29 maxlen: 29
                          2a0f:2dc0::/29 maxlen: 29
                          2a0f:e140::/29 maxlen: 29
                          2a0f:e5c0::/29 maxlen: 29
                          2a0f:e640::/29 maxlen: 29
                          2a13:2bc0::/29 maxlen: 29
                          2a13:2e40::/29 maxlen: 29
                          2a13:3080::/29 maxlen: 29
                          2a13:4900::/29 maxlen: 29
                          2a13:d100::/29 maxlen: 29
                          2a13:fa00::/29 maxlen: 29
                          2a13:fd00::/29 maxlen: 29
Validation:               Failed, certificate revoked on Mon 17 Mar 2025 11:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:9e:8d:2b:2b:e7:34:5c:f4:7a:a7:ca:e7:9c:7e:fe:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Mar 16 10:43:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fd162ab919a2e8ed64e66fb24ae7d6c58709d482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:c1:1a:8e:3b:53:98:41:2c:91:98:ce:29:
                    84:4a:57:73:e8:f5:c2:21:45:3c:9f:cd:39:5c:61:
                    02:28:9a:18:dd:3c:46:15:0f:a8:03:54:3a:b4:26:
                    d4:5a:a1:2e:f5:a4:8c:3a:03:50:2e:58:6c:3c:fc:
                    4f:11:7d:9d:bf:7b:61:bb:2f:a1:cd:70:d5:27:14:
                    50:a9:d0:c4:52:30:5e:8a:cc:05:32:47:5d:83:8a:
                    75:79:8d:ee:02:1b:09:fe:3e:cd:a0:7f:9d:bd:05:
                    bd:10:7d:3f:d8:d1:ea:aa:9e:11:98:b3:5b:e4:bd:
                    32:6b:57:b9:5f:6f:f7:92:28:f5:3c:98:83:57:02:
                    89:15:68:13:5b:7d:46:6b:28:a2:dd:c1:b1:73:d5:
                    0c:a4:32:29:a9:98:ac:38:99:7b:ab:fc:a3:ac:34:
                    0f:51:f3:c4:79:e9:9e:1e:99:f8:c8:a8:fb:e9:f8:
                    f5:73:d4:ac:94:49:b7:74:92:a8:e4:b3:0f:84:a6:
                    ba:80:dc:e5:f3:bc:25:7a:b7:33:39:28:d2:e4:41:
                    98:72:9b:30:8e:0f:82:5f:73:cf:38:a5:7c:eb:d0:
                    b8:26:4e:22:cd:1c:ca:39:4d:7f:93:b3:95:f0:e5:
                    fa:9f:f3:29:f5:ff:00:ae:37:88:32:69:02:0d:0b:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:16:2A:B9:19:A2:E8:ED:64:E6:6F:B2:4A:E7:D6:C5:87:09:D4:82
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_RYquRmi6O1k5m-ySufWxYcJ1II.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:14c0::/29
                  2a0f:1840::/29
                  2a0f:2300::/29
                  2a0f:2dc0::/29
                  2a0f:e140::/29
                  2a0f:e5c0::/29
                  2a0f:e640::/29
                  2a13:2bc0::/29
                  2a13:2e40::/29
                  2a13:3080::/29
                  2a13:4900::/29
                  2a13:d100::/29
                  2a13:fa00::/29
                  2a13:fd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:d4:65:50:44:7d:15:f0:a3:f4:cf:ec:74:58:56:da:99:
         98:37:01:6c:16:4f:da:39:ba:ef:a0:08:d8:16:7c:da:3a:03:
         e5:69:fa:dd:77:00:1c:05:ac:a2:dd:d5:0b:99:f5:c2:6a:87:
         b6:ec:df:ce:f1:2c:a4:6d:bf:2f:48:b9:f4:8c:f9:30:b0:c8:
         7e:8a:8d:0a:19:59:48:27:7b:ad:1f:3d:c9:54:53:e1:0f:30:
         29:86:9b:e8:06:3b:70:ea:ab:55:de:77:ac:82:8d:19:d8:4b:
         e1:46:a9:9b:ee:4d:36:6d:04:c4:b5:a8:bf:f8:94:17:ec:77:
         6a:32:a0:46:f9:fd:31:7a:17:59:4b:80:a0:48:fd:ac:68:dd:
         1e:a3:5b:4d:e6:a8:b8:a8:ea:0a:55:df:4c:a1:b4:94:6c:79:
         a9:ea:ce:c1:bf:94:77:21:a8:47:6b:ac:9d:62:71:95:d6:70:
         c0:8e:ba:b4:7c:71:f9:c6:74:12:11:03:c9:71:80:a7:cd:9c:
         01:04:7b:be:4b:ca:e9:6f:e6:ee:a9:b0:32:c8:65:f2:68:17:
         1a:03:ea:19:84:7a:ea:95:e3:b8:2b:68:a2:5b:a7:15:54:5e:
         51:22:40:40:30:75:ff:4b:64:70:d0:ae:60:d3:11:a5:8c:78:
         cc:ef:c0:f6
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZWejSsr5zRc9Hqnyuecfv6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzE2MTA0MzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDE2MmFiOTE5YTJlOGVkNjRlNjZmYjI0YWU3ZDZjNTg3MDlkNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzXBGo47U5hBLJGYzimESldz6PXC
IUU8n805XGECKJoY3TxGFQ+oA1Q6tCbUWqEu9aSMOgNQLlhsPPxPEX2dv3thuy+h
zXDVJxRQqdDEUjBeiswFMkddg4p1eY3uAhsJ/j7NoH+dvQW9EH0/2NHqqp4RmLNb
5L0ya1e5X2/3kij1PJiDVwKJFWgTW31Gayii3cGxc9UMpDIpqZisOJl7q/yjrDQP
UfPEeemeHpn4yKj76fj1c9SslEm3dJKo5LMPhKa6gNzl87wlerczOSjS5EGYcpsw
jg+CX3PPOKV869C4Jk4izRzKOU1/k7OV8OX6n/Mp9f8ArjeIMmkCDQvPswIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFP0WKrkZoujtZOZvskrn1sWHCdSCMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvX1JZcXVSbWk2TzFrNW0teVN1Zld4WWNKMUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAAjBiAwUDKg8UwAMF
AyoPGEADBQMqDyMAAwUDKg8twAMFAyoP4UADBQMqD+XAAwUDKg/mQAMFAyoTK8AD
BQMqEy5AAwUDKhMwgAMFAyoTSQADBQMqE9EAAwUDKhP6AAMFAyoT/QAwDQYJKoZI
hvcNAQELBQADggEBABka1GVQRH0V8KP0z+x0WFbamZg3AWwWT9o5uu+gCNgWfNo6
A+Vp+t13ABwFrKLd1QuZ9cJqh7bs387xLKRtvy9IufSM+TCwyH6KjQoZWUgne60f
PclUU+EPMCmGm+gGO3Dqq1Xed6yCjRnYS+FGqZvuTTZtBMS1qL/4lBfsd2oyoEb5
/TF6F1lLgKBI/axo3R6jW03mqLio6gpV30yhtJRseanqzsG/lHchqEdrrJ1icZXW
cMCOurR8cfnGdBIRA8lxgKfNnAEEe75Lyulv5u6psDLIZfJoFxoD6hmEeuqV47gr
aKJbpxVUXlEiQEAwdf9LZHDQrmDTEaWMeMzvwPY=
-----END CERTIFICATE-----