Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/JtiiUujds1naIMaLLlygl3u-bvo.roa
File:                     JtiiUujds1naIMaLLlygl3u-bvo.roa (raw, json)
Hash identifier:          YEy8YkDrEAnsDRfEL6RbjDZmJGe6hA7FrgRdlD2eSjk=
Subject key identifier:   26:D8:A2:52:E8:DD:B3:59:DA:20:C6:8B:2E:5C:A0:97:7B:BE:6E:FA
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       018CC94AD71FF4C2AB143EF49639D995AF62
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/JtiiUujds1naIMaLLlygl3u-bvo.roa
Signing time:             Tue 02 Jan 2024 08:29:34 +0000
ROA not before:           Tue 02 Jan 2024 08:29:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212635
IP address blocks:        45.159.140.0/22 maxlen: 24
                          2a10:6e40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 13:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4a:d7:1f:f4:c2:ab:14:3e:f4:96:39:d9:95:af:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Jan  2 08:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=26d8a252e8ddb359da20c68b2e5ca0977bbe6efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:b7:36:41:26:17:d9:f6:0b:12:d4:06:42:
                    20:fd:af:38:eb:0c:bb:68:b6:1e:2c:79:9a:2a:ad:
                    50:47:67:07:8f:48:40:6f:13:cb:37:c8:2c:72:7b:
                    3d:83:53:e9:48:33:c4:df:10:fe:67:38:54:4d:13:
                    a2:f6:5d:fc:f7:64:72:f5:63:f3:48:93:28:aa:e8:
                    68:37:4c:3f:46:52:53:bb:7f:a2:c7:c7:8a:61:53:
                    2f:20:ac:f0:c0:d2:d2:9c:a5:7a:b7:e5:7c:d5:29:
                    e3:67:49:8b:e0:45:53:31:e6:4a:df:a1:1c:5b:04:
                    dd:68:aa:cf:2d:34:af:a2:75:5a:c6:8d:d9:71:45:
                    d1:3f:0c:9b:5c:53:7c:09:38:bd:cb:fb:25:3b:d3:
                    e4:7d:51:71:d0:d5:08:92:ab:dc:cd:b5:9c:4c:77:
                    5e:24:d1:55:0e:ee:46:9e:d3:d2:c2:fb:60:3b:4a:
                    65:34:15:8e:57:79:86:fc:6f:f3:46:9e:b6:83:a5:
                    46:a3:19:fb:4d:0a:d3:b3:e0:eb:54:f2:8d:6d:a8:
                    58:e9:de:62:66:6c:70:e6:d8:f8:d9:1b:8d:96:cf:
                    7b:37:b5:c7:cb:7b:6c:4d:d6:1f:f3:30:b1:f1:26:
                    d7:04:30:d8:8a:e2:21:0a:4c:03:2d:11:7c:dc:5a:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D8:A2:52:E8:DD:B3:59:DA:20:C6:8B:2E:5C:A0:97:7B:BE:6E:FA
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/JtiiUujds1naIMaLLlygl3u-bvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.140.0/22
                IPv6:
                  2a10:6e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:1c:22:b1:6d:02:47:e7:97:13:08:37:05:10:44:8a:07:
         e6:2f:bd:fa:32:91:5e:6d:0d:a2:8b:0d:18:2e:12:fa:ee:e2:
         6b:44:72:d8:a4:91:0c:0b:0c:83:8a:15:04:91:9f:ee:cc:e3:
         92:38:e6:2c:fa:e7:24:df:81:e6:e8:36:f3:f7:c2:de:45:f8:
         af:d6:92:76:9d:e7:bb:a5:cb:63:4f:34:2a:34:b0:03:38:65:
         b8:50:bb:11:7c:20:82:45:5c:24:f1:4e:e3:f4:55:70:78:5c:
         53:6a:a2:f9:bd:24:89:3b:7d:6d:53:0c:9d:43:82:cc:4c:71:
         40:60:bf:9f:f8:a0:0e:f7:b2:15:b4:dd:8c:31:56:a9:81:cc:
         92:10:15:42:27:4b:49:a6:85:23:b9:d5:2c:b5:df:0d:d8:66:
         ac:73:52:b0:63:cd:2f:e0:4f:c5:8b:91:11:74:c6:07:be:2c:
         22:1c:cc:03:11:ab:7a:3b:b4:f1:51:2c:36:95:f8:48:25:ff:
         c0:6e:ca:50:1a:51:6a:e3:4e:6d:76:7a:de:06:79:4d:9f:73:
         ec:01:5b:b1:87:ef:35:cd:94:ce:76:87:d5:f1:42:2a:8c:22:
         7c:a3:20:9e:29:20:bd:d1:23:21:73:11:8f:50:43:f9:42:50:
         13:e6:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----