Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/5VlNlHM1pEt-7uwe2gjGVM4u6Us.roa
File:                     5VlNlHM1pEt-7uwe2gjGVM4u6Us.roa (raw, json)
Hash identifier:          QrumUWaOTuxtbMJIic+4mG1J4cAe9CIZPCb8GnVfpT8=
Subject key identifier:   E5:59:4D:94:73:35:A4:4B:7E:EE:EC:1E:DA:08:C6:54:CE:2E:E9:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       01918FC47694119E54089FB9A6A03E1244B1
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/5VlNlHM1pEt-7uwe2gjGVM4u6Us.roa
Signing time:             Mon 26 Aug 2024 17:38:22 +0000
ROA not before:           Mon 26 Aug 2024 17:38:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34918
IP address blocks:        2a05:9080:6::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 09:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8f:c4:76:94:11:9e:54:08:9f:b9:a6:a0:3e:12:44:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Aug 26 17:38:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e5594d947335a44b7eeeec1eda08c654ce2ee94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:ee:36:78:24:8f:35:11:72:30:91:b5:4d:
                    6f:84:75:78:33:c8:0f:36:46:30:ac:a2:03:56:54:
                    66:5c:64:4b:57:02:d1:91:84:ed:b0:c3:5f:40:bd:
                    91:e4:c8:91:83:97:3e:b7:8c:b8:ff:92:cb:64:ca:
                    fd:7f:f1:41:22:39:7a:45:35:f2:b9:48:f5:b3:e9:
                    1a:cc:76:06:72:1f:05:09:d8:0b:9e:d2:af:ed:f4:
                    21:cf:a9:c3:78:e4:85:6b:98:61:66:37:42:1f:fe:
                    4e:ba:3c:d0:43:0e:17:e5:73:81:1b:e8:7d:fb:a5:
                    79:c5:2d:57:f6:46:3b:2f:d5:f0:34:3a:df:b3:c2:
                    83:3f:76:8c:37:6d:ec:4b:dd:ed:7b:44:a5:ef:c9:
                    61:05:c1:da:61:c8:4d:b7:41:c2:b9:2a:17:48:29:
                    43:12:61:fa:e4:8a:5e:e4:b7:74:ed:5f:a9:8e:52:
                    eb:ae:ba:3d:37:2b:8b:aa:a6:9e:ca:4f:91:d3:b1:
                    29:69:55:fe:87:4a:f7:db:86:66:2e:4d:99:c8:67:
                    df:83:13:cf:18:ad:f9:8d:50:2b:eb:7e:3d:e1:ba:
                    62:7f:79:18:11:2e:ba:66:29:a0:fa:51:92:cb:de:
                    da:ce:c9:97:72:43:23:7d:d4:29:3b:d9:53:b6:a8:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:59:4D:94:73:35:A4:4B:7E:EE:EC:1E:DA:08:C6:54:CE:2E:E9:4B
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/5VlNlHM1pEt-7uwe2gjGVM4u6Us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9080:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:7d:32:33:fe:68:dd:5e:6f:87:f7:fe:56:7f:8f:08:9b:58:
         8d:0f:05:76:9b:0f:e9:ea:10:70:50:3a:b8:df:bc:50:f8:ca:
         a7:58:59:96:e6:e7:9d:7d:14:ad:e1:b7:6f:4c:18:f8:39:f7:
         92:e8:1c:ff:4c:d4:88:6a:e5:b8:49:a0:76:0a:5f:c3:e4:c8:
         7b:5b:1d:4b:94:e0:6b:57:dd:9c:e7:82:28:8c:e0:b7:c6:37:
         34:63:fe:75:b4:bd:54:cb:7c:6c:9f:25:42:b5:bb:33:5a:fd:
         04:23:26:f8:16:da:a7:69:86:df:f3:b5:2a:94:d5:d4:1d:35:
         d5:21:53:71:02:e7:63:f6:31:18:6e:9a:45:a9:c7:5e:78:dd:
         1e:3c:01:bc:b4:f5:e6:11:09:3a:ef:0a:aa:37:11:38:bd:c4:
         c7:c9:f4:d0:f8:bb:61:7b:68:0b:93:ee:be:d1:05:63:a1:cb:
         bc:75:bf:9f:52:19:27:f8:b4:3e:78:d1:a3:df:63:7d:1c:06:
         db:92:59:fa:8b:39:c0:84:3f:ff:e7:db:72:21:87:09:f0:ab:
         89:2d:72:83:7e:04:8a:c9:23:e5:ac:00:0e:f1:b7:0b:06:85:
         b8:8b:b3:65:90:55:82:02:46:24:30:ab:68:cf:df:03:06:c7:
         92:3e:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----