Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/CBPRChHxoGxI1o4KRdJjRKwEs6o.roa
File:                     CBPRChHxoGxI1o4KRdJjRKwEs6o.roa (raw, json)
Hash identifier:          8seD5Kgp27eDGChEh5p2pd9z6pInr2I909wsLUMwAvg=
Subject key identifier:   08:13:D1:0A:11:F1:A0:6C:48:D6:8E:0A:45:D2:63:44:AC:04:B3:AA
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019127EFAEB507CAA85FF2D5B5E0E5002F31
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/CBPRChHxoGxI1o4KRdJjRKwEs6o.roa
Signing time:             Tue 06 Aug 2024 13:45:04 +0000
ROA not before:           Tue 06 Aug 2024 13:45:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42337
IP address blocks:        45.11.184.0/24 maxlen: 24
                          2a05:9080:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 11:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:27:ef:ae:b5:07:ca:a8:5f:f2:d5:b5:e0:e5:00:2f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Aug  6 13:45:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0813d10a11f1a06c48d68e0a45d26344ac04b3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:80:8a:23:87:cc:fc:5f:10:cf:43:9c:e7:
                    eb:e8:9f:84:d3:a1:22:8a:58:4b:72:6f:5d:39:b4:
                    37:ca:aa:4d:f6:43:5f:45:9d:a7:98:e6:b2:0e:4b:
                    63:b6:40:cc:b2:10:ef:27:ea:91:3e:ed:f0:4d:83:
                    77:58:b4:65:ff:e9:8a:09:9a:36:4e:9f:01:93:61:
                    be:0f:3f:75:55:bb:9c:69:10:55:b6:6a:cc:e3:75:
                    86:e7:b0:08:9f:4e:f7:bd:6f:3a:51:9f:c9:72:03:
                    78:f4:8f:88:b5:fa:1e:80:a4:5a:d1:88:ab:e6:27:
                    a9:c3:42:17:72:bd:cc:cc:d1:64:cf:9f:ba:30:d5:
                    3f:92:a0:ad:60:3c:ea:a1:67:10:d4:cf:5d:af:b2:
                    83:b4:7c:be:7d:4a:bf:61:f5:6d:ba:fa:68:36:f8:
                    c8:24:74:3d:fb:20:51:c3:ff:a7:9d:11:aa:5b:d2:
                    86:c3:2d:c8:e2:a8:be:7d:37:55:20:bc:50:0b:37:
                    5e:da:22:cf:2b:f3:4a:6d:57:d9:d7:6e:70:95:bc:
                    e4:91:33:b7:f7:82:9d:6a:c4:cc:56:75:8d:0c:e5:
                    c6:26:04:a9:c9:de:3f:80:16:fb:7e:ee:4c:b1:42:
                    ac:6a:86:73:43:1e:d7:44:9b:98:0b:e3:5b:be:41:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:13:D1:0A:11:F1:A0:6C:48:D6:8E:0A:45:D2:63:44:AC:04:B3:AA
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/CBPRChHxoGxI1o4KRdJjRKwEs6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.184.0/24
                IPv6:
                  2a05:9080:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:bc:3c:5c:e7:ce:1a:4d:28:7c:b6:9d:96:ca:93:00:e8:
         7d:8b:44:79:9a:30:62:1a:52:ea:58:c7:71:09:0e:5e:21:fb:
         0a:6e:26:ba:36:0d:1c:4b:29:a4:66:10:54:74:71:71:ae:0d:
         9b:97:ab:af:e8:33:5f:aa:ad:58:e5:4c:cd:06:76:1b:5c:59:
         37:47:61:a7:6b:6f:ae:31:ba:35:d4:9f:8b:7e:37:cd:54:cf:
         52:c8:8d:29:26:78:ce:20:eb:3b:ab:8f:23:ac:1c:51:36:2a:
         d6:2e:a9:c6:e3:af:fb:a7:d0:99:d4:1f:96:b2:72:54:3b:75:
         48:f8:a3:33:d3:3a:7c:89:c7:e3:22:8d:f8:81:78:b4:4b:18:
         d3:d6:9c:ca:21:4c:5a:2c:e4:46:fa:fa:74:39:c3:2c:11:d0:
         97:d5:e4:40:7f:aa:5c:1d:d9:f2:04:80:e0:16:2f:1d:e6:b1:
         6f:77:92:5f:be:18:69:72:b1:d4:c5:7a:a8:ea:47:34:62:dc:
         32:66:69:4c:4d:7c:67:00:e0:00:03:5e:09:67:dc:a3:6c:2b:
         c3:68:dd:41:a7:a2:43:40:11:15:fb:6e:d8:c9:1a:7c:77:2a:
         f1:eb:3f:0c:36:cc:89:b6:d2:66:ff:1d:41:fc:eb:33:55:38:
         95:14:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----