Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Jpt3iMt5tj14d6nL_In7PeYPAwE.roa
File:                     Jpt3iMt5tj14d6nL_In7PeYPAwE.roa (raw, json)
Hash identifier:          JlheCkvHxhj81F+SaJPt8GwPDUEGo5OxNX9nmsNrXeE=
Subject key identifier:   26:9B:77:88:CB:79:B6:3D:78:77:A9:CB:FC:89:FB:3D:E6:0F:03:01
Certificate issuer:       /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial:       018CC94DA3FA99E62EF8C1C670EA4631B3B0
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Jpt3iMt5tj14d6nL_In7PeYPAwE.roa
Signing time:             Tue 02 Jan 2024 08:32:37 +0000
ROA not before:           Tue 02 Jan 2024 08:32:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204755
IP address blocks:        2a0f:ca80:deed::/48 maxlen: 48
                          2a0f:ca80:fe0::/44 maxlen: 44
                          2a0f:ca80:b00b::/48 maxlen: 48
                          2a0f:ca80:616::/48 maxlen: 48
                          2a0f:ca80:666::/48 maxlen: 48
                          2a0f:ca81:deed::/48 maxlen: 48
                          2a0f:ca80:1339::/48 maxlen: 48
                          2a0f:ca81:b00b::/48 maxlen: 48
                          2a0f:ca80:beef::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:a3:fa:99:e6:2e:f8:c1:c6:70:ea:46:31:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
        Validity
            Not Before: Jan  2 08:32:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=269b7788cb79b63d7877a9cbfc89fb3de60f0301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:cf:a6:97:ae:15:f5:fa:61:0f:92:46:d0:
                    d1:58:5d:7f:07:7d:d1:35:95:5c:ba:58:7f:45:af:
                    2a:7a:8c:72:6e:70:a4:a4:5a:96:52:43:32:b9:2a:
                    53:07:53:25:39:5a:de:04:44:2d:64:f6:53:ab:aa:
                    62:7c:65:c8:a7:96:f4:8d:32:33:af:98:cc:82:19:
                    b7:eb:15:09:c8:13:74:37:97:84:14:5a:93:9e:4a:
                    3b:65:db:57:66:52:aa:36:1b:ab:9f:0d:21:17:ca:
                    ce:03:29:f5:94:04:88:64:41:26:70:e7:10:8f:b5:
                    f5:39:ab:dc:21:fc:16:c3:fb:c4:11:d6:c5:c7:cc:
                    08:36:8d:7c:d1:3b:55:1c:12:95:0c:d0:2c:66:2e:
                    66:3a:24:39:30:e0:81:81:df:94:5a:9f:3f:27:82:
                    54:1e:c8:b6:14:ab:31:80:3b:18:4f:29:c7:5f:29:
                    c7:11:59:4f:04:0d:f9:c6:8b:2e:bf:32:17:4d:9b:
                    31:d0:ac:c3:46:a0:b5:41:fb:48:11:3c:24:9d:95:
                    2c:2d:c2:6c:8b:52:84:8f:02:2c:c3:3c:b6:d9:83:
                    7d:f6:14:00:d8:e1:7e:a8:52:09:7c:f9:68:9d:30:
                    6a:b5:e1:d1:6b:ff:22:32:c2:c2:96:99:c9:81:eb:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:77:88:CB:79:B6:3D:78:77:A9:CB:FC:89:FB:3D:E6:0F:03:01
            X509v3 Authority Key Identifier:
                keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Jpt3iMt5tj14d6nL_In7PeYPAwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:ca80:616::/48
                  2a0f:ca80:666::/48
                  2a0f:ca80:fe0::/44
                  2a0f:ca80:1339::/48
                  2a0f:ca80:b00b::/48
                  2a0f:ca80:beef::/48
                  2a0f:ca80:deed::/48
                  2a0f:ca81:b00b::/48
                  2a0f:ca81:deed::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:53:ba:dd:6c:39:09:de:b3:ed:5a:e4:dd:d0:dd:d0:ef:54:
         98:14:d9:94:20:4a:14:e8:8a:64:53:65:c2:ad:fc:91:0b:ce:
         e5:22:f7:dd:3c:d0:21:9a:76:80:c1:8f:58:c9:72:1d:ca:50:
         f2:5f:ae:fb:2c:67:e7:69:c6:93:50:b0:75:a2:a7:16:75:86:
         5b:38:fe:9b:99:5f:97:00:7b:49:e5:50:13:4c:07:d6:4f:f2:
         fb:6d:36:8e:bd:11:ab:98:81:27:48:60:0e:3d:f0:13:49:af:
         42:19:8b:29:29:9c:27:10:9a:cf:2e:25:a2:d0:53:28:ec:f8:
         40:1d:0b:dc:0f:14:2a:58:68:b3:e8:d9:34:d7:f1:2a:82:cd:
         53:51:f6:63:93:2c:62:8a:88:10:52:e3:46:77:20:46:34:c8:
         73:d4:ab:96:97:d1:83:14:57:48:2a:06:99:4a:3a:00:9b:ca:
         df:2a:31:a5:98:13:bd:d2:38:b5:a7:d5:ea:5b:88:bd:c6:bc:
         01:2b:7d:11:ed:f4:1f:98:96:ee:b9:76:09:06:46:43:43:42:
         a3:83:70:d3:5e:18:6d:bc:54:9c:09:a9:4d:c6:18:01:9c:71:
         55:0f:4f:22:59:24:73:f2:a8:86:02:23:81:b1:2a:3e:82:41:
         78:18:09:97
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAYzJTaP6meYu+MHGcOpGMbOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2
MjFkYjEwHhcNMjQwMTAyMDgzMjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjliNzc4OGNiNzliNjNkNzg3N2E5Y2JmYzg5ZmIzZGU2MGYwMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmLPppeuFfX6YQ+SRtDRWF1/B33R
NZVculh/Ra8qeoxybnCkpFqWUkMyuSpTB1MlOVreBEQtZPZTq6pifGXIp5b0jTIz
r5jMghm36xUJyBN0N5eEFFqTnko7ZdtXZlKqNhurnw0hF8rOAyn1lASIZEEmcOcQ
j7X1OavcIfwWw/vEEdbFx8wINo180TtVHBKVDNAsZi5mOiQ5MOCBgd+UWp8/J4JU
Hsi2FKsxgDsYTynHXynHEVlPBA35xosuvzIXTZsx0KzDRqC1QftIETwknZUsLcJs
i1KEjwIswzy22YN99hQA2OF+qFIJfPlonTBqteHRa/8iMsLClpnJgesO5wIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFCabd4jLebY9eHepy/yJ+z3mDwMBMB8GA1UdIwQY
MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt
ZmIxMDMwNjUxMDY3LzEvSnB0M2lNdDV0ajE0ZDZuTF9JbjdQZVlQQXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3
LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAAjBRAwcAKg/KgAYW
AwcAKg/KgAZmAwcEKg/KgA/gAwcAKg/KgBM5AwcAKg/KgLALAwcAKg/KgL7vAwcA
Kg/KgN7tAwcAKg/KgbALAwcAKg/Kgd7tMA0GCSqGSIb3DQEBCwUAA4IBAQBgU7rd
bDkJ3rPtWuTd0N3Q71SYFNmUIEoU6IpkU2XCrfyRC87lIvfdPNAhmnaAwY9YyXId
ylDyX677LGfnacaTULB1oqcWdYZbOP6bmV+XAHtJ5VATTAfWT/L7bTaOvRGrmIEn
SGAOPfATSa9CGYspKZwnEJrPLiWi0FMo7PhAHQvcDxQqWGiz6Nk01/Eqgs1TUfZj
kyxiiogQUuNGdyBGNMhz1KuWl9GDFFdIKgaZSjoAm8rfKjGlmBO90ji1p9XqW4i9
xrwBK30R7fQfmJbuuXYJBkZDQ0Kjg3DTXhhtvFScCalNxhgBnHFVD08iWSRz8qiG
AiOBsSo+gkF4GAmX
-----END CERTIFICATE-----