Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/BcFVNe_0WEchBs-J5BA7rp8gKek.roa
File:                     BcFVNe_0WEchBs-J5BA7rp8gKek.roa (raw, json)
Hash identifier:          XEvdTo7sApgiiu8q5R4tpIwqC/9k3rtw17plRELU2b8=
Subject key identifier:   05:C1:55:35:EF:F4:58:47:21:06:CF:89:E4:10:3B:AE:9F:20:29:E9
Certificate issuer:       /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial:       0191C8B925979DED26C7A2D6B37554927B40
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/BcFVNe_0WEchBs-J5BA7rp8gKek.roa
Signing time:             Fri 06 Sep 2024 19:04:22 +0000
ROA not before:           Fri 06 Sep 2024 19:04:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49505
IP address blocks:        2a01:ee80:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 17:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c8:b9:25:97:9d:ed:26:c7:a2:d6:b3:75:54:92:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
        Validity
            Not Before: Sep  6 19:04:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=05c15535eff458472106cf89e4103bae9f2029e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:71:c3:e6:f0:90:e1:ba:ae:4d:18:4c:5f:
                    0e:46:a9:35:c4:d2:48:60:e0:4b:9f:ea:1b:3b:e0:
                    3f:fb:c9:36:68:f4:2d:5f:aa:36:ac:ef:62:a8:79:
                    a6:24:95:e1:b7:73:37:89:b4:d2:ec:31:d7:b5:b2:
                    29:b0:61:96:a4:13:c9:13:2a:bd:0e:e5:4a:5b:63:
                    07:66:88:7c:55:46:a7:c2:e2:56:d6:b3:8e:1f:9b:
                    b5:57:8d:14:b3:c5:e6:3d:69:30:14:85:56:22:05:
                    fd:5d:e4:67:db:65:36:73:e5:9d:74:23:1a:43:cb:
                    92:0a:9e:98:e3:05:a1:cd:9d:4b:af:d3:f7:f7:54:
                    92:ec:cb:76:56:9e:71:83:b7:18:e3:7c:0d:1a:a4:
                    dd:7f:20:63:85:4b:f0:21:90:00:6d:2b:ab:f8:a4:
                    fd:97:50:be:61:0a:cf:40:e6:4a:19:93:bf:a8:e3:
                    db:cc:12:08:fd:52:f8:df:a5:5e:5f:42:cf:37:51:
                    5e:46:10:d0:dc:48:43:59:c2:d6:0c:5f:1e:02:05:
                    4b:21:0e:21:e8:8c:c3:7a:f4:be:0b:6a:9a:90:14:
                    0d:7e:7e:0b:44:e7:39:f7:ac:45:69:64:d8:07:5e:
                    b2:d4:ce:e3:54:2b:99:34:f9:9d:3d:97:1f:f0:09:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:55:35:EF:F4:58:47:21:06:CF:89:E4:10:3B:AE:9F:20:29:E9
            X509v3 Authority Key Identifier:
                keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/BcFVNe_0WEchBs-J5BA7rp8gKek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:ee80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:f0:07:05:0d:b8:89:dd:50:e3:d9:ad:1a:70:6c:fc:bf:98:
         87:86:3c:04:77:a2:a1:15:2d:28:49:76:81:29:de:16:f6:7d:
         23:5f:3d:ce:11:58:17:47:0e:90:f7:83:f2:30:b3:95:dd:37:
         2d:f2:13:49:2a:81:d6:aa:10:02:fb:0f:58:e8:1b:db:27:9a:
         79:76:94:68:07:c0:48:4f:aa:d6:e9:be:30:fa:bf:e2:1c:c7:
         e8:02:a1:cd:d8:10:41:d3:b1:28:bb:d6:66:0a:8a:d1:01:dd:
         cc:11:f2:a3:09:39:51:dd:66:2f:47:81:93:9e:58:fe:96:49:
         53:35:5c:6b:90:d5:5e:7e:96:cb:7a:ac:32:c5:63:c3:d9:0c:
         92:df:1c:e0:63:c4:68:26:79:88:ef:21:15:97:b7:c0:cc:3e:
         5d:03:5d:a1:73:54:ff:64:2e:54:a1:61:19:bb:aa:93:97:88:
         3c:f6:89:10:a5:92:74:c4:18:94:bd:89:30:b4:b8:50:d8:ea:
         63:1d:5b:ed:de:fe:e5:b9:98:88:15:e7:fe:0b:a6:27:dc:82:
         19:f8:d4:f4:7a:8e:f4:4c:7f:6a:b1:6a:7d:d6:cc:69:4e:bf:
         7f:bd:2a:b8:6e:68:36:be:80:9b:51:80:4b:44:6f:af:1f:6c:
         f2:e8:8d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----