Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/RBwkDpi55bsREkSRHfogQh7SPVU.roa
File:                     RBwkDpi55bsREkSRHfogQh7SPVU.roa (raw, json)
Hash identifier:          vOJ0fwd0aUwhDs9PdqBFO7WSBdJ7Lnashfg6xChwBqw=
Subject key identifier:   44:1C:24:0E:98:B9:E5:BB:11:12:44:91:1D:FA:20:42:1E:D2:3D:55
Certificate issuer:       /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial:       01919B2DE87B5A2BFD69D94549CEAB92AF7C
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/RBwkDpi55bsREkSRHfogQh7SPVU.roa
Signing time:             Wed 28 Aug 2024 22:49:22 +0000
ROA not before:           Wed 28 Aug 2024 22:49:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49505
IP address blocks:        2a01:ee80:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 13:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:9b:2d:e8:7b:5a:2b:fd:69:d9:45:49:ce:ab:92:af:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
        Validity
            Not Before: Aug 28 22:49:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=441c240e98b9e5bb111244911dfa20421ed23d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:f5:d7:3c:4b:cb:b2:91:3b:ca:1e:91:5a:
                    43:1a:09:4b:af:45:36:7e:f0:a8:8c:b9:9e:57:8d:
                    1f:07:ed:e4:13:0c:4c:24:68:cb:f4:b8:da:d5:d1:
                    8d:02:05:c3:e9:3c:f8:68:1e:04:66:b0:e1:39:29:
                    54:69:35:18:0c:b7:ff:39:c0:42:fd:6f:dd:a5:73:
                    7f:ea:92:0b:a1:38:ce:d5:7e:1d:2a:d0:3c:aa:2f:
                    3a:30:e3:5a:a4:a8:74:fa:78:77:10:59:71:9f:9b:
                    c5:a2:31:90:4b:c5:a6:a3:7c:85:6a:ba:77:b1:d5:
                    5b:f8:a1:b2:53:44:68:70:e0:06:d9:1b:1d:4f:7d:
                    b6:20:97:43:be:a8:27:46:ac:8e:1a:b8:87:27:7a:
                    66:3a:b4:1a:a1:dd:a4:15:b7:10:23:dd:99:a2:99:
                    70:4f:e2:dc:dd:b5:bd:b7:d7:13:0c:18:0f:fb:99:
                    9c:c1:b0:9a:cd:c2:c4:60:c3:01:1d:c2:be:d1:da:
                    19:a6:17:e8:f6:03:38:bd:e2:8a:f7:81:ed:85:bf:
                    60:13:57:d4:8a:d9:6f:dd:52:97:4c:3a:93:40:ec:
                    3f:8b:7c:c4:bd:0c:7f:d8:7b:ff:5d:6f:27:f7:d3:
                    97:ce:7c:0d:c0:db:29:be:3d:8e:de:a2:02:d3:4e:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:24:0E:98:B9:E5:BB:11:12:44:91:1D:FA:20:42:1E:D2:3D:55
            X509v3 Authority Key Identifier:
                keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/RBwkDpi55bsREkSRHfogQh7SPVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:ee80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:a6:bd:bd:2b:84:7c:8f:85:56:dc:d9:06:90:6c:bd:2a:9a:
         38:94:aa:11:09:ef:a3:c3:dd:bb:91:b5:26:6b:f3:d4:90:51:
         6c:05:b6:7d:57:b9:10:68:1e:21:27:63:2a:b2:62:0d:bc:35:
         50:a8:0a:69:b1:65:97:a0:93:a5:6f:a9:2c:b0:9f:a2:98:31:
         e5:b8:cc:fd:a2:bc:5b:df:aa:04:02:10:d4:0c:fd:e6:09:9c:
         d5:9f:4f:53:d9:f9:1f:30:3c:ea:b3:6a:97:c3:03:f6:0a:54:
         2e:80:81:cb:47:24:c8:ca:dc:db:df:97:b8:b2:e6:92:1c:21:
         62:0d:b8:ab:61:9b:41:b4:87:74:e4:a4:34:ab:20:ca:65:b7:
         e4:4d:9f:da:6a:2f:30:23:a4:d4:55:e8:58:3e:e7:c1:e0:8a:
         cf:a7:5d:4f:f0:ee:75:04:db:39:fb:52:75:87:d6:03:29:6e:
         e6:e6:f7:45:b8:67:25:0d:4b:98:b9:bd:f3:ad:f9:39:ae:b0:
         48:74:ca:1e:ab:8a:57:e6:76:06:6e:f2:d8:f0:bb:74:34:cb:
         d4:46:d2:84:6c:2b:26:d5:4d:88:c2:9d:9c:7a:02:30:60:c9:
         54:95:8f:02:87:bc:f3:83:05:19:d3:e3:a7:8d:e7:18:ec:2c:
         a5:85:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----