Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7sv_sJX9o9Am_mklq2vd6_TU0_I.roa
File:                     7sv_sJX9o9Am_mklq2vd6_TU0_I.roa (raw, json)
Hash identifier:          CU/Ft5i2ikne1H+a9KOZsZXUpCqcOWsihuGLFvbhuDg=
Subject key identifier:   EE:CB:FF:B0:95:FD:A3:D0:26:FE:69:25:AB:6B:DD:EB:F4:D4:D3:F2
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       018D7F8C92B6C3F633DBB9E5EC02163E631E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7sv_sJX9o9Am_mklq2vd6_TU0_I.roa
Signing time:             Tue 06 Feb 2024 17:52:15 +0000
ROA not before:           Tue 06 Feb 2024 17:52:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200079
IP address blocks:        2a0f:b241:19::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 04:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7f:8c:92:b6:c3:f6:33:db:b9:e5:ec:02:16:3e:63:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Feb  6 17:52:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eecbffb095fda3d026fe6925ab6bddebf4d4d3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:e4:03:16:7e:9b:53:56:8c:9d:ec:57:9f:
                    39:6a:54:77:90:3c:1b:b4:04:4b:d2:89:7d:38:da:
                    b9:dd:8a:27:11:76:01:c0:a7:40:dd:14:73:e1:91:
                    5f:cf:bd:8c:62:72:cf:e6:13:4d:8a:12:85:f0:8e:
                    eb:b0:83:db:63:c3:c5:f0:ff:20:50:80:96:0a:21:
                    9e:ee:50:cb:d8:23:38:a4:cd:76:e3:fc:8b:c2:5b:
                    e9:db:c3:41:89:e8:03:7a:3c:62:08:f5:96:c7:de:
                    7d:52:ee:5a:dc:62:b2:7d:97:a7:06:53:ff:bc:da:
                    1a:1e:f5:41:d2:8d:96:43:39:f7:21:41:d0:14:45:
                    e0:ec:49:3c:25:e5:b6:ed:60:fe:1f:80:a0:e9:7d:
                    b4:f4:af:26:a2:8d:96:23:c7:2a:2f:16:f2:6d:12:
                    1d:08:31:e5:ec:d2:3a:f9:57:58:31:72:ee:ee:86:
                    45:36:66:5e:f2:32:75:07:3d:f7:63:d9:d4:d1:77:
                    a9:df:2e:8a:e9:1f:37:49:23:a7:24:65:04:47:aa:
                    1c:04:33:2e:90:61:c9:8a:be:2a:af:f3:cc:b5:f4:
                    59:c5:ad:cf:29:ae:b9:fc:58:48:82:2e:a3:86:3f:
                    c6:63:ed:90:a3:05:a0:ca:3f:75:ff:b5:e2:af:f5:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CB:FF:B0:95:FD:A3:D0:26:FE:69:25:AB:6B:DD:EB:F4:D4:D3:F2
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7sv_sJX9o9Am_mklq2vd6_TU0_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b241:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:73:0f:6a:df:e6:4f:cb:43:d3:ed:13:13:d5:58:51:89:c7:
         d3:b0:db:26:3f:63:b9:2d:6d:6a:f4:d0:f6:80:32:e6:a2:4d:
         6c:74:7e:20:00:c4:90:a2:fe:b5:b0:a4:17:24:7d:15:d2:7b:
         42:10:29:b9:46:9b:bc:4b:ba:f1:dc:ea:f7:04:c4:8c:84:28:
         6b:0f:50:f0:de:61:7f:ac:ff:7b:70:f7:b6:24:28:43:11:6f:
         33:29:6e:5c:70:82:87:15:6b:ec:7b:2e:9e:18:95:7d:c9:7e:
         bc:04:12:31:9b:4a:12:76:75:32:cf:11:1e:43:65:a5:54:97:
         fe:51:a3:2a:4f:b5:d5:ce:68:c2:0a:d5:f1:79:69:d6:ff:2b:
         43:4a:49:9d:26:f1:7c:46:cf:28:1c:86:d9:fa:53:c0:83:5e:
         ed:4f:65:64:ec:aa:03:cf:9d:12:78:10:85:b1:bd:90:93:1c:
         56:e7:73:5e:71:bf:1b:f1:e0:c0:93:a8:06:f6:d5:99:47:ef:
         f7:c2:f4:5f:8e:a6:49:ff:df:ca:af:6d:a6:e3:f3:17:cb:e4:
         1f:24:0c:d9:f4:19:57:45:0d:4b:af:01:c8:99:ad:7f:d0:d2:
         b4:93:6e:6d:b4:e6:45:30:6f:ae:3b:31:0f:8a:a5:e8:02:68:
         4a:94:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----