Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/e_SSq3y-6p2ljviSwiD-W8k7mRA.roa
File:                     e_SSq3y-6p2ljviSwiD-W8k7mRA.roa (raw, json)
Hash identifier:          ovhJtBI5TBHB3FL1//KHaItjRrSaG6F1TNm/sysMRfw=
Subject key identifier:   7B:F4:92:AB:7C:BE:EA:9D:A5:8E:F8:92:C2:20:FE:5B:C9:3B:99:10
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       018D81F0A151549865696C14459A9EE6FCFB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/e_SSq3y-6p2ljviSwiD-W8k7mRA.roa
Signing time:             Wed 07 Feb 2024 05:00:47 +0000
ROA not before:           Wed 07 Feb 2024 05:00:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210376
IP address blocks:        2a0f:b241:47::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:81:f0:a1:51:54:98:65:69:6c:14:45:9a:9e:e6:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Feb  7 05:00:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7bf492ab7cbeea9da58ef892c220fe5bc93b9910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:a1:fc:d2:6c:ca:65:9d:74:18:bd:03:4b:
                    da:bc:ae:7c:22:5e:f5:36:d5:fc:6f:b7:ed:f4:f4:
                    d4:f6:0e:c1:14:ad:47:f4:fe:0b:93:4b:fd:e4:9d:
                    36:35:04:80:b8:26:95:91:4f:df:37:d5:3f:f3:d8:
                    c2:c6:2b:ec:ff:43:31:d2:e3:24:47:19:bc:7c:ac:
                    4b:ea:d4:9d:c2:e4:8b:99:36:06:15:c0:6b:d8:71:
                    20:9e:bc:3c:a9:f6:85:e6:e5:15:33:88:2a:2b:f2:
                    bd:49:fd:73:4f:1a:f4:d1:ad:77:c5:10:21:99:86:
                    75:4c:7e:33:82:d2:53:44:97:1b:67:65:b5:85:ab:
                    9d:8d:1f:33:68:03:0f:3a:d3:a7:4c:eb:a5:95:26:
                    78:c4:f8:5d:93:24:c3:93:c9:1a:9e:51:e7:09:23:
                    0e:f5:bf:12:f8:7e:a0:91:31:ba:5a:99:20:0e:59:
                    71:76:50:d3:a2:94:c6:8e:e9:9a:36:c4:d0:e5:2b:
                    ed:74:b5:75:47:52:31:50:93:44:fe:37:7f:e5:3c:
                    9d:da:82:31:5b:1a:a8:52:2e:a1:a6:6b:c1:00:a2:
                    75:c2:43:a7:09:54:57:21:04:d9:f8:e8:bd:16:64:
                    6c:82:24:71:0f:37:df:be:75:e7:e2:8f:84:68:dd:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F4:92:AB:7C:BE:EA:9D:A5:8E:F8:92:C2:20:FE:5B:C9:3B:99:10
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/e_SSq3y-6p2ljviSwiD-W8k7mRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b241:47::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:a0:62:1a:10:18:90:f3:f4:3a:28:96:89:60:75:6e:de:
         0f:45:84:25:57:b7:36:af:b7:6e:ba:2b:ab:f4:19:43:a1:6e:
         20:78:77:42:7e:b9:22:8f:6f:2b:3a:08:5c:e9:81:3d:8e:39:
         21:90:7b:90:dd:cc:44:85:0c:cb:79:33:e5:6e:2f:01:73:5f:
         fe:a4:8f:61:52:d3:f6:37:f8:b6:2e:f8:f5:16:94:5a:bc:7d:
         9d:3d:e0:5e:c0:3e:28:21:be:b2:d3:d6:a2:e6:f4:bc:80:ef:
         ef:5d:87:95:07:13:e4:5b:19:41:ef:13:8f:a7:f2:9c:80:1e:
         5d:f8:8f:a3:dc:95:60:28:54:0a:89:2b:0a:ba:ea:0d:5b:20:
         28:37:8e:55:fe:d8:bd:91:dc:8c:2d:25:48:79:d0:cb:82:15:
         81:67:01:9d:bd:cb:92:15:e2:6b:be:d7:3c:68:74:20:de:19:
         90:f7:02:8e:42:f1:fa:43:21:0a:59:11:ef:fc:c3:c0:82:5c:
         0b:25:00:cb:0d:2a:c0:11:1c:6c:ca:0a:f2:b5:4a:8c:e2:18:
         4a:b4:5c:33:3c:4d:36:22:8e:12:59:d9:8d:37:e8:aa:59:25:
         09:15:8e:c0:e7:d9:8f:f4:33:e6:cd:c7:62:11:ba:e8:0d:68:
         29:42:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----