Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/2VX8wHyicC3lqe9eIe4iA9DpKuo.roa
File:                     2VX8wHyicC3lqe9eIe4iA9DpKuo.roa (raw, json)
Hash identifier:          tz7RAdPWyFte2ESldu7HRupuij588PnuaSV7vR12IYE=
Subject key identifier:   D9:55:FC:C0:7C:A2:70:2D:E5:A9:EF:5E:21:EE:22:03:D0:E9:2A:EA
Certificate issuer:       /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial:       018F13029BC3BF7289792761D41E768E4CDC
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/2VX8wHyicC3lqe9eIe4iA9DpKuo.roa
Signing time:             Thu 25 Apr 2024 02:08:09 +0000
ROA not before:           Thu 25 Apr 2024 02:08:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     395403
IP address blocks:        185.103.35.0/24 maxlen: 24
                          2a00:edc0:1007::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 07 May 2024 22:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:13:02:9b:c3:bf:72:89:79:27:61:d4:1e:76:8e:4c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
        Validity
            Not Before: Apr 25 02:08:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d955fcc07ca2702de5a9ef5e21ee2203d0e92aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:cb:42:8c:c5:ee:05:a5:6c:7f:99:97:50:
                    c7:8c:bd:53:55:a5:84:aa:27:a9:88:b5:0c:e2:d6:
                    03:eb:c0:07:74:89:ce:21:37:c8:a4:65:db:97:1d:
                    b2:5c:8f:35:ab:2f:74:be:97:dc:76:26:b4:f7:ef:
                    cf:28:b6:da:01:cc:b0:b4:37:b6:32:30:98:f5:06:
                    ce:3f:bb:8d:5d:cc:44:4c:ae:e6:24:1c:2a:e4:bf:
                    99:e3:c3:8f:32:df:6b:13:1f:15:23:a1:9b:15:14:
                    04:65:59:e2:57:bf:96:7e:e9:29:7b:5f:c5:50:d5:
                    e3:bd:2e:ea:fc:fc:5e:49:53:22:ea:ea:39:50:da:
                    23:3b:8f:bb:75:50:68:8d:f0:fe:03:a4:14:cb:f1:
                    8a:de:95:24:f0:e9:9e:3b:31:2d:d8:20:86:17:77:
                    d0:c0:66:f6:2e:a7:31:73:cc:c5:a4:9a:a0:13:3e:
                    5b:17:4e:19:ba:01:92:0f:dd:09:da:e7:42:aa:7e:
                    55:28:56:8f:a5:43:fb:bf:df:79:46:93:5e:ce:53:
                    7f:35:bb:70:48:05:b1:e6:db:ff:91:5c:ea:66:2f:
                    d6:ad:d9:87:8c:02:e8:d0:eb:90:75:7d:97:af:76:
                    42:ad:af:a4:d6:67:76:cd:7c:2e:27:d0:c8:a4:00:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:55:FC:C0:7C:A2:70:2D:E5:A9:EF:5E:21:EE:22:03:D0:E9:2A:EA
            X509v3 Authority Key Identifier:
                keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/2VX8wHyicC3lqe9eIe4iA9DpKuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.35.0/24
                IPv6:
                  2a00:edc0:1007::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:d4:1e:64:ba:e5:d6:97:d7:01:00:93:5d:70:80:ef:bc:
         7a:43:3f:ca:ab:64:89:39:c4:23:6b:b0:1c:40:48:7e:f3:d1:
         76:de:60:53:85:aa:f0:33:98:0b:02:61:a1:f9:e7:b8:eb:a7:
         9a:a2:9d:51:d7:42:e7:2b:53:0d:a4:9d:f6:8c:b1:1c:b6:8b:
         eb:62:a9:47:8e:c0:df:da:5c:c4:46:c0:7a:be:fd:4e:be:c4:
         47:61:e8:45:99:10:58:84:b9:a5:39:4d:8e:27:31:fb:23:69:
         8e:fb:9a:e4:b7:fe:6d:23:18:e1:4f:f1:57:9b:57:fe:07:00:
         4a:f9:61:85:76:6a:6c:8d:34:ce:1d:87:46:71:bc:05:ad:fd:
         12:5f:cd:d8:2b:25:1a:2c:fe:74:06:86:ff:ea:87:a0:c3:8a:
         95:75:51:e4:41:a8:12:82:a8:86:a0:26:a4:82:9c:90:ff:6c:
         9d:51:88:be:20:e6:ce:f4:93:65:24:52:33:0d:8e:47:84:9d:
         74:08:cf:f6:f3:ac:1d:56:1e:78:47:96:5b:67:f7:43:74:7f:
         12:86:12:2f:89:ec:47:40:20:9a:ca:23:8b:3f:14:53:fe:43:
         cc:a9:2f:34:f6:fe:e1:b9:df:5d:ac:f7:70:6d:21:9e:be:7a:
         f9:cd:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----