Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/6M-YBGOaAI8BukqoHCo2W_NDqvE.roa
File:                     6M-YBGOaAI8BukqoHCo2W_NDqvE.roa (raw, json)
Hash identifier:          e/hLh6nwotQe0CY3oOYzulUoAv+YsRMAWeQKqKX4aco=
Subject key identifier:   E8:CF:98:04:63:9A:00:8F:01:BA:4A:A8:1C:2A:36:5B:F3:43:AA:F1
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       019151DE293C6E625AE4691F87231B0273AC
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/6M-YBGOaAI8BukqoHCo2W_NDqvE.roa
Signing time:             Wed 14 Aug 2024 17:09:59 +0000
ROA not before:           Wed 14 Aug 2024 17:09:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        176.67.80.0/23 maxlen: 23
                          2a05:e9c0:5600::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:51:de:29:3c:6e:62:5a:e4:69:1f:87:23:1b:02:73:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Aug 14 17:09:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8cf9804639a008f01ba4aa81c2a365bf343aaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:de:ef:55:82:36:51:d6:0f:1d:0c:01:25:
                    41:ac:d4:e3:e3:83:90:71:bb:00:93:2a:96:31:2e:
                    26:41:8b:21:27:11:66:9a:96:1c:c8:cd:77:c9:de:
                    13:90:31:d8:32:7e:6d:b8:8e:76:4c:d3:8c:16:c4:
                    b1:35:f3:02:10:b2:c4:22:7b:a2:04:19:e5:ea:0e:
                    77:e5:d7:86:ae:79:02:77:69:44:a3:f7:b4:ee:83:
                    78:ee:81:be:09:8f:0c:03:3d:ec:78:98:81:43:d8:
                    6f:b6:e0:72:55:75:a8:51:12:a8:9d:4c:f6:98:05:
                    41:05:dd:26:66:0d:f2:fa:bd:9b:9f:f1:32:99:44:
                    c3:f5:94:c9:48:ae:01:3c:bd:ca:90:2d:b0:90:5e:
                    a2:db:00:eb:18:0c:cf:b0:26:23:a9:50:fd:f0:64:
                    0a:02:71:df:d8:fe:f6:8e:c7:67:bc:16:ae:6c:8a:
                    2f:49:dc:1b:22:7f:80:33:dc:af:5b:60:90:d8:2a:
                    a7:d1:36:c8:9a:96:d8:5e:6d:6c:80:70:51:e6:cb:
                    43:3e:a1:56:c9:ae:8d:72:eb:7d:85:3e:71:9d:90:
                    11:3c:28:67:2c:b3:2c:59:21:67:76:95:d2:03:f0:
                    1a:c7:50:62:d0:89:8b:15:fa:48:5d:70:26:2a:d2:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:98:04:63:9A:00:8F:01:BA:4A:A8:1C:2A:36:5B:F3:43:AA:F1
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/6M-YBGOaAI8BukqoHCo2W_NDqvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.67.80.0/23
                IPv6:
                  2a05:e9c0:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:bb:f8:dd:05:98:5e:ea:f8:79:92:61:44:3a:6f:18:39:c5:
         7a:3a:5e:ee:09:7d:f4:ba:d1:28:7a:f8:35:28:b1:f9:70:07:
         6a:95:67:12:ea:fe:ab:34:b9:ce:03:e1:a2:83:ca:62:a7:ff:
         71:60:3f:4b:17:e3:c8:ef:3b:a6:40:2d:cb:b5:15:8b:0a:ee:
         e7:a8:92:60:79:c7:38:13:22:b8:90:79:58:23:84:0b:97:a0:
         bb:35:ff:0a:7e:94:1e:50:71:8b:2c:58:5d:bf:f4:17:bd:9d:
         72:dc:cb:fa:e4:ff:37:2f:6d:99:46:1f:fc:40:29:b4:fa:92:
         2e:4a:13:b0:80:5f:ce:5d:d8:04:22:4f:54:47:f8:20:ca:12:
         7c:c6:1e:4d:fd:a2:67:2a:ac:dd:09:4d:a7:00:c0:a3:a4:d2:
         ce:03:32:3a:88:96:d4:3b:be:4b:16:f9:29:94:76:6c:26:87:
         9e:36:53:2d:68:11:b8:0f:a0:b6:67:2c:3d:bf:df:8a:e6:82:
         da:33:be:2f:cc:9d:c0:1f:c4:4d:65:59:13:19:0e:9b:73:de:
         ef:d2:53:12:50:98:33:ce:09:4a:e5:50:40:a2:e4:a5:7c:81:
         f8:e6:19:c9:af:d7:f9:5a:28:f0:68:3b:9b:90:90:d0:52:6c:
         7c:16:45:6b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZFR3ik8bmJa5GkfhyMbAnOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3
YzczYTQwHhcNMjQwODE0MTcwOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGNmOTgwNDYzOWEwMDhmMDFiYTRhYTgxYzJhMzY1YmYzNDNhYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizfe71WCNlHWDx0MASVBrNTj44OQ
cbsAkyqWMS4mQYshJxFmmpYcyM13yd4TkDHYMn5tuI52TNOMFsSxNfMCELLEInui
BBnl6g535deGrnkCd2lEo/e07oN47oG+CY8MAz3seJiBQ9hvtuByVXWoURKonUz2
mAVBBd0mZg3y+r2bn/EymUTD9ZTJSK4BPL3KkC2wkF6i2wDrGAzPsCYjqVD98GQK
AnHf2P72jsdnvBaubIovSdwbIn+AM9yvW2CQ2Cqn0TbImpbYXm1sgHBR5stDPqFW
ya6Ncut9hT5xnZARPChnLLMsWSFndpXSA/Aax1Bi0ImLFfpIXXAmKtLlaQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFOjPmARjmgCPAbpKqBwqNlvzQ6rxMB8GA1UdIwQY
MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt
ODQwY2NiMzRiM2Y1LzEvNk0tWUJHT2FBSThCdWtxb0hDbzJXX05EcXZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1
LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBsENQMA4E
AgACMAgDBgAqBenAVjANBgkqhkiG9w0BAQsFAAOCAQEAtrv43QWYXur4eZJhRDpv
GDnFejpe7gl99LrRKHr4NSix+XAHapVnEur+qzS5zgPhooPKYqf/cWA/SxfjyO87
pkAty7UViwru56iSYHnHOBMiuJB5WCOEC5eguzX/Cn6UHlBxiyxYXb/0F72dctzL
+uT/Ny9tmUYf/EAptPqSLkoTsIBfzl3YBCJPVEf4IMoSfMYeTf2iZyqs3QlNpwDA
o6TSzgMyOoiW1Du+Sxb5KZR2bCaHnjZTLWgRuA+gtmcsPb/fiuaC2jO+L8ydwB/E
TWVZExkOm3Pe79JTElCYM84JSuVQQKLkpXyB+OYZya/X+Voo8Gg7m5CQ0FJsfBZF
aw==
-----END CERTIFICATE-----