Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa
File:                     jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa (raw, json)
Hash identifier:          cWx7nWTobO72+6VhB1HmDUMnRv8wtIKaMJ5mudvVUJE=
Subject key identifier:   8C:B2:12:E5:73:6A:0E:F2:FE:27:CD:59:4C:87:DC:5F:5A:D4:2B:7B
Certificate issuer:       /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial:       018F0A3927027BF50DBA123A8B7D86864F45
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa
Signing time:             Tue 23 Apr 2024 09:11:08 +0000
ROA not before:           Tue 23 Apr 2024 09:11:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215218
IP address blocks:        194.164.39.0/24 maxlen: 24
                          2a13:e700:0:100::/56 maxlen: 56

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 11:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0a:39:27:02:7b:f5:0d:ba:12:3a:8b:7d:86:86:4f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
        Validity
            Not Before: Apr 23 09:11:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8cb212e5736a0ef2fe27cd594c87dc5f5ad42b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:69:97:98:ba:7f:7f:a5:9a:c8:b7:1b:c0:
                    34:21:c6:5f:18:d4:7b:7e:c4:70:e2:c0:04:74:35:
                    61:ef:e9:d9:10:32:50:53:ee:8b:78:c7:84:7a:d3:
                    b9:80:40:49:6b:88:10:50:2f:f7:3a:19:13:43:15:
                    b5:6f:a8:b7:18:38:20:e6:46:25:ff:92:5d:e6:a0:
                    16:bd:e2:0c:48:4c:1d:83:82:91:32:eb:d8:0c:19:
                    8f:74:e5:73:39:37:22:6b:ec:3e:43:28:41:51:aa:
                    17:f5:ed:ac:22:ac:44:6c:a2:a4:82:fc:25:d5:9d:
                    cf:0d:94:3c:12:aa:c8:7f:69:10:b0:b3:73:5b:f9:
                    38:16:a8:49:7f:c0:1e:99:aa:d4:f0:d0:1e:b8:51:
                    18:e2:38:05:d3:2b:32:13:10:6b:5e:94:18:f3:74:
                    db:1f:1d:b5:e9:81:14:d0:69:59:4d:6c:f5:74:07:
                    c4:5c:76:ce:36:1b:23:3c:01:cb:0a:6b:c1:09:98:
                    87:38:13:96:8f:ed:14:ac:2a:92:3c:a2:45:8c:98:
                    a9:a5:cb:6a:b5:71:be:9c:63:3b:62:94:32:09:4b:
                    06:9b:f8:8e:d3:84:51:93:99:a7:26:b0:8c:a0:94:
                    ae:83:3c:cd:0b:72:0c:b0:d7:9d:62:9a:ce:bc:1a:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:12:E5:73:6A:0E:F2:FE:27:CD:59:4C:87:DC:5F:5A:D4:2B:7B
            X509v3 Authority Key Identifier:
                keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.164.39.0/24
                IPv6:
                  2a13:e700:0:100::/56

    Signature Algorithm: sha256WithRSAEncryption
         a8:1c:c7:29:9b:0e:b4:9a:ad:80:91:cc:64:83:76:ea:a2:6f:
         71:c2:83:3f:f1:8a:4b:fe:58:62:44:3f:7e:6d:1c:f3:2c:ce:
         e2:5b:19:90:ab:67:f0:1e:27:63:ff:65:47:8e:a1:8d:ec:c6:
         1b:9f:d9:44:3c:5b:5e:08:55:ca:17:dc:8b:ce:90:61:4f:44:
         c0:da:a1:46:0f:35:bf:c2:0a:b3:e4:64:32:42:07:71:72:50:
         c6:2d:f1:c9:6e:ec:39:f9:48:e4:07:a8:02:ff:5a:54:09:dc:
         62:16:18:fc:90:d2:1b:5b:ec:cb:fd:f4:6e:b5:15:fa:b0:aa:
         ef:63:77:2b:7c:cd:69:99:06:46:61:f5:89:bb:62:1e:31:39:
         93:90:8b:1b:f5:8d:53:66:d7:d4:da:62:a0:92:ad:9a:7a:c9:
         c7:df:f4:52:f0:7b:b2:8e:45:b9:5e:4e:3c:da:88:7e:c7:50:
         9d:00:6b:1b:85:6c:5a:10:62:ec:7a:10:d2:f2:6a:3c:a3:8c:
         51:39:15:d8:0b:9c:a1:19:44:ad:9c:ba:43:9d:67:97:db:62:
         e3:ab:e2:c3:83:ab:16:2f:06:f8:9c:d9:7b:87:b7:7f:1c:9f:
         30:45:f8:8a:92:9c:fa:05:eb:2c:03:78:e1:3f:23:5a:b4:13:
         fe:8f:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----