Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/G2GVyLxu0dM2UhRXp7PHlN9AAXc.roa
File:                     G2GVyLxu0dM2UhRXp7PHlN9AAXc.roa (raw, json)
Hash identifier:          lX/DQyH4lfNH/5e5DGs1P8605EeXxEX0YDkUjVPvO3Y=
Subject key identifier:   1B:61:95:C8:BC:6E:D1:D3:36:52:14:57:A7:B3:C7:94:DF:40:01:77
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       018AD15ADBBB11F7881E167B96547EF506E9
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/G2GVyLxu0dM2UhRXp7PHlN9AAXc.roa
Signing time:             Tue 26 Sep 2023 11:58:27 +0000
ROA not before:           Tue 26 Sep 2023 11:58:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216370
IP address blocks:        2a06:9686:e00::/39 maxlen: 39
                          2a06:9686:c00::/39 maxlen: 39
                          2a06:9686:a00::/39 maxlen: 39

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d1:5a:db:bb:11:f7:88:1e:16:7b:96:54:7e:f5:06:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Sep 26 11:58:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b6195c8bc6ed1d336521457a7b3c794df400177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:4e:95:31:de:5e:e2:d4:25:8c:0c:ad:e7:
                    37:ba:7b:2d:53:59:bb:8a:ea:9b:11:a7:4d:4b:a1:
                    30:f7:46:46:f5:27:86:a0:50:62:76:ff:07:c6:3a:
                    04:d3:bb:b7:49:4c:6f:8f:eb:3b:fb:1e:13:b9:96:
                    09:3d:8b:d5:54:8f:fe:13:14:e6:0f:6d:4b:5b:a5:
                    13:a7:a7:6b:7c:fb:38:6f:e4:27:c4:81:5d:1f:f1:
                    c2:66:d6:82:7b:d6:6b:57:aa:68:eb:bc:e9:f8:cb:
                    e6:a1:17:79:d4:5d:d0:a4:6c:68:f0:b8:6f:b0:c9:
                    6f:a6:eb:b3:85:d2:1f:dc:46:bb:00:c2:7a:07:e6:
                    35:c1:7f:b8:32:c6:b5:69:91:2b:3a:3e:3e:d8:36:
                    05:c2:88:67:06:8c:41:b1:cb:fc:47:ac:ba:7a:10:
                    ba:e7:b4:31:0c:52:67:fb:38:cb:d2:2e:a8:a5:2e:
                    e5:00:b3:21:78:81:d4:aa:2b:56:fe:98:90:0e:6a:
                    3a:fc:5d:4d:e9:01:bf:01:fb:ae:82:d7:ab:6a:69:
                    a8:a6:16:5b:5a:82:f5:44:80:05:77:54:82:0f:71:
                    5e:27:df:71:2d:88:31:e6:09:55:3d:0d:19:76:e2:
                    2a:ea:17:24:c0:53:6b:04:b8:94:20:45:0d:c3:52:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:95:C8:BC:6E:D1:D3:36:52:14:57:A7:B3:C7:94:DF:40:01:77
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/G2GVyLxu0dM2UhRXp7PHlN9AAXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9686:a00::-2a06:9686:fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         84:0a:18:9d:e6:ac:40:97:9a:3a:4e:08:fe:98:ae:df:22:30:
         f6:1c:f7:79:5c:b8:2a:42:0a:d0:16:8c:90:93:04:c6:86:8e:
         18:0a:8c:ed:fe:62:fd:9a:65:8c:60:2f:ca:4e:7e:c1:2f:e9:
         0c:75:b4:d9:14:1d:cf:39:42:be:a3:47:df:77:4a:92:5c:bc:
         dd:24:7e:a9:30:d3:53:11:ce:f3:78:60:c4:7c:37:f1:c4:77:
         04:66:a8:34:42:e5:bd:c9:f6:d0:9c:6c:c6:ea:98:a3:9c:84:
         25:49:a1:1f:61:f6:c8:a4:d6:43:b5:19:4e:17:a8:6f:a1:0d:
         8c:a3:f5:eb:67:9f:b9:c3:34:cd:b3:d5:e7:86:0b:65:d5:41:
         de:b8:6c:d5:c6:0f:8e:0c:29:89:2e:40:50:fb:89:e7:44:35:
         1e:9f:4f:51:da:8e:ef:bd:9d:7d:52:15:f4:1b:2d:52:91:bf:
         2c:50:f7:07:4c:fb:16:7d:b3:a6:18:1f:07:06:f0:bd:85:14:
         4a:ca:51:33:5c:15:65:f0:f4:c1:35:2c:7e:d5:3f:82:ef:c7:
         7b:4b:06:2f:f2:8c:4a:4e:1f:fb:bb:96:7d:1a:77:29:cd:a3:
         fe:11:f9:b2:36:8f:9d:b5:a4:2a:6d:0a:e3:b4:e0:49:04:2a:
         78:ac:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----