Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Low8nX-mAF8z-77_cbYUjAOLwFk.roa
File:                     Low8nX-mAF8z-77_cbYUjAOLwFk.roa (raw, json)
Hash identifier:          b/MAwdiHMwVJqYNwtv+eJ/beL8B0K/rFAQ+HMNHSWEc=
Subject key identifier:   2E:8C:3C:9D:7F:A6:00:5F:33:FB:BE:FF:71:B6:14:8C:03:8B:C0:59
Certificate issuer:       /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial:       018C1B87EA91E5C4213199D937BCD7B0128A
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Low8nX-mAF8z-77_cbYUjAOLwFk.roa
Signing time:             Wed 29 Nov 2023 14:42:21 +0000
ROA not before:           Wed 29 Nov 2023 14:42:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216258
IP address blocks:        2a13:2140::/32 maxlen: 48
                          2a13:2143:1::/48 maxlen: 48
                          2a13:2141:1::/48 maxlen: 48
                          2a13:2142:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1b:87:ea:91:e5:c4:21:31:99:d9:37:bc:d7:b0:12:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
        Validity
            Not Before: Nov 29 14:42:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e8c3c9d7fa6005f33fbbeff71b6148c038bc059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:8c:68:3a:ce:c9:66:7f:2d:c4:ba:9f:77:
                    3b:b4:4e:47:e6:9e:57:eb:f9:f7:42:ac:74:20:61:
                    1c:64:14:d0:6c:9a:eb:38:0d:d5:c5:b3:42:8a:f5:
                    ca:70:ec:2b:3f:7e:65:ed:7e:cc:a6:61:b6:cf:b7:
                    8c:a8:eb:33:98:01:5c:c9:92:1b:b4:c4:ce:86:a4:
                    1c:89:ad:25:8a:cc:3a:21:e7:98:0e:4e:9e:02:04:
                    23:04:98:8f:bd:5e:b6:d4:4b:e9:90:d5:1d:6b:af:
                    f2:de:56:40:41:fb:2d:fe:40:d3:81:89:d2:62:0c:
                    98:67:f7:9c:6f:88:38:43:8e:3a:66:84:02:3e:af:
                    10:ba:e5:e6:6a:f8:55:7c:cc:6a:09:8b:b0:1e:dd:
                    51:27:e2:34:bf:0d:64:0c:37:4f:69:6a:9e:a7:23:
                    35:29:e9:38:87:ca:88:3f:76:c6:74:36:ce:42:42:
                    66:1e:47:9e:3c:2f:54:f4:61:cc:75:67:a7:78:5b:
                    31:fd:a9:6c:5f:86:b6:2d:a4:e3:fb:91:96:86:70:
                    99:64:ec:95:8e:6e:0e:42:18:04:8a:da:7a:5b:da:
                    4c:bd:5d:e7:28:af:ff:2a:ba:f8:b6:90:f9:5f:45:
                    22:45:0c:90:41:59:d3:00:ec:1a:87:5e:2a:fb:4f:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:3C:9D:7F:A6:00:5F:33:FB:BE:FF:71:B6:14:8C:03:8B:C0:59
            X509v3 Authority Key Identifier:
                keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Low8nX-mAF8z-77_cbYUjAOLwFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2140::/32
                  2a13:2141:1::/48
                  2a13:2142:1::/48
                  2a13:2143:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:43:77:7f:6d:61:65:97:63:4a:0c:77:5e:0d:6e:00:cb:1f:
         c5:73:39:f9:53:9e:71:e5:49:cc:bd:3d:8e:36:8c:ce:e4:c5:
         0b:fd:1a:bf:69:61:72:2a:65:bc:84:da:20:3e:0e:2c:1f:f3:
         2e:44:c1:06:75:2e:2b:5d:1f:25:ea:68:61:7d:2c:a7:69:37:
         df:cb:69:32:a9:fe:e9:df:bd:f0:45:6a:6a:7b:51:b3:b3:5a:
         8c:4d:05:20:f8:db:a5:5f:1b:4c:aa:39:19:e3:57:f3:15:05:
         a8:9f:9c:43:cc:75:b7:62:e8:d5:3a:df:9b:0c:b3:6d:b4:af:
         fc:17:2d:d1:79:2a:27:46:bf:5d:ad:74:65:f3:97:5b:7b:f3:
         89:97:20:2f:61:cb:bc:ac:06:4c:75:4d:7f:03:89:68:fb:84:
         eb:ed:80:07:bb:f6:84:5c:99:91:dd:15:e8:87:b1:7e:1c:e5:
         3e:74:fb:35:71:71:cc:56:cb:f6:ca:0c:b3:e0:f1:d3:5a:aa:
         56:55:db:d3:26:77:26:fc:b0:96:4f:97:f5:c9:2a:18:6e:ac:
         88:3a:ca:b3:af:48:bc:fe:a1:9c:76:e9:dc:2a:bf:23:8f:1d:
         4f:6a:1b:1e:25:d4:3b:ca:fb:0c:d3:3b:3d:af:42:9e:43:41:
         e6:d4:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----