Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/t8op7doBpae_C0XARyE3m3-6LcQ.roa
File:                     t8op7doBpae_C0XARyE3m3-6LcQ.roa (raw, json)
Hash identifier:          7Lo1dR8Aq2NdDo0a02shYFRYMMKWYW9ATMOYgwCz8g4=
Subject key identifier:   B7:CA:29:ED:DA:01:A5:A7:BF:0B:45:C0:47:21:37:9B:7F:BA:2D:C4
Certificate issuer:       /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial:       018CC349459D44328B21F213D00026FE7341
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/t8op7doBpae_C0XARyE3m3-6LcQ.roa
Signing time:             Mon 01 Jan 2024 04:30:08 +0000
ROA not before:           Mon 01 Jan 2024 04:30:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25400
IP address blocks:        185.197.211.0/24 maxlen: 24
                          2a0c:1bc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sun 28 Jan 2024 19:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:45:9d:44:32:8b:21:f2:13:d0:00:26:fe:73:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
        Validity
            Not Before: Jan  1 04:30:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7ca29edda01a5a7bf0b45c04721379b7fba2dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:e8:b1:93:21:70:f4:4d:ba:d6:1c:e0:86:
                    a2:de:b3:09:dd:a5:8a:6f:3f:70:1d:f8:0c:ba:1f:
                    0e:35:e3:cf:f2:64:b4:ee:3f:86:c0:80:44:ef:e5:
                    62:8e:5d:34:a6:60:f2:73:47:8c:57:50:7c:57:13:
                    25:3a:70:83:ec:b6:2e:d4:ba:47:52:3a:9f:39:c5:
                    4e:5a:b4:3e:95:ee:a1:ba:55:8e:5e:fe:18:49:5d:
                    15:43:45:2b:ce:55:96:59:c6:29:ec:ec:29:f0:82:
                    05:a1:27:b4:77:44:d3:db:e5:8d:57:ce:9f:d9:80:
                    0c:d5:44:92:f8:76:18:a7:6c:be:89:fd:5e:fa:af:
                    c1:6d:40:4e:2c:68:ca:ea:e6:2a:0d:3c:d2:c4:64:
                    47:ed:ec:3a:88:c0:94:4e:d6:9f:95:c7:26:0d:86:
                    4b:89:8c:c7:d2:72:cf:cf:96:a0:4f:6d:81:ab:e1:
                    52:81:aa:f3:96:26:9b:a6:e3:83:e0:05:50:2c:a6:
                    5a:44:f8:56:d0:62:44:e5:d2:78:0b:0f:3f:e6:e6:
                    4e:d0:fa:13:9d:9b:fe:9a:5a:78:ce:72:22:b8:ff:
                    ef:75:a1:4f:cf:19:27:2f:83:da:1a:81:81:98:a4:
                    28:7f:69:8e:52:d3:b5:c9:4a:56:a3:ee:96:ff:5c:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CA:29:ED:DA:01:A5:A7:BF:0B:45:C0:47:21:37:9B:7F:BA:2D:C4
            X509v3 Authority Key Identifier:
                keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/t8op7doBpae_C0XARyE3m3-6LcQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.211.0/24
                IPv6:
                  2a0c:1bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:c0:c8:03:af:55:98:55:82:30:ab:fd:44:c3:0b:1e:ce:
         1a:96:48:24:e8:d7:31:19:63:72:ab:f3:b3:a4:a5:90:b9:2d:
         cd:47:5d:c7:86:55:eb:9b:99:c2:7b:a5:d8:51:0b:07:4d:75:
         e9:01:0c:87:18:79:ad:fa:1f:c7:06:a6:b9:3c:60:0c:c8:e3:
         7f:01:13:f4:6f:15:19:a7:48:35:c3:08:c7:77:0c:35:d0:d6:
         85:fd:a3:c3:ed:2a:7e:29:10:89:b4:ca:c3:4b:1c:e4:5e:1b:
         5c:16:84:a9:12:fd:45:1d:ed:c5:23:4c:05:2f:d2:cb:ce:c8:
         82:4d:d2:08:cf:82:65:d5:5b:eb:ce:31:d8:af:cf:7d:b1:81:
         63:65:ea:07:ab:7e:ce:c1:73:6e:35:ee:66:1f:f9:6a:22:98:
         7e:07:2a:d2:fc:56:34:01:87:da:e6:f5:22:95:05:d5:60:5b:
         54:df:87:0f:c4:9f:f5:5f:ed:dc:8e:79:41:62:20:dd:ef:c9:
         fc:b4:0a:67:94:7f:a9:a2:24:ab:1e:55:91:11:9a:90:5f:19:
         f9:52:be:90:96:43:74:df:3e:8b:ff:6c:76:12:23:fd:34:ea:
         a6:ed:6d:7c:51:f5:a1:76:ba:6d:18:ea:f2:50:a4:0b:0c:8c:
         10:c1:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----