Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V-jx4QCL_DCN_pMgjDwT--hWpCE.roa
File:                     V-jx4QCL_DCN_pMgjDwT--hWpCE.roa (raw, json)
Hash identifier:          y0KD1n68sJudYic5cS65/aPPZ+odKSU6OndiINp887o=
Subject key identifier:   57:E8:F1:E1:00:8B:FC:30:8D:FE:93:20:8C:3C:13:FB:E8:56:A4:21
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       0191211A1B66802EC6EA23CC3EA12B408902
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V-jx4QCL_DCN_pMgjDwT--hWpCE.roa
Signing time:             Mon 05 Aug 2024 05:54:04 +0000
ROA not before:           Mon 05 Aug 2024 05:54:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7029
IP address blocks:        213.145.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 06:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:21:1a:1b:66:80:2e:c6:ea:23:cc:3e:a1:2b:40:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Aug  5 05:54:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57e8f1e1008bfc308dfe93208c3c13fbe856a421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:ce:8a:d5:cc:d9:45:5a:8d:4b:8a:28:af:
                    aa:98:80:c0:5b:64:ae:75:69:64:13:b6:ae:c5:8b:
                    71:c6:d7:c8:fd:d8:a5:1b:78:88:c1:08:64:37:41:
                    ea:b1:be:fb:47:7b:7e:15:a0:f0:01:7a:98:23:e2:
                    c1:3c:6a:61:ba:76:d7:cd:9d:92:ef:d5:5d:29:bb:
                    ac:63:43:85:fb:80:9c:4c:25:dd:d4:93:94:96:d1:
                    c3:5b:36:82:8b:31:d9:70:f4:9d:0e:e2:60:56:78:
                    b5:bd:f8:33:87:c3:71:9a:db:51:fc:8d:b2:9b:37:
                    63:12:d3:de:73:73:62:09:bc:f4:08:d0:1f:ba:bd:
                    5e:94:9e:8c:e5:dd:27:c9:ce:a2:d8:84:34:5c:57:
                    f4:6b:fa:41:ea:f9:6c:64:b9:75:58:20:1d:cc:03:
                    ef:19:57:a8:43:e9:e6:7e:ae:e8:4f:e6:18:62:a9:
                    bf:04:0c:0e:d8:1c:2c:54:04:98:a8:b0:32:96:7e:
                    34:7b:df:1a:ff:21:c6:bf:5a:d4:60:ed:6d:c5:3f:
                    8f:35:bc:42:ee:7d:e8:d4:2f:92:fc:cd:b1:9b:e7:
                    ad:2c:f5:d1:26:88:e9:65:7b:46:4f:31:73:b4:d9:
                    96:c1:ea:a8:86:10:40:ce:18:91:7e:3c:26:f6:9c:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:F1:E1:00:8B:FC:30:8D:FE:93:20:8C:3C:13:FB:E8:56:A4:21
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V-jx4QCL_DCN_pMgjDwT--hWpCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.145.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:bb:43:12:db:e6:cf:e5:41:3f:b2:54:be:06:3b:4e:3b:
         4f:35:e4:86:fe:55:44:04:20:18:af:15:05:98:09:ad:f3:03:
         26:68:ee:59:b5:56:d4:ea:30:9b:0e:e9:d8:56:c3:01:be:01:
         92:14:46:4c:d7:3d:d3:91:57:8f:c0:3a:6d:7e:30:88:9d:ff:
         a7:c1:35:31:cd:82:16:56:e0:a6:c7:f7:48:de:24:e2:e4:3d:
         4d:c4:7a:93:2c:23:73:64:c2:ca:88:3f:67:1a:e8:4b:4c:91:
         7d:a1:0e:f4:8b:51:69:5b:42:5b:c3:2c:29:64:e8:55:14:37:
         fe:16:30:ec:55:c7:42:df:80:58:04:6c:15:92:be:ef:20:8f:
         6f:a8:44:3f:82:ed:c4:ff:7b:81:9d:2e:d0:88:ab:ad:1a:55:
         84:eb:4b:47:e7:74:df:5c:8f:35:4c:51:2c:65:91:11:ad:1b:
         01:25:46:09:3e:d0:be:9b:28:02:05:4d:93:3f:b0:92:9c:8b:
         51:62:a0:a6:e1:40:20:4a:22:80:2b:83:fd:f2:86:f4:45:cf:
         bb:39:61:75:d3:73:9b:9b:93:77:f9:d9:f8:55:9e:af:35:ac:
         31:dc:2f:27:18:6a:bc:44:21:44:6e:27:e2:a0:0b:27:50:53:
         3f:14:4b:9f
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 4 07:35:30 2024 by rpki-client on console-fra.rpki-client.org