Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1QyayapfulyOlbStomBNLdXsoE8.roa
File:                     1QyayapfulyOlbStomBNLdXsoE8.roa (raw, json)
Hash identifier:          mmwvp/ZReAxtpwyg/KCbPdDcSRIKjM0MV188hMAhSfk=
Subject key identifier:   D5:0C:9A:C9:AA:5F:BA:5C:8E:95:B4:AD:A2:60:4D:2D:D5:EC:A0:4F
Certificate issuer:       /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial:       018F8D896C6FDA72D2DF86F361EAC54520E5
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1QyayapfulyOlbStomBNLdXsoE8.roa
Signing time:             Sat 18 May 2024 21:09:04 +0000
ROA not before:           Sat 18 May 2024 21:09:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198231
IP address blocks:        2a0f:a300::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 12:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:89:6c:6f:da:72:d2:df:86:f3:61:ea:c5:45:20:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
        Validity
            Not Before: May 18 21:09:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d50c9ac9aa5fba5c8e95b4ada2604d2dd5eca04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:f4:55:04:d2:53:7b:0f:8c:94:47:f9:1b:
                    68:72:10:5f:27:65:48:42:2e:f7:66:24:63:71:94:
                    20:9e:b3:f8:b5:9a:22:23:f6:12:fa:21:20:db:27:
                    f5:93:92:04:3b:cf:fa:7e:c4:d9:c7:41:42:ed:a8:
                    41:f2:76:30:56:d7:04:6d:66:7b:6d:26:87:ef:df:
                    37:b2:21:e5:69:87:14:bf:af:b0:7a:8f:e5:d6:b0:
                    96:21:47:d8:c7:22:2a:78:73:43:11:61:44:a2:d4:
                    89:14:08:4b:93:bc:f0:b9:9a:5d:e5:08:01:e6:82:
                    0e:82:ae:eb:af:ac:8d:bf:58:69:2c:5f:e8:f9:41:
                    b7:63:fb:fa:44:30:a2:f3:fb:44:5c:3d:50:b3:0d:
                    70:b7:a4:f0:f2:89:57:68:9b:b8:6e:72:2f:9a:94:
                    9e:88:5d:73:70:0b:55:f9:c0:6a:b2:4a:66:cb:7f:
                    0d:b3:9a:a1:25:5c:36:19:6d:d2:9d:0e:06:de:37:
                    e2:6a:c0:3c:a6:5e:21:08:03:d8:9f:85:2a:6e:44:
                    74:63:82:c0:e7:e5:af:03:75:4f:0b:25:b7:af:a0:
                    47:5a:0a:93:10:d2:0e:99:17:20:8e:00:91:6f:50:
                    42:c8:b8:fb:ad:d2:d5:0f:7b:c2:77:5e:81:ab:c2:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:9A:C9:AA:5F:BA:5C:8E:95:B4:AD:A2:60:4D:2D:D5:EC:A0:4F
            X509v3 Authority Key Identifier:
                keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1QyayapfulyOlbStomBNLdXsoE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:a300::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:3d:29:cc:e4:04:31:71:17:7f:00:ff:da:21:b0:6f:7a:
         7a:46:24:de:e5:da:a8:c3:c3:fa:86:72:3c:3a:d3:81:06:e9:
         86:fc:bf:06:23:b0:1b:ea:c5:49:25:3e:cc:60:7a:e5:0b:4a:
         67:e9:70:02:0a:b3:7f:55:b7:85:7f:0e:7f:fc:f7:02:6f:81:
         7a:99:74:9d:19:7a:4e:3f:be:5c:93:0e:f8:d7:eb:ad:7d:3f:
         c0:c9:a2:ce:08:db:f4:2b:6f:4d:40:b7:b6:75:4c:7a:66:98:
         77:f7:89:40:93:8e:d0:ad:0f:a1:b7:fa:c0:77:1c:7b:e4:0f:
         f5:9b:0c:67:94:fe:e1:78:71:cc:1f:b5:eb:66:15:6f:72:78:
         40:5d:35:71:d8:40:e7:10:20:57:0e:85:58:61:a8:36:b1:f5:
         43:b1:56:72:6c:72:74:38:d6:4f:00:a7:93:a6:43:08:ac:f0:
         b2:c1:31:20:ae:93:ab:47:1a:95:a9:2b:5d:9c:94:60:50:b8:
         3f:6d:a1:ba:69:f1:ee:44:5a:89:0b:fe:ed:4d:d8:04:3d:b5:
         41:f2:28:ae:10:46:fd:47:42:95:82:fa:92:c3:dd:ec:04:bb:
         43:fb:dc:4a:0e:c6:5b:84:75:e0:3b:29:06:1e:f6:3c:c2:ba:
         20:64:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----