Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/Y7tKBsSTGdXqJTummWeb8IDK_pg.roa
File:                     Y7tKBsSTGdXqJTummWeb8IDK_pg.roa (raw, json)
Hash identifier:          jRTaAoXLSvJ10lfS2e1nHDKAhsUUVqITxBJfMke82+A=
Subject key identifier:   63:BB:4A:06:C4:93:19:D5:EA:25:3B:A6:99:67:9B:F0:80:CA:FE:98
Certificate issuer:       /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial:       018B7251A7EF41E9C2298DE9B6DC8BEE0E13
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/Y7tKBsSTGdXqJTummWeb8IDK_pg.roa
Signing time:             Fri 27 Oct 2023 18:07:15 +0000
ROA not before:           Fri 27 Oct 2023 18:07:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212477
IP address blocks:        2a12:de43::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:72:51:a7:ef:41:e9:c2:29:8d:e9:b6:dc:8b:ee:0e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
        Validity
            Not Before: Oct 27 18:07:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=63bb4a06c49319d5ea253ba699679bf080cafe98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:ae:9e:e9:06:fa:0a:b7:6d:41:c0:97:a7:
                    ee:e0:85:5b:b2:42:b0:0d:0b:89:87:9a:b7:a1:cf:
                    2e:b2:43:8f:86:2d:56:52:57:aa:27:58:d3:52:10:
                    eb:04:36:d9:a1:16:58:a5:7c:e9:cc:37:47:c1:bd:
                    03:02:38:27:3c:67:ab:5b:6d:da:e9:73:73:ec:82:
                    f8:3e:b1:76:0d:57:76:c4:e3:fa:10:61:e7:32:b3:
                    78:32:cd:86:6e:04:9b:a7:58:90:8b:39:23:8a:d9:
                    57:70:ed:93:ff:25:c9:57:41:44:61:9b:70:18:e7:
                    74:97:63:b4:5c:3b:ca:0a:05:1d:42:78:3b:38:e4:
                    ac:13:43:8e:33:80:7c:a1:14:11:ea:c0:ff:9d:76:
                    61:c5:b6:27:c6:73:5d:e9:0c:42:96:cf:31:2e:0d:
                    97:39:8b:d8:44:09:3a:66:18:db:49:f9:30:40:04:
                    a0:09:a6:34:a4:26:8f:ab:ca:28:b5:97:50:b9:07:
                    2c:ff:56:47:7f:f8:0a:43:b1:52:23:6f:e2:a4:e9:
                    18:23:c1:7a:34:87:be:21:3a:82:2b:e6:af:e8:2b:
                    76:ec:19:6b:79:58:c5:d3:12:52:c2:ec:9a:0f:01:
                    d2:33:dc:bd:5f:8e:97:14:70:31:0a:6e:83:ec:a5:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:4A:06:C4:93:19:D5:EA:25:3B:A6:99:67:9B:F0:80:CA:FE:98
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/Y7tKBsSTGdXqJTummWeb8IDK_pg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:de43::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:1c:31:bc:3c:24:27:7e:44:eb:f4:8c:f5:00:b3:01:d6:
         03:a8:59:2a:52:5b:1a:7d:b4:c7:80:fa:37:ef:34:d2:d9:57:
         61:71:f8:76:03:44:77:f5:9b:2a:f6:87:2a:20:d7:11:df:fa:
         84:53:c7:2d:ef:d8:81:8d:62:1f:41:0c:45:85:ba:7c:cf:bc:
         30:c5:ee:af:0a:b7:40:04:fb:ca:10:cd:43:df:63:7a:77:16:
         d9:63:45:4e:97:46:1f:91:a5:2b:4f:e6:89:3a:fe:5d:17:ed:
         38:aa:10:b9:a6:ae:f4:de:62:13:59:16:45:01:61:51:d7:99:
         0a:7b:99:28:43:07:43:91:16:25:6d:da:d2:d3:32:47:e7:4e:
         23:45:6a:0f:51:d0:6c:f3:52:28:56:d6:26:93:72:29:1e:cb:
         37:f4:5c:7e:d5:e9:2e:69:ea:cb:d3:11:6e:d0:29:dd:3d:30:
         1a:39:ac:5d:7d:02:73:ae:f7:81:24:32:98:81:8a:fb:cc:95:
         ba:4f:cb:20:c2:6a:f7:5c:da:f0:4a:20:23:24:c8:f5:f1:f4:
         d0:52:17:94:23:b2:83:28:8a:4e:9d:43:17:12:0e:9e:ec:33:
         ec:a2:6f:f5:3a:a6:a1:23:2d:39:58:ba:3d:7f:a2:c4:75:64:
         3a:90:7d:79
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtyUafvQenCKY3pttyL7g4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTZjNDFhMmIwNGZjZDhmOGU5NTcxOGZhN2QyZTEyY2M0
NGFjMWYwHhcNMjMxMDI3MTgwNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2JiNGEwNmM0OTMxOWQ1ZWEyNTNiYTY5OTY3OWJmMDgwY2FmZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7SunukG+gq3bUHAl6fu4IVbskKw
DQuJh5q3oc8uskOPhi1WUleqJ1jTUhDrBDbZoRZYpXzpzDdHwb0DAjgnPGerW23a
6XNz7IL4PrF2DVd2xOP6EGHnMrN4Ms2GbgSbp1iQizkjitlXcO2T/yXJV0FEYZtw
GOd0l2O0XDvKCgUdQng7OOSsE0OOM4B8oRQR6sD/nXZhxbYnxnNd6QxCls8xLg2X
OYvYRAk6ZhjbSfkwQASgCaY0pCaPq8ootZdQuQcs/1ZHf/gKQ7FSI2/ipOkYI8F6
NIe+ITqCK+av6Ct27BlreVjF0xJSwuyaDwHSM9y9X46XFHAxCm6D7KWjUQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGO7SgbEkxnV6iU7pplnm/CAyv6YMB8GA1UdIwQY
MBaAFLnmxBorBPzY+OlXGPp9LhLMRKwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEt
YzA4YzA0NDZkNjEzLzEvWTd0S0JzU1RHZFhxSlR1bW1XZWI4SURLX3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEtYzA4YzA0NDZkNjEz
LzEvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhLeQzAN
BgkqhkiG9w0BAQsFAAOCAQEAOrMcMbw8JCd+ROv0jPUAswHWA6hZKlJbGn20x4D6
N+800tlXYXH4dgNEd/WbKvaHKiDXEd/6hFPHLe/YgY1iH0EMRYW6fM+8MMXurwq3
QAT7yhDNQ99jencW2WNFTpdGH5GlK0/miTr+XRftOKoQuaau9N5iE1kWRQFhUdeZ
CnuZKEMHQ5EWJW3a0tMyR+dOI0VqD1HQbPNSKFbWJpNyKR7LN/RcftXpLmnqy9MR
btAp3T0wGjmsXX0Cc673gSQymIGK+8yVuk/LIMJq91za8EogIyTI9fH00FIXlCOy
gyiKTp1DFxIOnuwz7KJv9TqmoSMtOVi6PX+ixHVkOpB9eQ==
-----END CERTIFICATE-----