Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cRV1p_YtnPbw8kRH2RQGjaJ9ZVw.roa
File:                     cRV1p_YtnPbw8kRH2RQGjaJ9ZVw.roa (raw, json)
Hash identifier:          xvqySOGsm4qOdulc9sz9f9j7+yj8hD6QXNxsPZnqBXo=
Subject key identifier:   71:15:75:A7:F6:2D:9C:F6:F0:F2:44:47:D9:14:06:8D:A2:7D:65:5C
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       0195CCE645DB8E7FD89CB55A3736680B72BA
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cRV1p_YtnPbw8kRH2RQGjaJ9ZVw.roa
Signing time:             Tue 25 Mar 2025 10:43:17 +0000
ROA not before:           Tue 25 Mar 2025 10:43:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44812
IP address blocks:        2a09:6284::/32 maxlen: 32
                          2a09:e5c0::/32 maxlen: 32
                          2a09:e5c1::/32 maxlen: 32
                          2a09:e5c2::/32 maxlen: 32
                          2a09:e5c3::/32 maxlen: 32
                          2a09:e5c4::/32 maxlen: 32
                          2a09:e5c5::/32 maxlen: 32
                          2a09:e5c6::/32 maxlen: 32
                          2a0e:b140::/29 maxlen: 29
                          2a10:4104::/32 maxlen: 32
                          2a11:4b47::/32 maxlen: 32
                          2a12:a343::/32 maxlen: 32
                          2a12:a344::/32 maxlen: 32
                          2a13:93c0::/32 maxlen: 32
Validation:               Failed, certificate revoked on Sun 06 Apr 2025 03:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:cc:e6:45:db:8e:7f:d8:9c:b5:5a:37:36:68:0b:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Mar 25 10:43:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=711575a7f62d9cf6f0f24447d914068da27d655c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:e9:01:f6:dd:1e:5b:f5:65:dd:29:35:1d:
                    14:b4:ed:b9:7a:6b:7f:fe:f0:02:8d:d8:a1:f2:c1:
                    41:9a:4c:57:e0:83:5e:be:f2:15:8f:ca:7e:a7:04:
                    d4:66:7e:d0:b6:08:66:e3:0b:2b:4d:1a:00:f5:8c:
                    39:49:92:50:2d:b4:25:ae:14:3c:00:49:d5:fc:5a:
                    98:fe:44:e8:37:35:6d:e7:d5:70:3c:dc:78:12:c2:
                    66:19:d1:42:dd:7c:00:5b:8d:73:48:af:8c:20:6f:
                    1a:87:df:a6:e9:24:ac:d4:96:13:5a:19:0f:52:a2:
                    7e:53:39:71:1d:68:87:8a:19:29:22:55:87:62:fe:
                    c7:74:14:ae:c1:ba:f3:34:d9:8d:b7:73:2a:af:2c:
                    49:c5:74:73:80:bf:1d:b6:3f:3e:39:d8:26:20:15:
                    95:2d:18:c2:a6:d0:4d:3e:9a:c8:45:a1:d9:c5:05:
                    29:78:fb:8f:ee:9f:f0:73:83:e5:30:dd:ab:96:10:
                    15:42:21:bf:d4:dd:ad:8c:12:98:c9:57:f4:94:93:
                    e0:37:83:5e:10:1f:4c:0d:fd:a1:0f:1d:29:d0:cf:
                    0a:69:44:8c:11:34:c8:54:f4:23:ac:90:f2:4f:80:
                    b4:15:19:6b:b7:c4:d1:9e:c7:da:d4:3f:87:94:cb:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:75:A7:F6:2D:9C:F6:F0:F2:44:47:D9:14:06:8D:A2:7D:65:5C
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cRV1p_YtnPbw8kRH2RQGjaJ9ZVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:6284::/32
                  2a09:e5c0::-2a09:e5c6:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:b140::/29
                  2a10:4104::/32
                  2a11:4b47::/32
                  2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
                  2a13:93c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:05:ce:05:03:78:18:63:58:c6:bf:f6:f2:94:53:23:70:2f:
         93:10:31:db:61:48:4d:bf:d7:1a:97:32:e3:c1:dd:69:83:3b:
         68:cd:47:0a:cd:c8:ef:2b:fb:cd:ec:97:42:e0:cf:d3:9f:cd:
         02:24:7d:a4:5f:96:db:87:28:ea:ec:d5:e3:f2:9e:35:57:4e:
         f9:2d:67:26:82:5a:d5:5f:61:4c:2c:f1:a3:97:de:d0:d3:a5:
         ed:3a:74:d6:1a:8c:51:6e:8f:9d:f9:87:36:66:df:a1:32:4c:
         22:4c:12:f1:e2:d7:9b:5d:41:c0:5e:39:ca:5d:10:e7:9b:75:
         cf:49:27:1a:85:15:94:f5:95:25:4e:ed:a4:8e:4c:63:e4:30:
         96:b9:87:99:65:3e:53:5b:52:4d:cb:e3:e5:93:61:2f:f9:76:
         eb:12:ac:89:cd:27:3b:c0:b4:25:6f:10:c2:70:be:3a:48:66:
         25:be:94:46:d0:46:8e:4b:16:1c:60:a4:b1:36:c2:e2:ae:37:
         27:f3:0a:20:80:b6:77:8d:ac:e9:dc:68:c9:36:15:ff:72:d8:
         73:a1:b6:ad:8c:40:dc:73:33:79:81:0f:d5:ef:93:a0:e5:dc:
         1e:3f:75:ad:34:c7:87:f8:8d:8f:48:a3:4d:e6:9c:85:a0:3f:
         fc:36:dc:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----