Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/ZwOQ_D2235LhemYkPjx2y9eWagw.roa
File:                     ZwOQ_D2235LhemYkPjx2y9eWagw.roa (raw, json)
Hash identifier:          A5ZbsSndwFPirYnL2bX0s18dAuR4t6tOLSSN6W6d3FE=
Subject key identifier:   67:03:90:FC:3D:B6:DF:92:E1:7A:66:24:3E:3C:76:CB:D7:96:6A:0C
Certificate issuer:       /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial:       018FBE2E16FF82387D07A6D3D919A849CDDE
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/ZwOQ_D2235LhemYkPjx2y9eWagw.roa
Signing time:             Tue 28 May 2024 07:50:42 +0000
ROA not before:           Tue 28 May 2024 07:50:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        2a14:4c41::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 06:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:be:2e:16:ff:82:38:7d:07:a6:d3:d9:19:a8:49:cd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
        Validity
            Not Before: May 28 07:50:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=670390fc3db6df92e17a66243e3c76cbd7966a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:58:6b:5c:52:36:7e:9b:6b:94:a7:58:27:
                    34:e2:bb:37:9e:69:3d:9c:49:20:86:dc:81:55:4f:
                    9b:45:b4:0f:2e:52:01:f2:b4:7d:d8:f9:38:88:de:
                    25:36:18:1c:43:17:8c:67:42:d1:60:c6:b5:2c:83:
                    d4:7a:7b:22:83:aa:af:a2:2f:6f:65:6c:97:a0:fd:
                    ce:fe:b4:e5:4a:9f:9c:a3:78:c5:1b:ed:0f:1b:19:
                    e7:92:a1:82:7f:17:b2:f0:e4:fd:ae:bb:40:13:2f:
                    19:89:73:c5:e3:ed:a1:f4:ec:0c:44:98:5b:4b:87:
                    d9:8c:de:b0:a4:24:af:1e:89:c3:28:59:99:2f:76:
                    74:ff:37:63:83:3b:39:3d:ac:cb:e4:86:3e:4c:31:
                    03:54:d7:40:2e:3c:f4:bc:a0:e7:b4:75:8b:16:f0:
                    24:3c:24:23:ee:b1:56:74:30:5a:a8:df:91:f0:5d:
                    c1:f3:19:43:a2:1e:0a:e8:d6:7d:53:a2:7b:72:d7:
                    c0:49:f9:a1:7e:a0:5e:a3:4c:30:97:ef:d5:51:d4:
                    2d:d7:c9:b3:3a:c5:f2:80:e0:33:58:81:d4:bd:5b:
                    18:89:7a:ce:bd:1d:4e:0d:58:ad:0b:dd:66:16:f9:
                    26:1f:ac:6b:39:83:e0:b9:00:59:b9:18:6f:5f:b1:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:03:90:FC:3D:B6:DF:92:E1:7A:66:24:3E:3C:76:CB:D7:96:6A:0C
            X509v3 Authority Key Identifier:
                keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/ZwOQ_D2235LhemYkPjx2y9eWagw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4c41::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:16:a4:45:0b:8c:63:1f:c1:90:8b:22:d6:3f:bf:c5:a8:
         5a:2c:58:9e:18:ce:7c:4e:a7:2d:64:b4:53:a1:3b:2f:a2:54:
         7b:f7:aa:92:4f:c6:be:f0:94:5f:e3:46:b9:8f:40:c2:53:e6:
         db:65:ef:2b:26:dc:e9:00:71:33:8a:85:8a:65:ff:7b:13:81:
         47:26:1d:09:ac:da:82:17:7c:b4:f6:4f:3c:12:f4:e4:e0:f2:
         cd:b8:41:e5:21:30:ee:37:cc:93:dc:f9:74:b4:d6:f9:35:f8:
         61:70:c9:89:28:6b:4d:61:75:b9:f0:05:8c:1c:ea:69:92:bf:
         23:ce:f5:ed:3c:42:47:7a:97:c9:5f:b5:1f:0c:bf:8b:2b:26:
         c3:75:1c:f1:4e:06:9a:35:cd:b6:d7:c8:de:ce:49:9c:fe:84:
         cf:e3:56:9a:dd:1a:78:a5:c3:fe:f9:4b:15:f2:8c:20:d5:ea:
         d7:5a:97:bf:7f:1d:d7:37:28:6b:f2:2f:fb:2f:23:63:39:e3:
         61:3a:2b:c0:22:ab:30:57:25:16:7e:1d:75:35:d1:86:c3:2f:
         b6:5a:80:ec:41:d9:57:92:d1:15:75:e4:d8:ed:2a:6b:07:09:
         9d:1f:6c:03:0e:70:67:79:71:35:25:c5:40:02:6e:0b:43:fd:
         69:cc:fd:d1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY++Lhb/gjh9B6bT2RmoSc3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjU3ZWFhYmJmNjA0ZDQ1NzAwNTVjMmNkOGFjMjQ5YmIy
OWMxMDYwHhcNMjQwNTI4MDc1MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzAzOTBmYzNkYjZkZjkyZTE3YTY2MjQzZTNjNzZjYmQ3OTY2YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y9Ya1xSNn6ba5SnWCc04rs3nmk9
nEkghtyBVU+bRbQPLlIB8rR92Pk4iN4lNhgcQxeMZ0LRYMa1LIPUensig6qvoi9v
ZWyXoP3O/rTlSp+co3jFG+0PGxnnkqGCfxey8OT9rrtAEy8ZiXPF4+2h9OwMRJhb
S4fZjN6wpCSvHonDKFmZL3Z0/zdjgzs5PazL5IY+TDEDVNdALjz0vKDntHWLFvAk
PCQj7rFWdDBaqN+R8F3B8xlDoh4K6NZ9U6J7ctfASfmhfqBeo0wwl+/VUdQt18mz
OsXygOAzWIHUvVsYiXrOvR1ODVitC91mFvkmH6xrOYPguQBZuRhvX7HkFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGcDkPw9tt+S4XpmJD48dsvXlmoMMB8GA1UdIwQY
MBaAFOElfqq79gTUVwBVws2Kwkm7KcEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYt
ODFmYTg3NGVlMmVkLzEvWndPUV9EMjIzNUxoZW1Za1BqeDJ5OWVXYWd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYtODFmYTg3NGVlMmVk
LzEvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRMQTAN
BgkqhkiG9w0BAQsFAAOCAQEAIn0WpEULjGMfwZCLItY/v8WoWixYnhjOfE6nLWS0
U6E7L6JUe/eqkk/GvvCUX+NGuY9AwlPm22XvKybc6QBxM4qFimX/exOBRyYdCaza
ghd8tPZPPBL05ODyzbhB5SEw7jfMk9z5dLTW+TX4YXDJiShrTWF1ufAFjBzqaZK/
I8717TxCR3qXyV+1Hwy/iysmw3Uc8U4GmjXNttfI3s5JnP6Ez+NWmt0aeKXD/vlL
FfKMINXq11qXv38d1zcoa/Iv+y8jYznjYTorwCKrMFclFn4ddTXRhsMvtlqA7EHZ
V5LRFXXk2O0qawcJnR9sAw5wZ3lxNSXFQAJuC0P9acz90Q==
-----END CERTIFICATE-----