Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/XjSYbyWD3NjEuoTL2u9vn95gsvk.roa
File:                     XjSYbyWD3NjEuoTL2u9vn95gsvk.roa (raw, json)
Hash identifier:          nrZi/RfXC6NHO9vhN5xoDbxnOPtKPR8x9+uPdCaBAMI=
Subject key identifier:   5E:34:98:6F:25:83:DC:D8:C4:BA:84:CB:DA:EF:6F:9F:DE:60:B2:F9
Certificate issuer:       /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial:       018FB2AF9569462D85900554FBDD1246A00F
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/XjSYbyWD3NjEuoTL2u9vn95gsvk.roa
Signing time:             Sun 26 May 2024 02:16:42 +0000
ROA not before:           Sun 26 May 2024 02:16:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215958
IP address blocks:        2a14:4900:5900::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 27 May 2024 10:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:af:95:69:46:2d:85:90:05:54:fb:dd:12:46:a0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
        Validity
            Not Before: May 26 02:16:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5e34986f2583dcd8c4ba84cbdaef6f9fde60b2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:bf:47:73:f9:70:d1:bb:aa:76:8e:fe:1d:
                    b8:ff:9f:63:35:83:0c:b1:76:4b:4c:52:81:ff:12:
                    b5:dc:a2:28:b9:9f:1b:5c:a6:01:2e:82:0d:fa:af:
                    84:78:b9:42:c9:68:46:ef:45:f5:9e:7f:0f:b4:35:
                    5c:f7:23:9c:dd:c0:55:ea:be:cb:36:90:d7:7a:fe:
                    5d:97:2d:d2:c4:67:98:18:ac:61:fe:78:62:14:ae:
                    6a:10:d0:54:6c:af:1b:b4:ef:1f:f0:96:95:09:74:
                    87:d4:9e:14:1c:2c:4b:2f:db:e8:ee:3e:4d:cc:71:
                    3c:36:85:d1:f9:75:da:b7:e6:56:89:46:e1:9b:17:
                    14:c7:ef:4a:87:21:c0:10:37:8a:e4:1e:f8:7f:70:
                    ab:75:52:b4:d1:4e:03:11:99:36:80:bb:d7:9c:a7:
                    63:0e:46:22:4e:14:17:28:2c:74:ba:83:f8:cf:fd:
                    05:df:f2:c1:a1:9f:28:d1:05:97:91:21:af:ba:18:
                    7e:e9:18:39:a7:9a:f1:9f:32:9a:1d:b5:67:90:f7:
                    00:10:ce:42:43:d8:82:15:81:15:21:d6:e1:58:27:
                    d0:6c:b3:7d:16:19:a1:22:46:fe:78:a5:aa:c7:0f:
                    e4:56:91:e4:f7:c4:16:59:a8:2c:ac:95:ed:9d:80:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:98:6F:25:83:DC:D8:C4:BA:84:CB:DA:EF:6F:9F:DE:60:B2:F9
            X509v3 Authority Key Identifier:
                keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/XjSYbyWD3NjEuoTL2u9vn95gsvk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4900:5900::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:95:d0:15:f8:89:9e:61:e3:e1:44:f3:73:9e:12:6d:9f:39:
         65:cc:d8:69:bf:b3:7e:23:95:03:92:81:8d:e0:db:19:63:db:
         35:dc:20:7d:ed:9d:31:ae:9e:04:41:8c:2e:3d:a2:b0:2a:72:
         c6:b2:e3:8d:f7:3e:e8:06:51:c8:6f:ab:42:71:d1:fe:fd:13:
         58:62:01:4c:7e:61:d8:c1:e5:5d:ed:bb:3b:16:1c:93:61:fe:
         eb:a7:8e:cd:87:b3:96:0a:02:22:94:14:1d:fb:5a:c5:5b:63:
         5d:7f:16:15:aa:da:49:50:4c:e8:e9:31:b1:52:f2:82:63:a9:
         65:03:fc:d2:2e:d2:ff:57:5b:7e:1f:c4:c4:95:0a:f9:e8:aa:
         c1:1c:a7:0d:61:ce:c1:21:ce:3f:95:d5:8b:9f:f2:1a:a7:17:
         aa:4c:67:35:2e:9d:aa:92:6b:fc:06:ce:d7:dd:44:b2:90:af:
         6e:1a:0e:85:0d:9c:01:74:ba:1e:c1:94:ce:82:92:38:af:3c:
         04:da:dc:6b:5d:d0:f6:ef:2e:3f:8e:cd:9d:3c:2a:3e:61:61:
         55:50:9e:7c:e7:6b:b6:9e:66:63:5d:2d:3b:48:e6:67:22:f1:
         06:98:61:e6:88:27:54:68:7b:b1:2c:c3:7e:bf:7c:0c:02:18:
         1c:76:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----