Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/Et-6EKUaRczzy1PQdL7CuZLhsyc.roa
File:                     Et-6EKUaRczzy1PQdL7CuZLhsyc.roa (raw, json)
Hash identifier:          TAP9Fh9oUu5tgxpZTUVXonG0EzVEmhzISo3u7f/Dsv0=
Subject key identifier:   12:DF:BA:10:A5:1A:45:CC:F3:CB:53:D0:74:BE:C2:B9:92:E1:B3:27
Certificate issuer:       /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial:       0194266A1870180D188CDD05419DBB29C67B
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/Et-6EKUaRczzy1PQdL7CuZLhsyc.roa
Signing time:             Thu 02 Jan 2025 09:47:54 +0000
ROA not before:           Thu 02 Jan 2025 09:47:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211368
IP address blocks:        2a13:e6c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 20 Jan 2025 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:18:70:18:0d:18:8c:dd:05:41:9d:bb:29:c6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
        Validity
            Not Before: Jan  2 09:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=12dfba10a51a45ccf3cb53d074bec2b992e1b327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:32:9b:1f:a3:2a:0c:ea:b6:4b:f0:6f:db:
                    22:53:aa:51:16:f3:6a:51:53:77:6e:fd:8f:29:5b:
                    ec:7e:2d:a2:d3:90:9f:2e:53:7f:b7:c0:bf:2d:cf:
                    be:6c:9c:45:7a:75:67:a1:00:8d:ca:b7:04:7e:37:
                    73:7b:95:d7:e7:89:b9:ee:75:c7:6e:ab:f1:59:7f:
                    b4:11:de:52:2c:cc:2c:05:26:4a:6f:a0:9a:35:f6:
                    d4:ae:ff:33:46:57:05:29:46:16:dd:04:f8:fa:a5:
                    9a:73:95:28:86:c9:46:e6:9b:79:b0:62:5c:a4:2f:
                    a6:c9:16:88:75:73:f9:17:c5:78:49:24:6b:27:07:
                    2b:4b:bb:7a:ff:fd:24:db:b3:4a:52:c6:2f:2c:cb:
                    98:62:a1:cd:7e:00:53:41:f1:c6:a4:53:ff:0d:78:
                    fb:c8:91:18:4d:5d:05:7b:db:38:ab:06:33:e5:c1:
                    f9:83:a8:4c:bf:40:b5:c0:6c:06:8c:1c:a8:af:78:
                    bc:21:23:9b:d3:51:fe:c6:b1:44:cf:c7:6e:76:18:
                    a8:87:4c:ae:23:08:8f:27:cd:20:93:56:27:f6:f1:
                    ac:75:a8:bd:66:8c:d3:7c:be:06:58:7f:a6:9c:d8:
                    c2:21:b1:a9:b4:d4:f7:60:44:9a:07:a3:5a:37:64:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DF:BA:10:A5:1A:45:CC:F3:CB:53:D0:74:BE:C2:B9:92:E1:B3:27
            X509v3 Authority Key Identifier:
                keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/Et-6EKUaRczzy1PQdL7CuZLhsyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:e6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:53:1b:ac:30:5d:9a:42:5a:84:f6:2f:bd:8b:b0:cb:1f:4a:
         7c:78:3d:90:b0:7e:69:cb:53:f1:19:52:f2:58:9f:8f:6b:35:
         82:86:06:9d:82:64:1e:8e:39:20:9a:a4:b1:aa:1b:0c:f5:42:
         07:a2:e5:a4:4f:a9:58:85:48:b4:16:62:2b:34:23:53:2e:bf:
         1a:e0:6a:eb:a6:12:47:13:a9:42:de:03:d7:0e:ed:9b:54:6a:
         f5:a2:66:8f:ab:e4:8e:c4:e6:d9:5d:b3:f4:fd:9e:07:f7:b3:
         77:92:31:d2:fe:a1:19:f4:87:ac:d4:65:b9:e2:18:8f:b0:f4:
         88:85:66:77:ba:61:25:8e:05:90:b2:36:6c:23:68:1a:7d:f5:
         df:69:c8:95:fc:58:7e:b1:3e:c0:f1:7e:7f:cd:5e:e6:8a:d2:
         93:eb:89:0a:8c:cc:0a:0f:23:da:32:16:28:f3:20:5f:b5:eb:
         8a:61:0d:b8:03:3f:11:e5:4e:cb:c1:81:41:9f:47:46:29:be:
         e5:13:35:0b:a1:d7:4b:3d:ae:92:85:8f:78:d3:be:ae:35:30:
         68:d6:8a:b9:3c:87:d0:95:9a:bb:f7:43:26:e3:de:aa:74:bb:
         ea:d8:b4:0f:56:3f:36:65:80:05:66:d1:25:93:35:7c:7d:92:
         73:9f:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----