Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/Vr4kLidiMoQLaJKaxx-Cv4uoXWc.roa
File:                     Vr4kLidiMoQLaJKaxx-Cv4uoXWc.roa (raw, json)
Hash identifier:          KVIs/uWeWXHGLZQnU3hqmzW/hvt64HRgreGM3YZVlkA=
Subject key identifier:   56:BE:24:2E:27:62:32:84:0B:68:92:9A:C7:1F:82:BF:8B:A8:5D:67
Certificate issuer:       /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial:       018E75C7FFF6D9306F81DD6AB10AC3D4B0B1
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/Vr4kLidiMoQLaJKaxx-Cv4uoXWc.roa
Signing time:             Mon 25 Mar 2024 13:23:45 +0000
ROA not before:           Mon 25 Mar 2024 13:23:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        45.89.128.0/22 maxlen: 22
                          2a0b:a200::/48 maxlen: 48
                          2a0b:a200:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 14:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:75:c7:ff:f6:d9:30:6f:81:dd:6a:b1:0a:c3:d4:b0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
        Validity
            Not Before: Mar 25 13:23:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56be242e276232840b68929ac71f82bf8ba85d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:a6:b6:bb:ed:79:f9:95:9c:8b:3c:54:7f:
                    17:bc:50:90:4b:18:6c:ed:a3:65:06:65:f1:94:ad:
                    51:fc:29:53:03:96:d0:06:e9:83:35:f4:89:94:ca:
                    c3:73:42:15:fd:6e:ff:cb:9c:62:80:6a:4b:f7:5b:
                    45:b8:43:52:e1:34:9d:02:2d:49:18:ba:8a:77:41:
                    ed:f1:0f:d6:bf:57:51:86:70:31:84:d9:34:ca:0a:
                    5b:c2:91:47:60:53:8e:0b:9c:bc:55:10:93:61:f4:
                    2c:a5:e4:30:aa:c0:ac:4d:03:54:09:e5:3a:19:68:
                    c7:40:fd:bc:4a:4a:7f:fd:90:08:57:7d:79:47:c0:
                    09:45:61:d0:4d:13:66:c1:01:10:9a:7d:76:8b:25:
                    7a:d2:50:0e:f3:0e:6c:66:24:87:10:bd:9a:76:19:
                    6b:d7:0c:83:cd:3f:fd:6d:7b:da:d8:a9:de:b2:72:
                    c6:16:c5:b4:de:48:54:83:ca:f0:c4:d4:34:ff:16:
                    5a:63:36:1a:9d:cf:6f:fd:6a:be:d7:0c:9e:ce:1f:
                    06:72:f1:94:a6:6c:94:fe:c6:bd:c0:3a:6c:76:4d:
                    08:8c:61:0d:df:74:44:ff:47:b1:ac:8a:5f:74:db:
                    fb:68:bd:3e:6c:3d:bd:03:8e:fa:72:16:9c:e8:0b:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:24:2E:27:62:32:84:0B:68:92:9A:C7:1F:82:BF:8B:A8:5D:67
            X509v3 Authority Key Identifier:
                keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/Vr4kLidiMoQLaJKaxx-Cv4uoXWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.128.0/22
                IPv6:
                  2a0b:a200::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:e6:e6:af:2c:44:ed:3c:97:f7:5b:d7:dc:d1:03:93:bf:
         e2:9f:b8:67:d4:4c:9b:ae:b0:c5:39:44:65:37:f2:59:22:ee:
         f7:ec:b6:15:1e:7d:b5:d3:4c:c6:ec:1c:2d:cc:4b:71:b1:11:
         a4:f8:4c:b6:1e:9e:c1:59:18:79:b9:5b:d7:b2:f5:bd:09:a1:
         da:f9:fe:3c:14:ad:2f:ed:3e:e9:c0:79:a7:98:99:0e:a8:2c:
         25:5b:47:38:bc:c1:aa:6e:43:b4:ee:46:2e:e1:19:69:96:c7:
         ca:90:ba:57:ab:a6:f6:e9:d2:a1:fe:88:f1:16:06:29:61:90:
         09:67:cd:87:b7:4b:a7:58:af:24:f0:60:c0:ff:2f:e0:62:ca:
         c5:19:a4:12:ca:5f:65:f8:01:52:2d:dd:79:0e:e0:ae:cb:f3:
         9c:c5:5f:4b:56:54:2e:f8:4e:03:02:72:d9:89:40:33:d6:47:
         51:97:6c:5f:1b:31:06:39:e3:8d:27:a1:28:de:60:9c:c4:b4:
         72:27:60:a0:53:b9:59:d3:54:40:23:16:d4:af:27:93:8a:cc:
         ce:ac:f2:70:36:42:7e:66:aa:73:e4:0a:b5:b6:21:c9:e4:5a:
         62:5b:31:1e:27:e0:6d:c3:59:d1:4d:c8:1a:eb:c7:7e:67:ba:
         48:15:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----