Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CG0p0z1cm_f3GGNzyFKxf00t1GY.roa
File:                     CG0p0z1cm_f3GGNzyFKxf00t1GY.roa (raw, json)
Hash identifier:          Z9dCKcpVsyavLexNwHzzG3FNvJaVMaaC/giADCQW01I=
Subject key identifier:   08:6D:29:D3:3D:5C:9B:F7:F7:18:63:73:C8:52:B1:7F:4D:2D:D4:66
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C4176C8966140D0818CE58DE1B64BC3
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CG0p0z1cm_f3GGNzyFKxf00t1GY.roa
Signing time:             Sun 01 Jan 2023 07:35:07 +0000
ROA not before:           Sun 01 Jan 2023 07:35:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212618
IP address blocks:        2a05:1084:e00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:76:c8:96:61:40:d0:81:8c:e5:8d:e1:b6:4b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=086d29d33d5c9bf7f7186373c852b17f4d2dd466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:70:1c:22:14:b7:3d:f9:8d:fc:0c:33:b0:
                    5b:f7:00:35:90:ec:aa:f8:0e:6b:48:50:f0:1c:df:
                    ea:4c:c4:ca:cc:1d:51:bd:0d:13:07:ec:bc:5c:8b:
                    dc:85:84:03:65:c1:2c:ae:97:5d:25:a4:8a:fe:8b:
                    e5:2c:3f:80:41:2a:91:af:bf:88:a6:08:b7:b6:5d:
                    d1:6b:c4:6b:61:5b:06:19:e1:80:7e:c4:48:9d:3f:
                    fa:43:92:ae:e9:44:16:e3:43:c8:9c:5e:d1:f1:ed:
                    6a:77:2f:35:86:7e:f8:0a:fa:e3:73:cc:85:77:c8:
                    45:a8:11:20:66:72:ac:69:01:7d:d2:5b:f6:19:b4:
                    00:2a:c4:f5:3e:29:e8:82:bc:83:ee:4d:13:ab:99:
                    85:ee:fd:df:3a:1f:75:dd:68:d8:19:07:2b:a3:9c:
                    94:7b:ea:ed:01:96:c3:6b:8e:30:c1:ce:8a:15:3f:
                    c5:56:2d:a5:a3:d1:dd:e6:f8:26:fc:80:cd:e9:3d:
                    b7:e4:b8:28:ce:bf:ba:01:9e:18:b1:0a:37:55:d2:
                    da:d8:f4:b0:2f:82:2e:e9:b6:ac:32:03:6d:e4:03:
                    05:67:b3:2e:ca:13:2c:73:55:63:65:98:2e:10:04:
                    f8:57:31:c9:28:88:fa:75:fa:e0:67:10:54:cf:47:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6D:29:D3:3D:5C:9B:F7:F7:18:63:73:C8:52:B1:7F:4D:2D:D4:66
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CG0p0z1cm_f3GGNzyFKxf00t1GY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1084:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:99:ca:ce:8e:05:3f:cc:12:43:8e:51:2a:75:34:4d:0a:
         a7:65:35:bf:90:66:dd:fd:5c:83:87:89:51:2b:a8:3a:30:0e:
         01:38:29:6b:fa:c1:3d:ec:8c:bc:11:c8:a1:71:a7:d8:16:75:
         74:45:39:8b:67:3b:76:55:71:4e:28:34:c9:c2:16:11:6f:9b:
         cb:1d:18:16:4b:1b:e3:ab:eb:cc:8e:d9:1c:bb:59:36:99:da:
         64:30:2f:9d:3a:ef:dd:24:dc:5b:5b:e3:c9:e5:e6:67:2c:91:
         e3:17:e6:f1:5d:25:b8:88:80:b2:98:c1:74:8a:16:89:1a:30:
         02:b8:9d:9c:4f:a0:2c:78:de:ef:bf:9b:1c:61:73:66:5b:60:
         49:01:06:05:5a:5e:c4:d3:ee:c0:fa:56:28:5a:a6:c4:56:b4:
         56:53:f3:18:8c:28:e3:fb:26:0a:db:bc:24:51:cc:19:01:28:
         88:bb:d7:28:36:5a:94:23:7d:e1:b9:37:c5:2c:1d:56:ce:85:
         7c:df:67:00:2a:6c:91:b1:0c:f2:0a:44:df:a2:0f:2e:a1:8c:
         ac:e1:89:3c:e6:c8:4b:b5:dd:8e:e1:50:62:99:d7:ae:8f:74:
         5e:38:68:ca:51:be:7f:5a:16:8c:07:59:87:b5:f8:e4:4c:86:
         60:71:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----