Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/GaqC2yZlwMoTljs6Xqw756ql9vM.roa
File:                     GaqC2yZlwMoTljs6Xqw756ql9vM.roa (raw, json)
Hash identifier:          30CjpwN3PDdplZgmQLF8ZCQfcL5tGLBsQDvA8646t8Q=
Subject key identifier:   19:AA:82:DB:26:65:C0:CA:13:96:3B:3A:5E:AC:3B:E7:AA:A5:F6:F3
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C415BC2195A4F86FA24BBD50A612E5F
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/GaqC2yZlwMoTljs6Xqw756ql9vM.roa
Signing time:             Sun 01 Jan 2023 07:35:00 +0000
ROA not before:           Sun 01 Jan 2023 07:35:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     38136
IP address blocks:        2a0c:e644::/30 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:5b:c2:19:5a:4f:86:fa:24:bb:d5:0a:61:2e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19aa82db2665c0ca13963b3a5eac3be7aaa5f6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:1e:7a:bc:77:9f:ed:4a:89:1b:f3:8c:40:
                    26:0d:ef:ab:9b:76:7e:5c:8e:fe:d1:d8:38:75:d3:
                    44:63:1f:2d:17:74:92:75:c6:ca:45:80:0a:4a:fe:
                    ca:80:99:a8:47:e4:fc:f9:a8:92:86:41:33:9e:23:
                    a4:60:64:be:eb:aa:e4:6c:60:8d:58:a1:99:4b:3d:
                    0f:8f:4e:35:6b:d6:70:0e:88:30:87:8f:e6:6b:90:
                    7f:6f:b7:11:5c:78:8b:36:55:de:52:2d:6d:89:69:
                    fc:e5:8b:fd:68:21:9c:f6:a0:e4:1f:d1:ac:2b:6f:
                    8c:66:70:bb:26:b5:26:46:65:4c:b0:98:ce:ae:ae:
                    f1:7c:1f:5a:81:2e:87:99:01:21:c4:a7:cf:9e:70:
                    b5:e8:c8:53:17:63:0e:1d:e8:b7:34:1c:bf:14:9c:
                    e9:a5:52:33:98:f4:99:5f:91:f0:01:2e:90:8b:56:
                    5a:d2:02:59:b9:83:06:c4:43:5e:54:c9:22:66:aa:
                    f9:15:a9:fd:51:b4:f8:2b:ed:41:e1:89:4c:dd:3c:
                    72:cf:e9:2d:0f:d8:df:36:37:47:82:cb:37:55:8e:
                    65:7b:1c:d3:7e:2f:2c:72:79:e5:4a:88:f7:89:87:
                    d4:ce:de:50:53:88:72:8b:38:da:2a:f7:90:3f:f5:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AA:82:DB:26:65:C0:CA:13:96:3B:3A:5E:AC:3B:E7:AA:A5:F6:F3
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/GaqC2yZlwMoTljs6Xqw756ql9vM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e644::/30

    Signature Algorithm: sha256WithRSAEncryption
         47:94:49:ee:ff:9a:da:ff:cf:73:0d:ec:43:2c:a1:c5:d4:22:
         d4:b0:ef:6c:aa:58:88:da:9f:91:d4:fd:ab:95:5a:23:91:fc:
         69:30:ea:b7:6a:86:e0:01:46:c6:86:94:72:fb:cd:81:48:5c:
         00:1a:2a:af:0d:49:7e:07:1f:bd:d5:d6:a5:53:52:cf:f9:d5:
         48:82:c2:56:3a:e9:2a:e1:79:75:ab:b3:e0:b8:68:0b:92:2f:
         6b:ad:7e:a4:50:11:71:16:13:9f:0a:06:a6:b2:e3:5a:e1:dd:
         b0:d4:f7:98:9a:ab:98:fb:f5:44:16:3e:3a:3c:61:64:09:fd:
         8f:3d:7b:95:2d:92:56:93:f9:11:59:d5:4a:b1:f2:d7:12:68:
         ba:14:02:a8:2b:5d:f9:58:a7:57:6b:5a:ca:be:32:e8:70:52:
         2c:3f:38:97:d1:6e:d9:28:41:b9:f8:c3:48:77:39:3b:a0:4f:
         41:49:64:8f:5b:52:8e:b8:82:3c:45:7f:17:71:a4:43:58:ae:
         5f:ed:04:fd:9d:2d:3a:0d:a1:e7:74:9a:45:63:c5:c4:31:19:
         fe:d5:e2:ce:88:e8:34:a0:d2:7d:5d:b2:d1:8c:94:17:5a:6f:
         c3:15:7d:f9:83:ef:82:6d:8e:18:73:cc:f6:07:ad:1b:66:42:
         20:e8:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----