Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WccBMUmiQiCc_0P8s2zAvEJThlM.roa
File:                     WccBMUmiQiCc_0P8s2zAvEJThlM.roa (raw, json)
Hash identifier:          v1zyiGkrF8s1dSO4SJo4B8oIaLfZcH92JtwwqFGbD9k=
Subject key identifier:   59:C7:01:31:49:A2:42:20:9C:FF:43:FC:B3:6C:C0:BC:42:53:86:53
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C4162C10F402E5FE0DF5D913CE92A66
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WccBMUmiQiCc_0P8s2zAvEJThlM.roa
Signing time:             Sun 01 Jan 2023 07:35:02 +0000
ROA not before:           Sun 01 Jan 2023 07:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139317
IP address blocks:        2a0c:e640:1020::/44 maxlen: 48
                          2a0c:e640:1010::/44 maxlen: 48
                          2a0c:e640::/36 maxlen: 48
                          2a0c:e640:6000::/36 maxlen: 48
                          2a0c:e640:1000::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:62:c1:0f:40:2e:5f:e0:df:5d:91:3c:e9:2a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=59c7013149a242209cff43fcb36cc0bc42538653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:f5:df:d8:4c:8c:48:7f:e9:84:83:3a:f0:
                    54:89:07:d1:5f:0e:ff:a4:c2:76:d5:43:91:08:9d:
                    e8:8f:a9:0a:ce:91:7f:54:03:76:43:2a:39:1a:2c:
                    12:92:5f:57:0f:24:e1:41:cd:e3:9d:30:6f:27:4b:
                    a6:a1:bf:13:ed:51:1a:61:ef:80:a5:e5:a6:6d:3e:
                    d0:9b:cf:26:9a:cc:cd:1a:f4:15:86:05:a2:00:2e:
                    af:10:7a:78:3f:2d:ba:72:ec:f7:bb:e9:82:4b:72:
                    21:42:4f:91:1c:66:14:6e:49:b9:05:9c:12:38:67:
                    4c:c1:8d:14:6b:0d:2b:46:75:d1:e4:0f:eb:ab:c3:
                    bb:1d:0e:e2:a1:b1:c0:5f:2b:58:ef:40:d7:df:a6:
                    34:28:e9:b5:f1:f2:c9:78:e4:12:5f:19:15:80:1a:
                    04:7d:dc:aa:4e:e0:da:de:41:94:5b:60:60:d0:b0:
                    6b:6a:34:19:ec:fd:63:e7:a0:95:ac:ae:fd:41:92:
                    78:4c:ce:7b:8b:52:28:f9:7e:b2:12:95:3c:15:c6:
                    2c:95:ad:8d:80:b0:0a:a8:50:b8:d4:bf:3a:0c:4b:
                    b1:ff:38:26:f8:40:18:1b:4e:67:27:e1:15:07:4e:
                    e4:f8:57:9d:9d:d1:40:34:56:a5:e4:5b:81:57:53:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C7:01:31:49:A2:42:20:9C:FF:43:FC:B3:6C:C0:BC:42:53:86:53
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WccBMUmiQiCc_0P8s2zAvEJThlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e640::-2a0c:e640:102f:ffff:ffff:ffff:ffff:ffff
                  2a0c:e640:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:19:cb:04:2b:c4:70:61:02:ee:a1:f5:bd:44:e5:a9:9c:a3:
         03:da:ba:e5:54:48:20:83:c0:86:64:f4:23:bc:eb:a9:32:7f:
         cb:1a:bf:8e:f3:57:96:9d:31:89:7e:4c:c1:b3:ac:84:48:51:
         e4:4e:02:79:c2:86:97:6e:4d:b9:38:c4:61:bd:39:6b:76:c3:
         01:58:4c:4f:85:52:1c:2d:2c:5f:30:ff:68:46:db:31:39:98:
         92:29:45:cb:15:cb:f4:16:69:e7:c8:28:4a:ec:49:c0:1d:f5:
         48:e1:13:8e:c8:d3:34:81:15:e0:3b:69:2b:7c:23:9a:7c:a2:
         d0:25:73:80:a4:67:8b:20:f8:34:3c:1f:1b:9e:37:3f:4f:42:
         1d:09:e7:95:54:5a:6e:04:59:94:35:89:42:26:27:c2:a1:90:
         91:8b:45:be:62:74:53:00:1f:9a:34:6b:eb:86:6c:c3:82:56:
         3e:b8:0c:1f:55:4e:95:77:1d:ba:b3:3a:9b:90:c9:7a:43:fa:
         64:6a:f1:a1:dd:cb:d6:d7:f9:d2:8e:eb:36:b8:d0:00:39:42:
         a6:95:f0:a4:cd:f9:b8:2f:90:29:f7:c2:74:8b:9b:ec:fe:66:
         75:fd:02:80:64:6d:b9:44:d4:88:88:d8:b5:3d:29:50:e8:12:
         dd:38:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----