Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_VwW0J_eIC_6veAuA5RfrzFYKLI.roa
File:                     _VwW0J_eIC_6veAuA5RfrzFYKLI.roa (raw, json)
Hash identifier:          KDK0RNi6x8CdCV8gyMAMcvUNPaCrnmK47y9vOyCnZq0=
Subject key identifier:   FD:5C:16:D0:9F:DE:20:2F:FA:BD:E0:2E:03:94:5F:AF:31:58:28:B2
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C416D0AF9619587AAB5A4529F4AAC75
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_VwW0J_eIC_6veAuA5RfrzFYKLI.roa
Signing time:             Sun 01 Jan 2023 07:35:05 +0000
ROA not before:           Sun 01 Jan 2023 07:35:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206016
IP address blocks:        2a0d:2685::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:6d:0a:f9:61:95:87:aa:b5:a4:52:9f:4a:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd5c16d09fde202ffabde02e03945faf315828b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:22:7b:83:fd:e7:43:7f:69:75:74:5d:b3:
                    87:ca:87:a5:ce:10:b0:de:93:c2:38:0e:99:ab:c5:
                    6a:49:ec:b8:aa:41:45:0e:aa:cb:f7:11:89:cc:5b:
                    15:77:eb:9f:e9:29:03:10:80:f9:10:f7:c2:9a:d9:
                    15:cb:e7:56:ea:0d:a4:6f:8f:2d:20:2e:91:b6:b9:
                    2b:aa:ab:bc:12:96:4b:8e:b2:71:65:76:21:3b:ea:
                    57:30:9f:9e:a5:3b:bf:d1:df:5a:d9:1e:c0:6e:be:
                    46:6f:98:27:d4:66:ec:6a:70:e2:c6:3a:ec:94:a6:
                    fb:f2:d0:b8:d2:39:64:15:2c:40:b6:c2:2d:52:0d:
                    6a:64:64:5d:36:5b:f0:65:43:c3:74:ad:20:b0:63:
                    f1:9e:90:03:de:82:da:ae:5c:e1:a3:6e:05:80:8b:
                    46:bb:ee:0b:f3:57:72:9d:de:3c:c3:1b:ef:e9:91:
                    bc:9a:8d:7c:82:22:26:78:d2:a6:dd:02:6e:36:ba:
                    5d:83:79:8d:b4:2e:b1:1a:0c:5b:31:cf:06:e9:f3:
                    27:8c:75:ae:4d:cf:cb:f2:e9:9f:ae:7f:96:08:b0:
                    66:1c:7b:e4:c1:b7:93:cc:af:ec:67:d1:f6:cb:cb:
                    5e:fd:64:b5:9e:23:ca:a7:0d:b0:04:70:9a:54:8e:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:16:D0:9F:DE:20:2F:FA:BD:E0:2E:03:94:5F:AF:31:58:28:B2
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_VwW0J_eIC_6veAuA5RfrzFYKLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2685::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:94:fa:da:4c:af:2d:fe:9e:74:1b:13:11:ec:fb:66:22:
         c7:d0:63:8a:0f:09:41:25:41:23:43:cc:0b:32:86:42:2b:77:
         dd:63:d2:c0:73:3a:e6:fd:c3:cf:e3:b2:5c:08:1b:42:a2:eb:
         bb:3f:e2:3f:0c:32:54:1c:94:03:09:d0:41:e6:29:83:b4:fe:
         b8:65:60:4e:79:a2:2a:8b:16:2a:03:58:28:01:69:88:0f:9f:
         5b:2a:e1:b0:b2:ce:97:53:7a:de:68:d1:94:8f:26:04:e9:bf:
         85:4a:1a:a1:96:e0:d4:10:78:de:21:b2:e4:03:cc:d1:fd:eb:
         68:4d:cd:a7:ca:f4:e4:cf:51:52:30:62:9d:f2:8a:35:b9:37:
         3f:89:91:31:a2:07:63:91:39:c8:b4:77:b4:89:b8:65:f9:32:
         57:cf:d4:fd:d9:d3:11:ae:a6:c3:78:55:f9:42:e6:16:1e:19:
         7d:58:eb:f6:88:bf:24:a0:d0:8a:01:28:65:f5:c3:f4:05:e7:
         3e:08:86:54:fe:f9:4c:bf:5e:2f:25:41:a3:a1:fd:f5:04:21:
         be:2c:77:f9:ec:58:63:be:2c:90:54:ec:eb:81:b8:d8:01:0a:
         c3:ba:04:37:57:58:a4:45:5e:a2:fd:7e:86:80:f7:88:24:a9:
         90:10:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----