Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa
File:                     nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa (raw, json)
Hash identifier:          kyNewgW1PioBleRNBoScSXYG70qK2G0yrxAjbqXBqig=
Subject key identifier:   9E:A3:2B:A3:DC:A3:FA:E3:8E:61:16:A3:D0:07:12:27:DC:2E:A2:A3
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C4169D2FC03BC90DF935088C5A8C1B9
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa
Signing time:             Sun 01 Jan 2023 07:35:04 +0000
ROA not before:           Sun 01 Jan 2023 07:35:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202776
IP address blocks:        2a0d:2587:c250::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:69:d2:fc:03:bc:90:df:93:50:88:c5:a8:c1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ea32ba3dca3fae38e6116a3d0071227dc2ea2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:3a:b2:ec:a1:f9:de:69:d4:e9:10:bf:58:
                    94:4b:d6:d6:3c:bd:7d:1e:2c:24:80:6a:15:1c:e2:
                    c8:ff:9f:c0:dc:9b:b6:4d:fb:99:2c:c9:65:44:40:
                    79:03:91:df:c3:0d:b2:37:08:21:4e:f9:2e:6f:6c:
                    9a:20:49:c7:39:a8:30:e1:88:36:87:6f:96:5e:ca:
                    2c:99:63:c8:bc:c0:d2:69:94:4e:fc:9c:29:80:e8:
                    04:f0:66:00:ef:49:c6:35:d2:e6:10:d4:d9:f7:e7:
                    cb:40:e0:4d:8a:2d:59:3a:e2:bd:38:a8:27:b4:21:
                    3b:79:05:29:a0:4b:58:44:42:a5:68:79:b0:3b:16:
                    07:b5:51:36:26:6d:be:ef:df:e6:f3:b8:8e:e0:97:
                    d0:50:fe:d7:3e:7b:c6:32:9c:61:47:7b:5c:90:3a:
                    f6:4b:71:ef:0d:8c:8b:c4:ad:a4:6d:03:bc:ce:9b:
                    1a:d2:3b:cd:41:95:f6:f3:9f:1d:e6:3b:54:d6:ed:
                    7f:1c:cc:56:c0:99:e2:08:11:4d:68:9f:09:ef:f9:
                    a2:43:23:f5:ca:16:d3:6b:a4:65:80:33:7d:b4:df:
                    2d:67:0d:96:ba:1a:c0:0c:fb:20:24:88:d0:f5:66:
                    ff:66:6d:f2:dc:f0:9c:5f:a2:1c:49:ac:72:2f:67:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A3:2B:A3:DC:A3:FA:E3:8E:61:16:A3:D0:07:12:27:DC:2E:A2:A3
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2587:c250::/44

    Signature Algorithm: sha256WithRSAEncryption
         b7:b9:75:bd:63:32:1c:ee:4a:ba:bd:bf:16:5f:82:71:a4:79:
         b1:b4:bc:7b:b1:be:55:e7:08:ba:7a:b2:a7:5e:1a:70:6c:b6:
         94:d4:73:93:31:e9:39:0e:cd:84:96:88:97:ee:32:da:cb:bc:
         91:d4:da:95:fb:d9:c7:6c:77:b8:ca:7b:cd:ee:38:d9:d2:9c:
         e2:f9:07:2a:4c:f6:8c:2d:78:13:2e:42:36:5d:52:b9:34:9d:
         44:e8:24:e0:93:1a:43:7f:76:95:19:42:2b:ab:b7:6d:54:75:
         2c:0b:19:ec:26:c8:05:bf:06:3d:06:a0:5d:f3:7a:a9:33:e1:
         48:ae:de:a7:d1:c1:23:4b:46:be:f5:cb:45:17:7c:9c:ca:93:
         b8:18:e0:6c:b7:39:ca:10:df:31:95:23:8b:c5:4b:df:73:48:
         65:0d:a8:11:68:80:aa:a8:8a:ba:84:45:73:4c:15:5b:85:fc:
         c8:9a:f5:58:97:04:35:61:fc:a2:7e:46:48:ac:9b:2d:d0:63:
         1c:9f:ca:a4:d5:2e:11:10:01:92:fd:fd:57:6e:e1:73:7e:2e:
         fa:67:50:6f:b3:d3:13:e4:3f:7a:8e:e0:99:8e:8f:63:ed:b1:
         58:7b:8c:63:69:ad:54:14:72:cc:fc:b2:05:98:4c:71:ac:71:
         1a:60:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----