Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/quuXGlLNLzuo72YtcBiuehnn9I4.roa
File:                     quuXGlLNLzuo72YtcBiuehnn9I4.roa (raw, json)
Hash identifier:          WjTxq6yu92n6SrRc5ulYhles5W18lqEfQtHv+y2IRiE=
Subject key identifier:   AA:EB:97:1A:52:CD:2F:3B:A8:EF:66:2D:70:18:AE:7A:19:E7:F4:8E
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0188A0316621EA9141E100073F0895F3FD9A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/quuXGlLNLzuo72YtcBiuehnn9I4.roa
Signing time:             Fri 09 Jun 2023 12:46:11 +0000
ROA not before:           Fri 09 Jun 2023 12:46:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212483
IP address blocks:        2a0d:2587::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a0:31:66:21:ea:91:41:e1:00:07:3f:08:95:f3:fd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jun  9 12:46:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aaeb971a52cd2f3ba8ef662d7018ae7a19e7f48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:42:28:20:21:d1:7c:5d:d2:ed:59:41:c1:
                    2e:fe:82:8b:43:55:44:5c:a6:07:80:f6:ff:a9:61:
                    79:16:82:a5:5a:cc:c6:e3:27:cf:90:16:53:09:94:
                    ec:26:6d:4d:c5:00:99:cd:10:32:be:cc:dd:b3:65:
                    26:de:97:6b:5f:5c:cc:2f:21:e2:c1:1b:3b:ff:bc:
                    8d:f8:43:bf:a3:f4:a1:80:be:e5:1a:5b:60:99:e4:
                    ea:42:16:f9:08:a2:3c:e2:32:6d:46:15:05:29:93:
                    9d:7f:66:c9:08:50:2d:6e:1a:c6:98:12:66:0a:a5:
                    89:00:e3:b8:75:d4:91:38:6e:14:15:b8:6a:01:13:
                    f3:47:7c:a0:60:aa:cb:59:8c:b5:a2:57:50:ae:5a:
                    97:cf:f8:5e:82:36:45:cd:b7:17:ed:53:9b:71:a2:
                    c1:4c:64:51:e4:95:ac:6c:c1:99:67:8d:9f:23:99:
                    22:5f:e1:45:b6:2a:57:18:8b:c0:f8:39:80:dd:56:
                    2d:fa:9b:43:4a:1c:72:af:e2:90:01:d4:72:13:5c:
                    60:91:16:b3:c8:a9:e7:85:3a:ea:67:e8:48:9b:2e:
                    1e:f6:90:c3:c4:90:2b:53:a0:75:e1:12:4b:17:c7:
                    e3:68:e4:c8:b1:7f:e5:33:2f:ea:b5:57:aa:88:b0:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EB:97:1A:52:CD:2F:3B:A8:EF:66:2D:70:18:AE:7A:19:E7:F4:8E
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/quuXGlLNLzuo72YtcBiuehnn9I4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2587::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:89:7d:7a:40:c6:f7:87:d1:8e:cb:c0:a2:4d:5b:34:5b:ba:
         cd:84:0f:62:f7:1d:ca:d4:b4:bc:ab:0f:ae:b9:10:0f:d2:8b:
         84:26:10:37:b2:68:41:a8:4e:56:84:11:87:de:d9:c0:d8:df:
         a7:a2:05:8c:f4:0b:d2:1f:33:bf:b4:57:8d:45:85:aa:b9:69:
         8c:59:4a:02:38:e0:f6:c0:b2:b6:fc:90:b1:63:a2:1f:44:5b:
         85:bb:2b:86:a5:11:d0:88:31:86:f2:cf:52:20:e1:19:9c:bc:
         29:37:66:1c:4c:68:63:20:49:de:56:c6:6b:cb:b7:1f:46:d0:
         5b:91:ef:b4:cd:95:ac:ea:8e:f8:c6:bd:04:d9:79:2b:53:2b:
         38:ec:bc:cb:ea:19:4a:a9:79:93:9b:fb:b2:46:d3:61:6c:b0:
         b0:94:e9:78:93:b3:4b:73:5c:2b:a3:54:25:01:76:80:a9:b2:
         d6:4c:48:73:1a:e9:72:15:e0:91:f8:cb:b9:fc:b6:28:fe:02:
         1e:bc:8f:33:e7:1b:a3:c9:82:ad:44:7b:2b:44:5e:27:c5:74:
         11:03:a4:6a:1b:1e:75:d4:c0:d8:4b:9a:56:45:75:b7:fe:0e:
         76:ff:56:96:53:ae:7c:02:ae:33:66:8b:8b:c2:d1:bb:dc:60:
         03:b8:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----