Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7PutwkgnfvowI_tQfr6TJJrRtt4.roa
File:                     7PutwkgnfvowI_tQfr6TJJrRtt4.roa (raw, json)
Hash identifier:          oIFyTyID78l1y8oG2BhPn9Cgich6wFnt4246nsfJ8rE=
Subject key identifier:   EC:FB:AD:C2:48:27:7E:FA:30:23:FB:50:7E:BE:93:24:9A:D1:B6:DE
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0185E05445B431861FEC45AF28C06F84DFA5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7PutwkgnfvowI_tQfr6TJJrRtt4.roa
Signing time:             Mon 23 Jan 2023 20:31:37 +0000
ROA not before:           Mon 23 Jan 2023 20:31:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        2a0e:e380::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e0:54:45:b4:31:86:1f:ec:45:af:28:c0:6f:84:df:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan 23 20:31:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecfbadc248277efa3023fb507ebe93249ad1b6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:30:0e:07:f1:2d:df:7f:8e:01:bc:7d:f9:
                    77:2d:07:8e:90:e8:3c:46:e7:d8:2e:85:b0:34:68:
                    c6:49:df:21:fe:53:52:bb:a1:04:f3:67:d5:18:96:
                    84:99:43:a7:da:95:28:58:db:27:5f:0b:9f:03:48:
                    72:54:52:17:d3:35:5f:f8:41:15:39:5b:8f:bb:57:
                    50:72:38:0f:4b:c6:a7:23:1f:8d:b4:44:48:78:b2:
                    6e:3d:8b:b2:ce:86:dc:95:db:a6:01:01:66:3a:0d:
                    66:fd:86:1f:32:57:a0:90:fe:97:6a:de:78:c4:96:
                    80:2b:cf:b8:10:a3:e2:78:5f:c4:4b:db:c1:6b:39:
                    00:3e:d2:7b:2f:90:6e:01:e4:60:40:67:f8:f8:87:
                    a1:ed:be:13:64:94:86:68:7f:6b:5a:3c:83:f9:f0:
                    33:4a:22:18:3a:f4:31:f4:f9:6f:7c:20:81:5a:bc:
                    19:da:ec:1a:a7:cf:36:f6:b8:4c:2b:08:c3:15:57:
                    b7:39:f7:0b:ca:35:ab:9c:ec:3b:34:d8:bb:1b:37:
                    77:d7:f7:43:56:94:12:ff:b9:45:94:77:9c:d7:03:
                    25:7c:ae:a9:48:05:0d:da:b6:18:a8:ad:1a:ef:21:
                    ca:70:29:13:16:c6:20:09:c0:90:3c:63:69:9c:b0:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FB:AD:C2:48:27:7E:FA:30:23:FB:50:7E:BE:93:24:9A:D1:B6:DE
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/7PutwkgnfvowI_tQfr6TJJrRtt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:e380::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:43:0b:f0:c0:77:00:5e:74:c2:5e:ef:90:e7:d2:23:07:
         ec:8e:dc:83:c5:bb:15:e2:c3:0a:ae:82:4b:13:49:86:1a:fb:
         5a:3f:c9:80:47:41:0b:24:45:a7:56:32:7a:42:0c:07:24:47:
         a9:e8:2a:ba:b0:cd:ee:cb:46:6d:02:e5:18:cd:9c:de:c1:69:
         cd:ec:ef:cb:87:83:f8:22:81:d4:d4:25:2e:bf:b7:dd:ee:2f:
         9f:02:0c:fb:6d:8f:66:ce:99:97:03:e0:61:d7:f2:08:18:b1:
         44:50:62:73:6a:17:ab:05:7a:55:18:93:59:4d:ef:06:8c:42:
         1c:99:27:73:3b:74:b3:34:56:02:7a:f6:b9:ed:10:60:6f:5d:
         16:54:61:f3:36:bc:b2:62:f3:f5:44:a1:62:90:e2:de:04:b0:
         26:62:cd:ee:ca:9f:29:c4:19:5d:cb:5e:e4:c5:40:95:76:0e:
         1c:17:58:35:5b:dd:80:15:76:66:15:44:dc:bd:a2:ad:87:be:
         73:96:e5:18:18:b7:66:b9:cd:49:13:37:d2:71:a3:0b:4c:1c:
         ab:1d:fc:3d:d7:01:10:d3:cb:d0:ec:81:c7:c4:d9:52:32:a3:
         46:7f:7e:9e:9b:90:37:91:0b:07:c8:1f:5e:84:f3:f3:85:b6:
         c7:45:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----