Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/h8j11p64Z9_z8HHELjyY3QSrigA.roa
File:                     h8j11p64Z9_z8HHELjyY3QSrigA.roa (raw, json)
Hash identifier:          Z5wBa7TiuKBzruhSy8pxRrMbO2P1N8AfKWDXuG7Y5ns=
Subject key identifier:   87:C8:F5:D6:9E:B8:67:DF:F3:F0:71:C4:2E:3C:98:DD:04:AB:8A:00
Certificate issuer:       /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial:       018B28FE4A1271E93742C6702412A771175D
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/h8j11p64Z9_z8HHELjyY3QSrigA.roa
Signing time:             Fri 13 Oct 2023 12:23:55 +0000
ROA not before:           Fri 13 Oct 2023 12:23:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49542
IP address blocks:        2a0e:dfc5::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:28:fe:4a:12:71:e9:37:42:c6:70:24:12:a7:71:17:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
        Validity
            Not Before: Oct 13 12:23:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87c8f5d69eb867dff3f071c42e3c98dd04ab8a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bf:50:9c:c0:9a:5f:f6:d2:6a:64:89:6b:d0:
                    9b:cb:47:ae:32:e9:1d:ac:15:c6:23:72:f2:f4:26:
                    cf:56:66:c1:00:1e:ab:b6:67:1d:fd:43:35:75:7c:
                    09:51:e5:34:ac:1b:8e:06:b5:e4:2f:9f:0a:73:37:
                    e9:e4:73:7e:4c:0c:09:a7:d9:7c:57:5d:eb:b0:8b:
                    96:99:ca:90:53:96:98:53:46:f6:40:45:f7:d8:5f:
                    33:07:dc:45:ef:24:64:be:b7:1e:9a:f8:ca:5c:e2:
                    78:18:cf:3a:62:46:da:12:a3:cd:90:b0:bf:32:a1:
                    9c:7f:1a:12:d2:d1:d5:9b:18:2f:2b:d9:b5:0f:83:
                    08:b3:3a:f4:14:e2:e0:df:31:e9:af:f8:1c:35:04:
                    f5:f3:84:d1:4d:01:36:20:52:72:94:75:5b:b5:2a:
                    f9:74:34:4f:ea:a8:54:63:f4:5e:9a:ba:35:64:af:
                    f2:51:94:5d:5a:28:98:9a:f1:a6:38:2d:7e:95:ba:
                    3b:0a:2e:93:95:5a:c8:53:44:8b:36:0e:2b:f7:0a:
                    d0:ca:dd:08:d3:40:ac:93:c0:1c:b5:35:7f:d8:2a:
                    21:6f:bc:8b:e3:fc:28:bd:e7:17:9f:86:01:be:ab:
                    d3:05:67:58:0e:3a:ff:36:bf:1b:a2:e5:b7:8e:0f:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C8:F5:D6:9E:B8:67:DF:F3:F0:71:C4:2E:3C:98:DD:04:AB:8A:00
            X509v3 Authority Key Identifier:
                keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/h8j11p64Z9_z8HHELjyY3QSrigA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:dfc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ff:61:cf:1e:1a:48:ad:e9:5c:8a:ef:29:66:7f:be:74:72:
         1c:89:ad:5c:1d:78:69:71:fb:12:12:cf:1c:37:92:72:1d:19:
         3f:a6:a9:c2:76:b5:e8:4a:a0:51:a8:2d:60:24:fd:00:ee:ce:
         e0:1b:56:91:ce:55:96:e3:c5:93:c5:5f:aa:46:31:13:41:c8:
         5f:23:8c:a8:01:01:d1:ab:95:71:42:36:a0:96:4d:ec:41:8c:
         5d:74:78:0b:14:9b:97:26:1f:ef:4a:31:19:b9:ee:c8:6c:f7:
         b3:59:ee:e1:dd:b4:da:5d:61:94:65:ff:64:e9:b0:a7:40:a6:
         6b:28:ba:61:59:23:f8:76:14:ad:72:52:c0:9f:80:a2:15:df:
         f8:a6:97:b4:77:2a:56:28:79:a3:bd:68:8f:1b:5a:6b:1d:f7:
         91:5e:e7:c5:3f:00:1a:dc:83:86:b6:04:48:8a:3f:01:e7:47:
         bb:9e:77:dc:d7:96:94:a5:01:c8:26:92:c2:21:17:7e:4d:f8:
         f6:34:c6:6e:59:6d:fd:9b:29:d5:8c:16:6c:93:48:f3:b4:7b:
         6c:79:d4:8c:6c:6f:88:76:a8:20:dc:48:42:14:04:3d:56:0c:
         b8:97:d2:99:20:21:0b:eb:ea:bb:13:ed:46:b7:fb:1e:c9:ad:
         c4:1c:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----