Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa
File:                     VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa (raw, json)
Hash identifier:          TCQSL30IW5nmSH9ME5qogfonlzyujj5Ikdat+QwCtKY=
Subject key identifier:   55:C5:F1:2F:70:29:C4:EB:D6:7C:8C:EB:64:10:4F:CC:40:D4:9C:6A
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       018AAE824F2D87D2DC85C70C2C9DCD0DBE12
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa
Signing time:             Tue 19 Sep 2023 17:34:50 +0000
ROA not before:           Tue 19 Sep 2023 17:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202525
IP address blocks:        2001:67c:c00::/48 maxlen: 48
                          2a13:d040::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ae:82:4f:2d:87:d2:dc:85:c7:0c:2c:9d:cd:0d:be:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Sep 19 17:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55c5f12f7029c4ebd67c8ceb64104fcc40d49c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:af:87:b3:23:b0:20:ca:29:86:2d:b9:54:
                    a6:c3:b6:fc:a9:41:d8:ed:f4:c1:4f:15:06:a7:bb:
                    52:9b:0d:fa:5c:93:fd:28:06:12:9f:86:6b:02:16:
                    2f:16:fd:4d:5e:df:05:a2:fc:f4:0e:09:3a:6b:78:
                    1e:bb:4b:9f:01:66:fa:15:b1:cc:c4:ca:ef:61:3e:
                    36:3b:4a:67:9e:ff:42:9f:b7:6c:0d:aa:f0:6d:da:
                    2a:fa:28:38:8b:cc:63:38:dc:00:a3:10:bb:f0:6e:
                    e1:b4:c5:c0:25:61:8e:3e:17:73:df:95:d6:2a:4b:
                    e9:f6:5d:ff:14:a7:89:7d:bf:38:41:31:fa:c0:46:
                    b4:35:ec:81:db:1d:04:00:54:0d:b3:bd:7a:eb:84:
                    64:cb:8a:46:f0:ed:47:7e:b4:f1:35:9a:01:84:4a:
                    e8:3e:1f:52:52:87:7f:93:07:be:4b:2f:9a:7e:ef:
                    c7:eb:e4:b5:20:eb:6c:fe:68:68:c1:c3:0c:4d:ac:
                    49:42:df:b4:3c:dd:61:af:76:e9:93:23:b4:92:c2:
                    6e:1e:ee:54:07:06:ff:18:ee:c2:e4:df:04:be:ad:
                    88:2c:69:33:b6:29:86:d9:c6:b8:61:81:64:d9:ad:
                    92:7f:49:1c:11:4b:e2:d9:a8:59:52:86:4d:8e:18:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:F1:2F:70:29:C4:EB:D6:7C:8C:EB:64:10:4F:CC:40:D4:9C:6A
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:c00::/48
                  2a13:d040::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:80:34:f9:31:db:08:f8:c7:5f:22:a5:95:88:cd:00:29:fe:
         58:f0:1e:2b:f3:ad:f9:e4:30:5a:b7:5d:0b:52:2d:92:cc:cf:
         04:0f:e1:1c:66:f4:fb:a8:6e:9b:74:49:88:97:55:f4:ff:5a:
         c9:9e:c7:31:05:b7:da:c3:7f:82:05:99:a3:b5:c2:cb:81:43:
         41:75:bc:fc:36:b6:d3:50:61:58:80:06:ad:66:97:60:d5:ac:
         a5:83:1a:84:2d:f7:2f:88:5a:c6:df:2f:95:0a:86:3e:56:8b:
         40:53:74:12:db:10:c9:fb:02:97:5e:ad:e4:c9:a5:d1:35:2e:
         af:48:e8:c7:d7:fe:25:6f:60:0d:cb:32:05:8a:15:c6:02:e8:
         9e:84:ab:8a:6c:aa:0f:e5:62:37:eb:9c:5c:6e:31:f3:bd:24:
         4b:8f:05:cd:f6:46:f1:39:0c:f4:a4:76:45:e2:b3:58:46:c9:
         10:d5:81:16:74:f0:c1:32:08:1e:2e:4a:9a:da:cf:04:0e:86:
         d0:1b:89:98:d0:3b:3c:1f:4d:44:89:db:2a:4a:43:a2:c0:d1:
         e3:e6:19:93:0a:6c:60:3d:ed:c9:92:48:c0:78:7c:d6:0b:6e:
         04:bf:73:22:9e:b7:b7:9d:85:c0:22:c7:ed:8e:fa:5c:3f:4f:
         72:84:c0:bc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYqugk8th9LchccMLJ3NDb4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy
MDRiYWMwHhcNMjMwOTE5MTczNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWM1ZjEyZjcwMjljNGViZDY3YzhjZWI2NDEwNGZjYzQwZDQ5YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA056vh7MjsCDKKYYtuVSmw7b8qUHY
7fTBTxUGp7tSmw36XJP9KAYSn4ZrAhYvFv1NXt8Fovz0Dgk6a3geu0ufAWb6FbHM
xMrvYT42O0pnnv9Cn7dsDarwbdoq+ig4i8xjONwAoxC78G7htMXAJWGOPhdz35XW
Kkvp9l3/FKeJfb84QTH6wEa0NeyB2x0EAFQNs71664Rky4pG8O1HfrTxNZoBhEro
Ph9SUod/kwe+Sy+afu/H6+S1IOts/mhowcMMTaxJQt+0PN1hr3bpkyO0ksJuHu5U
Bwb/GO7C5N8Evq2ILGkztimG2ca4YYFk2a2Sf0kcEUvi2ahZUoZNjhgPlQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFXF8S9wKcTr1nyM62QQT8xA1JxqMB8GA1UdIwQY
MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt
MzVjNjNmYTc2NWEyLzEvVmNYeEwzQXB4T3ZXZkl6clpCQlB6RURVbkdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy
LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfAwA
AwcAKhPQQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAKgDT5MdsI+MdfIqWViM0AKf5Y
8B4r86355DBat10LUi2SzM8ED+EcZvT7qG6bdEmIl1X0/1rJnscxBbfaw3+CBZmj
tcLLgUNBdbz8NrbTUGFYgAatZpdg1aylgxqELfcviFrG3y+VCoY+VotAU3QS2xDJ
+wKXXq3kyaXRNS6vSOjH1/4lb2ANyzIFihXGAuiehKuKbKoP5WI365xcbjHzvSRL
jwXN9kbxOQz0pHZF4rNYRskQ1YEWdPDBMggeLkqa2s8EDobQG4mY0Ds8H01Eidsq
SkOiwNHj5hmTCmxgPe3JkkjAeHzWC24Ev3Minre3nYXAIsftjvpcP09yhMC8
-----END CERTIFICATE-----