Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wSveqLEZpRJ5f0n6DgyTYytrQTA.roa
File:                     wSveqLEZpRJ5f0n6DgyTYytrQTA.roa (raw, json)
Hash identifier:          XTNXRJ7B3yimh7nFxQz9i1Z9OH/uepVpLIO0D1wZXiU=
Subject key identifier:   C1:2B:DE:A8:B1:19:A5:12:79:7F:49:FA:0E:0C:93:63:2B:6B:41:30
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       01858218377C76632357A3848B1E92245232
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wSveqLEZpRJ5f0n6DgyTYytrQTA.roa
Signing time:             Thu 05 Jan 2023 13:21:43 +0000
ROA not before:           Thu 05 Jan 2023 13:21:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208249
IP address blocks:        2a06:1e81::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:82:18:37:7c:76:63:23:57:a3:84:8b:1e:92:24:52:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan  5 13:21:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c12bdea8b119a512797f49fa0e0c93632b6b4130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:94:93:81:88:cb:f5:90:f6:b6:71:4c:f3:
                    dc:6a:f5:2e:d5:29:06:b0:2c:5a:6e:52:a0:34:32:
                    e5:6a:55:65:7e:d4:43:1f:28:95:09:f4:9b:dc:fb:
                    b2:64:1a:28:bd:3c:a8:cc:ac:c5:6b:e7:c1:d2:47:
                    eb:6b:47:9b:dd:14:c6:e2:10:c2:ec:54:b8:5f:a5:
                    28:6e:82:bd:65:93:f9:3b:f5:91:ec:dd:20:21:30:
                    74:1c:54:ca:7a:a9:5a:c8:fe:10:63:79:1a:86:ab:
                    1f:f7:86:ba:12:be:5c:79:4f:95:14:22:18:eb:70:
                    9c:b9:92:35:70:7f:1e:26:8f:69:3d:1d:7a:9f:d7:
                    df:00:5e:ed:a3:90:95:c2:9e:7d:72:06:5d:3e:40:
                    37:fd:8e:61:f7:f8:8f:5b:76:65:4b:fb:c9:4e:0f:
                    70:0d:ad:5d:87:49:59:ca:0f:28:41:03:82:31:22:
                    df:ac:91:6f:f7:af:1c:21:84:5d:53:af:02:b5:e9:
                    6e:f0:da:e7:99:69:d0:82:43:fc:42:83:a5:65:74:
                    0f:b3:f1:76:47:27:c2:ee:ea:5c:24:a2:50:72:65:
                    1a:f3:fb:74:14:83:50:90:89:c8:94:3a:69:ab:31:
                    29:9e:b9:cc:f6:90:57:5a:67:b2:4b:8b:43:61:13:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2B:DE:A8:B1:19:A5:12:79:7F:49:FA:0E:0C:93:63:2B:6B:41:30
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wSveqLEZpRJ5f0n6DgyTYytrQTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1e81::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:de:fe:12:27:1b:af:93:03:22:28:41:f1:02:6e:99:52:
         cd:80:7a:28:c1:7f:29:1e:a5:15:51:eb:fa:32:39:9e:b0:b2:
         83:67:2f:b9:b1:2c:5e:5f:66:df:0e:66:5b:6e:8b:bf:75:8a:
         02:af:db:ff:eb:75:b4:95:00:a9:2d:04:3d:1b:b1:07:ce:9b:
         74:51:00:dd:ee:fe:40:74:a9:6f:73:5a:6b:f3:0d:34:3c:05:
         5d:53:53:de:9d:f5:09:0d:ea:39:d7:04:75:b4:90:da:ce:ce:
         ee:64:0f:0e:bd:f5:c8:3e:65:0d:40:46:bd:dd:e9:f1:4b:56:
         ab:59:4d:3d:15:36:7c:fe:98:66:9a:8f:d2:05:78:8f:19:9a:
         46:ad:22:87:cb:21:c0:e7:41:18:7a:6f:5f:80:ac:26:e2:18:
         38:14:b9:9a:67:2a:b2:9c:af:d3:92:bb:dc:dd:df:0b:a7:da:
         56:fb:29:7d:ab:58:23:55:99:b0:49:cc:40:c8:e4:dd:8c:79:
         72:c4:b7:ae:59:2b:ff:ac:79:9b:d4:3e:95:a4:fc:e5:12:f8:
         0c:90:e6:84:1b:65:60:2c:4d:3e:47:d8:92:9c:48:d3:96:8f:
         af:ef:69:2c:83:ea:3c:96:41:d0:ef:b8:16:4b:8a:19:38:a4:
         b0:8d:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----