Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bEyTdZGK683eGXe9_Uwc_PTaqJc.roa
File:                     bEyTdZGK683eGXe9_Uwc_PTaqJc.roa (raw, json)
Hash identifier:          u26mNIHFDnPj2u5NOQC0B/YiOGybfA5rY0aLRc15uU4=
Subject key identifier:   6C:4C:93:75:91:8A:EB:CD:DE:19:77:BD:FD:4C:1C:FC:F4:DA:A8:97
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018570B0732D592CC811DE8157CD5804616B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bEyTdZGK683eGXe9_Uwc_PTaqJc.roa
Signing time:             Mon 02 Jan 2023 04:14:50 +0000
ROA not before:           Mon 02 Jan 2023 04:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52209
IP address blocks:        62.60.200.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b0:73:2d:59:2c:c8:11:de:81:57:cd:58:04:61:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 04:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c4c9375918aebcdde1977bdfd4c1cfcf4daa897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:65:00:34:c4:a9:d4:c3:5e:67:3b:dd:50:
                    6d:a9:b4:68:63:aa:d1:92:2a:49:d7:85:dc:6e:98:
                    a7:43:0e:c5:b6:9b:13:d5:85:92:b4:88:5f:37:fe:
                    3e:06:b0:5a:59:bb:54:8d:fb:5c:87:73:2c:73:ad:
                    b4:ff:d0:b8:4b:4b:cb:82:07:96:b5:d2:26:76:ba:
                    02:4e:ad:d4:1d:db:2f:bb:40:c4:24:93:bd:de:22:
                    d1:47:ef:c8:fb:b5:4a:e0:cc:bb:c5:ef:ef:7e:45:
                    e7:9f:ee:65:73:f5:65:17:7c:57:57:7d:d3:b8:7a:
                    29:87:94:b7:9e:2c:64:8f:3f:b5:d1:6c:6f:80:5e:
                    54:98:69:fa:1e:1d:c6:e1:26:48:ea:56:93:ab:40:
                    29:f0:ef:fa:d6:79:6e:89:11:9a:cd:32:d6:04:b5:
                    00:d2:5c:2b:b5:80:d8:97:e7:30:46:3c:6d:48:50:
                    d8:b2:e1:7d:b5:ab:a4:b1:93:3e:fc:7a:b3:50:3b:
                    3d:8e:30:c3:7d:d1:e4:a5:de:ff:97:a4:da:24:7c:
                    d5:6f:58:a4:57:34:d1:4c:9a:ba:f2:cb:1c:04:28:
                    77:0d:e1:2d:7b:f1:70:3a:53:51:75:79:4d:4e:0a:
                    39:9a:20:a1:c3:d8:69:5c:0d:73:1e:da:97:ed:a7:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4C:93:75:91:8A:EB:CD:DE:19:77:BD:FD:4C:1C:FC:F4:DA:A8:97
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bEyTdZGK683eGXe9_Uwc_PTaqJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:dd:9e:85:a4:06:27:c1:6c:d2:08:48:51:45:c3:3a:f4:
         3b:fc:ec:fb:01:e5:cd:8f:a0:de:6d:e7:85:70:78:58:18:6d:
         99:a7:8d:59:3c:d8:53:35:49:ef:1c:33:4c:b5:48:d1:30:fe:
         6e:c6:85:92:43:01:fc:23:fa:2f:db:6c:18:e9:15:00:7c:53:
         da:18:d2:cc:98:e1:43:95:64:6f:10:4d:93:03:de:39:88:5f:
         82:8f:5e:e9:17:81:7a:73:c6:3f:21:a4:45:b1:a9:81:47:f4:
         1f:f0:72:b5:ef:fe:2c:03:f3:4f:72:ae:9f:07:70:d1:da:d5:
         e2:9f:f0:23:13:8c:85:66:9a:44:1f:99:c9:cd:70:20:7d:13:
         ab:0c:9b:36:d7:70:10:95:a5:ea:05:2f:b6:f6:35:b7:84:b6:
         5f:b6:5f:5b:25:ef:fe:ee:31:af:23:f7:b2:9e:92:d4:2a:50:
         00:62:cc:f9:b7:66:35:f7:12:93:f7:5e:49:e9:9b:0b:11:7c:
         64:6e:70:6c:bb:bc:09:32:0d:2e:57:75:20:73:68:76:f2:a5:
         da:16:99:49:f2:56:8c:66:53:98:1a:4c:cf:ee:5c:ad:12:6c:
         33:52:32:53:81:cf:d1:bb:ec:88:91:0e:63:00:4f:0d:02:a1:
         9c:fb:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----