Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xSxZ6_X6gweyHHAx_lJPVSJjHH4.roa
File:                     xSxZ6_X6gweyHHAx_lJPVSJjHH4.roa (raw, json)
Hash identifier:          x4+L6KCzCmlY/1i+OTJmAnvh3Jq+0l4Fi0WqzMV5NKc=
Subject key identifier:   C5:2C:59:EB:F5:FA:83:07:B2:1C:70:31:FE:52:4F:55:22:63:1C:7E
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018573900572650DBF69DF6119E0325C66CB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xSxZ6_X6gweyHHAx_lJPVSJjHH4.roa
Signing time:             Mon 02 Jan 2023 17:38:16 +0000
ROA not before:           Mon 02 Jan 2023 17:38:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209556
IP address blocks:        2a0b:b86:ffe0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:90:05:72:65:0d:bf:69:df:61:19:e0:32:5c:66:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 17:38:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c52c59ebf5fa8307b21c7031fe524f5522631c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:78:a1:db:da:60:3c:72:91:06:6f:51:5e:
                    f2:bc:fa:eb:65:48:80:41:e2:9b:ab:27:df:d0:b4:
                    c4:9d:37:50:d1:cb:da:f6:65:f4:9f:b4:cd:01:ca:
                    11:d3:fc:81:99:aa:89:91:ad:fe:fe:82:0d:54:2e:
                    13:1d:90:0f:90:39:83:35:d4:40:18:7f:91:96:31:
                    7b:ef:ca:71:ed:9b:10:dc:f2:7b:96:d3:2c:9f:57:
                    66:4c:06:83:fa:32:3f:0f:77:d1:6f:9c:55:b0:68:
                    28:7b:9f:d0:c8:cc:8f:48:a9:91:73:30:63:40:aa:
                    2a:24:3f:de:ca:52:ee:de:98:f9:09:2d:5b:e0:b6:
                    7e:de:8a:6f:46:e2:37:aa:80:bc:18:1b:44:39:3d:
                    57:f1:0b:e8:40:a0:87:d5:e8:aa:bf:8f:9d:18:d0:
                    cb:e9:47:85:00:32:05:ea:78:66:a8:ed:25:9a:26:
                    22:95:5e:2e:89:8c:ad:11:41:27:80:fa:ef:fc:e8:
                    19:21:6b:d3:51:a3:f0:f2:6f:d7:a2:44:c6:1e:6a:
                    ed:de:13:b0:1a:ea:95:60:e0:8d:f4:d1:cf:9f:16:
                    13:99:34:d8:41:a0:24:8b:13:92:6b:ea:16:e5:9e:
                    28:ba:f8:69:2d:b0:ae:84:f2:f9:28:05:f1:5a:84:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:59:EB:F5:FA:83:07:B2:1C:70:31:FE:52:4F:55:22:63:1C:7E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xSxZ6_X6gweyHHAx_lJPVSJjHH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b86:ffe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:56:c5:b5:12:d4:b2:63:35:4e:49:c2:ed:02:63:b0:c4:35:
         b7:43:ca:57:e1:35:66:ea:83:28:46:fe:e5:f2:92:c7:c1:f9:
         2c:50:dc:78:2e:01:c1:a1:1d:cb:93:de:81:17:3f:36:a3:e1:
         37:de:64:80:9e:ef:4f:3e:cc:fe:59:7b:66:bb:b5:38:1a:ae:
         c0:78:b5:ac:db:55:0f:64:47:d2:c9:06:c9:18:47:14:04:d7:
         b7:24:3d:3b:4e:5f:ae:ff:43:52:31:af:88:a9:97:19:d0:a9:
         b9:98:d7:ba:84:61:57:42:c2:29:06:2e:f4:5f:23:24:1d:f8:
         b9:05:9b:98:73:c0:93:18:ef:b6:34:15:b2:e2:14:2b:07:e1:
         44:1f:95:5b:26:3e:bf:dd:b9:cd:d1:b1:fb:87:fd:8f:8d:b3:
         fb:e7:f9:f6:34:05:6e:88:25:13:43:9b:00:5e:d9:62:ff:9b:
         d4:27:f7:a1:87:26:af:47:48:e8:dd:60:c0:30:0b:cc:df:a8:
         fb:29:a2:fb:3e:f0:11:a8:e2:60:4c:c2:bc:2a:de:ad:6d:57:
         b8:d0:fa:39:be:a2:b4:59:00:75:f2:49:9e:8e:a9:68:85:ec:
         e2:13:45:d1:fc:cb:40:93:44:cc:69:86:91:4d:41:ec:ae:c3:
         7b:bb:26:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----