Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Neb-rK8IJ2vZFhfqD8PpE89PMqo.roa
File:                     Neb-rK8IJ2vZFhfqD8PpE89PMqo.roa (raw, json)
Hash identifier:          UExoEtaPwJe8KF9F8lBMYR0ZfIWoHRkgs9Wpw0gSO88=
Subject key identifier:   35:E6:FE:AC:AF:08:27:6B:D9:16:17:EA:0F:C3:E9:13:CF:4F:32:AA
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       01856F42A05704B23F9A901A02A15AEBF555
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Neb-rK8IJ2vZFhfqD8PpE89PMqo.roa
Signing time:             Sun 01 Jan 2023 21:35:15 +0000
ROA not before:           Sun 01 Jan 2023 21:35:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211188
IP address blocks:        2a05:4140:6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:a0:57:04:b2:3f:9a:90:1a:02:a1:5a:eb:f5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 21:35:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=35e6feacaf08276bd91617ea0fc3e913cf4f32aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:fd:a6:c9:08:88:5b:6f:56:b7:2f:f5:13:
                    19:3f:93:e9:33:3b:b2:7c:3e:f5:93:2b:fc:10:83:
                    1a:7b:bf:39:9c:31:0e:34:55:66:00:c1:08:b1:72:
                    16:e1:dd:54:3e:e5:05:63:ed:a9:23:b8:77:7d:31:
                    a1:27:90:3f:6a:3b:ab:0f:6f:c0:a2:03:e6:e2:8b:
                    cd:ba:05:cb:26:53:42:53:78:50:ae:42:a8:f1:a8:
                    df:17:47:46:68:ac:b5:90:50:a8:c6:fb:8a:c7:f2:
                    f5:16:00:52:98:aa:1c:9c:9f:70:0f:a3:a5:e9:56:
                    9b:c3:c7:ba:2d:bc:1b:87:26:9a:19:44:82:e2:a8:
                    07:d3:11:ee:b7:f4:89:1c:cf:99:c9:f4:85:4b:d5:
                    39:22:20:b8:b0:81:2b:cd:a0:44:7a:71:70:8f:f2:
                    b8:e3:34:d4:65:19:47:ff:a3:61:45:f3:f4:0a:cd:
                    e4:e0:94:c6:de:3b:f4:2d:94:57:51:31:8c:b5:57:
                    b5:c1:e8:ae:71:23:da:26:5a:9d:e0:84:82:91:ed:
                    93:96:6d:be:57:1d:d3:52:c9:4d:42:cf:b7:a9:5d:
                    d1:56:56:1b:fb:96:6f:f0:98:7d:fa:a0:d0:23:97:
                    2d:6b:b2:7f:5a:9b:bc:49:61:77:28:27:e8:cf:b9:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:FE:AC:AF:08:27:6B:D9:16:17:EA:0F:C3:E9:13:CF:4F:32:AA
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Neb-rK8IJ2vZFhfqD8PpE89PMqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:33:bd:77:df:3f:92:c4:f7:07:3c:0b:34:73:f0:5c:73:e3:
         dd:52:87:0d:95:d7:cc:27:e7:f3:5a:44:b7:dc:da:47:5a:bc:
         cd:d6:c3:56:31:ca:88:40:3b:a6:1b:07:d8:c3:bc:e1:6e:a0:
         25:9a:26:ec:12:27:07:03:0c:c0:ed:c4:7e:71:60:af:17:b3:
         a3:e6:67:d1:43:6b:e5:a2:7c:bd:70:27:16:55:b1:5c:4f:74:
         46:70:5c:ec:19:33:26:40:34:46:38:73:54:6b:08:87:f0:f4:
         2d:e6:f6:c7:54:0e:1c:26:f0:a4:6d:a4:ed:5f:6c:e3:73:ca:
         c4:df:01:65:d7:be:40:ba:78:e6:98:7d:34:49:07:1a:b1:9f:
         9f:5f:18:66:d8:90:44:04:35:93:5e:d4:87:51:5f:49:25:04:
         d0:d2:8f:ac:a6:53:aa:13:ab:76:af:5b:61:8d:c1:8a:a8:a2:
         07:82:21:af:91:6d:1e:63:21:4c:d8:fc:79:39:44:55:6b:dd:
         ae:21:20:92:95:5b:88:55:6a:1c:93:d8:58:40:af:1c:2f:f3:
         2a:14:c8:04:db:82:37:18:b5:f4:b7:5f:7e:96:8d:0f:27:39:
         b0:4e:77:34:97:27:a1:33:3d:77:2d:ac:a6:a0:e5:69:8c:4a:
         74:82:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----