Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/iq2FO6eU6e0TmFjOJkJUgITVKjM.roa
File:                     iq2FO6eU6e0TmFjOJkJUgITVKjM.roa (raw, json)
Hash identifier:          UUpEM7ZXMw3TMnlwnNtqGk2bhj5I0BtfyJmhGadIQzU=
Subject key identifier:   8A:AD:85:3B:A7:94:E9:ED:13:98:58:CE:26:42:54:80:84:D5:2A:33
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0189B8C88C7EE602B5F0D864EAF41B14D5DC
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/iq2FO6eU6e0TmFjOJkJUgITVKjM.roa
Signing time:             Thu 03 Aug 2023 00:24:58 +0000
ROA not before:           Thu 03 Aug 2023 00:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211522
IP address blocks:        2a05:4145:1::/48 maxlen: 48
                          2a05:4145::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b8:c8:8c:7e:e6:02:b5:f0:d8:64:ea:f4:1b:14:d5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Aug  3 00:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8aad853ba794e9ed139858ce2642548084d52a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:18:34:f5:64:e7:c4:ad:09:bd:cd:8c:14:
                    f5:2b:87:2d:a5:a6:5b:54:4c:4b:da:25:88:97:01:
                    92:f6:5f:7b:58:a9:37:8e:8f:be:1a:6b:37:b7:85:
                    b9:4c:94:57:32:7d:d4:d9:44:05:de:25:24:f0:a8:
                    0b:af:45:91:93:64:64:ca:db:60:e3:f2:b5:ee:f0:
                    17:b6:b3:cc:09:d3:40:6b:ed:11:5a:fe:e7:ac:53:
                    57:39:8b:88:82:99:f7:a7:cf:9a:5d:af:06:df:5e:
                    f6:d1:18:4e:7b:64:21:f1:23:41:35:f6:27:47:ee:
                    0e:44:58:44:5a:ee:68:ad:f0:f9:7f:54:a1:9c:c2:
                    a2:ea:94:75:6c:4b:ca:c5:d3:25:dc:b5:8d:2d:4f:
                    0e:c1:18:a3:80:e5:5f:8a:52:f9:cf:34:36:7e:3e:
                    48:50:7d:8b:95:9b:ea:4d:fc:3f:8c:94:39:8f:db:
                    ab:8a:f7:c4:5d:5c:d2:0b:cb:43:e9:bf:45:02:ac:
                    93:0d:5b:8a:f2:51:ae:10:5c:0e:a7:95:c6:0e:96:
                    a3:86:e3:98:b6:0f:3c:f8:4b:eb:0b:76:87:d9:ea:
                    02:4a:a1:85:62:87:91:f0:52:8e:be:ca:0f:02:d4:
                    d7:22:20:5f:8f:fd:d0:f9:98:bc:60:b0:d6:e6:16:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:85:3B:A7:94:E9:ED:13:98:58:CE:26:42:54:80:84:D5:2A:33
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/iq2FO6eU6e0TmFjOJkJUgITVKjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4145::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:7d:e8:c6:bd:72:fb:00:70:22:ce:02:38:b8:81:1c:ea:
         8d:e1:14:2a:64:1b:ff:84:ff:5b:0c:05:f4:f9:a2:f0:c1:a5:
         24:9e:9c:be:59:95:f4:df:0b:5a:58:1c:75:fb:d4:b3:41:8e:
         52:cb:49:8a:97:2c:70:a2:f5:ee:08:d9:20:96:ee:35:70:7a:
         be:53:9b:29:b0:6b:b3:4c:38:ab:8f:a8:0b:db:73:4f:d7:b1:
         7d:27:ed:d7:5a:92:55:c2:df:54:7e:7d:55:30:31:b1:3b:66:
         4a:d5:29:d7:7d:6b:43:0d:f4:35:d5:32:77:63:bf:56:0d:5c:
         b9:28:b0:54:6b:b5:f1:ee:2c:c1:ec:3b:f7:b4:1d:b2:c8:f9:
         c5:1a:1b:d1:89:b0:e2:37:54:c9:a0:c0:7e:0f:a6:6b:32:87:
         7c:f4:39:04:18:aa:ba:65:e6:fd:f0:1a:b0:e5:08:fe:93:76:
         e8:24:d6:95:36:59:49:d2:35:62:25:f4:44:ec:3d:ee:63:4e:
         e3:ef:4e:3d:de:8e:4c:50:8d:b1:69:76:bb:49:d2:f6:19:32:
         15:76:ce:0c:60:1e:f0:8a:bc:41:c5:e2:e7:b1:a3:4f:7d:b0:
         c3:74:56:c6:3d:f2:96:c3:87:3c:be:26:ea:ab:c5:e7:28:a6:
         42:33:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----