Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/j-DGttNi8NdIRyPnQhN5tYA_s94.roa
File:                     j-DGttNi8NdIRyPnQhN5tYA_s94.roa (raw, json)
Hash identifier:          GVGmYX03PLFAXXKWWk2arFY4AgBNUSEfYxwbNoU8lFM=
Subject key identifier:   8F:E0:C6:B6:D3:62:F0:D7:48:47:23:E7:42:13:79:B5:80:3F:B3:DE
Certificate issuer:       /CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Certificate serial:       0185707070A621F76410EF11C37179A51484
Authority key identifier: E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/j-DGttNi8NdIRyPnQhN5tYA_s94.roa
Signing time:             Mon 02 Jan 2023 03:04:55 +0000
ROA not before:           Mon 02 Jan 2023 03:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211603
IP address blocks:        2a12:8540::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:70:a6:21:f7:64:10:ef:11:c3:71:79:a5:14:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
        Validity
            Not Before: Jan  2 03:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8fe0c6b6d362f0d7484723e7421379b5803fb3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:06:28:42:92:71:89:aa:c7:c0:2a:34:a5:
                    fd:47:f6:62:ef:d2:54:19:90:49:05:f9:0a:12:4c:
                    51:3f:0d:1a:5b:0c:eb:4e:0d:58:08:ed:3d:74:67:
                    70:91:3b:72:96:04:35:ac:1f:89:1f:e6:55:3a:a8:
                    d0:0d:73:f8:89:cb:44:23:e6:94:cb:91:63:77:b8:
                    78:2e:0e:4e:d5:c4:d2:4b:f1:2f:f8:1e:36:7e:75:
                    50:f2:a7:85:6f:2b:25:59:bf:36:88:51:5d:c4:d1:
                    d0:ef:cf:e0:ec:d7:e3:59:35:7c:c7:02:6d:d0:9d:
                    e5:ef:1a:34:e6:35:7b:4e:7c:d7:b6:f8:82:d0:b6:
                    5f:0a:d4:f0:93:b7:69:75:34:a1:65:be:f6:d7:47:
                    7d:6a:b0:06:3d:09:8b:a7:d5:c5:72:00:4e:60:aa:
                    6c:52:55:bf:67:f5:52:43:1f:d0:c2:c0:19:8c:00:
                    2f:78:2c:25:67:0b:65:29:4d:39:4a:3c:ca:63:0b:
                    24:09:5c:75:56:1a:1c:e7:c3:35:f1:45:58:70:d8:
                    f6:0d:91:a2:10:90:85:d7:75:76:4e:af:57:56:5c:
                    b4:b7:34:dd:d1:42:77:89:2a:96:bf:ed:3a:4d:a7:
                    7b:56:74:e3:12:d1:b7:98:6b:69:ad:1d:32:1c:3c:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:C6:B6:D3:62:F0:D7:48:47:23:E7:42:13:79:B5:80:3F:B3:DE
            X509v3 Authority Key Identifier:
                keyid:E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/j-DGttNi8NdIRyPnQhN5tYA_s94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8540::/29

    Signature Algorithm: sha256WithRSAEncryption
         4d:38:cc:72:43:48:b1:48:cf:96:cb:07:c7:2d:12:ba:ed:d4:
         e6:ef:83:64:1a:9d:ef:9d:39:79:d3:70:05:f8:31:53:86:8b:
         c5:5c:9f:ba:99:a2:98:0a:64:69:a4:16:9f:a0:f3:76:be:e6:
         78:bb:be:90:ec:b9:a1:b8:98:ad:2f:26:fe:f8:d7:58:85:a5:
         f0:e2:96:2d:83:fa:48:2b:e2:8a:be:b3:eb:79:37:ad:8c:bd:
         d5:37:8e:ef:c1:56:17:4c:ed:4a:56:d5:65:66:a5:73:7a:7f:
         f9:a1:31:bb:9e:b3:05:2e:a8:d9:2c:1c:e7:09:d9:71:30:d8:
         15:9f:31:17:00:3e:44:af:29:50:81:d6:b0:40:03:c7:55:cd:
         f7:4a:51:bc:eb:fc:a1:e2:19:a7:17:e1:22:9e:f0:c8:eb:eb:
         68:46:06:23:0b:4c:94:1d:23:18:20:28:9e:20:05:53:ab:ee:
         e7:01:d6:c9:7a:bb:4f:88:5b:dc:22:87:f8:91:58:c9:ea:76:
         e0:6b:1f:3b:b6:15:8a:a9:04:48:09:3a:c0:34:57:7e:ac:5e:
         a7:bb:1f:a6:24:51:1c:4c:5b:85:ea:af:b5:ce:df:66:88:c1:
         0f:8b:da:61:d3:17:06:3e:7f:18:2e:a5:06:2c:c5:67:12:1f:
         41:c8:3d:60
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwcHCmIfdkEO8Rw3F5pRSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDg5ZjhmMmFiOGU1NDQ2YjRjOWUxMjVjYWNiMDI3NDg5
Y2E3ZmIwHhcNMjMwMTAyMDMwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmUwYzZiNmQzNjJmMGQ3NDg0NzIzZTc0MjEzNzliNTgwM2ZiM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1sGKEKScYmqx8AqNKX9R/Zi79JU
GZBJBfkKEkxRPw0aWwzrTg1YCO09dGdwkTtylgQ1rB+JH+ZVOqjQDXP4ictEI+aU
y5Fjd7h4Lg5O1cTSS/Ev+B42fnVQ8qeFbyslWb82iFFdxNHQ78/g7NfjWTV8xwJt
0J3l7xo05jV7TnzXtviC0LZfCtTwk7dpdTShZb7210d9arAGPQmLp9XFcgBOYKps
UlW/Z/VSQx/QwsAZjAAveCwlZwtlKU05SjzKYwskCVx1Vhoc58M18UVYcNj2DZGi
EJCF13V2Tq9XVly0tzTd0UJ3iSqWv+06Tad7VnTjEtG3mGtprR0yHDxa1wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFI/gxrbTYvDXSEcj50ITebWAP7PeMB8GA1UdIwQY
MBaAFOPYn48quOVEa0yeElyssCdInKf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlpZmp5cTQ1VVJyVEo0U1hLeXdKMGljcF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NzVjMzgtNTk5OC00NTQ5LWIxNmEt
NDJmNDIwMmI0ZTUyLzEvai1ER3R0Tmk4TmRJUnlQblFoTjV0WUFfczk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NzVjMzgtNTk5OC00NTQ5LWIxNmEtNDJmNDIwMmI0ZTUy
LzEvNDlpZmp5cTQ1VVJyVEo0U1hLeXdKMGljcF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKFQDAN
BgkqhkiG9w0BAQsFAAOCAQEATTjMckNIsUjPlssHxy0Suu3U5u+DZBqd7505edNw
BfgxU4aLxVyfupmimApkaaQWn6Dzdr7meLu+kOy5obiYrS8m/vjXWIWl8OKWLYP6
SCviir6z63k3rYy91TeO78FWF0ztSlbVZWalc3p/+aExu56zBS6o2Swc5wnZcTDY
FZ8xFwA+RK8pUIHWsEADx1XN90pRvOv8oeIZpxfhIp7wyOvraEYGIwtMlB0jGCAo
niAFU6vu5wHWyXq7T4hb3CKH+JFYyep24GsfO7YViqkESAk6wDRXfqxep7sfpiRR
HExbheqvtc7fZojBD4vaYdMXBj5/GC6lBizFZxIfQcg9YA==
-----END CERTIFICATE-----