Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/qwH4Me_DxI6TXF2IUHVCAKsfx5k.roa
File:                     qwH4Me_DxI6TXF2IUHVCAKsfx5k.roa (raw, json)
Hash identifier:          EXbPJqkwBQ+pHoCORoFZnjfC8Hiy7bpY2JTl3uV1ZQA=
Subject key identifier:   AB:01:F8:31:EF:C3:C4:8E:93:5C:5D:88:50:75:42:00:AB:1F:C7:99
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       018691F284540FB98CAA4A4E811ABA99FC35
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/qwH4Me_DxI6TXF2IUHVCAKsfx5k.roa
Signing time:             Mon 27 Feb 2023 08:17:15 +0000
ROA not before:           Mon 27 Feb 2023 08:17:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202952
IP address blocks:        2a0a:280:1400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:91:f2:84:54:0f:b9:8c:aa:4a:4e:81:1a:ba:99:fc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Feb 27 08:17:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab01f831efc3c48e935c5d8850754200ab1fc799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:31:5c:cb:c4:9d:34:52:0a:95:48:8f:ac:
                    f1:54:5f:56:fb:8d:19:24:fd:56:94:fc:18:1b:9f:
                    f8:9c:40:a4:90:a7:e6:63:3b:c5:29:6b:bf:bf:5e:
                    0a:7a:a9:3e:03:be:85:8e:d7:ad:a0:fd:7f:fd:f4:
                    8f:f5:62:51:90:1a:c4:64:4b:ce:cd:82:42:05:30:
                    6e:77:a8:7d:95:67:60:9c:5a:0c:13:12:36:1a:68:
                    03:01:32:52:08:da:a7:f6:54:49:2c:0c:f6:8c:c7:
                    c7:40:3a:f2:e4:f2:e9:5d:28:59:16:c9:03:20:47:
                    8c:8d:a5:79:89:21:92:ed:0c:98:cd:9d:04:ed:7e:
                    56:89:90:f7:f3:42:36:d8:09:4a:95:78:59:ed:f1:
                    84:da:02:41:19:90:76:41:10:92:12:a8:ce:96:67:
                    c4:5f:f4:f5:5c:b1:2e:c0:d3:e6:7a:cc:d4:9a:29:
                    d7:93:e6:1e:1f:75:5c:f4:24:f3:93:ea:96:e6:cb:
                    a9:44:0e:24:5c:5a:9e:7d:8e:4a:5d:6a:01:34:dc:
                    15:c6:a6:c2:a9:27:c1:72:17:d6:aa:41:8b:64:fd:
                    60:6b:72:82:0d:ff:45:85:56:6d:42:0e:9d:4e:20:
                    df:8b:71:71:0f:1b:19:5c:a9:57:ce:34:e7:8a:e5:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:F8:31:EF:C3:C4:8E:93:5C:5D:88:50:75:42:00:AB:1F:C7:99
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/qwH4Me_DxI6TXF2IUHVCAKsfx5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:280:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:77:dd:b0:02:65:cf:fb:3a:2b:c9:96:4c:f8:e7:a2:e5:
         0d:b7:16:45:dd:50:70:ae:6a:53:cf:5d:39:ca:40:c4:3f:a6:
         8c:cf:f6:79:3f:ec:9b:0d:20:24:1f:7a:4a:e4:13:8e:32:b0:
         b6:cd:2b:9f:a1:b4:bb:de:0f:80:ea:6f:30:b9:c1:08:85:d3:
         f0:6a:21:52:6c:6a:11:87:8c:d8:e7:8c:f1:08:51:e2:4b:1d:
         5b:74:24:43:7c:10:22:24:0e:a2:ad:2a:b9:a0:75:06:9c:0e:
         98:e6:d6:d9:da:9b:d1:c6:f9:d7:c2:5e:ad:90:5d:91:f4:5f:
         dc:8d:ac:15:ce:9b:67:c6:88:08:67:4b:5d:8e:05:9f:68:f6:
         d3:6f:88:85:2e:ae:5c:83:33:03:56:21:5f:ce:14:2c:08:5c:
         1a:3b:de:12:dc:91:7b:59:85:60:c3:97:ab:c5:0e:b6:86:a1:
         fa:0f:09:f5:f6:03:b6:bb:07:c8:7d:f8:13:f7:dc:84:6b:48:
         dd:ba:b7:56:aa:76:af:48:c7:12:b1:0c:01:d0:de:9e:a6:a5:
         49:45:4c:72:e0:86:58:50:34:22:7c:13:e2:e5:72:a5:05:4f:
         79:4e:33:51:d6:56:1c:67:62:75:ba:4e:1b:8d:65:9a:6b:8a:
         e5:4e:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----