Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/74Tm6dGTlStsE6Ubkuq-eMFvaCY.roa
File:                     74Tm6dGTlStsE6Ubkuq-eMFvaCY.roa (raw, json)
Hash identifier:          GLt77AdEyz+uPNnxBDlajVwFjIhcS1ck2tXXilwJVWU=
Subject key identifier:   EF:84:E6:E9:D1:93:95:2B:6C:13:A5:1B:92:EA:BE:78:C1:6F:68:26
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       01873952B4E59BDDFF0486A0102078D3DB44
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/74Tm6dGTlStsE6Ubkuq-eMFvaCY.roa
Signing time:             Fri 31 Mar 2023 20:18:54 +0000
ROA not before:           Fri 31 Mar 2023 20:18:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48606
IP address blocks:        2a0c:5705::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:39:52:b4:e5:9b:dd:ff:04:86:a0:10:20:78:d3:db:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Mar 31 20:18:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef84e6e9d193952b6c13a51b92eabe78c16f6826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:7c:93:70:cd:97:85:1b:0f:58:2b:89:85:
                    5e:2e:83:0a:c9:5d:c0:a9:32:7d:8f:2d:95:e8:9e:
                    48:02:e8:b8:78:cc:4b:39:04:93:58:e7:d0:41:ad:
                    7a:38:26:aa:35:85:28:5b:6d:09:31:74:f7:8f:1e:
                    44:08:fc:82:61:cd:d4:55:ce:12:91:fe:86:a2:4b:
                    ea:55:24:37:af:57:2d:4b:5d:43:ef:6a:b8:3f:cf:
                    e2:90:7e:a0:a1:bb:db:d3:f6:7e:3b:fd:a4:06:2f:
                    0e:6e:0e:be:a8:cc:f5:8b:f2:f1:21:e8:6a:23:f4:
                    00:ed:94:9e:60:0b:04:5e:5b:1b:82:8d:cb:50:3b:
                    51:37:8c:e4:ec:ad:a1:3d:f9:1a:54:e4:b8:14:58:
                    b4:77:95:f1:ef:de:77:31:de:8a:86:96:fb:72:e2:
                    13:85:87:af:85:8b:97:07:a0:36:2e:a0:33:39:a3:
                    35:8f:27:96:e7:2a:01:f3:69:a3:a0:94:ca:ad:87:
                    a8:0f:ec:ee:2f:9f:76:9c:01:22:e3:e1:86:b3:55:
                    5d:42:e6:a2:00:27:e1:44:87:1d:81:57:c6:81:b7:
                    85:ff:8c:8b:c8:67:5e:e9:24:98:ce:af:f7:c2:34:
                    e0:e7:f2:e9:2a:06:05:df:b3:9d:06:ba:7d:37:3c:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:E6:E9:D1:93:95:2B:6C:13:A5:1B:92:EA:BE:78:C1:6F:68:26
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/74Tm6dGTlStsE6Ubkuq-eMFvaCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:5705::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:eb:29:91:19:4f:9d:20:d4:1c:28:dc:2e:4e:6f:1c:ee:
         da:5a:9d:b0:89:cd:7a:3e:21:ec:b9:a0:75:a1:f4:67:ed:29:
         60:96:87:0a:9d:53:ac:db:ed:8d:4f:ab:56:ba:2b:07:aa:b1:
         05:a1:32:2e:09:60:24:1f:c7:7f:6e:7a:60:f5:7d:e0:a1:ea:
         bf:39:fa:86:41:dd:7a:dd:b6:4f:04:28:98:ae:26:82:bb:94:
         f7:77:84:14:21:e4:06:1d:b0:d9:f5:49:02:5d:91:df:ff:f5:
         28:39:94:4e:ba:94:ec:3b:03:d8:77:2f:ed:56:cf:f5:62:80:
         bd:54:e4:63:5a:35:55:0b:18:2d:7a:4a:12:f3:29:b3:75:36:
         07:04:9d:70:1f:a8:07:5b:f4:01:8b:9f:ea:19:3b:43:af:11:
         e1:cd:c9:e6:ac:af:d4:dc:3a:96:56:b9:8e:8a:63:6e:9f:27:
         5c:e5:3d:41:d4:d0:9d:0b:a1:84:68:57:cb:15:3d:42:b1:47:
         fb:02:38:95:5c:16:94:4d:38:e6:3d:66:c4:01:27:8c:a7:72:
         bf:6e:1f:91:fb:47:e0:42:ba:a0:5c:22:81:2f:7d:b0:50:0c:
         72:21:d1:76:03:ce:fd:4e:0c:77:d2:a9:f0:86:d6:21:a0:6c:
         1c:03:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----