Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-y2WI46AkxbFwV2rhFMs2qZvaXw.roa
File:                     1-y2WI46AkxbFwV2rhFMs2qZvaXw.roa (raw, json)
Hash identifier:          8kOb6i3tmIuEmbSlmOEEZN+ln5ahw1qkH8gOoYzG8Aw=
Subject key identifier:   FB:2D:96:23:8E:80:93:16:C5:C1:5D:AB:84:53:2C:DA:A6:6F:69:7C
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018606D500C4002E0C7AE6447D80183BFBC0
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-y2WI46AkxbFwV2rhFMs2qZvaXw.roa
Signing time:             Tue 31 Jan 2023 07:57:48 +0000
ROA not before:           Tue 31 Jan 2023 07:57:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201979
IP address blocks:        2a0e:8f02:f04c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:06:d5:00:c4:00:2e:0c:7a:e6:44:7d:80:18:3b:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan 31 07:57:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb2d96238e809316c5c15dab84532cdaa66f697c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:c0:10:af:a4:cc:12:e0:fd:bc:67:e0:4d:
                    67:eb:70:91:38:8a:2b:fc:15:1a:54:38:18:85:e9:
                    4e:33:ba:a5:33:be:bf:7e:df:0f:15:8f:94:a2:a8:
                    66:a3:62:52:d9:23:47:4f:59:72:6d:fc:72:cc:84:
                    26:45:90:98:36:cc:0c:de:41:3e:30:3f:2e:c9:47:
                    db:9a:65:44:7e:31:bb:6b:6d:2a:57:02:3f:e0:35:
                    eb:c5:e5:4a:1b:8f:2e:75:6b:46:c7:87:ab:a2:43:
                    00:22:7e:16:7e:c3:6c:dc:ec:d0:0b:24:a9:30:f2:
                    34:c6:51:70:c7:a4:b1:88:de:09:b0:b3:9a:0a:8e:
                    1b:c1:d3:92:91:1a:c1:db:e4:2d:40:f9:bb:d0:c9:
                    09:c4:76:a3:68:6f:13:ec:89:e3:46:b8:72:b5:70:
                    8f:37:d9:17:2d:b7:14:35:c4:32:d9:38:24:95:68:
                    4e:59:bd:62:77:42:5e:98:31:5c:bc:a3:a9:d9:dc:
                    b1:7c:63:ec:8d:a1:b5:0b:85:7a:60:b8:95:f3:d8:
                    30:43:cc:2f:ea:42:fe:6a:b8:cb:7f:b5:3c:14:fe:
                    f2:88:ef:18:39:ac:e1:08:4c:8f:dc:f5:bc:11:23:
                    99:1e:27:22:e0:aa:4f:a3:d7:0a:d3:78:34:24:01:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:96:23:8E:80:93:16:C5:C1:5D:AB:84:53:2C:DA:A6:6F:69:7C
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-y2WI46AkxbFwV2rhFMs2qZvaXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f04c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:75:54:41:66:9f:a4:a0:1b:bf:74:2b:85:d9:af:dc:3a:
         bd:8d:e8:fb:07:05:d3:df:ec:81:1c:89:2b:38:3e:13:c2:d1:
         6b:c5:1d:99:1d:5b:43:15:06:41:92:57:b1:94:9b:d0:50:e3:
         38:12:a5:16:d8:d7:61:b4:c6:30:f9:5f:9a:68:56:15:bd:57:
         42:23:77:c8:47:8b:f4:14:83:75:78:5f:09:fc:79:7c:50:0f:
         12:89:08:ec:b8:63:e1:65:9f:cf:fa:c2:34:d6:50:8e:80:a6:
         9e:e5:3e:7f:09:47:ec:09:f2:82:2e:22:ce:3e:45:60:47:0f:
         48:8d:88:87:83:8c:9d:09:0b:49:49:ab:15:a4:b6:89:67:f1:
         96:4b:e7:cc:b3:cf:69:72:c5:8e:0b:22:0d:76:d3:90:ec:8b:
         cc:c0:b8:60:42:a7:c0:f5:12:65:4e:dd:80:72:42:28:1b:13:
         f2:42:21:6a:d5:77:9c:d2:15:18:e9:a4:14:fa:bf:5b:37:f8:
         99:34:bf:29:11:02:a4:b7:4e:b3:f4:20:eb:04:b8:21:58:48:
         fb:dd:bd:8d:fa:46:24:d5:03:8e:8a:4e:29:c8:3d:08:4c:00:
         1e:ae:44:d3:d1:2a:64:91:96:5c:a2:98:c9:d5:20:16:09:ad:
         b6:5e:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----