Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/3QuFjf5yqKM9K20-_3NPsGZNEb0.roa
File:                     3QuFjf5yqKM9K20-_3NPsGZNEb0.roa (raw, json)
Hash identifier:          rZc9a+HxDPrW7Na/L40tFsXcjXtSJnZN+sJQjzAU1BA=
Subject key identifier:   DD:0B:85:8D:FE:72:A8:A3:3D:2B:6D:3E:FF:73:4F:B0:66:4D:11:BD
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       01856F42F02F48FE9DA8A1C1ED2630E3D227
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/3QuFjf5yqKM9K20-_3NPsGZNEb0.roa
Signing time:             Sun 01 Jan 2023 21:35:35 +0000
ROA not before:           Sun 01 Jan 2023 21:35:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212844
IP address blocks:        2a0e:8f02:f008::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:f0:2f:48:fe:9d:a8:a1:c1:ed:26:30:e3:d2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 21:35:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd0b858dfe72a8a33d2b6d3eff734fb0664d11bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:bf:7d:f6:6b:68:67:ee:0a:a0:f2:8d:57:
                    19:ff:99:4b:9a:fe:e5:63:8e:93:75:d9:32:b9:56:
                    79:4c:60:f6:32:cd:20:95:7a:7e:3f:e1:91:1b:7f:
                    e1:8a:44:7e:da:c2:79:86:77:8d:2f:0a:63:89:21:
                    64:03:47:13:d9:2b:3d:d8:f7:20:fc:2e:de:81:0e:
                    bc:06:97:d8:d2:d5:cc:c7:36:7f:9c:f1:18:d5:ac:
                    60:3a:54:d0:67:dd:cb:2f:d8:7e:4b:e8:8e:33:cc:
                    80:6c:91:36:63:55:16:5d:e9:5e:83:72:a0:b7:46:
                    7f:2f:ee:53:91:92:2f:29:e7:a8:0b:49:59:63:69:
                    95:e0:a7:92:cf:56:f3:6f:a0:c1:72:8e:ae:4c:da:
                    10:a1:18:cd:c7:ff:d8:44:66:7b:8b:23:25:07:1f:
                    81:0f:ed:c5:2f:63:21:f8:45:b1:72:86:2e:7c:d6:
                    9c:d5:e8:31:4c:90:87:51:8a:90:35:77:aa:1b:b9:
                    7b:ee:d2:a7:ce:2e:65:4d:43:3d:04:bc:44:4b:fa:
                    2d:8a:49:ba:5f:66:d1:71:34:c2:46:2d:3d:bf:83:
                    44:57:d6:e8:81:84:d5:98:30:65:ea:cf:56:54:4c:
                    83:d2:99:5f:e9:6d:57:46:67:70:6e:5f:5f:b6:87:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0B:85:8D:FE:72:A8:A3:3D:2B:6D:3E:FF:73:4F:B0:66:4D:11:BD
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/3QuFjf5yqKM9K20-_3NPsGZNEb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f008::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:bd:f2:72:10:88:dd:2f:ad:65:c6:db:08:c0:0e:4d:a2:3c:
         b5:5d:32:04:f1:27:13:a8:47:3a:7e:23:57:c5:a2:25:2a:5b:
         42:c4:10:96:15:f2:ee:9e:6f:a0:3e:c7:a1:95:2b:7f:70:1c:
         e4:b5:fc:67:03:44:ae:c9:46:20:0e:ed:f7:2a:5e:5a:07:d0:
         43:08:14:de:a4:2d:47:a2:2e:9d:72:41:dd:5c:44:3b:18:60:
         e2:38:dd:7f:3b:f2:54:c5:d2:4d:13:09:91:42:8a:56:90:f3:
         ae:ae:7d:30:ae:a0:d8:9b:12:b7:dc:ef:32:69:79:d7:c6:94:
         d8:fa:80:e2:b6:4c:29:a8:c0:de:e8:7f:02:3f:1a:c0:14:0a:
         11:82:60:ad:32:6b:1f:a1:90:8c:2b:71:ad:71:18:4e:8d:24:
         1f:d2:4b:b9:46:f9:f5:55:71:d2:a7:d1:df:69:00:bc:ea:d5:
         fc:fd:50:2a:dc:fa:da:b0:8e:41:6a:1e:5e:1a:20:f0:a5:a5:
         17:92:87:5a:c5:58:d4:45:fc:ba:aa:84:5e:9d:0c:d7:4e:11:
         94:ee:d3:04:a6:d9:d4:de:2f:28:6d:a5:27:33:a3:6e:e5:2c:
         0a:7d:b9:20:45:f9:e7:00:64:13:29:ae:a3:1c:38:2b:f6:cc:
         5a:bb:77:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----