Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa
File:                     OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa (raw, json)
Hash identifier:          fnsM00k7vgePM/m9Pcr3Xifjs18ipNQmzSpgcPLad+U=
Subject key identifier:   38:45:DB:A4:1F:91:27:0F:C1:20:EA:B5:21:9D:C8:28:6B:2F:83:A3
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       0188424A98A13F8FA690FD4EA64FFE8518CA
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa
Signing time:             Mon 22 May 2023 07:09:24 +0000
ROA not before:           Mon 22 May 2023 07:09:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198797
IP address blocks:        2a0e:8f02:f05b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:42:4a:98:a1:3f:8f:a6:90:fd:4e:a6:4f:fe:85:18:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: May 22 07:09:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3845dba41f91270fc120eab5219dc8286b2f83a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:67:1f:46:18:86:74:4a:e3:b4:93:40:ee:
                    26:9d:9b:63:55:95:7a:82:2d:1e:9e:6f:2c:89:a3:
                    da:0c:91:4d:95:89:ec:e5:76:74:4d:25:bb:1e:de:
                    27:db:f1:92:a6:4d:a4:7c:ea:ac:ad:b1:26:a7:61:
                    ac:1b:fe:60:77:8b:df:b5:04:b5:fc:45:cf:df:16:
                    63:1d:aa:50:26:c3:2c:d7:d8:92:70:af:ca:d3:06:
                    e7:69:de:0c:ae:84:6a:9b:d4:e5:d4:3c:23:7d:9f:
                    8e:6f:0a:62:4a:02:99:06:9f:1f:4c:ce:48:65:55:
                    59:73:1c:9e:50:10:ed:ef:dd:b3:a1:02:e6:a2:26:
                    26:6a:af:ca:9f:42:67:89:58:f9:9b:41:c0:4f:fe:
                    9f:6a:02:8c:1f:67:7d:c9:2e:2a:81:3c:c6:2e:8c:
                    b3:69:a6:e0:03:c4:9c:41:69:9d:ac:21:8b:53:fd:
                    7e:89:4c:82:7b:5c:52:d1:c0:e3:6b:f4:c8:99:13:
                    d6:03:16:42:e2:a6:87:b0:d2:08:d8:74:3f:3c:77:
                    4d:94:96:55:a6:3b:c2:2b:bb:ab:f1:01:60:53:f4:
                    71:9f:cf:b1:4f:b7:d0:ac:f9:e1:d0:58:d0:dc:86:
                    5c:2d:05:c1:05:97:e5:03:8e:11:0c:40:b7:ac:df:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:45:DB:A4:1F:91:27:0F:C1:20:EA:B5:21:9D:C8:28:6B:2F:83:A3
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f05b::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:86:fc:ad:59:d9:b4:b3:f6:82:d9:3f:22:2a:8b:2f:74:a1:
         53:54:6e:a0:45:71:ed:ed:91:d5:05:d1:8d:6f:86:ba:75:70:
         0d:4b:5c:aa:dc:60:a1:26:92:68:c8:1d:c0:20:38:bc:a4:3d:
         80:87:c0:f9:49:fa:f7:a7:99:a5:1c:b4:0a:85:30:1c:69:19:
         62:2b:4f:37:13:92:5d:d2:00:c7:47:4b:09:c4:80:4a:16:0a:
         c3:1d:a0:b8:7f:ab:cb:d4:28:97:0d:fe:04:55:5c:9a:ca:c3:
         76:e9:f1:a3:a1:34:c8:a6:b7:9e:b3:be:45:9e:cc:e9:91:0b:
         b4:48:57:42:3a:e8:8c:da:f0:31:31:00:99:33:32:b0:44:20:
         e6:c8:cd:a8:f0:3f:df:b1:12:09:52:ce:25:ed:89:ec:66:e9:
         b0:97:9f:de:44:98:cb:6b:bc:d0:43:36:19:81:f8:05:a6:5a:
         c7:08:ee:c8:33:02:15:0d:91:94:79:c9:45:0f:4e:4a:5e:77:
         9a:3a:af:39:7c:65:76:09:0b:d6:fe:f5:60:21:24:38:7e:cc:
         be:7c:d4:18:60:de:11:25:13:94:51:a0:88:27:55:1b:8e:26:
         4c:27:a5:ca:9c:c2:15:c4:bc:c7:b9:b2:97:68:3b:dc:fb:10:
         25:aa:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----