Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TS21MzUALXCwOSMKt_HgdrUewhs.roa
File:                     TS21MzUALXCwOSMKt_HgdrUewhs.roa (raw, json)
Hash identifier:          0W1skYoYClaWetkdE/Qaq2MIxgKoQ1lmqb78IhR+DJA=
Subject key identifier:   4D:2D:B5:33:35:00:2D:70:B0:39:23:0A:B7:F1:E0:76:B5:1E:C2:1B
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       01856F42D5EADEC3EEC68BE1AB2F8ED07029
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TS21MzUALXCwOSMKt_HgdrUewhs.roa
Signing time:             Sun 01 Jan 2023 21:35:29 +0000
ROA not before:           Sun 01 Jan 2023 21:35:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210707
IP address blocks:        2a0e:8f02:f03a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:d5:ea:de:c3:ee:c6:8b:e1:ab:2f:8e:d0:70:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 21:35:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d2db53335002d70b039230ab7f1e076b51ec21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3c:a0:e3:46:d4:5e:28:d4:f1:50:11:fc:78:
                    3c:40:bb:c6:1d:c2:41:1c:1d:a7:10:0d:02:06:6d:
                    ff:e4:3d:16:4d:e5:4f:ae:79:b1:52:46:f3:3f:16:
                    81:c7:30:a8:16:b5:af:ba:63:a2:47:d5:7a:66:70:
                    6b:ba:14:3d:d9:a2:73:8a:87:96:48:f2:dd:d5:96:
                    80:02:3e:b3:29:24:ea:c8:0d:3c:de:42:bc:d7:13:
                    37:ee:0a:d0:f1:18:79:13:21:89:d0:08:9d:88:6e:
                    d2:98:0f:7b:d0:95:49:72:ce:b3:8e:9f:0d:55:ba:
                    ce:ce:75:01:68:32:4c:ab:cd:23:f0:76:89:27:1b:
                    eb:a5:8b:ab:58:c7:65:a3:62:58:ef:3d:8c:84:95:
                    60:14:f3:48:64:e1:ec:36:e5:35:3f:8d:92:b8:35:
                    7b:a1:03:d0:34:f8:20:75:f6:4c:80:9a:34:20:02:
                    dc:83:db:73:b5:c7:bc:39:90:c4:45:82:18:e8:80:
                    c8:ad:88:5e:5f:c3:d0:86:41:2b:83:a7:6c:40:57:
                    c4:c1:e6:e6:64:ef:a2:a5:c1:81:61:35:e1:16:f0:
                    cf:5b:6a:7a:29:72:c4:c2:b2:77:85:86:9d:37:20:
                    50:eb:6d:65:28:2b:4e:1d:35:18:4d:fa:4c:5d:c2:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:B5:33:35:00:2D:70:B0:39:23:0A:B7:F1:E0:76:B5:1E:C2:1B
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TS21MzUALXCwOSMKt_HgdrUewhs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f03a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:9d:e0:42:fb:a1:3a:eb:92:0c:8b:27:de:b4:0a:b8:44:
         d5:5b:d4:ac:f3:e6:c0:33:38:61:ac:b5:f4:14:fb:45:85:02:
         48:b0:ce:16:59:26:6c:c2:e3:97:bc:d1:a9:d5:b3:a4:73:39:
         0b:6d:09:be:4a:51:96:08:d1:c7:09:86:b3:b0:6f:9e:db:86:
         5d:1f:dd:91:51:97:8f:6d:26:d4:29:74:b4:d0:30:db:76:fc:
         0b:5e:17:38:84:6a:af:68:6a:e7:99:6b:10:b5:f5:e8:b5:5f:
         7c:e7:48:d1:91:04:d7:46:44:35:73:1c:bd:6f:f6:fd:d7:eb:
         39:3b:e6:dd:60:f5:ce:2e:bb:e4:80:23:13:c5:ea:13:b0:82:
         40:2c:39:82:b5:f4:49:1b:dd:46:b2:d2:b4:05:91:45:50:1d:
         b4:01:7d:12:c7:22:7b:0b:c9:80:db:cd:e7:b6:ee:33:59:ba:
         1e:ae:6f:18:5b:64:3d:f9:43:72:24:78:1d:1e:cb:bf:f4:10:
         c9:83:f3:6c:3c:3a:6c:d0:b2:12:99:d4:3e:31:31:ec:89:5c:
         6a:ad:05:62:7b:83:a6:5f:2c:95:a3:ae:b1:c4:c0:ae:d4:7b:
         48:11:98:9f:76:56:de:cd:1f:3a:ef:ce:49:35:17:dc:75:89:
         f4:f5:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----