Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa
File:                     DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa (raw, json)
Hash identifier:          L+RMAvTPI2uuTuXI/PUD0UFfaUyw6pkQ4d2BGjFgD2s=
Subject key identifier:   0E:B4:ED:3B:F8:36:2A:82:4E:5C:C0:BB:85:3F:B3:2E:7E:FE:67:03
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185CB38EE2FEEA88F6DBFA7D03205877C39
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa
Signing time:             Thu 19 Jan 2023 18:09:43 +0000
ROA not before:           Thu 19 Jan 2023 18:09:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200202
IP address blocks:        2a0c:b641:940::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:cb:38:ee:2f:ee:a8:8f:6d:bf:a7:d0:32:05:87:7c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan 19 18:09:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0eb4ed3bf8362a824e5cc0bb853fb32e7efe6703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:62:10:7b:18:b7:e1:bc:2f:9d:8d:f5:6a:0c:
                    94:98:ea:d3:e3:5d:c2:99:f9:f8:ec:71:d1:bd:85:
                    be:62:3b:0c:93:9d:9a:d6:90:df:e8:e0:5e:92:10:
                    17:55:08:dd:82:2b:2d:60:30:a7:00:d8:a2:86:15:
                    b3:ec:29:f9:59:cc:78:36:a9:1e:60:9d:0a:d4:82:
                    17:89:87:11:6b:2b:c1:9f:fa:53:8c:aa:62:40:5d:
                    de:3f:25:21:9b:1f:1d:eb:eb:11:cb:44:14:73:e4:
                    2e:fc:04:9b:95:0a:e4:d2:d6:c5:e1:e4:c5:0a:23:
                    fe:97:69:8c:cd:57:7a:1d:8a:cb:6b:53:a2:f2:72:
                    c0:60:32:11:d9:20:de:85:0e:f5:23:d9:6d:46:f9:
                    e2:ee:de:a5:57:2a:81:be:78:78:d0:6b:72:ce:25:
                    6d:ba:47:60:79:01:0c:c1:03:74:ee:50:2d:d0:63:
                    81:ae:1f:de:7b:37:de:f9:82:d4:6c:4e:ca:94:51:
                    ec:49:48:45:ce:3b:c6:5a:23:78:9a:68:24:8e:70:
                    9e:a2:1b:da:e4:9b:c5:ac:eb:11:c1:97:83:71:db:
                    ce:98:a6:c2:8c:53:b2:be:5d:fa:10:d8:75:66:43:
                    01:50:c1:be:13:a6:9f:18:58:80:fd:c0:5c:9c:bd:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B4:ED:3B:F8:36:2A:82:4E:5C:C0:BB:85:3F:B3:2E:7E:FE:67:03
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:940::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:be:20:f4:64:96:fb:86:02:8c:23:d6:4e:f6:ef:6b:61:57:
         e6:98:7b:f7:57:d4:2e:2d:3d:ec:ef:87:c5:1a:6d:2e:12:26:
         df:44:91:74:3c:e4:e4:bd:69:7c:a6:a8:0d:90:bc:c8:53:31:
         7a:47:29:6e:48:9f:75:d7:d9:1d:42:78:2a:4c:31:f9:8d:3b:
         89:5d:35:5d:b2:77:31:fb:ae:eb:3e:87:53:5e:b6:c0:4d:b7:
         cc:96:16:63:41:7f:d1:02:69:70:cd:52:a1:f3:f4:44:0f:2e:
         6d:db:0d:f5:8d:5d:52:52:d2:36:c2:a6:9b:c2:50:e8:d9:9c:
         a1:3c:a2:fb:d5:e2:94:e2:2c:7e:e0:87:24:e4:49:dc:6c:72:
         9a:e0:dd:cc:38:86:fe:b2:cf:bb:18:a6:41:36:f6:75:1a:76:
         a2:64:5d:22:f0:f6:02:7b:88:7e:9b:29:9b:26:e5:46:f3:c7:
         d4:fe:4a:7e:28:df:7f:26:f0:23:bb:4e:1f:da:9f:93:69:9a:
         34:29:ea:7c:7d:f7:b0:32:cd:c7:5f:14:a2:66:01:de:26:2b:
         02:c2:d8:b2:a6:56:97:5a:9d:1e:4d:1c:68:04:a0:3c:3c:75:
         c7:6b:bf:c1:3d:1b:fa:4a:11:d9:ea:c2:9a:01:b3:15:b3:95:
         91:95:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----