Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa
File:                     FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa (raw, json)
Hash identifier:          3DKOdYx3mjS0hp4dRPc131oUpzl3KfLNDcBDWa/L3/k=
Subject key identifier:   15:A6:23:D2:C0:DB:60:EC:52:81:43:53:43:26:97:2A:B0:CE:22:87
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       01874DD36E5D4F825694270B94CB8EE4AF08
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa
Signing time:             Tue 04 Apr 2023 19:51:54 +0000
ROA not before:           Tue 04 Apr 2023 19:51:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203511
IP address blocks:        2a0c:b641:6d0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4d:d3:6e:5d:4f:82:56:94:27:0b:94:cb:8e:e4:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Apr  4 19:51:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15a623d2c0db60ec528143534326972ab0ce2287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:55:60:ec:7b:aa:99:43:07:2f:1f:de:42:04:
                    7a:74:c3:04:7b:c0:81:6d:09:91:b0:92:0a:88:9e:
                    89:cb:2d:8c:f8:79:4f:a9:70:c1:b0:66:91:41:09:
                    fc:15:48:92:55:19:42:f9:2a:ae:8b:3a:58:88:76:
                    1c:7e:d6:40:9a:cc:a7:e1:e6:e3:c1:70:3d:c4:72:
                    14:e1:ba:29:71:2f:8d:bb:1a:95:1d:2a:82:b7:11:
                    d1:e3:84:8e:57:b5:48:b7:df:5f:b7:7b:dd:68:ff:
                    d5:35:1f:f1:3b:bb:9e:98:85:fc:87:d7:c0:01:13:
                    11:c5:57:0a:00:0d:53:3c:c3:54:25:c9:d0:51:07:
                    2d:69:3a:2b:a9:38:c1:b8:a3:29:0b:dd:54:ab:05:
                    36:0b:12:a3:f2:70:25:e2:46:c6:34:97:be:2b:9d:
                    94:5d:ee:69:aa:34:2a:23:43:92:df:f6:b2:24:a1:
                    1c:04:c3:34:e6:ad:2b:a8:16:85:d3:4b:20:77:81:
                    5e:8e:e1:13:89:8c:48:11:89:8f:2f:54:81:4e:c0:
                    94:c6:58:4d:d7:4d:20:2a:f9:c1:20:c0:62:2f:37:
                    05:d6:85:32:28:27:ca:12:6c:d2:68:18:df:f6:aa:
                    4a:52:78:70:a2:8e:88:59:47:d3:4f:1b:c8:1b:c6:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A6:23:D2:C0:DB:60:EC:52:81:43:53:43:26:97:2A:B0:CE:22:87
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:6d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:5d:6e:0b:0b:11:e7:b8:66:bd:32:9b:98:11:d5:01:65:9b:
         e2:58:75:03:a5:c8:c6:5e:41:b9:e7:2b:25:c4:16:a5:59:ce:
         74:3f:61:b9:79:d9:0e:95:71:bc:01:e9:8b:2c:9a:b4:86:68:
         d5:3b:dd:c0:c3:c0:04:1d:32:f8:c7:92:2b:2c:e8:3f:09:50:
         53:f5:c7:5c:ed:4c:62:5c:96:46:7a:88:42:c6:12:f8:38:ad:
         fb:bc:f3:6b:68:7a:0e:9b:30:f7:21:16:4f:44:e9:4a:34:6a:
         8b:c0:df:a8:65:c7:81:87:87:1c:81:31:09:2d:bd:0e:1b:55:
         76:1a:8e:1f:ab:cd:24:57:3d:1a:f5:ab:45:60:da:c2:06:4e:
         aa:fc:9d:a8:87:92:7f:a3:cd:ff:87:68:e6:53:55:5c:81:d6:
         53:94:95:1a:5f:b2:1e:27:a0:13:80:13:0d:a5:dc:28:3a:d4:
         7b:cc:0f:6c:00:d7:27:5f:3f:49:2e:0f:de:d6:f3:4d:31:f9:
         06:38:ab:bb:02:9a:1c:03:6e:01:18:c7:06:3c:32:6a:b6:05:
         fc:99:27:1b:07:aa:73:f9:e2:7e:60:17:a4:a7:19:93:5f:44:
         5c:25:ea:64:d9:f7:49:83:01:b1:e3:99:09:6e:b5:4a:4c:68:
         e8:42:61:68
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYdN025dT4JWlCcLlMuO5K8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwNDA0MTk1MTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWE2MjNkMmMwZGI2MGVjNTI4MTQzNTM0MzI2OTcyYWIwY2UyMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FVg7HuqmUMHLx/eQgR6dMMEe8CB
bQmRsJIKiJ6Jyy2M+HlPqXDBsGaRQQn8FUiSVRlC+SquizpYiHYcftZAmsyn4ebj
wXA9xHIU4bopcS+NuxqVHSqCtxHR44SOV7VIt99ft3vdaP/VNR/xO7uemIX8h9fA
ARMRxVcKAA1TPMNUJcnQUQctaTorqTjBuKMpC91UqwU2CxKj8nAl4kbGNJe+K52U
Xe5pqjQqI0OS3/ayJKEcBMM05q0rqBaF00sgd4FejuETiYxIEYmPL1SBTsCUxlhN
100gKvnBIMBiLzcF1oUyKCfKEmzSaBjf9qpKUnhwoo6IWUfTTxvIG8bqEQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBWmI9LA22DsUoFDU0MmlyqwziKHMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvRmFZajBzRGJZT3hTZ1VOVFF5YVhLckRPSW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQbQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAcXW4LCxHnuGa9MpuYEdUBZZviWHUDpcjGXkG5
5yslxBalWc50P2G5edkOlXG8AemLLJq0hmjVO93Aw8AEHTL4x5IrLOg/CVBT9cdc
7UxiXJZGeohCxhL4OK37vPNraHoOmzD3IRZPROlKNGqLwN+oZceBh4ccgTEJLb0O
G1V2Go4fq80kVz0a9atFYNrCBk6q/J2oh5J/o83/h2jmU1VcgdZTlJUaX7IeJ6AT
gBMNpdwoOtR7zA9sANcnXz9JLg/e1vNNMfkGOKu7ApocA24BGMcGPDJqtgX8mScb
B6pz+eJ+YBekpxmTX0RcJepk2fdJgwGx45kJbrVKTGjoQmFo
-----END CERTIFICATE-----