Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YTXPnf-EkmVvGX86yWIgc1OLndQ.roa
File:                     YTXPnf-EkmVvGX86yWIgc1OLndQ.roa (raw, json)
Hash identifier:          pcqxn0I9PxqgfWttZoHpK5ViW1XFRIjAStqguFfHc1s=
Subject key identifier:   61:35:CF:9D:FF:84:92:65:6F:19:7F:3A:C9:62:20:73:53:8B:9D:D4
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       018618E4BEF93C849ABBABE87C4E7C81F48E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YTXPnf-EkmVvGX86yWIgc1OLndQ.roa
Signing time:             Fri 03 Feb 2023 20:08:09 +0000
ROA not before:           Fri 03 Feb 2023 20:08:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200056
IP address blocks:        2a0c:b641:8a0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:18:e4:be:f9:3c:84:9a:bb:ab:e8:7c:4e:7c:81:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Feb  3 20:08:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6135cf9dff8492656f197f3ac9622073538b9dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:7e:2b:21:14:c4:cf:fa:6f:35:1d:07:e9:
                    11:24:d4:f6:d5:98:b4:e5:10:5b:fc:ec:08:79:7d:
                    9a:9b:ae:b4:fe:45:0a:c9:bd:e8:b3:1a:d9:15:05:
                    b7:3b:0c:81:57:c6:3b:62:14:a9:7f:40:72:c4:17:
                    9e:0f:38:b6:65:e5:1d:e0:59:c7:7f:d9:70:9a:2a:
                    91:a4:2b:03:87:41:9a:10:6d:41:67:2c:7a:5a:2f:
                    26:8b:9a:69:e3:14:aa:cc:e7:02:24:16:b9:9a:ff:
                    e5:28:86:5e:03:02:6a:f7:fc:bd:bb:6a:0c:a6:a7:
                    72:a8:34:5a:7c:b6:39:5c:b3:28:91:f5:1a:6d:75:
                    b1:68:45:a2:b1:c2:9d:4b:d3:c0:5e:85:81:06:4a:
                    0d:40:48:d9:0e:35:38:f5:5f:c4:33:2b:26:29:36:
                    fb:87:3b:a5:54:fd:a9:60:66:df:75:ad:ab:27:93:
                    14:1e:2d:34:cc:11:d1:b0:e1:48:b5:a2:76:08:14:
                    4c:e1:02:80:1e:56:8e:8c:6e:b3:19:15:7e:e5:a8:
                    76:39:2e:b9:a7:05:2f:9c:9b:c4:65:ae:1f:a2:d1:
                    3c:4a:fd:c8:cc:13:49:8b:01:97:c9:3a:ad:40:10:
                    db:b7:18:6e:55:9d:6f:fe:39:25:5a:69:0d:a7:46:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:CF:9D:FF:84:92:65:6F:19:7F:3A:C9:62:20:73:53:8B:9D:D4
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YTXPnf-EkmVvGX86yWIgc1OLndQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:8a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:59:2d:7e:bd:39:32:0d:cf:be:1d:87:92:04:2c:8d:ea:
         9f:92:35:39:db:c2:fd:66:57:f3:35:07:8e:e1:65:80:c9:bc:
         b8:4a:29:6c:f6:5c:a1:f8:13:cb:4b:47:14:27:20:c2:4e:da:
         01:5d:ce:69:dc:f0:1b:6e:d1:01:ff:21:3d:8f:7e:4f:9f:2b:
         25:79:09:a3:f8:16:d2:45:bb:ad:5e:e5:66:3d:7e:0b:eb:bb:
         f3:94:24:72:98:4a:91:d6:4b:7f:83:95:b3:52:b9:04:8b:de:
         79:33:7a:23:c8:81:1a:6b:f0:fd:17:e0:c6:03:26:f4:ea:d0:
         55:81:cd:5d:18:0f:ea:fe:2a:c5:b1:0b:70:86:40:09:a4:f3:
         a7:1b:ba:f5:d8:f6:f9:f6:29:ce:24:8c:f1:9b:8d:61:69:f1:
         53:b5:96:df:1b:2c:0b:6d:bd:4d:45:fe:77:d6:83:fb:74:2f:
         bf:fa:79:5b:e6:fb:e4:62:fa:c7:c0:63:cb:4b:0e:4e:a2:fb:
         0b:0e:60:16:80:5d:f2:46:55:f4:4e:22:d8:a1:27:62:26:80:
         ab:21:45:f2:43:89:1a:b1:12:0a:89:bb:04:43:59:0a:9c:3e:
         09:82:0f:dc:05:57:68:34:65:f6:25:87:e0:06:00:3b:2f:ed:
         93:f8:a5:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYYY5L75PISau6vofE58gfSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMjAzMjAwODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTM1Y2Y5ZGZmODQ5MjY1NmYxOTdmM2FjOTYyMjA3MzUzOGI5ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsul+KyEUxM/6bzUdB+kRJNT21Zi0
5RBb/OwIeX2am660/kUKyb3osxrZFQW3OwyBV8Y7YhSpf0ByxBeeDzi2ZeUd4FnH
f9lwmiqRpCsDh0GaEG1BZyx6Wi8mi5pp4xSqzOcCJBa5mv/lKIZeAwJq9/y9u2oM
pqdyqDRafLY5XLMokfUabXWxaEWiscKdS9PAXoWBBkoNQEjZDjU49V/EMysmKTb7
hzulVP2pYGbfda2rJ5MUHi00zBHRsOFItaJ2CBRM4QKAHlaOjG6zGRV+5ah2OS65
pwUvnJvEZa4fotE8Sv3IzBNJiwGXyTqtQBDbtxhuVZ1v/jklWmkNp0aLVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGE1z53/hJJlbxl/OsliIHNTi53UMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvWVRYUG5mLUVrbVZ2R1g4NnlXSWdjMU9MbmRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQig
MA0GCSqGSIb3DQEBCwUAA4IBAQCLelktfr05Mg3Pvh2HkgQsjeqfkjU528L9Zlfz
NQeO4WWAyby4Sils9lyh+BPLS0cUJyDCTtoBXc5p3PAbbtEB/yE9j35PnysleQmj
+BbSRbutXuVmPX4L67vzlCRymEqR1kt/g5WzUrkEi955M3ojyIEaa/D9F+DGAyb0
6tBVgc1dGA/q/irFsQtwhkAJpPOnG7r12Pb59inOJIzxm41hafFTtZbfGywLbb1N
Rf531oP7dC+/+nlb5vvkYvrHwGPLSw5OovsLDmAWgF3yRlX0TiLYoSdiJoCrIUXy
Q4kasRIKibsEQ1kKnD4Jgg/cBVdoNGX2JYfgBgA7L+2T+KUf
-----END CERTIFICATE-----