Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YsXE62f0M-bnOlNf2ZbddaYJydA.roa
File:                     YsXE62f0M-bnOlNf2ZbddaYJydA.roa (raw, json)
Hash identifier:          I6RMxXVFM4x3X51IiXOAy1AJIjkiSKChPz5X2vIKw60=
Subject key identifier:   62:C5:C4:EB:67:F4:33:E6:E7:3A:53:5F:D9:96:DD:75:A6:09:C9:D0
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E458202558F7E2BE9878D2035D319
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YsXE62f0M-bnOlNf2ZbddaYJydA.roa
Signing time:             Mon 02 Jan 2023 06:14:47 +0000
ROA not before:           Mon 02 Jan 2023 06:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58305
IP address blocks:        2a0c:b642:1a0d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:45:82:02:55:8f:7e:2b:e9:87:8d:20:35:d3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62c5c4eb67f433e6e73a535fd996dd75a609c9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:c9:ec:3a:6f:dd:a9:2f:9b:c3:5b:36:48:
                    95:3c:66:9e:29:66:1d:0b:39:37:06:49:6d:2c:bb:
                    38:14:27:d0:16:7a:31:03:34:07:74:e6:40:b6:0b:
                    c7:bd:7b:1e:8e:e2:88:98:f3:88:62:d4:a6:69:66:
                    0b:4c:38:ae:0a:df:52:91:ac:fb:9f:ba:e4:49:fb:
                    18:c4:3e:e5:8c:a0:d3:7e:f9:ed:d9:25:13:2b:a2:
                    e3:d2:fc:c6:eb:8d:8f:cc:80:e1:1a:f4:33:9d:48:
                    a6:f2:8f:f4:06:b4:4e:ff:16:cb:85:6f:9a:66:5b:
                    e2:6c:f8:0d:30:2c:46:b2:28:6a:eb:d9:8e:0c:7b:
                    c8:ef:ba:59:c2:5a:71:dc:38:53:65:ea:f9:f9:f5:
                    0a:f8:31:10:19:51:a1:25:fc:3b:1f:46:19:97:b9:
                    55:4b:4b:99:09:f1:c0:d3:11:ac:05:9c:59:8a:7a:
                    d8:4f:f5:f7:b5:49:e0:77:27:2a:46:46:cc:98:c5:
                    d5:39:6e:98:c8:88:91:bb:15:fb:9b:5b:ca:f7:b1:
                    bf:45:d7:e9:85:d6:eb:99:df:3e:4d:21:a9:f7:97:
                    45:15:da:09:a6:38:7c:30:24:aa:b5:ed:a8:ce:bb:
                    de:8c:95:e1:a3:d6:ad:06:9c:b7:e3:2e:6d:3f:04:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C5:C4:EB:67:F4:33:E6:E7:3A:53:5F:D9:96:DD:75:A6:09:C9:D0
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YsXE62f0M-bnOlNf2ZbddaYJydA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b642:1a0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:5c:34:31:9c:70:52:36:31:57:51:1f:45:dc:d6:f6:67:
         8b:48:1c:0c:fa:c0:c8:66:1e:f1:d1:59:da:c3:e9:65:8c:5d:
         4b:28:3a:04:04:e4:41:ba:6b:af:b1:e2:50:f6:75:50:f8:d6:
         b6:ce:47:9f:6f:57:62:a9:08:d5:11:ae:16:7f:ba:27:ac:33:
         64:ab:ae:48:cf:96:2e:d4:3a:d1:9e:bb:5f:32:c1:a6:53:ee:
         d2:6a:13:a7:9c:fc:de:26:e7:48:0c:7a:d6:49:d3:5d:98:42:
         e5:10:f9:ed:a1:b7:0d:00:83:05:29:ab:23:c9:f3:c9:e5:a4:
         26:ef:9e:2c:47:31:93:27:49:bd:5d:ec:1f:c0:66:12:75:0a:
         d8:30:54:d2:23:54:06:06:da:e5:0a:5d:76:a4:b8:d8:37:97:
         f2:95:d7:43:99:54:76:21:d5:51:a9:4a:67:30:ca:1f:68:60:
         61:4e:21:87:59:56:c2:e1:34:e4:02:36:61:20:34:d9:18:ba:
         6f:8c:1d:87:83:1c:91:8b:b1:fb:7a:6b:ec:88:d3:6e:93:fb:
         30:54:4a:5b:38:17:28:d7:74:0e:4a:be:88:9b:07:c5:b4:09:
         09:66:9f:e5:39:4d:a9:c2:54:ea:05:27:30:e2:01:ec:5e:96:
         7b:bc:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----