Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cRSnZgXF8i9IIurpr2qpQPuC6fo.roa
File:                     cRSnZgXF8i9IIurpr2qpQPuC6fo.roa (raw, json)
Hash identifier:          6VLDD5MqnPZicNnAtmYjXpUVxlvsYdu36aTYqWmV29Q=
Subject key identifier:   71:14:A7:66:05:C5:F2:2F:48:22:EA:E9:AF:6A:A9:40:FB:82:E9:FA
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E501BF62DA61183F0A3E56AC6FCB9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cRSnZgXF8i9IIurpr2qpQPuC6fo.roa
Signing time:             Mon 02 Jan 2023 06:14:50 +0000
ROA not before:           Mon 02 Jan 2023 06:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203511
IP address blocks:        2a0c:b641:6d0::/44 maxlen: 48
                          2a0c:b641:e0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:50:1b:f6:2d:a6:11:83:f0:a3:e5:6a:c6:fc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7114a76605c5f22f4822eae9af6aa940fb82e9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:ce:a7:11:43:b4:ae:2c:08:6a:3a:e9:39:
                    53:6b:63:ab:c2:00:2f:5c:34:84:61:0a:c2:42:42:
                    86:46:2c:d8:8e:2b:8f:da:bb:55:3c:ab:30:c1:68:
                    27:9c:76:0f:7f:6a:f9:46:29:79:5d:5b:9f:12:32:
                    f3:72:95:da:30:bb:38:67:77:96:6b:96:bc:99:64:
                    39:27:bc:83:6e:75:98:64:76:1d:03:7e:11:12:64:
                    98:05:14:42:15:d1:3a:92:9b:9d:d0:2f:c5:25:c9:
                    33:98:a2:92:97:77:0b:98:da:f9:89:06:96:68:91:
                    db:26:50:7c:a2:87:06:22:81:d0:4f:b0:67:25:28:
                    f9:db:8f:8b:82:34:52:c9:bc:81:06:b5:f4:ec:b2:
                    75:d0:9a:0c:21:10:6b:5b:ce:e1:93:4f:aa:59:ba:
                    f9:db:fd:73:88:a1:ae:92:93:5f:4b:e5:b2:63:b0:
                    53:6e:79:92:4b:45:c3:e8:83:63:0e:04:9d:e9:2f:
                    91:2d:f9:be:fb:12:cc:68:5e:ef:dd:32:d7:e7:d9:
                    86:c1:fb:23:63:ec:3b:6c:00:06:5f:a1:6b:b1:f8:
                    59:be:e1:02:19:f0:95:4b:34:fc:fb:91:aa:b3:63:
                    5c:da:b7:76:38:f9:45:23:94:5b:0d:fc:37:2d:0d:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:A7:66:05:C5:F2:2F:48:22:EA:E9:AF:6A:A9:40:FB:82:E9:FA
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cRSnZgXF8i9IIurpr2qpQPuC6fo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:e0::/44
                  2a0c:b641:6d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:7d:86:1e:ed:03:99:1c:1a:7c:65:c0:48:c7:f0:21:0e:
         65:4f:6f:8b:a0:8a:4f:f1:44:16:19:99:c3:3c:94:11:f8:6e:
         4e:ce:b2:ad:3a:3f:00:36:c0:ba:aa:b0:e6:da:64:43:08:be:
         54:bb:a2:2b:5f:b0:0b:e6:79:4b:2d:b8:ae:af:4f:3a:7f:8d:
         5f:f5:01:64:8f:06:a5:a6:07:f8:71:a7:75:93:ac:ee:fa:f4:
         09:50:9c:af:e9:fd:23:9c:06:50:27:f1:af:70:93:27:61:ba:
         83:97:8a:ed:9d:b4:0f:ac:20:b8:77:22:f3:02:c7:5d:e9:ed:
         89:2f:19:61:24:31:0d:52:77:93:ce:87:89:1e:2b:6b:cf:26:
         f8:f2:95:77:5a:0c:42:ed:88:b5:ee:32:dd:4d:6c:fa:22:fc:
         c6:82:a8:80:0e:53:ff:39:eb:aa:76:92:d7:ff:7b:2f:cf:54:
         f3:e7:e5:f0:fd:8b:a3:90:b6:2e:c0:5f:37:36:95:b8:9e:10:
         d7:b2:fa:de:2c:f7:f6:a3:55:a8:0f:40:ff:a4:c2:b3:11:e8:
         2f:6e:8d:ed:87:dc:dc:24:9e:71:a2:5a:1b:c4:9e:86:36:6b:
         4d:fe:bf:c6:a6:9a:8c:38:79:83:5b:f6:4b:2d:5a:9b:fd:14:
         47:e9:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----