Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/txGZlIV_JwgJ9uLIvEMDBS_8WT8.roa
File:                     txGZlIV_JwgJ9uLIvEMDBS_8WT8.roa (raw, json)
Hash identifier:          PYDvZb95LqyAzdSM7i5u3DelOU8JiHyqrbrB9iqWQ/E=
Subject key identifier:   B7:11:99:94:85:7F:27:08:09:F6:E2:C8:BC:43:03:05:2F:FC:59:3F
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E94DE5F2786A3876F19AFCF20CA65
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/txGZlIV_JwgJ9uLIvEMDBS_8WT8.roa
Signing time:             Mon 02 Jan 2023 06:15:07 +0000
ROA not before:           Mon 02 Jan 2023 06:15:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213091
IP address blocks:        2a0c:b641:120::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:94:de:5f:27:86:a3:87:6f:19:af:cf:20:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:15:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7119994857f270809f6e2c8bc4303052ffc593f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:a6:87:63:04:59:eb:e4:96:3d:fe:b8:9e:
                    9d:66:aa:b1:71:42:e2:a8:8d:d8:fd:3c:85:d2:69:
                    ea:e5:03:98:fd:d6:27:76:bc:d4:89:2c:5f:1d:a7:
                    dc:36:a6:ba:d2:d8:d2:8f:f1:8b:6c:8f:ac:aa:15:
                    19:62:ce:99:7e:eb:01:c0:66:b0:2c:54:fd:f6:f6:
                    d4:c1:3c:3c:94:c6:1e:da:81:9d:7b:4f:8b:36:00:
                    a6:8f:91:fb:f1:29:d7:17:72:de:ef:51:d0:73:65:
                    72:d1:a4:f8:e7:2e:14:3e:7a:3d:ee:71:97:4e:16:
                    26:e2:13:67:08:15:fb:7e:9a:ed:79:3f:7d:ef:03:
                    05:2e:14:32:1d:04:58:6a:b6:a2:99:49:61:5d:07:
                    a1:17:da:22:26:84:12:e8:bf:e3:24:94:bb:2e:3f:
                    8a:63:a6:d4:cd:d1:d0:f9:5f:f2:90:1e:81:01:66:
                    80:c6:e0:7d:91:2e:9f:c0:00:7f:0c:7f:62:70:63:
                    a8:04:cd:8f:3c:db:30:da:da:16:15:c1:c7:7a:e2:
                    91:0b:09:3c:2e:90:28:71:7a:31:74:c9:1b:24:27:
                    b3:88:fb:7d:a0:37:91:3c:f2:9f:8f:ef:e0:47:5b:
                    6a:06:ab:5f:e8:34:86:9a:87:6b:23:a5:ad:84:c3:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:99:94:85:7F:27:08:09:F6:E2:C8:BC:43:03:05:2F:FC:59:3F
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/txGZlIV_JwgJ9uLIvEMDBS_8WT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:72:39:8a:ab:68:f6:c9:a9:3a:d6:aa:e9:ec:62:2a:52:24:
         fe:ca:e1:29:7f:f8:ef:17:2c:50:96:05:d5:c1:0e:e6:8e:2a:
         81:12:bd:a0:ec:41:88:14:ec:58:14:ec:b5:30:34:3b:0f:60:
         c2:43:4b:9b:0f:a5:06:b1:95:9a:32:5e:a6:06:6a:67:f5:de:
         01:89:35:9d:97:ff:e5:d9:cb:d7:6b:12:8d:c7:af:ac:bd:c3:
         85:26:4e:bf:d3:94:21:0c:8b:6c:d6:6f:63:db:e9:80:1a:e7:
         f8:c4:80:1a:74:b8:de:36:83:07:27:71:a5:68:4d:55:86:e0:
         82:fd:30:a2:67:47:3c:0f:2a:fd:09:e1:a7:ab:3f:d0:69:38:
         4e:20:d1:aa:76:2b:69:f4:1c:01:32:56:26:2d:a9:4c:51:9b:
         85:88:c7:b5:c4:c4:cd:5c:87:ac:32:f4:6b:64:b5:db:38:21:
         d2:b0:62:36:a6:1d:58:5a:a1:86:3b:38:1e:51:83:ed:af:42:
         53:ba:97:9f:8d:e3:34:55:02:63:19:15:eb:03:c9:e4:a8:64:
         ea:57:fc:ad:e8:cd:98:b2:b7:17:97:1d:98:87:13:e6:f9:75:
         35:3b:fc:72:bc:d4:c8:9e:cb:4d:0b:6b:57:e4:6a:31:b7:a3:
         60:14:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----