Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa
File:                     x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa (raw, json)
Hash identifier:          Elfuf3YnR2q+tAGHVb+9/fcDRWToAk8rJUl3fA/9stY=
Subject key identifier:   C7:71:E1:EC:01:52:5A:A0:76:16:4D:F4:FB:A6:60:73:C9:E8:61:B2
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       018771095038271D14EBD6A27468A1AE813C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa
Signing time:             Tue 11 Apr 2023 15:57:28 +0000
ROA not before:           Tue 11 Apr 2023 15:57:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205463
IP address blocks:        2a0c:b641:9f0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:71:09:50:38:27:1d:14:eb:d6:a2:74:68:a1:ae:81:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Apr 11 15:57:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c771e1ec01525aa076164df4fba66073c9e861b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:f9:d5:2c:08:95:85:af:e1:b8:12:d5:95:
                    eb:25:72:71:14:e8:28:ce:3a:4d:60:2a:b7:b6:c3:
                    75:43:41:63:7d:47:ad:f9:2f:ed:b5:62:b6:39:fd:
                    4d:7a:87:eb:c6:c2:ec:9a:1f:a9:c1:e5:ea:42:a4:
                    e1:95:33:20:e0:32:e9:a3:84:8c:2e:29:ca:5c:a9:
                    3e:91:98:94:0c:70:0d:40:d4:79:79:51:69:8d:7e:
                    b7:ae:04:c6:1f:66:ec:34:c3:83:49:a9:e3:b7:a3:
                    04:99:cf:88:77:83:b6:49:a7:bf:6f:a5:e3:a5:73:
                    bb:43:f0:bb:2a:ab:42:66:56:8d:c4:3e:af:b3:49:
                    b3:3c:8d:dc:27:56:23:ed:74:8f:13:4e:96:f4:90:
                    35:73:2e:87:15:27:41:de:58:80:bd:8d:e9:fb:63:
                    34:fe:3b:f1:94:58:88:41:de:41:32:bf:10:bd:7e:
                    7c:ea:cf:c0:5b:a2:7f:ae:66:23:71:c3:70:54:99:
                    28:43:fe:20:85:1d:b1:6c:87:ec:f5:f7:46:36:90:
                    31:b7:d9:16:77:d8:8e:8b:f4:4b:e8:bc:02:3b:4f:
                    6e:ed:f5:ba:80:76:f8:df:5c:ec:5b:b4:d1:e8:15:
                    03:72:1c:e5:4e:d2:6a:6f:49:61:55:73:ed:6c:89:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:71:E1:EC:01:52:5A:A0:76:16:4D:F4:FB:A6:60:73:C9:E8:61:B2
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:9f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:20:65:f8:7b:18:7f:fa:43:ef:81:dc:9f:30:97:df:5a:
         84:85:aa:4f:53:05:d1:53:d5:32:5f:35:ce:2c:33:c5:91:5e:
         91:7d:7e:92:a3:12:8f:64:00:88:a6:f0:e3:4e:6f:46:14:7f:
         ca:3a:14:d0:d6:17:e3:c4:c8:af:25:a2:dd:16:89:61:4d:1f:
         b7:96:53:31:bf:a5:c7:00:8c:43:40:d4:66:12:46:f7:99:74:
         68:71:07:72:c8:fa:e2:27:e3:34:a6:ee:03:33:9e:da:77:8a:
         81:a3:27:19:e0:5c:06:ea:39:31:7a:4e:ba:06:41:10:e8:c1:
         8d:d5:f1:f3:88:88:c2:9d:ab:fc:fa:d7:4e:c2:2d:18:ea:fc:
         8a:9f:9d:77:f1:1f:ca:df:1f:bb:ee:2a:19:3a:0f:d8:9a:49:
         90:01:41:66:ce:1e:0e:8e:91:5e:0e:dc:56:36:2b:26:e6:48:
         0f:50:5b:5a:73:a5:65:6a:97:42:de:5a:ed:37:de:e5:82:31:
         00:99:e7:24:78:25:f8:b6:f8:31:da:7f:bd:0e:f4:54:eb:b5:
         db:3f:9a:74:85:7c:52:55:52:14:4e:46:26:74:35:f5:63:a2:
         df:d2:a1:89:53:eb:0c:0f:71:e7:fd:67:37:bc:98:04:3d:6d:
         3c:e0:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----