Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/np4eXns3JftGWM2y1VgeCeu0vXg.roa
File:                     np4eXns3JftGWM2y1VgeCeu0vXg.roa (raw, json)
Hash identifier:          JeiCYs/EIsryqk/3VvCvmQxgftNyltHy0vOkieSfqqc=
Subject key identifier:   9E:9E:1E:5E:7B:37:25:FB:46:58:CD:B2:D5:58:1E:09:EB:B4:BD:78
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       0187299341DAF13D2A88A13C969CBAD814EF
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/np4eXns3JftGWM2y1VgeCeu0vXg.roa
Signing time:             Tue 28 Mar 2023 18:55:29 +0000
ROA not before:           Tue 28 Mar 2023 18:55:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15830
IP address blocks:        2a0e:d780::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:29:93:41:da:f1:3d:2a:88:a1:3c:96:9c:ba:d8:14:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Mar 28 18:55:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e9e1e5e7b3725fb4658cdb2d5581e09ebb4bd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:da:d1:a3:f0:99:d9:28:ed:dc:81:c5:bf:
                    26:97:c1:03:02:d3:13:5c:17:a7:06:76:82:59:3b:
                    ba:3d:89:f3:c0:0e:35:68:fd:23:56:9a:35:70:bc:
                    c3:5f:6d:e4:05:2c:18:6e:77:cd:8e:53:89:79:a4:
                    3a:d5:f1:b8:e5:6d:d2:67:b1:8c:37:84:7f:84:85:
                    3d:93:df:2d:f2:b0:8d:56:8d:a4:4e:c9:82:f7:8c:
                    29:f7:f1:7d:49:72:ad:fa:b6:73:c6:73:f4:3a:53:
                    42:3c:e5:0c:9e:4e:e5:3a:d9:80:02:4e:4b:fb:c9:
                    03:fb:0a:09:07:cc:36:6c:46:3d:ac:72:64:c8:42:
                    46:5b:9d:bc:4c:1e:77:5f:9a:88:3d:19:19:e7:18:
                    3d:23:af:d8:94:cd:42:38:78:67:49:0a:35:44:25:
                    1e:bf:a8:6d:ee:22:4d:1c:96:54:1d:f8:23:5d:58:
                    2f:2a:bc:d7:4f:92:e1:d5:0a:cd:3d:70:dd:3c:74:
                    f4:61:a6:7b:a7:b8:25:9e:7f:db:26:db:e2:2b:c7:
                    1e:c3:fa:9a:f5:de:b0:8e:a2:57:3d:c9:d2:d0:f3:
                    e8:7f:50:18:51:71:83:0d:4a:ca:ee:a8:24:9a:87:
                    1e:df:d6:1c:c8:96:03:0c:4e:9f:b6:b0:b1:cd:0b:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9E:1E:5E:7B:37:25:FB:46:58:CD:B2:D5:58:1E:09:EB:B4:BD:78
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/np4eXns3JftGWM2y1VgeCeu0vXg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:d780::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:92:c6:73:2d:c8:12:b6:c1:73:c7:e7:88:1b:db:ea:7f:32:
         54:df:08:70:b8:87:b3:2a:9d:81:69:d0:06:64:73:48:bd:38:
         df:22:bc:6d:38:de:17:cb:3d:13:65:79:9a:c4:9b:1c:ef:dc:
         42:07:b4:bc:bd:4b:58:f8:6a:96:ce:63:7f:85:11:b8:50:f5:
         19:1d:73:4c:2e:fd:a6:b9:25:6d:90:82:7c:fd:c3:c5:ae:ed:
         33:67:80:b7:97:6e:ce:7b:6e:30:16:8b:3c:ef:21:e7:a5:68:
         18:96:4f:8a:eb:4b:66:4d:cb:57:32:2c:dd:37:ed:2b:3a:01:
         26:a3:82:fc:3c:6d:1b:bb:2b:c7:15:e0:c1:00:e0:4a:f3:0d:
         de:3d:f9:04:f1:c7:ca:54:0c:be:3d:d9:56:4a:b7:f4:f5:d1:
         af:39:d9:98:e1:a2:6a:0b:79:a7:40:22:ee:b3:28:02:ab:f0:
         2b:6a:46:3e:d8:e8:57:c6:f3:68:e0:13:50:e8:04:fc:8d:ee:
         5b:bc:fb:d2:78:88:44:34:9c:18:5d:b0:33:07:9c:0e:d3:25:
         de:20:32:a2:5f:9f:18:5d:90:17:ac:69:5b:44:cb:23:35:f5:
         56:b1:93:16:5e:f6:f4:ec:7b:1b:5c:1d:ae:1a:49:7c:d7:9b:
         fe:fe:bd:d2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYcpk0Ha8T0qiKE8lpy62BTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMwMzI4MTg1NTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTllMWU1ZTdiMzcyNWZiNDY1OGNkYjJkNTU4MWUwOWViYjRiZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfTa0aPwmdko7dyBxb8ml8EDAtMT
XBenBnaCWTu6PYnzwA41aP0jVpo1cLzDX23kBSwYbnfNjlOJeaQ61fG45W3SZ7GM
N4R/hIU9k98t8rCNVo2kTsmC94wp9/F9SXKt+rZzxnP0OlNCPOUMnk7lOtmAAk5L
+8kD+woJB8w2bEY9rHJkyEJGW528TB53X5qIPRkZ5xg9I6/YlM1COHhnSQo1RCUe
v6ht7iJNHJZUHfgjXVgvKrzXT5Lh1QrNPXDdPHT0YaZ7p7glnn/bJtviK8cew/qa
9d6wjqJXPcnS0PPof1AYUXGDDUrK7qgkmoce39YcyJYDDE6ftrCxzQtSiQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ6eHl57NyX7RljNstVYHgnrtL14MB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvbnA0ZVhuczNKZnRHV00yeTFWZ2VDZXUwdlhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7XgDAN
BgkqhkiG9w0BAQsFAAOCAQEAfZLGcy3IErbBc8fniBvb6n8yVN8IcLiHsyqdgWnQ
BmRzSL043yK8bTjeF8s9E2V5msSbHO/cQge0vL1LWPhqls5jf4URuFD1GR1zTC79
prklbZCCfP3Dxa7tM2eAt5duzntuMBaLPO8h56VoGJZPiutLZk3LVzIs3TftKzoB
JqOC/DxtG7srxxXgwQDgSvMN3j35BPHHylQMvj3ZVkq39PXRrznZmOGiagt5p0Ai
7rMoAqvwK2pGPtjoV8bzaOATUOgE/I3uW7z70niIRDScGF2wMwecDtMl3iAyol+f
GF2QF6xpW0TLIzX1VrGTFl729Ox7G1wdrhpJfNeb/v690g==
-----END CERTIFICATE-----