Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dmPKYwKgsF3QcbR86wXjTupN6us.roa
File:                     dmPKYwKgsF3QcbR86wXjTupN6us.roa (raw, json)
Hash identifier:          OfcFe5oBUATlP2Fu7TI94u4w3UzyjtOYi134F1Z0uBE=
Subject key identifier:   76:63:CA:63:02:A0:B0:5D:D0:71:B4:7C:EB:05:E3:4E:EA:4D:EA:EB
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       01857355DE313960DA730275DE1FCDCD6E22
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dmPKYwKgsF3QcbR86wXjTupN6us.roa
Signing time:             Mon 02 Jan 2023 16:34:45 +0000
ROA not before:           Mon 02 Jan 2023 16:34:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54040
IP address blocks:        2001:668:121::/48 maxlen: 48
                          2001:668:122::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:55:de:31:39:60:da:73:02:75:de:1f:cd:cd:6e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 16:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7663ca6302a0b05dd071b47ceb05e34eea4deaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:28:b5:d9:0b:94:08:3d:3e:78:cd:3c:69:
                    df:6f:7f:ca:05:10:10:15:d8:aa:b6:9a:d6:09:76:
                    56:a5:28:d1:16:a9:82:c3:be:71:7f:5d:38:dc:01:
                    40:4a:82:64:38:16:c0:09:e1:14:a9:28:fe:41:ac:
                    d9:d2:bd:e6:54:6b:bf:ca:8d:e7:e8:7e:a8:cb:4b:
                    c6:43:d8:bf:09:92:65:cb:06:09:9a:a1:19:64:48:
                    57:ab:6e:9d:93:59:6b:17:46:cc:00:f3:de:e5:ce:
                    00:bd:e5:cd:b6:60:ce:d9:c4:16:b6:e2:dc:0d:51:
                    04:64:1f:92:2b:9b:23:b5:e9:fb:33:f2:3a:74:58:
                    8d:8a:41:3e:f2:43:13:bb:17:f1:ce:2b:19:67:82:
                    3c:3f:51:80:c1:d5:ee:0a:7c:68:17:66:a9:73:25:
                    18:d2:50:df:05:9e:5a:1a:cb:75:fc:34:b2:1f:c1:
                    d4:8e:00:cd:ec:4d:ed:3f:6f:36:25:b6:96:2a:df:
                    c9:06:b6:fb:f4:d1:1c:f5:68:da:c9:b3:78:55:46:
                    93:82:c6:9c:15:82:87:04:31:64:21:cf:51:85:03:
                    bb:e1:7b:60:a6:76:a2:0f:9d:1b:79:4b:db:c2:86:
                    6b:d7:08:80:e6:88:6c:f2:4a:0e:2f:f0:aa:ef:ad:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:CA:63:02:A0:B0:5D:D0:71:B4:7C:EB:05:E3:4E:EA:4D:EA:EB
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dmPKYwKgsF3QcbR86wXjTupN6us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:668:121::-2001:668:122:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:e1:3d:f9:9d:d5:14:fd:58:80:a1:6f:4c:ae:3b:56:9b:
         3c:9e:33:b3:67:73:d6:71:b6:0e:a1:fd:7c:f4:9f:88:20:e6:
         8d:ae:eb:1b:f1:00:94:6b:0e:21:98:0f:4f:1d:0a:34:fe:6e:
         4a:dd:ec:14:8f:04:b2:b5:34:6c:4e:d3:c7:af:a6:02:42:f3:
         74:dd:e2:34:f8:29:6e:27:02:88:ba:68:31:e2:07:59:5f:71:
         51:39:b1:13:06:e6:ad:1c:ed:e0:a1:03:ff:41:17:5e:68:4a:
         95:82:15:e2:75:9f:2e:98:0c:ba:ae:6c:03:ff:4b:23:d9:bc:
         31:99:5f:61:ec:80:f5:1c:b5:86:5e:22:b9:f5:b0:f9:e6:ad:
         97:e9:32:ce:a8:28:6a:d2:73:8e:5b:96:0b:28:d0:56:64:4e:
         ca:25:75:e7:2c:f3:1a:5b:3b:a2:df:c0:62:fb:d6:23:26:37:
         6e:6c:d1:ee:4f:d5:39:aa:4e:e3:93:c7:e4:a6:c2:8c:46:b2:
         4f:c9:66:8c:f1:8a:7e:73:cb:04:a1:54:89:e1:2e:9d:7e:96:
         a9:43:6e:c9:b4:18:65:fa:20:d7:bc:b6:c7:a1:1b:1b:7f:34:
         4e:34:6a:07:49:e4:e1:79:aa:aa:b5:67:99:96:f5:dd:9c:86:
         30:08:9d:c0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVzVd4xOWDacwJ13h/NzW4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjMwMTAyMTYzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjYzY2E2MzAyYTBiMDVkZDA3MWI0N2NlYjA1ZTM0ZWVhNGRlYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujIotdkLlAg9PnjNPGnfb3/KBRAQ
FdiqtprWCXZWpSjRFqmCw75xf1043AFASoJkOBbACeEUqSj+QazZ0r3mVGu/yo3n
6H6oy0vGQ9i/CZJlywYJmqEZZEhXq26dk1lrF0bMAPPe5c4AveXNtmDO2cQWtuLc
DVEEZB+SK5sjten7M/I6dFiNikE+8kMTuxfxzisZZ4I8P1GAwdXuCnxoF2apcyUY
0lDfBZ5aGst1/DSyH8HUjgDN7E3tP282JbaWKt/JBrb79NEc9WjaybN4VUaTgsac
FYKHBDFkIc9RhQO74XtgpnaiD50beUvbwoZr1wiA5ohs8koOL/Cq763vdwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHZjymMCoLBd0HG0fOsF407qTerrMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvZG1QS1l3S2dzRjNRY2JSODZ3WGpUdXBONnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAgAQZo
ASEDBwAgAQZoASIwDQYJKoZIhvcNAQELBQADggEBAHbV4T35ndUU/ViAoW9MrjtW
mzyeM7Nnc9Zxtg6h/Xz0n4gg5o2u6xvxAJRrDiGYD08dCjT+bkrd7BSPBLK1NGxO
08evpgJC83Td4jT4KW4nAoi6aDHiB1lfcVE5sRMG5q0c7eChA/9BF15oSpWCFeJ1
ny6YDLqubAP/SyPZvDGZX2HsgPUctYZeIrn1sPnmrZfpMs6oKGrSc45blgso0FZk
Tsoldecs8xpbO6LfwGL71iMmN25s0e5P1TmqTuOTx+SmwoxGsk/JZozxin5zywSh
VInhLp1+lqlDbsm0GGX6INe8tsehGxt/NE40agdJ5OF5qqq1Z5mW9d2chjAIncA=
-----END CERTIFICATE-----