Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/DlKnERt9wpJdzgn5cRF0ivWIN3Y.roa
File:                     DlKnERt9wpJdzgn5cRF0ivWIN3Y.roa (raw, json)
Hash identifier:          q0fqSDwtFo2GcDgoVO7N3eEAboJst6YZFVubSgbaISI=
Subject key identifier:   0E:52:A7:11:1B:7D:C2:92:5D:CE:09:F9:71:11:74:8A:F5:88:37:76
Certificate issuer:       /CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
Certificate serial:       01883F1ADB4D4D4118C39753F60B22CE7A52
Authority key identifier: D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/DlKnERt9wpJdzgn5cRF0ivWIN3Y.roa
Signing time:             Sun 21 May 2023 16:18:24 +0000
ROA not before:           Sun 21 May 2023 16:18:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204916
IP address blocks:        2a12:7c00::/32 maxlen: 32
                          2a12:7c01::/32 maxlen: 32
                          2a12:7c03::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:3f:1a:db:4d:4d:41:18:c3:97:53:f6:0b:22:ce:7a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
        Validity
            Not Before: May 21 16:18:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e52a7111b7dc2925dce09f97111748af5883776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:56:78:31:a6:bb:7b:3e:c4:59:96:dc:80:
                    8c:8f:0d:49:25:c8:eb:1c:17:eb:7f:3f:6e:8e:02:
                    e6:f8:27:8c:2c:a8:61:21:72:68:de:44:14:24:53:
                    05:c4:6b:b0:dc:1b:d7:8f:da:c9:a5:62:5c:e9:86:
                    83:93:91:3e:00:b1:b6:83:bc:d6:47:b8:ea:1b:a3:
                    f5:b8:a4:77:cf:da:95:24:24:cf:c9:66:b8:14:c9:
                    cb:3d:e0:0d:aa:0b:d5:7f:f1:78:11:cc:9a:6e:fe:
                    60:48:22:fd:4c:10:48:7b:04:df:35:8f:cf:d7:8d:
                    b6:4a:00:a2:d7:69:ec:3f:57:12:ea:54:70:ef:24:
                    9b:62:13:bf:ad:0e:25:61:7a:3d:0d:3b:a0:68:03:
                    a0:ad:ea:eb:ce:8b:f0:ea:8c:be:95:88:5f:12:94:
                    1d:c8:4e:48:29:b9:4e:ab:4f:88:d5:d3:99:3c:60:
                    d0:e9:dc:17:af:ac:ee:6d:83:ab:a7:6c:b8:20:6b:
                    1b:e4:51:cb:2a:0b:fa:03:f6:99:5c:3f:cb:b0:e1:
                    97:40:2b:32:9e:0c:e2:f3:b1:12:11:78:30:84:cb:
                    ef:26:3e:83:8f:fc:fe:62:eb:8d:59:4b:db:eb:09:
                    ab:11:c7:4f:d2:0f:3e:fa:2d:94:01:9a:83:ab:03:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:A7:11:1B:7D:C2:92:5D:CE:09:F9:71:11:74:8A:F5:88:37:76
            X509v3 Authority Key Identifier:
                keyid:D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/DlKnERt9wpJdzgn5cRF0ivWIN3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/2KcRsTXf1fNLu5jBADb42PDBcx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:7c00::/31
                  2a12:7c03::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:2e:dd:33:e9:b4:3e:cf:86:06:7f:9f:ca:99:b5:49:c0:
         7c:62:0f:be:eb:39:aa:1e:fa:53:c5:ba:ff:6a:0e:e9:cb:1e:
         d6:04:05:fc:c1:2e:e4:37:75:e6:f9:20:a1:16:fa:7f:51:10:
         03:d2:d9:3b:f5:0b:14:d4:ee:18:d6:17:01:00:cc:fc:fd:ce:
         f6:42:15:23:06:c8:8c:06:7e:7b:0e:f6:32:a7:14:f5:7f:5a:
         74:52:5b:ef:b4:8f:d4:b5:77:fa:3f:76:e5:fa:de:35:d1:15:
         96:39:95:b5:44:60:30:b5:9d:fc:e2:ad:94:37:cf:d1:c0:f5:
         6d:2c:e2:00:df:05:91:da:dc:98:48:1e:ad:86:cd:5b:1a:9b:
         96:6a:d9:02:f2:10:46:2a:37:fc:41:80:0a:34:24:15:67:7a:
         12:a1:d8:a7:53:ec:75:61:c6:38:e0:b7:4e:61:b7:7c:7f:bf:
         29:c8:9e:32:ce:46:9e:e7:67:b8:fb:ef:8c:c8:72:31:06:23:
         65:d2:55:6a:96:e2:47:4c:46:9f:b3:15:1e:ca:84:75:23:9e:
         35:7d:f4:90:f5:cc:c7:c5:36:4a:0b:fb:8c:44:67:60:a9:d3:
         d1:48:07:cc:c5:87:62:c6:76:10:7d:37:7b:44:02:54:94:55:
         78:90:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----