Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ABBraQceY5LgQ9FT5RtsCREu0EM.roa
File:                     ABBraQceY5LgQ9FT5RtsCREu0EM.roa (raw, json)
Hash identifier:          qvniks77ylvOriFBs1XYfoA2QQq+oGjFZAaJb9GQ+rM=
Subject key identifier:   00:10:6B:69:07:1E:63:92:E0:43:D1:53:E5:1B:6C:09:11:2E:D0:43
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       01857002764E110F6D69CEFE73114FCCD775
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ABBraQceY5LgQ9FT5RtsCREu0EM.roa
Signing time:             Mon 02 Jan 2023 01:04:47 +0000
ROA not before:           Mon 02 Jan 2023 01:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29497
IP address blocks:        2a00:1fa1::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:76:4e:11:0f:6d:69:ce:fe:73:11:4f:cc:d7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Jan  2 01:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00106b69071e6392e043d153e51b6c09112ed043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:8f:85:15:23:84:bc:2b:b5:65:f8:18:fe:
                    2e:f5:70:64:b3:f8:a6:0b:64:06:ac:79:e5:05:82:
                    82:d0:c5:cc:50:1f:70:22:e5:91:0d:3e:63:2b:a3:
                    ec:13:8a:c1:36:8d:8c:7e:71:34:09:03:85:22:2c:
                    94:e4:9b:af:71:a3:3a:4f:f8:f1:ac:60:ed:9d:29:
                    cb:50:7d:cc:c2:40:f1:7f:31:15:65:cc:d9:09:db:
                    77:e0:10:ee:09:2e:3b:89:fb:4f:af:d5:dd:5c:f6:
                    16:e1:3b:ff:c0:d5:af:30:d9:74:68:ac:43:ad:64:
                    e1:14:92:ed:de:d4:89:4f:81:09:37:cb:e4:78:a6:
                    c9:a4:d2:08:5c:60:ba:40:9e:87:70:d9:25:99:c8:
                    ef:ea:6a:01:69:9a:db:fa:62:88:54:ca:db:b9:f8:
                    9f:01:1b:f5:86:83:96:4f:9a:fa:a3:98:05:3b:4c:
                    8b:63:76:ea:76:33:ed:9e:a2:4d:64:d2:16:ad:c2:
                    fa:64:b9:82:2c:76:5c:82:91:17:68:76:3d:f1:87:
                    64:07:4d:2e:d9:4c:99:03:26:2c:b5:f9:51:98:75:
                    4a:91:b8:71:e5:85:34:96:c5:ef:b1:08:6f:ec:19:
                    c0:c3:e0:c6:13:6d:eb:a1:22:26:61:7d:58:7e:d7:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:6B:69:07:1E:63:92:E0:43:D1:53:E5:1B:6C:09:11:2E:D0:43
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ABBraQceY5LgQ9FT5RtsCREu0EM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1fa1::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:74:79:38:05:dc:95:5f:90:b7:da:b8:de:b6:0e:1c:4d:
         a5:0d:ec:e4:cc:f9:47:26:9d:54:d4:d4:12:10:6c:ac:e9:95:
         bb:6d:0d:c0:8d:86:26:63:08:d4:e4:e3:b6:a0:91:6e:cb:4e:
         02:1d:87:92:c5:ed:db:79:3f:c0:50:8d:a5:79:dd:0b:2c:06:
         f8:bc:65:dc:5d:38:23:a8:f0:ce:0f:1c:64:4c:ed:d8:63:14:
         e6:3c:68:e2:6f:44:d1:eb:ff:fa:e9:71:56:8e:89:3e:82:ab:
         a3:3b:b1:b2:73:be:2a:0f:8e:7b:9a:2b:b3:b6:1d:c4:96:5b:
         b8:c2:00:a7:3d:b4:b5:c1:db:2f:fd:70:2a:0f:b3:eb:0e:44:
         04:80:bc:43:57:bc:f1:fd:e9:3a:a5:21:ea:fc:48:d9:81:f9:
         ab:d7:23:4e:97:59:a8:04:dc:93:9e:c0:87:81:5d:a3:2c:dd:
         4e:2d:e5:c1:2b:9d:ba:54:80:2a:ca:7c:22:4e:37:93:74:41:
         ee:c0:0a:a5:5f:86:5b:69:3b:f8:7c:62:33:8a:65:b9:bd:b6:
         8c:4d:ed:e0:75:02:4c:61:69:e1:6b:fe:2d:c9:5e:8b:d9:95:
         64:22:1d:28:9a:7b:b6:fc:db:cb:8d:5c:df:30:45:d9:86:d5:
         d0:23:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----