Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/jvcc_XipNZPBL0L_-BCCSN62uaQ.roa
File:                     jvcc_XipNZPBL0L_-BCCSN62uaQ.roa (raw, json)
Hash identifier:          Yl7ywC1XH9L6Aej/2SPJ78xu6e7p41/rgVztvuaYp3c=
Subject key identifier:   8E:F7:1C:FD:78:A9:35:93:C1:2F:42:FF:F8:10:82:48:DE:B6:B9:A4
Certificate issuer:       /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial:       018570B05EE2CF8DD36584FA1FB7B285241F
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/jvcc_XipNZPBL0L_-BCCSN62uaQ.roa
Signing time:             Mon 02 Jan 2023 04:14:44 +0000
ROA not before:           Mon 02 Jan 2023 04:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     945
IP address blocks:        2a05:b0c6:b00b::/48 maxlen: 48
                          2a05:b0c7:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b0:5e:e2:cf:8d:d3:65:84:fa:1f:b7:b2:85:24:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
        Validity
            Not Before: Jan  2 04:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ef71cfd78a93593c12f42fff8108248deb6b9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:91:53:1e:7f:ce:2a:a3:1f:f2:d2:24:bc:
                    2d:6f:46:e0:36:11:bb:56:38:30:36:81:e2:d6:db:
                    43:ea:5e:63:84:96:c9:75:94:62:82:c9:ff:5d:a8:
                    5c:86:5f:7b:5d:37:68:83:a8:1f:8a:a4:47:9a:4e:
                    f0:3b:41:80:9a:fe:ce:b5:d4:a0:a0:06:e0:7e:12:
                    2d:0b:10:1a:88:a5:11:d5:de:10:36:0d:da:51:dd:
                    d6:5d:16:1b:1b:f9:c5:30:fa:59:68:fd:9e:1e:c5:
                    69:9c:40:91:64:66:ec:07:5d:37:cf:33:be:cc:b9:
                    33:9f:3e:eb:f3:e5:fd:c8:0d:52:62:75:94:7d:5b:
                    b7:73:95:9d:3d:ca:e0:70:5c:b1:30:3e:9d:1a:37:
                    64:c5:2f:d6:fb:c3:21:52:3f:45:42:03:b9:dd:c3:
                    40:99:08:a4:40:ac:59:9a:94:a3:1c:42:9c:2b:bb:
                    17:2b:e4:4b:48:45:e9:35:59:6c:95:f9:09:33:8b:
                    a3:84:8f:4d:12:2b:49:18:72:8d:7c:f2:88:4c:62:
                    ec:cd:d1:d0:a8:af:89:87:aa:0b:48:b6:48:10:c1:
                    09:7e:be:cf:0b:1d:28:44:fa:1b:83:c7:34:e7:4b:
                    ff:21:41:ed:70:e1:a2:6d:a4:27:25:fb:11:ee:5a:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:1C:FD:78:A9:35:93:C1:2F:42:FF:F8:10:82:48:DE:B6:B9:A4
            X509v3 Authority Key Identifier:
                keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/jvcc_XipNZPBL0L_-BCCSN62uaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:b0c6:b00b::/48
                  2a05:b0c7:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:d4:87:15:bc:7b:97:ce:6e:9f:27:9b:b4:ac:7c:9f:5d:8a:
         7e:57:1b:cd:9a:cb:67:26:54:4d:f5:d5:ff:56:65:11:98:a1:
         8a:38:19:95:15:e1:63:fd:68:f2:bb:90:c8:b3:18:0a:77:61:
         af:c7:18:7a:2b:06:68:75:9e:e4:da:98:09:7c:2b:a5:8b:61:
         b7:fc:be:b6:b0:f3:69:f9:a7:6d:57:2b:4b:8e:60:01:6a:51:
         bf:38:55:7f:f1:1a:ba:a9:fd:d7:cf:69:bd:9c:2b:c7:f4:3a:
         8b:91:b9:39:5d:1f:4b:1a:ed:01:c9:35:b3:72:5a:f5:9f:23:
         fd:0d:d6:5c:7f:6a:21:28:a8:79:5f:f9:63:29:bc:69:69:a4:
         f9:a5:21:c2:06:20:47:ac:64:ce:ba:cf:88:54:dd:5b:81:be:
         4a:e2:e6:f6:d4:a9:51:48:45:c5:d3:9d:8b:1f:88:d6:1c:71:
         36:a5:10:f2:f4:cd:75:81:6b:c8:a8:e6:50:e9:d0:4d:3e:50:
         db:78:6b:2e:b1:b7:b7:2b:cf:74:46:37:56:c3:03:58:1e:2a:
         79:f4:6f:f2:52:f6:3b:12:e8:14:33:f1:ff:a6:89:11:d6:0e:
         06:0b:3b:ce:9e:fa:6b:c0:8a:45:c5:34:43:35:6a:a8:9d:5d:
         2d:e7:53:ec
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwsF7iz43TZYT6H7eyhSQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjMwMTAyMDQxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWY3MWNmZDc4YTkzNTkzYzEyZjQyZmZmODEwODI0OGRlYjZiOWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA+RUx5/ziqjH/LSJLwtb0bgNhG7
VjgwNoHi1ttD6l5jhJbJdZRigsn/Xahchl97XTdog6gfiqRHmk7wO0GAmv7OtdSg
oAbgfhItCxAaiKUR1d4QNg3aUd3WXRYbG/nFMPpZaP2eHsVpnECRZGbsB103zzO+
zLkznz7r8+X9yA1SYnWUfVu3c5WdPcrgcFyxMD6dGjdkxS/W+8MhUj9FQgO53cNA
mQikQKxZmpSjHEKcK7sXK+RLSEXpNVlslfkJM4ujhI9NEitJGHKNfPKITGLszdHQ
qK+Jh6oLSLZIEMEJfr7PCx0oRPobg8c050v/IUHtcOGibaQnJfsR7loD+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI73HP14qTWTwS9C//gQgkjetrmkMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvanZjY19YaXBOWlBCTDBMXy1CQ0NTTjYydWFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWwxrAL
AwcAKgWwx7ALMA0GCSqGSIb3DQEBCwUAA4IBAQBL1IcVvHuXzm6fJ5u0rHyfXYp+
VxvNmstnJlRN9dX/VmURmKGKOBmVFeFj/Wjyu5DIsxgKd2Gvxxh6KwZodZ7k2pgJ
fCuli2G3/L62sPNp+adtVytLjmABalG/OFV/8Rq6qf3Xz2m9nCvH9DqLkbk5XR9L
Gu0ByTWzclr1nyP9DdZcf2ohKKh5X/ljKbxpaaT5pSHCBiBHrGTOus+IVN1bgb5K
4ub21KlRSEXF052LH4jWHHE2pRDy9M11gWvIqOZQ6dBNPlDbeGsusbe3K890RjdW
wwNYHip59G/yUvY7EugUM/H/pokR1g4GCzvOnvprwIpFxTRDNWqonV0t51Ps
-----END CERTIFICATE-----