Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/6KFrnNEsNKV_43u7G6skEy2-iJE.roa
File:                     6KFrnNEsNKV_43u7G6skEy2-iJE.roa (raw, json)
Hash identifier:          r1gBmCLmRQHWAIR7JilOMN+FH0IE8Mfvj8wTZR8LK98=
Subject key identifier:   E8:A1:6B:9C:D1:2C:34:A5:7F:E3:7B:BB:1B:AB:24:13:2D:BE:88:91
Certificate issuer:       /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial:       018AD5130167E6FBC19BD20F9B00CE7A1D7A
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/6KFrnNEsNKV_43u7G6skEy2-iJE.roa
Signing time:             Wed 27 Sep 2023 05:18:27 +0000
ROA not before:           Wed 27 Sep 2023 05:18:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a10:9600::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d5:13:01:67:e6:fb:c1:9b:d2:0f:9b:00:ce:7a:1d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
        Validity
            Not Before: Sep 27 05:18:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8a16b9cd12c34a57fe37bbb1bab24132dbe8891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:87:b8:8e:da:e8:de:7b:cb:7f:dc:e0:50:
                    e6:29:44:8e:4a:f9:f1:77:d1:50:6a:8d:31:d9:98:
                    3d:01:f0:de:1f:1c:b5:c8:e0:70:27:2b:73:30:01:
                    26:b5:5d:7c:03:03:db:39:14:89:b0:0d:31:ec:87:
                    f4:e4:34:ad:23:8b:c0:c5:24:40:88:77:e5:73:18:
                    72:1c:33:3e:7f:c2:f8:0f:8b:6c:af:d1:22:3a:d7:
                    ef:cc:3e:ee:d8:02:d0:f3:33:9f:46:8d:6f:9c:6d:
                    d9:8e:48:e3:9b:86:6b:42:c4:07:7b:de:9e:4a:7a:
                    0c:15:86:5f:10:07:5c:13:ea:0c:da:74:1e:b0:84:
                    a2:cd:a8:4d:5b:5b:29:86:23:73:1b:8c:23:f0:8f:
                    15:5f:e0:d7:a6:72:ad:f8:f3:77:a3:88:00:8b:b3:
                    44:2c:c8:4d:25:8e:69:1a:6e:8d:a0:b3:c7:9f:01:
                    6a:c7:26:08:69:bd:1b:73:48:90:fa:e0:8b:8f:90:
                    7a:de:c0:82:03:13:ed:13:2b:5f:4e:17:1e:86:56:
                    5a:c7:aa:56:f2:35:2b:9c:b4:dd:06:6c:e5:e2:be:
                    02:ce:f0:74:cd:b5:69:f6:b2:82:c5:78:e7:d9:19:
                    13:71:90:2b:2a:c4:3b:8a:2e:d7:3c:98:29:26:80:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:6B:9C:D1:2C:34:A5:7F:E3:7B:BB:1B:AB:24:13:2D:BE:88:91
            X509v3 Authority Key Identifier:
                keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/6KFrnNEsNKV_43u7G6skEy2-iJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:9600::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:70:37:aa:29:f5:d9:b9:ab:5a:fe:1d:33:9d:32:b5:4c:
         f3:bd:1f:bc:e7:5c:da:43:76:2c:83:fc:a5:84:89:db:79:1b:
         50:c2:53:11:2d:9f:9d:9f:d1:be:74:df:dd:1b:e0:43:26:be:
         41:d7:ae:bc:74:65:ab:ed:da:70:3d:e7:1f:9f:2d:a0:09:f8:
         cc:76:63:c4:0b:c2:4c:60:fa:9d:9c:54:39:73:90:2a:21:58:
         01:02:16:9d:a5:57:a1:63:98:67:80:dc:37:a6:14:3d:cf:f4:
         be:6a:7f:49:e2:bb:c2:7b:36:a0:54:70:5e:70:ee:e1:30:ef:
         29:cc:42:5c:10:31:8d:23:68:5e:dd:e7:7e:30:b0:cb:c5:c9:
         66:b8:26:98:f1:23:59:27:5b:34:0f:00:ae:e7:97:bb:7a:4a:
         ac:12:7e:90:6f:6a:4c:a6:d0:83:a4:12:fa:99:40:b6:a8:bf:
         72:11:d8:2d:d5:40:9c:57:e8:68:b4:bb:55:ad:aa:b3:cd:75:
         5a:87:a5:c4:eb:ce:0f:7f:06:5b:c7:d6:31:98:66:c7:34:47:
         0e:47:fc:a8:0c:4d:a9:61:60:ad:05:15:9c:af:ab:bb:d3:43:
         38:bd:68:a8:f4:ca:3d:09:7c:19:1e:08:7c:9b:d3:ba:0c:64:
         92:3a:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----