Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/JisZfdGYTjXeD4257Q0Wsjjz4-M.roa
File:                     JisZfdGYTjXeD4257Q0Wsjjz4-M.roa (raw, json)
Hash identifier:          I08Czg0q5Uf1GUiXGyUiuVz65uG0v2l7VD446t5z3Sg=
Subject key identifier:   26:2B:19:7D:D1:98:4E:35:DE:0F:8D:B9:ED:0D:16:B2:38:F3:E3:E3
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       018572C3588CFD2DB379E5E0BF8C993C234D
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/JisZfdGYTjXeD4257Q0Wsjjz4-M.roa
Signing time:             Mon 02 Jan 2023 13:54:42 +0000
ROA not before:           Mon 02 Jan 2023 13:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3549
IP address blocks:        2a05:6744::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c3:58:8c:fd:2d:b3:79:e5:e0:bf:8c:99:3c:23:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jan  2 13:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=262b197dd1984e35de0f8db9ed0d16b238f3e3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:34:3b:ff:96:6a:00:5e:02:f4:7c:f5:36:
                    40:8b:e0:fa:76:63:82:96:75:f4:bd:a7:a9:90:ab:
                    dc:c9:73:77:ab:29:5d:da:95:a4:08:a9:1e:5b:13:
                    d3:d9:4e:d7:66:63:94:cf:bd:1d:65:70:d9:71:b8:
                    b7:71:31:81:48:00:8c:4b:2e:9f:11:ec:e6:ad:73:
                    78:96:2a:94:57:1c:0c:5e:3b:f0:e8:7d:6a:6a:08:
                    cf:22:80:53:03:4f:53:51:fb:d3:ad:15:00:39:3c:
                    c3:70:a9:5f:63:5c:b8:c3:2e:9c:af:3d:05:cd:93:
                    7d:7d:0c:a9:53:96:df:52:23:0b:8f:8a:86:39:eb:
                    99:df:01:ef:33:66:9a:7a:fd:fd:5d:79:cd:2a:1e:
                    a0:0a:1b:d4:a5:81:9c:f7:62:bf:af:34:17:bf:14:
                    8f:26:3d:1e:61:4e:22:49:50:f8:1e:73:18:ab:39:
                    5c:dc:4d:4d:c7:c4:3f:cb:a8:cf:1d:cf:7c:cc:b7:
                    06:0c:62:6e:dc:92:ae:c1:83:41:d4:0b:a2:9f:21:
                    42:b0:6d:92:b1:28:45:04:d7:32:1c:e3:47:ef:f5:
                    12:8f:c1:d9:10:74:86:30:8b:2d:b7:1f:b6:60:c9:
                    ea:fe:63:42:1c:e1:24:d1:1a:f3:bc:62:e8:4c:78:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2B:19:7D:D1:98:4E:35:DE:0F:8D:B9:ED:0D:16:B2:38:F3:E3:E3
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/JisZfdGYTjXeD4257Q0Wsjjz4-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:6744::/46

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:12:31:0b:57:79:06:fe:64:2c:62:6c:47:bb:d7:3b:f4:
         d6:05:eb:1e:93:96:cb:f3:ce:93:35:32:bb:4b:39:07:12:f6:
         af:37:25:4f:c1:e3:ba:d9:45:46:60:e9:01:ad:c4:91:a5:d6:
         7c:96:cc:81:2e:bc:d7:2e:19:33:26:86:9d:33:80:ec:54:90:
         16:c9:6f:51:ab:8e:71:1b:2b:43:e5:59:c5:5f:34:25:3f:31:
         52:98:38:27:8f:b4:2f:6b:d7:b6:03:2e:a2:ed:6c:55:b5:06:
         ca:bd:85:48:20:8a:31:11:a1:73:b0:13:87:01:18:e7:fc:7d:
         12:c9:4e:3b:80:6a:b4:39:0b:b1:74:c2:c8:17:d4:ac:f8:7b:
         20:ab:81:73:38:67:a7:ba:77:85:06:ae:b4:23:67:bb:cf:0e:
         c6:72:b0:a1:f9:f5:33:4b:03:bb:fd:7a:87:21:c2:c9:f8:35:
         68:b8:31:06:8b:c3:e9:fa:7d:49:40:e2:f8:9e:42:53:b4:19:
         76:e0:88:8a:7d:1d:5f:e4:05:c1:c6:34:ad:a7:33:e5:be:cd:
         ee:28:5c:3e:f0:02:35:87:53:6d:72:16:aa:33:7b:34:a5:9e:
         aa:80:fc:b2:38:f9:8f:6c:85:9c:82:ad:e3:ae:9a:c3:e1:10:
         9c:bf:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----