Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/nNc5j--j-yKU1negUZ_tfuq5N1E.roa
File:                     nNc5j--j-yKU1negUZ_tfuq5N1E.roa (raw, json)
Hash identifier:          TQhPI+VNvCNsZ6HE1v9z2f7tIhRuKhDPK5GkoK0R7a4=
Subject key identifier:   9C:D7:39:8F:EF:A3:FB:22:94:D6:77:A0:51:9F:ED:7E:EA:B9:37:51
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       018572C35944BEB6406AE4DD6EFD72F26E91
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/nNc5j--j-yKU1negUZ_tfuq5N1E.roa
Signing time:             Mon 02 Jan 2023 13:54:42 +0000
ROA not before:           Mon 02 Jan 2023 13:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     4755
IP address blocks:        2a05:6742:9050::/46 maxlen: 46

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c3:59:44:be:b6:40:6a:e4:dd:6e:fd:72:f2:6e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jan  2 13:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9cd7398fefa3fb2294d677a0519fed7eeab93751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:1c:80:47:cc:01:05:d1:dc:2d:06:53:05:
                    7e:78:3d:4b:ab:f4:79:36:d0:70:34:19:57:03:0b:
                    f1:2c:c6:cf:c7:62:5f:e8:bb:92:ea:7a:e3:98:e8:
                    b3:b6:b0:fc:8d:17:a6:1b:0e:a1:50:32:15:d6:51:
                    49:2c:70:bf:77:e5:99:c4:05:18:59:b5:a1:4c:2c:
                    6f:31:bf:15:c2:c4:a1:8e:b6:4f:63:ce:b8:39:cf:
                    64:c2:4f:e7:3d:65:35:13:a9:ab:9f:fb:e1:4d:c7:
                    7e:f8:94:0e:9a:ab:21:ba:66:2e:30:ab:4f:13:b7:
                    be:54:87:73:ea:f4:da:54:27:42:19:55:89:4c:40:
                    de:f6:db:24:f1:cf:6a:8b:13:d2:7f:4b:80:c0:fd:
                    ab:d9:06:99:f4:8d:71:94:05:8c:76:46:fa:22:12:
                    5a:7c:2c:3b:49:c2:82:95:e9:af:53:55:e3:55:f2:
                    1c:34:03:38:e6:7c:eb:d9:c4:59:27:ee:1b:e3:4a:
                    ea:de:24:4e:a8:98:9a:11:10:4b:aa:3b:1e:3f:ce:
                    a0:ef:61:2b:12:2d:97:84:7c:2e:cf:49:53:77:02:
                    2e:a5:e9:14:ae:8b:75:a0:ca:6d:24:d3:5e:3c:fb:
                    9c:d0:d2:c0:90:73:98:f4:0c:35:04:7f:34:af:45:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:39:8F:EF:A3:FB:22:94:D6:77:A0:51:9F:ED:7E:EA:B9:37:51
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/nNc5j--j-yKU1negUZ_tfuq5N1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:6742:9050::/46

    Signature Algorithm: sha256WithRSAEncryption
         08:85:73:05:86:e1:16:9b:24:fc:d2:1c:10:ef:5c:3f:4a:ea:
         e7:87:5f:76:26:d8:f6:69:e6:82:c9:c0:74:b8:0f:56:fa:3a:
         49:18:49:c3:4c:f7:50:f1:60:a7:28:8d:03:86:57:f1:ae:e6:
         e9:e1:d2:d3:11:88:42:62:81:1b:e6:f1:7e:1f:0d:fc:f4:8e:
         0d:d3:cd:f4:8f:16:3e:6c:80:ac:c9:d2:a5:83:c2:ee:0c:01:
         5f:b6:47:39:3e:e9:96:d6:90:f0:c0:d9:55:f1:c4:53:88:39:
         77:be:e2:9b:01:47:9f:95:4a:f8:69:dd:ae:9b:11:22:f1:fe:
         2b:de:6c:66:66:e5:d6:fc:ac:b5:a7:1a:ee:c3:b0:4a:2d:7c:
         7a:29:b7:01:bd:11:97:da:c2:32:b3:96:62:bb:48:b2:ae:c2:
         4b:b0:be:2b:a5:28:1b:c1:2d:0a:fb:56:cf:e3:84:0f:af:99:
         d8:0a:61:4f:99:25:2e:c1:7e:a3:36:36:16:81:17:1a:ef:f6:
         17:cf:f5:cf:09:25:4f:0c:39:1c:eb:71:da:a8:1d:f6:2e:53:
         c0:e8:70:f7:c2:49:e5:2b:fd:49:0a:eb:c5:8b:03:72:d9:4d:
         79:bb:e6:55:fd:94:66:4d:13:11:d6:83:e4:70:6d:04:91:2e:
         3a:d5:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----