Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ypATBM1t-b_Oi7EA4TuaDIQdjqM.roa
File:                     ypATBM1t-b_Oi7EA4TuaDIQdjqM.roa (raw, json)
Hash identifier:          FprSc3MqusUMKEsioJoqxLmldq/p2YMQgmjrxAs5Ojc=
Subject key identifier:   CA:90:13:04:CD:6D:F9:BF:CE:8B:B1:00:E1:3B:9A:0C:84:1D:8E:A3
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       018A27573182CF15215D98AE3E2EE13520B3
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ypATBM1t-b_Oi7EA4TuaDIQdjqM.roa
Signing time:             Thu 24 Aug 2023 11:39:00 +0000
ROA not before:           Thu 24 Aug 2023 11:39:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204490
IP address blocks:        2a0d:c102::/32 maxlen: 32
                          2a0d:afc7::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 24 Aug 2023 12:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:27:57:31:82:cf:15:21:5d:98:ae:3e:2e:e1:35:20:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Aug 24 11:39:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca901304cd6df9bfce8bb100e13b9a0c841d8ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:e9:f0:c6:80:c1:20:aa:64:d4:31:84:7e:
                    ef:15:05:8f:8b:57:31:0b:c5:59:d9:7e:23:ec:0c:
                    84:a3:a8:8c:26:ba:77:94:4c:d0:ed:28:09:0a:31:
                    53:e4:4c:75:94:98:8d:09:df:1e:44:28:9e:67:b6:
                    1b:a5:1b:fb:02:6f:c7:f0:db:a6:bc:fc:47:a6:1a:
                    4f:86:c6:59:10:fa:e8:e2:5b:d6:0d:f2:6a:66:69:
                    c1:c7:e5:e9:e2:ff:8c:67:da:17:30:32:1f:9d:9e:
                    34:e6:72:13:8a:c0:33:a6:bb:1f:19:ca:d6:b0:db:
                    75:ec:a0:66:e3:5c:f8:61:22:ce:48:d4:ea:01:ba:
                    4e:2e:bc:f6:08:7c:3f:7e:30:49:1d:45:cb:79:6b:
                    54:84:2b:67:de:42:31:d3:21:5d:d0:ac:d6:a7:1b:
                    df:ad:fa:92:47:fb:d8:f5:a3:2b:76:b7:99:46:42:
                    f4:06:4b:ca:e9:63:ab:92:30:18:35:18:d8:e4:bf:
                    8b:7d:0d:58:79:3a:88:15:b9:26:7b:6b:d9:c3:83:
                    93:98:26:6a:12:15:20:c8:36:3a:e1:2e:8a:ba:93:
                    b2:91:f7:d8:13:d2:ac:81:5c:18:86:16:36:f4:55:
                    af:bf:e4:76:16:b4:75:e5:03:29:6e:7a:26:1e:09:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:90:13:04:CD:6D:F9:BF:CE:8B:B1:00:E1:3B:9A:0C:84:1D:8E:A3
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ypATBM1t-b_Oi7EA4TuaDIQdjqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:afc7::/32
                  2a0d:c102::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:00:03:90:2d:02:c6:38:fd:af:8c:73:b1:8b:63:8c:eb:9f:
         6b:3d:ab:85:80:65:7a:3a:13:d6:8a:92:6f:b3:b1:0a:a5:75:
         3f:35:69:31:08:e8:c5:d5:26:5e:94:6f:0a:bb:3c:04:fa:96:
         84:73:30:13:d8:63:60:f4:f9:30:e1:f3:f1:7c:32:95:6a:d0:
         40:20:f5:53:6a:23:c2:60:8e:b9:74:7f:84:71:6b:58:52:95:
         d2:db:66:81:ca:04:ec:32:be:a5:15:8d:5c:14:c9:4f:41:a6:
         ab:a6:b8:ae:83:28:a6:44:ee:6f:03:38:4f:f4:99:58:de:7a:
         40:9a:f4:fe:e2:5c:c0:74:17:1c:b6:bf:96:e0:5b:90:aa:88:
         47:ff:bd:84:12:b3:d8:30:6a:ad:c4:48:3d:c8:ea:fc:fc:22:
         2a:5e:61:11:02:e0:13:74:34:73:79:c6:be:c4:04:29:14:5e:
         a8:32:8f:7b:dd:3f:1c:ca:8a:03:93:96:27:39:e8:e4:cf:51:
         5f:24:49:3b:f0:66:9f:3b:ba:78:fc:b8:f3:41:ab:c1:83:f7:
         63:d8:1b:75:50:7d:ea:b3:f7:de:e7:10:95:48:34:c9:d9:37:
         67:71:92:7d:59:83:7a:9d:df:e5:87:85:a5:3a:86:e4:c4:e7:
         83:b1:8e:2b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYonVzGCzxUhXZiuPi7hNSCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMwODI0MTEzOTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTkwMTMwNGNkNmRmOWJmY2U4YmIxMDBlMTNiOWEwYzg0MWQ4ZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMbp8MaAwSCqZNQxhH7vFQWPi1cx
C8VZ2X4j7AyEo6iMJrp3lEzQ7SgJCjFT5Ex1lJiNCd8eRCieZ7YbpRv7Am/H8Num
vPxHphpPhsZZEPro4lvWDfJqZmnBx+Xp4v+MZ9oXMDIfnZ405nITisAzprsfGcrW
sNt17KBm41z4YSLOSNTqAbpOLrz2CHw/fjBJHUXLeWtUhCtn3kIx0yFd0KzWpxvf
rfqSR/vY9aMrdreZRkL0BkvK6WOrkjAYNRjY5L+LfQ1YeTqIFbkme2vZw4OTmCZq
EhUgyDY64S6KupOykffYE9KsgVwYhhY29FWvv+R2FrR15QMpbnomHgn9lQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMqQEwTNbfm/zouxAOE7mgyEHY6jMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEveXBBVEJNMXQtYl9PaTdFQTRUdWFESVFkanFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg2vxwMF
ACoNwQIwDQYJKoZIhvcNAQELBQADggEBAJIAA5AtAsY4/a+Mc7GLY4zrn2s9q4WA
ZXo6E9aKkm+zsQqldT81aTEI6MXVJl6Ubwq7PAT6loRzMBPYY2D0+TDh8/F8MpVq
0EAg9VNqI8Jgjrl0f4Rxa1hSldLbZoHKBOwyvqUVjVwUyU9BpqumuK6DKKZE7m8D
OE/0mVjeekCa9P7iXMB0Fxy2v5bgW5CqiEf/vYQSs9gwaq3ESD3I6vz8IipeYREC
4BN0NHN5xr7EBCkUXqgyj3vdPxzKigOTlic56OTPUV8kSTvwZp87unj8uPNBq8GD
92PYG3VQfeqz997nEJVINMnZN2dxkn1Zg3qd3+WHhaU6huTE54Oxjis=
-----END CERTIFICATE-----