Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qg_SFR4GDCsO69C2rVieP80e514.roa
File:                     qg_SFR4GDCsO69C2rVieP80e514.roa (raw, json)
Hash identifier:          kXbRm4BChWu7kcmXmM5uHERIQyoGRoqaI7ZW2YAvF+8=
Subject key identifier:   AA:0F:D2:15:1E:06:0C:2B:0E:EB:D0:B6:AD:58:9E:3F:CD:1E:E7:5E
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       01856ED4C0B50032C64AB3C068449ACEB4C3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qg_SFR4GDCsO69C2rVieP80e514.roa
Signing time:             Sun 01 Jan 2023 19:35:14 +0000
ROA not before:           Sun 01 Jan 2023 19:35:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39639
IP address blocks:        2a01:7680::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:c0:b5:00:32:c6:4a:b3:c0:68:44:9a:ce:b4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 19:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa0fd2151e060c2b0eebd0b6ad589e3fcd1ee75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:b2:24:42:a5:b5:76:cd:49:5b:59:10:1f:
                    23:61:bb:6d:0d:ef:f0:15:5f:f0:af:86:74:27:60:
                    91:7e:3b:d1:3a:f4:82:6d:7b:26:63:9d:df:cf:b4:
                    64:3d:9e:f3:02:42:46:b2:b1:93:a5:b1:da:b9:74:
                    99:4b:4c:54:13:4c:fa:45:b2:94:26:f6:ed:6d:19:
                    9c:8d:cb:95:3d:7a:4f:92:3a:d9:be:8d:51:2e:27:
                    41:38:98:19:6b:2b:a7:86:a8:26:bf:67:cb:ef:13:
                    cb:78:84:47:6f:24:b6:68:1f:98:4c:1c:48:fc:c6:
                    25:d9:e3:78:9c:9d:5a:0f:f7:3d:20:46:9c:cb:52:
                    32:32:6d:63:18:16:79:ce:40:15:06:ae:17:49:c0:
                    8e:f0:ea:0f:c2:57:cb:56:c6:40:8d:40:67:46:2e:
                    c5:8c:1e:5e:0f:fa:9e:a7:e9:91:77:a6:ea:7a:34:
                    4c:2b:59:86:2c:ec:a0:f2:03:e1:53:07:e5:d5:13:
                    15:c4:ee:5c:c9:a5:7a:2d:5c:27:23:d3:a7:62:22:
                    d9:8d:41:fe:36:0f:ba:b4:ce:33:5b:1d:80:e4:47:
                    93:fa:d2:6a:99:e2:e5:4d:58:11:08:a4:d9:4e:f7:
                    ba:df:b5:b7:19:09:c6:58:74:18:90:f7:2f:02:1d:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:D2:15:1E:06:0C:2B:0E:EB:D0:B6:AD:58:9E:3F:CD:1E:E7:5E
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qg_SFR4GDCsO69C2rVieP80e514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:80:3d:d5:f0:fd:e4:2a:b2:71:da:60:99:d8:da:0a:e1:b6:
         4e:9e:15:16:ab:85:29:cc:78:b6:e5:2e:fc:07:4c:18:cc:5d:
         89:70:d2:56:80:56:d1:f4:52:b2:c5:37:0b:ee:df:14:66:74:
         6f:b6:5a:e6:04:27:e4:07:25:72:11:98:02:c5:b8:9b:68:5d:
         f9:40:c3:15:3c:f0:dd:84:fa:bc:2f:27:68:6f:57:4b:03:32:
         6e:c4:fc:c9:eb:9b:1e:45:ba:20:3d:6f:93:43:b3:9f:0e:4d:
         52:d8:e3:6f:5e:f5:20:d1:d3:09:c1:ac:f3:96:53:95:2a:ae:
         ba:3e:bd:d9:79:39:1e:2b:48:5c:91:56:c5:3b:2a:c2:29:0d:
         f9:77:a1:0d:cc:52:71:cb:02:e5:0b:2d:73:8b:99:06:0d:b4:
         c8:76:f7:7f:be:6c:43:a8:04:7d:b8:da:df:ea:3e:f0:7c:62:
         f5:ca:9f:8d:0e:c8:99:b4:49:52:bb:cd:d5:e9:92:6d:6c:1d:
         06:f0:36:23:a5:8b:b2:0c:35:83:84:d9:a9:0a:1b:e9:e7:a2:
         dd:35:a4:45:4f:34:2a:c9:01:1c:56:60:94:26:a6:5a:2b:d5:
         04:20:c9:34:05:a2:a5:90:fd:b8:32:20:a4:d2:b6:54:b4:ca:
         ec:37:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----