Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pZCET-yr_XSzL6jEyx72SzireG0.roa
File:                     pZCET-yr_XSzL6jEyx72SzireG0.roa (raw, json)
Hash identifier:          eSKcmkPiu/CfcmKgQ1w34Gy1ZqxeQFFLHxQHUcjNVjE=
Subject key identifier:   A5:90:84:4F:EC:AB:FD:74:B3:2F:A8:C4:CB:1E:F6:4B:38:AB:78:6D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01856F26A58DAE09F4DD06E8472EB2AA07C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pZCET-yr_XSzL6jEyx72SzireG0.roa
Signing time:             Sun 01 Jan 2023 21:04:41 +0000
ROA not before:           Sun 01 Jan 2023 21:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     533333
IP address blocks:        2001:67c:64::/96 maxlen: 96

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:26:a5:8d:ae:09:f4:dd:06:e8:47:2e:b2:aa:07:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jan  1 21:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a590844fecabfd74b32fa8c4cb1ef64b38ab786d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:e3:2e:7f:2f:30:b1:5c:81:56:f1:85:18:
                    d1:48:30:fc:4c:72:b9:d1:7d:c9:1f:d6:ce:40:c4:
                    cd:c0:50:9a:7b:0d:68:ac:28:a4:6b:32:14:07:7b:
                    8e:b9:7d:43:b5:57:c3:c4:3b:fb:a5:7c:6c:bd:3f:
                    5a:4c:c8:e5:d5:a9:33:1c:79:4f:a8:16:8d:7a:f8:
                    93:f5:e2:dc:83:90:45:a5:44:01:67:9c:73:fc:b4:
                    59:c6:c9:fa:37:87:00:06:2c:13:81:ba:1e:6a:29:
                    ff:10:ac:83:6b:2d:e3:b4:45:8d:80:1e:d4:7f:00:
                    b6:97:54:93:7d:6d:98:a9:3b:a9:a4:aa:46:8d:85:
                    be:11:10:9f:59:ca:f4:d8:9e:94:35:a8:90:99:82:
                    63:84:d3:88:c7:04:b8:f1:b1:4e:d8:07:54:4f:e4:
                    64:60:96:9d:85:3d:17:45:d2:5c:9a:5a:ff:05:5c:
                    06:84:e5:e6:53:89:bb:94:28:3d:67:06:d3:22:dd:
                    58:7b:b5:db:1f:a9:71:09:2c:db:06:fa:9d:08:49:
                    60:73:e5:27:9a:8c:e2:4b:0f:07:09:3d:dc:de:78:
                    90:2e:b4:a6:4e:73:39:a2:95:46:23:54:33:58:f1:
                    cf:f9:a5:92:8e:18:2a:d2:53:30:d3:17:61:ce:7f:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:90:84:4F:EC:AB:FD:74:B3:2F:A8:C4:CB:1E:F6:4B:38:AB:78:6D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pZCET-yr_XSzL6jEyx72SzireG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64::/96

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:99:c1:57:eb:6a:17:2e:d3:de:db:67:5d:5e:c8:43:52:
         57:20:ee:db:bb:80:2d:4a:63:ea:ba:09:27:14:8a:6b:a1:fa:
         2f:f3:10:04:e1:7d:b9:2e:c6:40:37:12:64:2e:99:f1:e2:70:
         d1:d2:5c:14:74:43:9a:6d:5a:f2:fa:c5:53:c2:d0:4c:18:55:
         30:ca:f0:9b:e6:ac:47:46:6e:11:70:ea:d1:cc:3b:37:9c:56:
         25:5a:e2:00:03:bf:44:ca:32:86:8f:ea:cd:4d:ef:02:c3:7c:
         b8:94:3b:2a:e5:af:e9:76:23:de:03:6a:4e:0f:08:9b:10:35:
         37:ec:49:12:cf:b9:f0:61:08:0a:ea:ab:9a:fb:0c:ec:fd:7a:
         13:2e:be:37:e6:a8:3d:be:4d:0c:aa:4d:3b:65:2c:14:7a:22:
         fe:c1:ae:70:9d:f7:0a:b3:50:9e:45:9a:f5:28:18:35:fa:a4:
         c2:31:6a:cd:08:d7:56:18:8b:50:00:d8:dd:11:8e:93:ff:04:
         b8:3a:80:8f:4a:cc:d3:80:7a:7d:76:06:f1:2b:be:f0:f6:61:
         d0:fd:2f:18:d7:13:7e:95:a1:f1:74:95:43:e8:72:7d:b0:bd:
         a3:3b:0f:78:30:40:2e:f0:76:69:d0:fb:72:af:e2:4a:4c:55:
         b6:5e:6e:6f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYVvJqWNrgn03QboRy6yqgfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTAxMjEwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTkwODQ0ZmVjYWJmZDc0YjMyZmE4YzRjYjFlZjY0YjM4YWI3ODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV/jLn8vMLFcgVbxhRjRSDD8THK5
0X3JH9bOQMTNwFCaew1orCikazIUB3uOuX1DtVfDxDv7pXxsvT9aTMjl1akzHHlP
qBaNeviT9eLcg5BFpUQBZ5xz/LRZxsn6N4cABiwTgboeain/EKyDay3jtEWNgB7U
fwC2l1STfW2YqTuppKpGjYW+ERCfWcr02J6UNaiQmYJjhNOIxwS48bFO2AdUT+Rk
YJadhT0XRdJcmlr/BVwGhOXmU4m7lCg9ZwbTIt1Ye7XbH6lxCSzbBvqdCElgc+Un
moziSw8HCT3c3niQLrSmTnM5opVGI1QzWPHP+aWSjhgq0lMw0xdhzn/mIQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFKWQhE/sq/10sy+oxMse9ks4q3htMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcFpDRVQteXJfWFN6TDZqRXl4NzJTemlyZUcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAw0AIAEGfABk
AAAAAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAYyZnBV+tqFy7T3ttnXV7IQ1JXIO7b
u4AtSmPqugknFIprofov8xAE4X25LsZANxJkLpnx4nDR0lwUdEOabVry+sVTwtBM
GFUwyvCb5qxHRm4RcOrRzDs3nFYlWuIAA79EyjKGj+rNTe8Cw3y4lDsq5a/pdiPe
A2pODwibEDU37EkSz7nwYQgK6qua+wzs/XoTLr435qg9vk0Mqk07ZSwUeiL+wa5w
nfcKs1CeRZr1KBg1+qTCMWrNCNdWGItQANjdEY6T/wS4OoCPSszTgHp9dgbxK77w
9mHQ/S8Y1xN+laHxdJVD6HJ9sL2jOw94MEAu8HZp0Ptyr+JKTFW2Xm5v
-----END CERTIFICATE-----