Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/w4lkoDlZDsbQEck2GHoHJC5jlBM.roa
File:                     w4lkoDlZDsbQEck2GHoHJC5jlBM.roa (raw, json)
Hash identifier:          0b44oAoyTbfyf/HE1GdjBP7z0XNxroJi8ju69uuahwc=
Subject key identifier:   C3:89:64:A0:39:59:0E:C6:D0:11:C9:36:18:7A:07:24:2E:63:94:13
Certificate issuer:       /CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Certificate serial:       01856FDDC416E5BB622DA58160D60539C286
Authority key identifier: D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/w4lkoDlZDsbQEck2GHoHJC5jlBM.roa
Signing time:             Mon 02 Jan 2023 00:24:42 +0000
ROA not before:           Mon 02 Jan 2023 00:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64457
IP address blocks:        2a0f:a302:500::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:dd:c4:16:e5:bb:62:2d:a5:81:60:d6:05:39:c2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b39fc8a53be1dc674b6da755e86110952174e4
        Validity
            Not Before: Jan  2 00:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c38964a039590ec6d011c936187a07242e639413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:e5:8c:d2:65:36:b8:17:70:e8:ac:9e:9b:
                    00:1d:c6:c7:4e:7f:1c:61:99:a4:c2:31:f1:78:6a:
                    9c:00:99:96:ac:fa:25:69:02:95:2a:80:b4:78:3e:
                    d9:27:cb:04:01:2d:b3:2a:fd:7c:a4:d0:8d:02:b8:
                    ae:ff:97:c6:df:91:e2:36:3e:f0:d7:fb:5b:89:f7:
                    44:18:eb:64:f1:28:1d:52:37:33:63:8c:ab:26:84:
                    46:4f:83:cf:e6:6a:c9:e8:08:51:62:5c:31:2c:87:
                    0e:bc:0c:ce:20:0f:ad:2b:ae:ad:e5:1e:02:e6:d2:
                    3c:b1:38:eb:89:4f:ce:b3:14:d5:df:3a:15:5a:62:
                    6c:60:ef:d9:42:b7:1c:c1:b9:3e:67:49:a0:20:26:
                    4d:f3:49:9b:38:81:81:ba:a6:22:53:c1:9c:f9:26:
                    aa:68:09:23:1a:94:47:72:d2:5d:5b:c4:d7:8b:97:
                    a4:3a:f2:4a:31:95:e7:a0:79:a7:78:8d:58:77:2f:
                    fe:00:2b:3e:74:86:84:3f:1c:15:7e:0b:c2:1c:a0:
                    24:44:c2:1c:81:03:27:07:4d:81:0b:e0:ad:64:ba:
                    33:4b:7f:ca:6c:ea:fb:bc:f9:9b:fa:76:a8:17:bf:
                    6f:1c:68:ab:0e:d6:1d:3c:02:6d:e4:56:bd:c5:28:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:89:64:A0:39:59:0E:C6:D0:11:C9:36:18:7A:07:24:2E:63:94:13
            X509v3 Authority Key Identifier:
                keyid:D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/w4lkoDlZDsbQEck2GHoHJC5jlBM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:a302:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:53:7e:de:a4:20:3a:4e:ea:7e:8e:18:33:d4:d8:08:21:fa:
         80:ec:d5:d5:98:56:d7:57:f3:a8:e7:08:bd:d9:38:60:34:96:
         1b:d7:15:d1:6b:81:f7:7b:23:29:42:eb:3b:28:9b:3d:89:9b:
         3e:a3:b1:30:e7:91:79:70:42:6a:0c:3c:5d:4e:9d:f6:81:9b:
         2a:eb:5c:90:22:77:61:27:3c:70:90:e5:6e:33:87:ea:ed:9a:
         e8:c5:c5:00:36:50:cc:ac:c0:28:6d:b3:80:d6:41:54:55:66:
         66:d9:ff:54:33:39:2d:01:61:61:90:e8:06:a6:06:d9:80:d4:
         fa:36:38:76:df:4c:a7:29:b1:28:ac:7b:e4:3b:de:a3:f1:fc:
         ce:d1:df:ee:e3:10:80:51:90:01:4b:f9:15:30:7c:30:3f:74:
         f7:29:83:6b:85:b7:f9:39:ce:cd:26:3f:78:03:7d:86:da:dd:
         ce:a2:63:b6:59:41:d8:63:59:25:da:c5:ac:11:0a:91:7d:81:
         ce:47:94:10:bc:c7:a4:76:24:a1:93:9d:bb:00:60:ad:09:81:
         50:ad:d1:61:46:5e:3c:23:68:62:46:42:bf:f2:fa:3b:e5:48:
         c0:4e:f3:0a:ed:f8:4f:e1:33:3e:4f:d2:d6:c7:91:36:6c:4a:
         f7:d8:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----